$ rpki-client -vvf rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft File: tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft (raw, json) Hash identifier: HBqOWHVaO68O8Bz1M96OoOf53IP9zH7gmuysypUXdMc= Subject key identifier: F4:4F:A4:77:C9:41:2B:26:3D:02:BB:A1:08:93:52:C4:A2:4B:20:55 Authority key identifier: B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F Certificate issuer: /CN=A9131181/serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft Manifest number: 75 Signing time: Wed 05 Nov 2025 07:05:37 +0000 Manifest this update: Wed 05 Nov 2025 07:05:37 +0000 Manifest next update: Wed 12 Nov 2025 07:05:36 +0000 Files and hashes: 1: tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl (hash: r/95iHzLbZhG6ZseSTMv49WIUs8W7nI4XKJyHAFcXqM=) 2: AD57493E0B7B11F09EB3322EC4F9AE02.roa (hash: 9xmGjx6/ygbzmZES5SPZTo7PpjmH7n67UZFSuthwcDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131181, serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F Validity Not Before: Nov 5 07:05:37 2025 GMT Not After : Nov 12 07:05:36 2025 GMT Subject: CN=690af741-3ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:95:a9:1d:ba:0d:f8:ec:b8:97:1c:4c:48:93: 00:8d:d4:ee:fb:10:12:af:da:46:ee:ad:07:34:a2: 3f:48:73:a3:f4:1d:c0:98:ff:1b:c5:76:1e:88:38: c7:15:ec:69:94:d7:33:62:ee:b5:26:c8:2a:e9:aa: 95:41:4b:b4:8a:5a:a0:94:99:2a:c9:4c:d9:73:99: df:f7:7e:8c:fb:12:cd:0f:4b:1e:0f:89:68:07:f5: 70:18:8a:b2:cb:68:18:fa:62:b9:8c:87:28:e6:3e: f9:c9:ab:98:99:5d:82:20:96:9e:52:cd:d0:ed:9d: ce:24:6f:c9:fe:ef:74:53:2c:c5:55:12:fe:1b:f0: 9d:b3:77:28:0f:23:2c:a2:66:5b:f9:1d:ad:b6:3f: 61:99:87:c1:b1:54:aa:fa:9e:3b:21:ef:7a:95:5c: 5d:18:b7:05:62:af:40:71:09:1d:2c:bc:b1:30:d5: 6a:f6:79:95:7f:2a:92:d2:d7:ca:b7:66:de:11:a4: 7e:74:84:42:ec:38:43:62:5a:c1:04:54:a1:ae:5c: f5:f2:0a:59:63:ae:5e:cf:5b:fc:23:1a:27:1a:89: f6:6c:46:ae:17:56:9d:e5:d8:d0:1d:f3:7a:55:74: fd:f4:46:21:a6:34:0b:d0:aa:ad:d5:5a:f8:c7:ea: 6a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4F:A4:77:C9:41:2B:26:3D:02:BB:A1:08:93:52:C4:A2:4B:20:55 X509v3 Authority Key Identifier: keyid:B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:90:ac:80:df:76:72:13:56:65:eb:be:a5:1a:c7:59:05:0d: 6e:e4:34:b6:11:d7:c7:81:fe:f3:0e:bf:f5:b4:ef:48:03:58: 10:9d:c9:d7:a0:5e:a5:e4:49:0b:90:c7:fb:1b:be:50:75:c0: 37:e7:67:99:4b:83:c5:b1:fe:c9:89:a8:72:27:9c:c8:fe:f5: e7:63:7a:d2:b1:68:89:e9:19:09:d3:f6:7f:31:6f:95:d8:96: 61:b6:34:60:dd:c0:45:df:2b:da:bf:f0:f3:ae:c0:82:83:89: ef:db:d7:09:0c:7f:34:48:65:1a:df:b1:18:9c:27:73:81:24: e2:0f:8b:3f:de:de:b1:f4:7f:e8:3b:17:e1:d1:86:35:b6:ee: ce:d6:3b:03:a8:5f:bf:44:49:a8:43:4b:bc:d7:c8:aa:90:aa: ec:67:97:b4:6c:a5:af:8e:37:5e:8a:90:9d:87:41:e1:91:96: 88:fe:c4:cb:68:83:96:87:6f:53:0b:f3:f7:62:bd:4b:91:49: dd:51:78:14:7d:80:d3:b5:5b:36:f9:98:81:19:76:90:25:36: 0c:1b:89:78:9f:c1:40:01:1c:df:6f:a5:f6:63:78:03:b2:c7: c3:7d:06:97:e5:91:46:4a:52:8b:c7:76:4c:9b:da:0a:ec:9f: 2c:50:61:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTE4MTExMC8GA1UEBRMoQjQ4MzlGNEZDM0Y4RURGQ0JEMjJEQTFBNzk5RDg2NUFD RkUwMzI1RjAeFw0yNTExMDUwNzA1MzdaFw0yNTExMTIwNzA1MzZaMBgxFjAUBgNV BAMTDTY5MGFmNzQxLTNlZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDslakdug347LiXHExIkwCN1O77EBKv2kburQc0oj9Ic6P0HcCY/xvFdh6IOMcV 7GmU1zNi7rUmyCrpqpVBS7SKWqCUmSrJTNlzmd/3foz7Es0PSx4PiWgH9XAYirLL aBj6YrmMhyjmPvnJq5iZXYIglp5SzdDtnc4kb8n+73RTLMVVEv4b8J2zdygPIyyi Zlv5Ha22P2GZh8GxVKr6njsh73qVXF0YtwVir0BxCR0svLEw1Wr2eZV/KpLS18q3 Zt4RpH50hELsOENiWsEEVKGuXPXyClljrl7PW/wjGicaifZsRq4XVp3l2NAd83pV dP30RiGmNAvQqq3VWvjH6mqBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9E+kd8lB KyY9AruhCJNSxKJLIFUwHwYDVR0jBBgwFoAUtIOfT8P47fy9ItoaeZ2GWs/gMl8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMTgxL0FBMDg3RjdBMEI3 OTExRjBCQjk5RUQ2QUM0RjlBRTAyL3RJT2ZUOFA0N2Z5OUl0b2FlWjJHV3NfZ01s OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdElPZlQ4UDQ3Znk5SXRvYWVaMkdXc19nTWw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MTgxL0FBMDg3RjdBMEI3OTExRjBCQjk5RUQ2QUM0RjlBRTAyL3RJT2ZUOFA0N2Z5 OUl0b2FlWjJHV3NfZ01sOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACiQrIDfdnITVmXrvqUax1kFDW7kNLYR18eB/vMOv/W070gDWBCdydeg XqXkSQuQx/sbvlB1wDfnZ5lLg8Wx/smJqHInnMj+9edjetKxaInpGQnT9n8xb5XY lmG2NGDdwEXfK9q/8POuwIKDie/b1wkMfzRIZRrfsRicJ3OBJOIPiz/e3rH0f+g7 F+HRhjW27s7WOwOoX79ESahDS7zXyKqQquxnl7Rspa+ON16KkJ2HQeGRloj+xMto g5aHb1ML8/divUuRSd1ReBR9gNO1Wzb5mIEZdpAlNgwbiXifwUABHN9vpfZjeAOy x8N9BpflkUZKUovHdkyb2grsnyxQYf8= -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:51 2025 by rpki-client