$ rpki-client -vvf rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft File: AIsjUb6f1m04sRBQZ5c09E-l2X0.mft (raw, json) Hash identifier: mru/OJn5UauJtSnKBfxwx6zHEsEHa39DCKhB/dCHQsQ= Subject key identifier: 84:FD:71:D9:DA:26:4F:36:0B:8B:49:9F:58:A0:BA:D3:0E:BB:EE:2C Authority key identifier: 00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D Certificate issuer: /CN=A914B0D8/serialNumber=008B2351BE9FD66D38B11050679734F44FA5D97D Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft Manifest number: 0122 Signing time: Mon 03 Nov 2025 04:42:09 +0000 Manifest this update: Mon 03 Nov 2025 04:42:08 +0000 Manifest next update: Mon 10 Nov 2025 04:42:08 +0000 Files and hashes: 1: AIsjUb6f1m04sRBQZ5c09E-l2X0.crl (hash: oAELDCQnJa8RzHd6Vs3gCzUzU8NHYvHq7GSg8WesWj8=) 2: 66E93DA2FB1111EE81D7643BC4F9AE02.roa (hash: 8wMwW5uNjWkG/EYhzvD28CGT7P5U8FJODoDJkkfTgvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.crl rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B0D8, serialNumber=008B2351BE9FD66D38B11050679734F44FA5D97D Validity Not Before: Nov 3 04:42:08 2025 GMT Not After : Nov 10 04:42:08 2025 GMT Subject: CN=690832a1-6027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:9d:f2:1b:d9:28:99:97:5e:bd:bf:e5:ef: 93:ba:aa:7d:0d:31:41:69:dd:50:55:c5:26:27:89: 31:ef:9d:5f:6a:3a:4b:cf:fa:d7:e6:e7:d4:2e:32: 8e:e0:0b:51:1a:be:4f:4e:70:f0:79:64:a5:fb:2f: dc:a4:00:ad:e3:93:af:2a:3c:c1:e9:01:07:88:8b: 46:1b:d4:8a:4a:6b:58:d8:5f:06:92:91:17:76:48: 31:61:5f:87:e3:5a:18:81:3d:5f:cb:b3:ae:e4:8e: d1:d4:d3:b6:0e:af:c4:0c:b4:ef:b6:8e:62:3c:41: a8:58:61:07:7d:17:0a:28:09:6f:19:c4:e7:4e:53: 84:20:8a:cd:75:cf:3d:91:c6:73:78:47:c7:b3:6a: 27:b2:79:9c:75:01:62:6b:78:bd:4e:85:17:45:8e: 75:0e:29:e0:78:d7:19:ac:01:26:45:8b:29:1f:8e: 19:7e:f0:45:a8:96:7b:d1:99:cb:fd:f0:56:36:9c: c2:9b:9a:ba:19:ca:c7:f3:ff:7a:38:87:6e:22:8b: 5f:86:79:91:b5:62:70:5b:cf:3e:0a:f2:c7:12:71: ef:18:33:56:7d:e0:6e:6c:c1:41:e9:47:d3:d6:17: cb:89:e7:be:3c:0a:38:bc:6e:55:a3:3f:5b:34:53: 83:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:FD:71:D9:DA:26:4F:36:0B:8B:49:9F:58:A0:BA:D3:0E:BB:EE:2C X509v3 Authority Key Identifier: keyid:00:8B:23:51:BE:9F:D6:6D:38:B1:10:50:67:97:34:F4:4F:A5:D9:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AIsjUb6f1m04sRBQZ5c09E-l2X0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B0D8/07AABCDAFB1111EE9123391BC4F9AE02/AIsjUb6f1m04sRBQZ5c09E-l2X0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:76:7a:17:88:5a:04:93:cb:a8:b8:10:bc:a2:fc:5c:73:0e: 