$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft File: ihHrdksVeFOdbtOykDv2H0wIAHw.mft (raw, json) Hash identifier: X05atMBk9lUKNuP6Vsa84SLTQaZT/e4KyC4xGwaMX18= Subject key identifier: DF:E2:30:E7:A4:11:BF:2D:FA:99:43:CD:9C:FE:B5:59:47:86:1A:70 Authority key identifier: 8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C Certificate issuer: /CN=A914CC0F/serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft Manifest number: 60 Signing time: Tue 04 Nov 2025 20:06:27 +0000 Manifest this update: Tue 04 Nov 2025 20:06:27 +0000 Manifest next update: Tue 11 Nov 2025 20:06:27 +0000 Files and hashes: 1: ihHrdksVeFOdbtOykDv2H0wIAHw.crl (hash: a8kP3QosEO/jz9hJCOUJIW3CkiqjKO84y69IPs6PElE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CC0F, serialNumber=8A11EB764B1578539D6ED3B2903BF61F4C08007C Validity Not Before: Nov 4 20:06:27 2025 GMT Not After : Nov 11 20:06:27 2025 GMT Subject: CN=690a5cc3-c4dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a1:4b:56:07:bc:1a:08:a1:b3:f9:cc:d0:22: eb:d8:da:5d:2a:67:74:9c:77:e7:42:49:dc:36:42: 2a:63:9c:5c:92:0f:59:7b:33:13:c8:24:df:b6:ed: bb:5c:1f:fa:c1:9c:58:25:dc:08:33:24:e1:28:ee: 7c:2b:f7:06:ac:60:e4:db:57:0f:c5:81:e5:51:91: 14:46:18:34:65:41:4b:40:0f:1b:3f:0f:dd:9f:25: 61:ff:9d:43:02:0c:4f:74:d5:01:6e:4d:d5:33:75: 44:df:b3:ba:2e:1f:a7:ca:53:3b:e0:a8:fe:24:1b: e4:ab:8f:c7:09:5d:d8:3f:b1:d3:d6:7f:97:73:2c: 02:9a:cb:e1:b6:0b:c5:7f:2e:57:1f:c0:e4:d1:38: 3f:6d:62:2b:0a:1a:4d:7e:70:1f:1a:e5:dd:16:c0: 05:33:7f:93:f0:99:f2:43:ec:32:3b:cd:05:cf:40: c5:c9:3f:9c:b1:98:38:53:8a:b7:f2:27:98:04:48: 27:32:7b:39:ae:73:ac:8a:00:fe:28:d6:12:9b:09: 47:b5:a5:76:fb:cf:09:32:36:6e:05:86:e6:82:79: ec:6e:f8:c8:5c:71:0b:bf:83:ee:e8:79:83:87:db: 0b:de:77:52:5b:40:b9:9c:33:42:f0:51:40:00:ad: 20:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E2:30:E7:A4:11:BF:2D:FA:99:43:CD:9C:FE:B5:59:47:86:1A:70 X509v3 Authority Key Identifier: keyid:8A:11:EB:76:4B:15:78:53:9D:6E:D3:B2:90:3B:F6:1F:4C:08:00:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ihHrdksVeFOdbtOykDv2H0wIAHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC0F/49E996C42C6211F0A9B1C65AC4F9AE02/ihHrdksVeFOdbtOykDv2H0wIAHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:40:8a:17:3a:4e:6d:da:d4:e7:51:72:8b:f2:a4:64:71:c5: 