$ rpki-client -vvf rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft File: 1nviGU24YmpD05q_p2CPvFrMtSM.mft (raw, json) Hash identifier: kD29eENBm6uAQg1FQz/uM8+nv3fNzC79z52CsIwXpmM= Subject key identifier: 49:11:D0:E3:45:CF:BA:53:E3:9E:B0:9F:B1:0A:C6:0C:0B:A1:36:82 Authority key identifier: D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23 Certificate issuer: /CN=A913339B/serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523 Certificate serial: 0495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft Manifest number: 048E Signing time: Mon 03 Nov 2025 00:00:42 +0000 Manifest this update: Mon 03 Nov 2025 00:00:42 +0000 Manifest next update: Mon 10 Nov 2025 00:00:42 +0000 Files and hashes: 1: 1nviGU24YmpD05q_p2CPvFrMtSM.crl (hash: k0+paa2XxsMiqqHLTUai+x7vKzc0F6Mvd3sbh09BhHU=) 2: 5CE14CF22F1B11F0B8430030C4F9AE02.roa (hash: /LqPQ6hzx/8gtkc8tk1q4WvCwi6JQDJfRFfJtinnXss=) 3: 0B33A3D45C0411EC83F9BB50C4F9AE02.roa (hash: +vGM/9CgyibDa8IJ1wrnXBZP0xMzNOinRMgn92r9zxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913339B, serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523 Validity Not Before: Nov 3 00:00:42 2025 GMT Not After : Nov 10 00:00:42 2025 GMT Subject: CN=6907f0aa-a6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:af:6e:a6:8b:bc:e2:14:6b:e5:77:dd:c2:18: 4c:9b:cc:d0:41:a4:0c:c2:ea:b7:a4:fb:cc:07:5d: eb:70:60:03:b4:59:06:b1:98:16:d2:05:c0:5b:55: 9e:76:32:f5:1a:9a:7f:e0:28:12:89:06:f1:7b:2a: 17:30:dd:31:fd:b6:07:b3:9f:cc:6e:26:f4:75:60: 5b:aa:c6:9b:2c:e6:b3:cd:f4:c1:ff:3a:b4:41:97: e3:f6:7f:3c:f8:2b:19:ca:3d:a7:1e:4f:ac:6f:8f: fa:e0:bf:0e:89:4b:ec:98:3f:68:be:27:a7:82:9e: f4:f5:60:a5:3c:b8:46:d6:60:2c:6d:55:d4:c3:00: 5e:4e:92:22:a0:45:53:09:2e:b5:1a:e2:4e:de:bd: af:8f:b8:d0:71:64:85:ce:7a:b0:a6:66:f3:32:13: e7:74:e3:e2:61:94:1e:2b:32:bd:05:e9:2d:6d:57: fe:f3:2e:62:a9:e3:42:06:10:b2:95:f2:09:be:b4: 2d:6b:99:2f:25:44:6f:24:e0:7d:36:61:6a:4d:b3: 7f:ac:65:7c:fe:16:68:56:cc:e3:2d:b9:b0:df:10: 00:50:94:b4:34:f6:b0:4a:b5:4e:61:1f:83:b8:1d: e1:81:35:fe:e7:f2:f3:81:06:b2:e8:90:98:4b:b8: cc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:11:D0:E3:45:CF:BA:53:E3:9E:B0:9F:B1:0A:C6:0C:0B:A1:36:82 X509v3 Authority Key Identifier: keyid:D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:f4:68:c3:38:52:ce:e2:9a:5f:d1:2d:40:6b:a9:85:66:06: 