$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft File: I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft (raw, json) Hash identifier: WDkkDEnPhi8/a8OwfVOOO7z1AN34s7qw+jv6GfaHCfA= Subject key identifier: F4:C2:AA:14:4B:84:EF:1B:9B:2D:A4:B8:FE:45:E9:7C:15:5A:2C:31 Authority key identifier: 23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC Certificate issuer: /CN=A9135F3C/serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC Certificate serial: 06FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft Manifest number: 06F2 Signing time: Tue 04 Nov 2025 22:02:51 +0000 Manifest this update: Tue 04 Nov 2025 22:02:50 +0000 Manifest next update: Tue 11 Nov 2025 22:02:50 +0000 Files and hashes: 1: I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl (hash: loxcQ7icaGKDHiDV0O15H348XTMIPiODYyR651JYJUg=) 2: 1396BBE630E811EEAE1F1212C4F9AE02.roa (hash: XjK0DsWTt9iTXDA89UqXS5hBINy5fzGd49slH38OEAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1787 (0x6fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F3C, serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC Validity Not Before: Nov 4 22:02:50 2025 GMT Not After : Nov 11 22:02:50 2025 GMT Subject: CN=690a780a-b907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:91:34:54:52:49:8f:bc:2b:a3:2b:e0:ab: 2d:cb:18:08:77:52:69:6a:bb:40:20:ee:47:32:29: 47:5e:de:26:cd:47:d7:fc:c9:f0:bc:54:1d:4e:6f: 50:cb:bc:27:fa:36:b0:e8:d2:e4:3d:ea:b5:f8:18: 38:a8:54:f6:29:0e:bf:8a:42:19:5a:3c:07:2b:4d: 71:31:7c:a0:ee:d6:75:a6:7b:73:0e:59:62:cd:98: 1b:51:1b:a0:81:3b:e0:8f:82:5b:24:8d:b5:22:b7: 36:be:f1:64:29:2d:b6:12:e9:e3:31:27:85:2d:df: a4:32:6a:7b:47:dd:53:41:40:b9:2a:a0:61:47:e6: 6a:fc:c4:0d:c4:90:35:2e:ea:d8:8e:aa:76:c4:2f: 99:e2:0e:35:7e:11:e2:3e:98:9e:f7:95:36:23:d4: 57:7c:4e:01:f7:ab:d7:84:a4:d7:c8:ab:4f:71:91: 0d:35:30:6a:4b:ed:f5:68:79:ce:a9:11:db:25:df: 83:c9:c7:0b:47:f4:ff:a6:21:f2:e2:7d:52:a7:77: e1:c3:a0:4e:aa:24:cc:7b:13:97:cc:47:40:43:a3: 2c:86:45:06:6a:dc:47:ed:20:9f:86:44:45:b4:22: cd:08:b9:2c:91:b7:f0:aa:b8:0f:43:09:15:a5:93: 8d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C2:AA:14:4B:84:EF:1B:9B:2D:A4:B8:FE:45:E9:7C:15:5A:2C:31 X509v3 Authority Key Identifier: keyid:23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:0a:dd:40:e0:17:9a:f6:39:a5:80:ed:da:11:aa:4d:89:f9: b9:48:27:60:4c:59:a5:bd:b4:05:93:09:59:93:25:7a:39:8a: 94:a1:c6:b2:81:56:c5:ce:37:e7:ef:cb:d2:90:4e:7a:2d:f6: db:b6:51:b4:75:84:a2:69:bb:df:bb:4e:da:df:04:4a:72:cb: 0a:fc:23:ab:d4:9b:36:f6:c0:38:d1:35:23:d6:c2:a6:09:cc: 3b:bc:69:a5:6c:15:e8:b9:00:2d:c8:4c:92:c2:64:d7:db:f4: 86:10:0f:4a:9e:fc:88:8f:87:9f:55:0a:42:47:51:c4:6d:3c: 25:68:80:d5:50:26:0b:e2:8a:4c:08:91:88:8f:8a:a7:88:83: 13:c3:b5:b4:e3:99:f7:b6:c5:03:af:ec:a5:dc:9e:24:b1:9b: a5:3a:cc:6a:a3:b1:2a:97:6f:f6:4a:84:ee:a8:34:39:af:6d: 06:3c:70:2f:79:dd:8b:1d:a1:15:43:d1:fe:d2:ae:df:32:a0: 05:82:ba:31:64:4b:7c:10:78:71:88:0b:28:10:1f:14:2b:13: b7:d3:83:aa:5c:30:a4:2b:90:96:49:6f:79:f9:63:3d:46:ff: c7:92:48:48:d4:aa:2f:07:a1:59:49:22:67:42:76:98:c9:42: a1:79:40:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGM0MxMTAvBgNVBAUTKDIzQjMzQjkwMTZFMzExRUVBNkI3MjFDOEI5MzkzOUZC MUE4NzBCRUMwHhcNMjUxMTA0MjIwMjUwWhcNMjUxMTExMjIwMjUwWjAYMRYwFAYD VQQDEw02OTBhNzgwYS1iOTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkiRNFRSSY+8K6Mr4KstyxgId1JpartAIO5HMilHXt4mzUfX/MnwvFQdTm9Q y7wn+jaw6NLkPeq1+Bg4qFT2KQ6/ikIZWjwHK01xMXyg7tZ1pntzDllizZgbURug gTvgj4JbJI21Irc2vvFkKS22EunjMSeFLd+kMmp7R91TQUC5KqBhR+Zq/MQNxJA1 LurYjqp2xC+Z4g41fhHiPpie95U2I9RXfE4B96vXhKTXyKtPcZENNTBqS+31aHnO qRHbJd+DyccLR/T/piHy4n1Sp3fhw6BOqiTMexOXzEdAQ6MshkUGatxH7SCfhkRF tCLNCLkskbfwqrgPQwkVpZONuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTCqhRL hO8bmy2kuP5F6XwVWiwxMB8GA1UdIwQYMBaAFCOzO5AW4xHuprchyLk5Ofsahwvs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYzQy80Nzg2ODM2QTZB QzkxMUVCODZDQjZCMjBDNEY5QUUwMi9JN003a0JiakVlNm10eUhJdVRrNS14cUhD LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3TTdrQmJqRWU2bXR5SEl1VGs1LXhxSEMtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUYzQy80Nzg2ODM2QTZBQzkxMUVCODZDQjZCMjBDNEY5QUUwMi9JN003a0JiakVl Nm10eUhJdVRrNS14cUhDLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2Ct1A4Bea9jmlgO3aEapNifm5SCdgTFmlvbQFkwlZkyV6OYqUocay gVbFzjfn78vSkE56LfbbtlG0dYSiabvfu07a3wRKcssK/COr1Js29sA40TUj1sKm Ccw7vGmlbBXouQAtyEySwmTX2/SGEA9KnvyIj4efVQpCR1HEbTwlaIDVUCYL4opM CJGIj4qniIMTw7W045n3tsUDr+yl3J4ksZulOsxqo7Eql2/2SoTuqDQ5r20GPHAv ed2LHaEVQ9H+0q7fMqAFgroxZEt8EHhxiAsoEB8UKxO304OqXDCkK5CWSW95+WM9 Rv/HkkhI1KovB6FZSSJnQnaYyUKheUDH -----END CERTIFICATE-----Generated at Wed Nov 5 05:50:18 2025 by rpki-client