$ rpki-client -vvf rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft File: aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft (raw, json) Hash identifier: M5SkB/sHm5sQPUsIpR+SnjiWCh+ZVi8PP7nhJDRZ4WA= Subject key identifier: 1C:A6:FD:0E:FA:7F:A4:10:86:18:D2:07:12:84:2C:02:4A:C5:18:98 Authority key identifier: 69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2 Certificate issuer: /CN=A9141274/serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft Manifest number: 84 Signing time: Wed 05 Nov 2025 06:56:24 +0000 Manifest this update: Wed 05 Nov 2025 06:56:23 +0000 Manifest next update: Wed 12 Nov 2025 06:56:23 +0000 Files and hashes: 1: aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl (hash: jm4GoFR62W99W+1zqm+2b9pMTnfMFZrKvPcQs4k8hQQ=) 2: 1C8955ACFB3911EFA7A85D5EC4F9AE02.roa (hash: pXA/nNICBjxxRUXdfG7Iajai0avdelFN1HiA2VJOvYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141274, serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2 Validity Not Before: Nov 5 06:56:23 2025 GMT Not After : Nov 12 06:56:23 2025 GMT Subject: CN=690af518-eb7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e0:09:e5:d2:38:92:7b:f2:02:b3:51:4e:b1: b6:f6:9d:7b:19:ff:53:0a:1b:14:8c:42:ca:53:5b: 1a:87:0c:81:c0:39:60:76:13:1a:c8:c7:27:cb:23: ca:28:0b:93:e9:8e:fc:91:19:fc:e3:a5:80:9f:ac: 5e:50:12:31:09:a6:d4:ea:58:d5:10:d9:40:a2:bd: 9d:bb:c5:47:9b:f2:15:3f:9a:ba:33:be:93:3b:a8: 84:9d:a2:45:93:a8:02:ba:71:0a:29:a6:1a:97:d1: 3b:c4:7a:b8:84:ca:36:bd:2d:82:95:a1:4f:bb:09: 86:37:63:e7:77:1f:61:22:69:b8:7d:a2:b9:02:2b: a7:50:72:d7:81:14:fe:f6:ba:9a:06:7f:09:a0:36: 87:79:7d:7e:79:d5:95:72:6e:bb:b5:ba:ff:01:cb: 27:cc:a2:87:de:aa:42:ac:0b:fd:8f:25:0d:8c:e6: d8:84:ab:02:97:8f:50:06:63:c2:62:b3:5f:3c:a9: c8:8c:48:c1:f4:38:91:4f:34:d8:08:00:42:90:11: a4:af:da:bc:17:46:40:54:b3:8a:74:b4:ec:e4:e4: 7a:02:4f:0e:ba:be:30:10:a8:ad:39:d5:49:03:8b: f9:f1:60:c0:86:72:b5:f9:28:b6:9e:38:cc:86:14: 15:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A6:FD:0E:FA:7F:A4:10:86:18:D2:07:12:84:2C:02:4A:C5:18:98 X509v3 Authority Key Identifier: keyid:69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:81:9a:bc:c5:e1:9e:de:90:7b:55:bd:26:c0:ba:3d:9e:a8: 40:f0:de:e8:3a:84:86:a4:36:6d:b2:ce:a0:b6:ba:57:09:16: 25:73:2d:5d:a0:ee:15:cf:4f:0d:f6:f3:30:d2:ef:8e:bc:61: ca:2f:e9:43:ec:b8:86:52:d7:fe:77:10:ca:28:0b:2d:44:0e: 81:72:e1:7e:2e:a2:a0:29:d3:00:c4:8d:da:4e:e6:d8:dd:89: 16:15:d1:71:10:d1:7b:cc:b6:ec:2e:fa:5f:c4:22:54:0b:50: 7e:f1:6a:b8:f5:9d:6c:e0:d1:3e:6c:77:3f:df:33:7b:52:fe: 19:6f:8c:49:97:ae:26:16:34:06:ed:3e:48:85:71:85:39:7d: 1d:3f:e3:a5:a7:9f:38:d5:5d:b2:fc:bb:7b:4b:5d:7a:55:37: ee:15:8b:05:ac:ad:94:5e:57:83:3f:63:4e:88:7e:28:b9:1e: 6c:30:ae:8b:17:39:01:c5:c2:93:54:59:73:94:fa:5d:3a:75: ad:c8:69:36:93:fb:ae:23:61:4e:a9:78:e9:42:ab:8f:c4:ff: 0b:f0:c3:52:34:01:db:13:6c:f5:19:64:94:09:4b:29:b0:aa: b4:53:37:14:de:39:a5:05:ba:8a:7f:0f:35:72:aa:18:e5:12: de:06:5c:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDEyNzQxMTAvBgNVBAUTKDY5NThBMUFCM0FDRjdGOTVFREE1QUQ5QzlFNDFFNDQ5 QjZEMTE3RjIwHhcNMjUxMTA1MDY1NjIzWhcNMjUxMTEyMDY1NjIzWjAYMRYwFAYD VQQDEw02OTBhZjUxOC1lYjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+AJ5dI4knvyArNRTrG29p17Gf9TChsUjELKU1sahwyBwDlgdhMayMcnyyPK KAuT6Y78kRn846WAn6xeUBIxCabU6ljVENlAor2du8VHm/IVP5q6M76TO6iEnaJF k6gCunEKKaYal9E7xHq4hMo2vS2ClaFPuwmGN2Pndx9hImm4faK5AiunUHLXgRT+ 9rqaBn8JoDaHeX1+edWVcm67tbr/AcsnzKKH3qpCrAv9jyUNjObYhKsCl49QBmPC YrNfPKnIjEjB9DiRTzTYCABCkBGkr9q8F0ZAVLOKdLTs5OR6Ak8Our4wEKitOdVJ A4v58WDAhnK1+Si2njjMhhQVFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBym/Q76 f6QQhhjSBxKELAJKxRiYMB8GA1UdIwQYMBaAFGlYoas6z3+V7aWtnJ5B5Em20Rfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTI3NC9EOTlGM0FGQUZC MjMxMUVGOUYxNUM3NEFDNEY5QUUwMi9hVmlocXpyUGY1WHRwYTJjbmtIa1NiYlJG X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FWaWhxenJQZjVYdHBhMmNua0hrU2JiUkZfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTI3NC9EOTlGM0FGQUZCMjMxMUVGOUYxNUM3NEFDNEY5QUUwMi9hVmlocXpyUGY1 WHRwYTJjbmtIa1NiYlJGX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGgZq8xeGe3pB7Vb0mwLo9nqhA8N7oOoSGpDZtss6gtrpXCRYlcy1d oO4Vz08N9vMw0u+OvGHKL+lD7LiGUtf+dxDKKAstRA6BcuF+LqKgKdMAxI3aTubY 3YkWFdFxENF7zLbsLvpfxCJUC1B+8Wq49Z1s4NE+bHc/3zN7Uv4Zb4xJl64mFjQG 7T5IhXGFOX0dP+Olp5841V2y/Lt7S116VTfuFYsFrK2UXleDP2NOiH4ouR5sMK6L FzkBxcKTVFlzlPpdOnWtyGk2k/uuI2FOqXjpQquPxP8L8MNSNAHbE2z1GWSUCUsp sKq0UzcU3jmlBbqKfw81cqoY5RLeBlyp -----END CERTIFICATE-----Generated at Wed Nov 5 16:29:52 2025 by rpki-client