$ rpki-client -vvf rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft File: rricAm_pVSoVCwPDCqDNxHnR4qE.mft (raw, json) Hash identifier: 41oJCIVSVPt+Y4ai0TvpXrPIzsWi794hqYF/JltlGGc= Subject key identifier: 67:B9:D7:F0:D1:C1:A1:5E:71:62:8B:F4:79:2E:AC:73:4D:A4:DA:02 Authority key identifier: AE:B8:9C:02:6F:E9:55:2A:15:0B:03:C3:0A:A0:CD:C4:79:D1:E2:A1 Certificate issuer: /CN=A913168E/serialNumber=AEB89C026FE9552A150B03C30AA0CDC479D1E2A1 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft Manifest number: 0212 Signing time: Wed 05 Nov 2025 02:20:33 +0000 Manifest this update: Wed 05 Nov 2025 02:20:32 +0000 Manifest next update: Wed 12 Nov 2025 02:20:32 +0000 Files and hashes: 1: rricAm_pVSoVCwPDCqDNxHnR4qE.crl (hash: s5zhmJX60fWcV1EDuFlVveHUjNyffkKAOByZxlQ+uhs=) 2: 417BD1448C2511EDB64DB410C4F9AE02.roa (hash: 2nDc53USeA7aAjY3ISsXCIB8o+f3yAtyG+8IWIJiOOY=) 3: 40EB2FD68C2511EDB64DB410C4F9AE02.roa (hash: lpoiNJ1KNGIBpka1MtOW7yyVNvOoyYTQvtF9uDpVp3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.crl rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913168E, serialNumber=AEB89C026FE9552A150B03C30AA0CDC479D1E2A1 Validity Not Before: Nov 5 02:20:32 2025 GMT Not After : Nov 12 02:20:32 2025 GMT Subject: CN=690ab470-f0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:45:f4:9f:a5:02:fb:4d:40:aa:90:5f:6a:33: 20:c9:fb:23:28:d0:b1:e8:ee:e4:a6:0f:fc:6e:14: da:38:d0:a6:29:1b:01:0a:0f:68:b4:c5:d3:d6:c3: 9e:23:73:e9:13:30:17:85:a2:7b:2b:cc:93:6a:10: 75:f2:73:67:0f:81:57:e9:79:6b:a7:6e:b8:57:c4: e0:65:63:01:a0:49:15:50:3c:9d:ca:be:38:b2:63: 50:3c:41:13:eb:02:4e:ed:ac:dd:0e:fa:bc:bd:12: a3:18:8f:20:50:99:28:11:0a:fc:9e:0e:02:6a:b0: 38:96:04:06:5f:68:aa:0a:bd:e4:be:ed:88:21:ed: 65:4a:ab:f9:05:e3:1b:52:be:95:04:fe:26:76:0a: 02:50:4a:89:79:2b:b9:fb:d9:5a:79:52:e7:0c:60: 61:16:8c:ff:42:8d:ff:54:4d:b8:96:69:f2:91:7d: 8a:26:14:65:7c:be:48:ae:46:80:d5:50:34:fd:7e: 7c:1b:eb:a6:42:4e:45:44:a4:4e:21:53:ac:2c:63: 1b:a2:1f:56:41:11:11:26:c4:56:a3:2d:84:40:0d: b0:b5:cf:2b:92:cf:02:a3:ae:1d:f5:02:f0:d9:8b: f9:73:43:4b:83:8f:ed:82:10:05:0a:9b:e1:77:66: 2f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B9:D7:F0:D1:C1:A1:5E:71:62:8B:F4:79:2E:AC:73:4D:A4:DA:02 X509v3 Authority Key Identifier: keyid:AE:B8:9C:02:6F:E9:55:2A:15:0B:03:C3:0A:A0:CD:C4:79:D1:E2:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rricAm_pVSoVCwPDCqDNxHnR4qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913168E/143D02548C2311ED90AE9710C4F9AE02/rricAm_pVSoVCwPDCqDNxHnR4qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:68:7e:85:df:2b:90:d7:fc:cb:90:65:30:f7:b6:85:bd:e5: 