22:bf:4b:5b:67:07:85:0c:9e:d4:af:4b:21:55:13:93:8f:53: c2:01:25:13:0d:97:ce:f1:ad:c5:a2:b0:09:2b:b7:5c:31:f9: a8:d6:15:f3:59:de:c7:ce:1f:99:3c:ab:12:c5:c4:11:a3:cc: 42:a2:45:6b:f6:b2:99:c1:0f:a4:1a:e6:9c:d5:52:41:27:fb: 9b:14:63:fc:79:3a:55:fd:ea:d8:30:6e:d4:a4:41:c4:1e:68: aa:03:ed:d9:d2:06:20:56:b6:07:35:ce:a2:2b:ea:80:53:67: 99:ae:0f:69:e9:ff:e7:3d:da:26:1a:24:30:99:75:7a:60:ce: eb:78:79:97:68:14:df:54:7e:f7:d4:12:86:e3:36:23:1e:13: 5a:77:56:86:ff:61:57:55:3f:7b:30:62:54:4f:96:84:62:65: 5f:7c:f9:f4:02:7f:1a:26:06:b9:3c:69:b5:8d:b4:a8:0d:6d: 52:93:40:fb:57:22:cc:47:a7:c5:11:fc:8c:e0:a4:67:fc:bb: 9e:cd:a2:0f:59:00:dd:21:5c:2a:9b:fd:5c:1d:a6:c3:74:4b: 49:38:0c:95:0c:87:56:9d:9e:2d:cf:bd:52:5f:ef:8a:fe:30: 5e:31:4d:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Q0MwRjExMC8GA1UEBRMoOEExMUVCNzY0QjE1Nzg1MzlENkVEM0IyOTAzQkY2MUY0 QzA4MDA3QzAeFw0yNTExMDQyMDA2MjdaFw0yNTExMTEyMDA2MjdaMBgxFjAUBgNV BAMTDTY5MGE1Y2MzLWM0ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHoUtWB7waCKGz+czQIuvY2l0qZ3Scd+dCSdw2QipjnFySD1l7MxPIJN+27btc H/rBnFgl3AgzJOEo7nwr9wasYOTbVw/FgeVRkRRGGDRlQUtADxs/D92fJWH/nUMC DE901QFuTdUzdUTfs7ouH6fKUzvgqP4kG+Srj8cJXdg/sdPWf5dzLAKay+G2C8V/ LlcfwOTROD9tYisKGk1+cB8a5d0WwAUzf5PwmfJD7DI7zQXPQMXJP5yxmDhTirfy J5gESCcyezmuc6yKAP4o1hKbCUe1pXb7zwkyNm4FhuaCeexu+MhccQu/g+7oeYOH 2wved1JbQLmcM0LwUUAArSCjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3+Iw56QR vy36mUPNnP61WUeGGnAwHwYDVR0jBBgwFoAUihHrdksVeFOdbtOykDv2H0wIAHww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDQzBGLzQ5RTk5NkM0MkM2 MjExRjBBOUIxQzY1QUM0RjlBRTAyL2loSHJka3NWZUZPZGJ0T3lrRHYySDB3SUFI dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaWhIcmRrc1ZlRk9kYnRPeWtEdjJIMHdJQUh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRD QzBGLzQ5RTk5NkM0MkM2MjExRjBBOUIxQzY1QUM0RjlBRTAyL2loSHJka3NWZUZP ZGJ0T3lrRHYySDB3SUFIdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJBAihc6Tm3a1OdRcovypGRxxSK/S1tnB4UMntSvSyFVE5OPU8IBJRMN l87xrcWisAkrt1wx+ajWFfNZ3sfOH5k8qxLFxBGjzEKiRWv2spnBD6Qa5pzVUkEn +5sUY/x5OlX96tgwbtSkQcQeaKoD7dnSBiBWtgc1zqIr6oBTZ5muD2np/+c92iYa JDCZdXpgzut4eZdoFN9UfvfUEobjNiMeE1p3Vob/YVdVP3swYlRPloRiZV98+fQC fxomBrk8abWNtKgNbVKTQPtXIsxHp8UR/IzgpGf8u57Nog9ZAN0hXCqb/VwdpsN0 S0k4DJUMh1adni3PvVJf74r+MF4xTeA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:03:28 2025 by rpki-client