55:5c:e0:49:f9:b2:4c:fa:22:83:ed:d5:94:9d:7b:a6:c9:4e: 36:f7:88:56:40:3e:44:14:f7:2f:f0:0f:ed:e6:cc:55:38:94: b4:3e:e3:21:3c:da:d3:cb:9c:87:58:dc:41:92:24:1a:fa:11: 31:3f:61:dc:2c:71:1a:f4:91:70:33:ed:82:05:2b:32:69:70: 3d:ab:76:d3:3f:a4:56:41:2a:e2:b7:89:1d:64:20:7e:86:fa: b9:bd:9a:d6:f6:61:0d:ac:44:ec:ea:61:a4:a5:d4:5b:4b:88: e1:f9:10:4c:c7:cb:ec:04:79:a9:36:e0:5b:44:98:f0:33:bb: 5d:e3:38:2d:1a:d4:15:02:a4:ea:45:f0:09:9b:f5:33:d5:25: 41:d8:c6:b9:28:c3:03:06:e5:ad:d1:db:95:3b:71:6c:08:92: 26:15:34:59:0b:fe:d0:35:07:7d:db:37:03:86:0e:ef:ae:e3: 8b:fa:9f:c7:a0:eb:b9:40:89:32:94:bb:7c:19:13:d5:fe:8d: 7c:1a:6f:0a:45:4f:37:38:5b:08:67:a4:f0:5d:19:c9:a8:65: 4e:ca:9d:bf:a0:f7:c4:a0:5f:c4:42:06:1b:c4:b2:6c:35:5b: 78:44:54:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIwRDgxMTAvBgNVBAUTKDAwOEIyMzUxQkU5RkQ2NkQzOEIxMTA1MDY3OTczNEY0 NEZBNUQ5N0QwHhcNMjUxMTAzMDQ0MjA4WhcNMjUxMTEwMDQ0MjA4WjAYMRYwFAYD VQQDEw02OTA4MzJhMS02MDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtCd8hvZKJmXXr2/5e+Tuqp9DTFBad1QVcUmJ4kx751fajpLz/rX5ufULjKO 4AtRGr5PTnDweWSl+y/cpACt45OvKjzB6QEHiItGG9SKSmtY2F8GkpEXdkgxYV+H 41oYgT1fy7Ou5I7R1NO2Dq/EDLTvto5iPEGoWGEHfRcKKAlvGcTnTlOEIIrNdc89 kcZzeEfHs2onsnmcdQFia3i9ToUXRY51DingeNcZrAEmRYspH44ZfvBFqJZ70ZnL /fBWNpzCm5q6GcrH8/96OIduIotfhnmRtWJwW88+CvLHEnHvGDNWfeBubMFB6UfT 1hfLiee+PAo4vG5Voz9bNFODjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIT9cdna Jk82C4tJn1igutMOu+4sMB8GA1UdIwQYMBaAFACLI1G+n9ZtOLEQUGeXNPRPpdl9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjBEOC8wN0FBQkNEQUZC MTExMUVFOTEyMzM5MUJDNEY5QUUwMi9BSXNqVWI2ZjFtMDRzUkJRWjVjMDlFLWwy WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJc2pVYjZmMW0wNHNSQlFaNWMwOUUtbDJYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjBEOC8wN0FBQkNEQUZCMTExMUVFOTEyMzM5MUJDNEY5QUUwMi9BSXNqVWI2ZjFt MDRzUkJRWjVjMDlFLWwyWDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkdnoXiFoEk8uouBC8ovxccw5VXOBJ+bJM+iKD7dWUnXumyU4294hW QD5EFPcv8A/t5sxVOJS0PuMhPNrTy5yHWNxBkiQa+hExP2HcLHEa9JFwM+2CBSsy aXA9q3bTP6RWQSrit4kdZCB+hvq5vZrW9mENrETs6mGkpdRbS4jh+RBMx8vsBHmp NuBbRJjwM7td4zgtGtQVAqTqRfAJm/Uz1SVB2Ma5KMMDBuWt0duVO3FsCJImFTRZ C/7QNQd92zcDhg7vruOL+p/HoOu5QIkylLt8GRPV/o18Gm8KRU83OFsIZ6TwXRnJ qGVOyp2/oPfEoF/EQgYbxLJsNVt4RFRW -----END CERTIFICATE-----Generated at Wed Nov 5 02:02:37 2025 by rpki-client