7f:00:31:90:f1:6a:2b:5d:cc:08:02:d6:0a:3b:93:fa:e1:a9: b0:6a:36:21:27:3d:8e:61:bf:b3:19:34:c6:3a:f4:44:86:18: 55:ad:6e:61:c3:d3:19:82:da:1e:0b:b8:6d:d7:8a:e4:b0:f6: b3:89:fa:bf:1d:11:56:56:7e:fb:2f:06:24:3c:76:ea:0e:18: cf:b3:80:bc:16:64:05:35:c3:4a:68:b2:51:c5:42:d0:40:05: 9f:a2:d0:14:9f:ea:d9:f5:17:23:23:a9:9c:a0:3a:90:ea:2e: 47:f1:14:39:38:6d:e2:df:6d:cc:51:18:91:e8:39:a2:b7:01: 68:b3:d2:77:b8:6d:c5:27:0e:42:3e:67:a1:88:12:27:d6:9e: 65:b5:df:01:96:17:25:37:0a:89:62:fb:c2:08:57:ba:90:7e: 5f:f5:27:ff:09:41:94:5f:7c:0d:c2:15:db:2f:5a:a3:98:22: 9e:3f:42:71:4d:00:8c:a0:9e:08:ee:44:b2:90:af:0e:ab:7d: b5:52:31:dd:b9:17:ed:57:87:b2:ef:dc:26:27:6d:67:fd:ed: f8:b6:9a:d3:b3:c5:62:ed:6c:9d:32:d2:4b:57:97:da:28:81: b9:ac:66:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2OEUxMTAvBgNVBAUTKEFFQjg5QzAyNkZFOTU1MkExNTBCMDNDMzBBQTBDREM0 NzlEMUUyQTEwHhcNMjUxMTA1MDIyMDMyWhcNMjUxMTEyMDIyMDMyWjAYMRYwFAYD VQQDEw02OTBhYjQ3MC1mMGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0X0n6UC+01AqpBfajMgyfsjKNCx6O7kpg/8bhTaONCmKRsBCg9otMXT1sOe I3PpEzAXhaJ7K8yTahB18nNnD4FX6Xlrp264V8TgZWMBoEkVUDydyr44smNQPEET 6wJO7azdDvq8vRKjGI8gUJkoEQr8ng4CarA4lgQGX2iqCr3kvu2IIe1lSqv5BeMb Ur6VBP4mdgoCUEqJeSu5+9laeVLnDGBhFoz/Qo3/VE24lmnykX2KJhRlfL5IrkaA 1VA0/X58G+umQk5FRKROIVOsLGMboh9WQRERJsRWoy2EQA2wtc8rks8Co64d9QLw 2Yv5c0NLg4/tghAFCpvhd2YvdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGe51/DR waFecWKL9HkurHNNpNoCMB8GA1UdIwQYMBaAFK64nAJv6VUqFQsDwwqgzcR50eKh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY4RS8xNDNEMDI1NDhD MjMxMUVEOTBBRTk3MTBDNEY5QUUwMi9ycmljQW1fcFZTb1ZDd1BEQ3FETnhIblI0 cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JyaWNBbV9wVlNvVkN3UERDcUROeEhuUjRxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTY4RS8xNDNEMDI1NDhDMjMxMUVEOTBBRTk3MTBDNEY5QUUwMi9ycmljQW1fcFZT b1ZDd1BEQ3FETnhIblI0cUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8aH6F3yuQ1/zLkGUw97aFveV/ADGQ8WorXcwIAtYKO5P64amwajYh Jz2OYb+zGTTGOvREhhhVrW5hw9MZgtoeC7ht14rksPazifq/HRFWVn77LwYkPHbq DhjPs4C8FmQFNcNKaLJRxULQQAWfotAUn+rZ9RcjI6mcoDqQ6i5H8RQ5OG3i323M URiR6DmitwFos9J3uG3FJw5CPmehiBIn1p5ltd8BlhclNwqJYvvCCFe6kH5f9Sf/ CUGUX3wNwhXbL1qjmCKeP0JxTQCMoJ4I7kSykK8Oq321UjHduRftV4ey79wmJ21n /e34tprTs8Vi7WydMtJLV5faKIG5rGaJ -----END CERTIFICATE-----Generated at Wed Nov 5 13:55:53 2025 by rpki-client