16:45:68:7c:62:fc:53:90:d3:7f:54:9a:96:de:41:29:f4:94: f2:77:67:ad:d8:39:03:3e:0a:46:27:e6:46:98:ac:45:27:cd: a5:07:e8:84:ea:ae:01:53:00:26:9d:2f:85:b4:ca:1b:76:2b: 64:71:ef:67:b8:d3:b0:c6:bf:2f:3f:d7:3d:00:03:2c:93:69: ef:cc:a8:0e:82:37:cd:47:d8:f0:23:c4:f8:75:63:5f:76:38: 2f:51:b3:22:ff:ad:dd:ec:1c:9e:ca:60:80:64:a3:db:81:b8: 10:20:57:23:b4:76:da:63:c7:de:33:b9:92:82:79:07:7c:1e: 9c:a0:29:19:bf:17:a1:fa:13:ef:74:54:1b:62:2f:5e:9d:93: 9e:38:69:b0:b7:02:22:0c:96:1a:4d:ea:4c:de:b0:21:a0:42: db:b5:00:10:e9:a2:0a:6a:20:69:d9:f1:06:56:f4:c3:e7:c5: d2:9a:88:1e:ba:09:24:28:08:1b:f3:93:57:5b:e8:21:05:f7: 95:e4:bd:84:a9:89:26:43:a3:ad:41:74:4c:9c:fd:58:13:18: 1a:be:87:56:dd:f4:37:e8:fa:d0:bd:b6:f9:10:62:e2:ac:d0: 37:d4:d2:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMzOUIxMTAvBgNVBAUTKEQ2N0JFMjE5NERCODYyNkE0M0QzOUFCRkE3NjA4RkJD NUFDQ0I1MjMwHhcNMjUxMTAzMDAwMDQyWhcNMjUxMTEwMDAwMDQyWjAYMRYwFAYD VQQDEw02OTA3ZjBhYS1hNmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsa9upou84hRr5XfdwhhMm8zQQaQMwuq3pPvMB13rcGADtFkGsZgW0gXAW1We djL1Gpp/4CgSiQbxeyoXMN0x/bYHs5/Mbib0dWBbqsabLOazzfTB/zq0QZfj9n88 +CsZyj2nHk+sb4/64L8OiUvsmD9oviengp709WClPLhG1mAsbVXUwwBeTpIioEVT CS61GuJO3r2vj7jQcWSFznqwpmbzMhPndOPiYZQeKzK9BektbVf+8y5iqeNCBhCy lfIJvrQta5kvJURvJOB9NmFqTbN/rGV8/hZoVszjLbmw3xAAUJS0NPawSrVOYR+D uB3hgTX+5/LzgQay6JCYS7jM4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkR0ONF z7pT456wn7EKxgwLoTaCMB8GA1UdIwQYMBaAFNZ74hlNuGJqQ9Oav6dgj7xazLUj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzM5Qi9ENEYzRjBCMDVD MDAxMUVDOUIyMzEzNERDNEY5QUUwMi8xbnZpR1UyNFltcEQwNXFfcDJDUHZGck10 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFudmlHVTI0WW1wRDA1cV9wMkNQdkZyTXRTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzM5Qi9ENEYzRjBCMDVDMDAxMUVDOUIyMzEzNERDNEY5QUUwMi8xbnZpR1UyNFlt cEQwNXFfcDJDUHZGck10U00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi9GjDOFLO4ppf0S1Aa6mFZgYWRWh8YvxTkNN/VJqW3kEp9JTyd2et 2DkDPgpGJ+ZGmKxFJ82lB+iE6q4BUwAmnS+FtMobditkce9nuNOwxr8vP9c9AAMs k2nvzKgOgjfNR9jwI8T4dWNfdjgvUbMi/63d7ByeymCAZKPbgbgQIFcjtHbaY8fe M7mSgnkHfB6coCkZvxeh+hPvdFQbYi9enZOeOGmwtwIiDJYaTepM3rAhoELbtQAQ 6aIKaiBp2fEGVvTD58XSmogeugkkKAgb85NXW+ghBfeV5L2EqYkmQ6OtQXRMnP1Y ExgavodW3fQ36PrQvbb5EGLirNA31NJ+ -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:51 2025 by rpki-client