$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft File: I_XZOoLn14QGebHGTaN8N8_-d-8.mft (raw, json) Hash identifier: sZSI2L1FU/oShyRULkiZW+mt0qqahk4KecxgqQaHzx8= Subject key identifier: E2:5A:AD:7D:CE:FF:4D:5A:13:45:EC:B7:DE:CD:4F:26:12:A6:36:D0 Authority key identifier: 23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF Certificate issuer: /CN=A9132B4D/serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Certificate serial: 06BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft Manifest number: 0683 Signing time: Sun 02 Nov 2025 22:42:15 +0000 Manifest this update: Sun 02 Nov 2025 22:42:14 +0000 Manifest next update: Sun 09 Nov 2025 22:42:14 +0000 Files and hashes: 1: I_XZOoLn14QGebHGTaN8N8_-d-8.crl (hash: WvIgjk74w9ccL4drng3BMT65AXpBMPgo3ZZ9hZERGKg=) 2: B4B1A742BE4C11EEB1327A54C4F9AE02.roa (hash: LSrolBGN7UPabxJ890l4XmiAUR5PqpPbsorrwuIp+6A=) 3: B3E4DCF8BE4C11EEB1327A54C4F9AE02.roa (hash: 4DBjk9RooSzZolI3F0wRR+UkFptKPPbZZIJnu5t3sTc=) 4: E1201A0422D611EFAE700044C4F9AE02.roa (hash: q5An5IejOkRYWLTS2K7o5KZUOm0z/1pEEu1xwJZBWV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1726 (0x6be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132B4D, serialNumber=23F5D93A82E7D7840679B1C64DA37C37CFFE77EF Validity Not Before: Nov 2 22:42:14 2025 GMT Not After : Nov 9 22:42:14 2025 GMT Subject: CN=6907de46-97bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:02:07:07:17:d7:0d:ea:cf:0f:4a:b3:77:13: 91:41:cf:70:23:24:de:6c:d7:70:59:4b:c3:43:0f: fb:62:f9:11:61:cc:4c:b5:9a:9c:24:bc:fe:90:e8: a3:d5:54:5c:e7:62:20:46:56:f7:7a:83:f6:fa:b8: 96:37:47:ac:77:a0:92:10:ba:38:13:db:45:4f:ae: f9:f2:f5:44:19:09:07:b8:46:f2:37:77:06:d4:23: db:0c:af:e5:44:39:8c:32:e1:5b:01:0d:53:b7:d1: d7:4b:1f:15:94:38:b4:83:e8:63:f9:46:b8:2a:04: e2:a6:5f:6e:b6:d0:a8:be:d1:a0:1e:c5:ee:a3:0c: 13:84:71:e9:66:be:2e:a7:d2:03:4d:67:62:9b:67: 4f:d0:31:75:dc:6b:e9:cb:39:dc:0c:7d:10:80:5f: 1a:27:4a:8c:e8:81:8e:a1:6b:04:1a:f4:99:0f:f8: 28:07:b5:73:4b:03:ec:19:82:48:9c:f1:75:11:a9: 7d:61:bb:40:71:80:17:7a:1a:37:12:e2:30:00:c4: 9e:14:fc:2a:a7:22:d6:ec:18:8b:e5:2f:c1:98:b2: 80:95:50:ab:e0:81:18:b3:58:de:70:60:3e:28:d7: 00:f1:f3:26:4a:ae:40:a9:af:55:30:a3:d0:cf:36: 40:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5A:AD:7D:CE:FF:4D:5A:13:45:EC:B7:DE:CD:4F:26:12:A6:36:D0 X509v3 Authority Key Identifier: keyid:23:F5:D9:3A:82:E7:D7:84:06:79:B1:C6:4D:A3:7C:37:CF:FE:77:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_XZOoLn14QGebHGTaN8N8_-d-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B4D/C199E006B20511EBAEAE9F10C4F9AE02/I_XZOoLn14QGebHGTaN8N8_-d-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:5b:6d:b8:9e:54:24:e4:32:96:20:c1:a8:b7:c4:52:d7:22: b2:5b:97:14:c4:10:59:61:c1:aa:c7:51:b4:53:da:ec:d8:8e: f0:62:cd:2b:a6:d9:90:f6:2b:c3:23:da:37:ea:cc:e3:f1:c9: 62:d7:46:d1:4d:34:df:87:47:14:dc:79:2f:42:bd:e3:df:86: 6b:ca:90:36:50:88:1c:09:38:a6:71:f1:3b:a3:56:7a:b0:ba: 54:f0:3a:d3:d0:60:b2:e5:74:1e:cb:21:55:b2:ee:d3:85:b4: 8f:3c:57:d9:5b:62:41:b2:75:8a:a3:6a:79:ef:22:de:63:10: df:b3:09:a9:bb:6c:6a:2f:e8:fc:a0:69:cb:47:3d:7d:6a:76: 08:40:c5:3f:97:f7:96:1f:a7:38:11:c1:83:c1:b2:3a:30:b9: 26:95:26:92:e2:66:55:14:22:74:a6:33:d2:25:51:35:67:51: 5b:3f:a2:93:90:ca:be:64:d5:f1:e0:52:a1:2b:01:fb:19:61: c9:d8:b3:dc:bf:e4:26:d6:6a:12:25:73:6f:44:7c:eb:35:0c: a9:be:c8:07:b0:fd:de:48:22:69:5b:ae:6b:e6:c6:bb:cb:38: ce:6f:16:e7:9d:cd:5b:50:93:bd:6d:3a:7d:1f:22:db:35:f5: d0:c4:c5:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJCNEQxMTAvBgNVBAUTKDIzRjVEOTNBODJFN0Q3ODQwNjc5QjFDNjREQTM3QzM3 Q0ZGRTc3RUYwHhcNMjUxMTAyMjI0MjE0WhcNMjUxMTA5MjI0MjE0WjAYMRYwFAYD VQQDEw02OTA3ZGU0Ni05N2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowIHBxfXDerPD0qzdxORQc9wIyTebNdwWUvDQw/7YvkRYcxMtZqcJLz+kOij 1VRc52IgRlb3eoP2+riWN0esd6CSELo4E9tFT6758vVEGQkHuEbyN3cG1CPbDK/l RDmMMuFbAQ1Tt9HXSx8VlDi0g+hj+Ua4KgTipl9uttCovtGgHsXuowwThHHpZr4u p9IDTWdim2dP0DF13GvpyzncDH0QgF8aJ0qM6IGOoWsEGvSZD/goB7VzSwPsGYJI nPF1Eal9YbtAcYAXeho3EuIwAMSeFPwqpyLW7BiL5S/BmLKAlVCr4IEYs1jecGA+ KNcA8fMmSq5Aqa9VMKPQzzZAXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJarX3O /01aE0Xst97NTyYSpjbQMB8GA1UdIwQYMBaAFCP12TqC59eEBnmxxk2jfDfP/nfv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkI0RC9DMTk5RTAwNkIy MDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0UUdlYkhHVGFOOE44Xy1k LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lfWFpPb0xuMTRRR2ViSEdUYU44TjhfLWQtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkI0RC9DMTk5RTAwNkIyMDUxMUVCQUVBRTlGMTBDNEY5QUUwMi9JX1haT29MbjE0 UUdlYkhHVGFOOE44Xy1kLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUW224nlQk5DKWIMGot8RS1yKyW5cUxBBZYcGqx1G0U9rs2I7wYs0r ptmQ9ivDI9o36szj8cli10bRTTTfh0cU3HkvQr3j34ZrypA2UIgcCTimcfE7o1Z6 sLpU8DrT0GCy5XQeyyFVsu7ThbSPPFfZW2JBsnWKo2p57yLeYxDfswmpu2xqL+j8 oGnLRz19anYIQMU/l/eWH6c4EcGDwbI6MLkmlSaS4mZVFCJ0pjPSJVE1Z1FbP6KT kMq+ZNXx4FKhKwH7GWHJ2LPcv+Qm1moSJXNvRHzrNQypvsgHsP3eSCJpW65r5sa7 yzjObxbnnc1bUJO9bTp9HyLbNfXQxMUU -----END CERTIFICATE-----Generated at Tue Nov 4 12:41:32 2025 by rpki-client