$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft File: I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft (raw, json) Hash identifier: lYHCjpATYolUIVBNqv0prIMpgi6Xlwa84dEjmODALjI= Subject key identifier: 6D:CD:B1:C1:7A:0A:6B:01:18:45:C5:1C:C8:0B:2C:39:D0:4B:5B:27 Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Certificate serial: 2DDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft Manifest number: 2DBE Signing time: Tue 04 Nov 2025 15:32:42 +0000 Manifest this update: Tue 04 Nov 2025 15:32:41 +0000 Manifest next update: Tue 11 Nov 2025 15:32:41 +0000 Files and hashes: 1: I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl (hash: U62W80vTyzzO1iLzFuYZBEbe+CuWSg8UlB55kdl3s+g=) 2: 3635C928CE3811EF878F6569C4F9AE02.roa (hash: hRzik5kXimOwUS6S1oWYsWN9k919CD3fLtMBHNWUanA=) 3: 0F6B8D969A6B11F08E49AE43C4F9AE02.roa (hash: Pdk6bT7HhSqGJ2GX150nm/IL+DXi5SGrlxiId38sTmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11742 (0x2dde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Validity Not Before: Nov 4 15:32:41 2025 GMT Not After : Nov 11 15:32:41 2025 GMT Subject: CN=690a1c9a-b8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c7:26:df:f7:a0:82:74:62:d9:00:2f:77:c9: 0f:5e:15:5c:03:9a:40:de:4e:59:66:76:b6:c2:21: 25:69:ff:b8:04:95:56:79:51:40:72:17:16:50:82: 10:9a:36:e5:e0:32:62:c7:7b:f9:52:5b:87:fd:c4: 84:30:ee:20:07:ab:03:ad:c2:3c:56:4b:96:f7:64: 9b:f9:73:7d:c0:b0:08:d1:4e:c0:51:bb:f4:1b:58: d9:38:2b:37:6a:f1:24:31:ed:37:f8:3a:81:d8:f5: 8d:42:14:13:cd:9b:61:7f:12:d8:ad:8c:f1:ea:6a: c2:21:ac:3d:95:0f:e8:21:e7:88:15:13:5d:6c:f8: 68:14:3a:cf:f3:79:e3:66:9f:75:da:0c:3b:c5:ce: ce:c2:a3:95:f5:dd:ce:2b:77:95:59:79:ef:ec:0c: 5f:90:98:76:9d:9c:f0:f7:98:c4:0d:28:8d:57:7f: e6:dc:cb:c3:3c:61:43:df:f4:34:9f:36:20:1b:3f: 62:13:b8:91:93:d9:3f:24:d8:fb:cc:53:d9:9d:64: f3:2f:8f:bc:bf:a9:6e:2d:a5:17:39:bc:71:17:69: 6e:32:3d:59:53:5d:b8:82:64:68:0f:04:21:b3:bb: 65:25:28:54:e1:32:b1:6f:45:e6:f0:d4:cb:91:15: e4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:CD:B1:C1:7A:0A:6B:01:18:45:C5:1C:C8:0B:2C:39:D0:4B:5B:27 X509v3 Authority Key Identifier: keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:2f:a3:45:02:02:50:82:29:0f:9d:c4:bd:0b:c1:e9:04:47: e6:69:39:2e:6b:2d:ff:39:f8:09:ee:b4:4e:84:81:87:4e:f6: 9a:a3:3c:ec:88:b2:87:81:33:ef:77:cb:bb:81:09:21:3e:82: de:73:ca:c1:04:a9:83:bb:7c:bc:e8:cf:5e:a2:6f:a4:dd:54: 8b:0c:99:a5:d2:e0:6f:5f:77:49:f0:48:d3:e9:8b:f4:12:f8: 1a:59:e0:5c:04:cf:9e:0d:bc:5f:7e:5d:16:52:98:43:8b:04: 99:3a:2c:67:3a:3c:af:8e:2c:d9:42:1b:b4:06:dc:b0:21:44: 5a:ec:04:f7:76:cf:34:86:05:dd:72:26:1c:cf:cd:4e:c4:c7: cc:37:7d:bc:40:ba:f2:ae:72:3f:f9:66:d9:b3:e4:c6:eb:cf: 3d:e0:54:50:5f:3a:54:0d:f1:c5:37:18:d6:1b:8b:29:6f:cc: 4e:2a:5d:0d:db:31:8f:b9:25:ba:cd:c2:01:7b:7a:0a:e3:5c: bd:7b:a6:87:02:f6:d6:54:0b:90:ff:77:21:39:3f:c5:1f:24: b9:75:c3:81:04:3c:f1:c2:ee:30:8d:f9:cb:a7:36:92:f3:04: e0:10:72:49:0a:46:aa:cf:c1:5e:68:dc:02:f9:24:69:11:e9: 45:91:08:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKDIzNzA0RDU5MkY1NzUwOUVEQ0U1QTRBRDdCREVFRENG N0JEQkFDRTQwHhcNMjUxMTA0MTUzMjQxWhcNMjUxMTExMTUzMjQxWjAYMRYwFAYD VQQDEw02OTBhMWM5YS1iOGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoccm3/eggnRi2QAvd8kPXhVcA5pA3k5ZZna2wiElaf+4BJVWeVFAchcWUIIQ mjbl4DJix3v5UluH/cSEMO4gB6sDrcI8VkuW92Sb+XN9wLAI0U7AUbv0G1jZOCs3 avEkMe03+DqB2PWNQhQTzZthfxLYrYzx6mrCIaw9lQ/oIeeIFRNdbPhoFDrP83nj Zp912gw7xc7OwqOV9d3OK3eVWXnv7AxfkJh2nZzw95jEDSiNV3/m3MvDPGFD3/Q0 nzYgGz9iE7iRk9k/JNj7zFPZnWTzL4+8v6luLaUXObxxF2luMj1ZU124gmRoDwQh s7tlJShU4TKxb0Xm8NTLkRXk5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG3NscF6 CmsBGEXFHMgLLDnQS1snMB8GA1UdIwQYMBaAFCNwTVkvV1Ce3OWkrXve7c9726zk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi8wNUM4OTFEQTg5 RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVKN2M1YVN0ZTk3dHozdmJy T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzQk5XUzlYVUo3YzVhU3RlOTd0ejN2YnJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi8wNUM4OTFEQTg5RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVK N2M1YVN0ZTk3dHozdmJyT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoL6NFAgJQgikPncS9C8HpBEfmaTkuay3/OfgJ7rROhIGHTvaaozzs iLKHgTPvd8u7gQkhPoLec8rBBKmDu3y86M9eom+k3VSLDJml0uBvX3dJ8EjT6Yv0 EvgaWeBcBM+eDbxffl0WUphDiwSZOixnOjyvjizZQhu0BtywIURa7AT3ds80hgXd ciYcz81OxMfMN328QLryrnI/+WbZs+TG68894FRQXzpUDfHFNxjWG4spb8xOKl0N 2zGPuSW6zcIBe3oK41y9e6aHAvbWVAuQ/3chOT/FHyS5dcOBBDzxwu4wjfnLpzaS 8wTgEHJJCkaqz8FeaNwC+SRpEelFkQgp -----END CERTIFICATE-----Generated at Wed Nov 5 13:31:23 2025 by rpki-client