$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft File: AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json) Hash identifier: Ym+6jTW67A9gqoYIRz4Uy3uCxt+hzlJnWwVGrp+PlTk= Subject key identifier: 4C:0B:EA:5B:CA:85:BF:91:10:FC:FA:75:48:77:11:FB:DA:FE:24:4F Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft Manifest number: 017F Signing time: Wed 05 Nov 2025 03:55:13 +0000 Manifest this update: Wed 05 Nov 2025 03:55:13 +0000 Manifest next update: Wed 12 Nov 2025 03:55:13 +0000 Files and hashes: 1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: v44IosZ9QvqwzhQohM/ak7qCn5CUg3hbPQF8AZeiA10=) 2: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: jCjk18NlTAO280vVwUPsYgJU42p5ZyEQ+Q3/KbnN9I8=) 3: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: ZHYQ3wHDGWknZGEZPQElBL1vATEt+W0eJbB64xYMxf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:55:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E678, serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Validity Not Before: Nov 5 03:55:13 2025 GMT Not After : Nov 12 03:55:13 2025 GMT Subject: CN=690acaa1-a7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ae:ec:3b:6e:b7:90:e0:a4:5b:7c:ee:83:07: 6d:78:fc:e4:e1:75:f3:01:15:e2:2f:cf:9e:65:ad: 89:84:31:24:e5:34:f7:cb:cb:0b:30:d9:6f:15:9f: d2:0b:aa:60:45:67:a6:59:b5:5c:e6:ae:cf:af:d0: 89:af:99:d0:d8:29:9e:d6:f4:ed:e9:94:2d:cb:0e: a1:ab:3c:39:f8:6a:18:1d:76:10:5f:d2:07:43:eb: 5f:f9:60:3c:71:8d:f7:72:19:bf:6c:56:59:50:ee: ee:ee:69:1e:6f:49:a1:d6:59:59:5b:a4:9e:7b:d9: ab:aa:3b:13:7f:22:7b:1d:bb:c7:d2:72:e4:70:b6: c3:8f:ab:6e:3c:6d:9d:9b:91:af:a3:0c:67:07:39: 94:0e:42:9d:de:47:fa:93:28:7e:40:b1:2f:e2:70: 3f:c8:ca:67:1d:a8:b4:f0:3e:7f:dc:9c:4b:9d:a5: af:36:ae:6d:0d:56:39:10:69:b0:ff:62:c9:9a:55: 47:b2:ac:90:8f:01:a9:0d:30:33:08:8a:ee:b4:44: 06:a5:36:de:b5:e2:e5:51:16:21:23:6c:60:1c:7c: ba:36:14:5b:fd:db:49:a2:4f:3c:a8:de:cd:e7:11: 1a:a4:91:20:0d:5a:04:1e:45:31:31:a2:87:fb:0b: de:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0B:EA:5B:CA:85:BF:91:10:FC:FA:75:48:77:11:FB:DA:FE:24:4F X509v3 Authority Key Identifier: keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:dc:bf:8b:5c:0b:fc:07:d3:47:ab:ef:e1:42:62:71:04:96: 94:4b:ba:12:5b:6f:2b:77:df:6b:20:13:6d:a9:82:37:62:d9: 5e:54:90:22:29:7c:75:de:f5:82:0c:40:7c:8a:ca:ac:7a:f7: d0:84:d7:0b:f5:5a:21:c9:39:63:d6:49:91:c8:f6:83:b5:0d: ec:f8:52:77:37:8d:3e:91:a6:71:60:a1:f8:df:f2:48:dd:86: f3:59:4a:c0:f4:49:0e:ad:f6:19:fc:ac:3b:5f:d9:98:c1:3f: 85:e1:d1:10:e9:95:8c:8a:a6:dd:0c:6c:b3:fc:fb:3e:cd:99: e6:c7:4e:6b:7b:bb:7c:5d:38:3c:12:3b:a1:84:df:9b:11:f7: b3:2d:72:d2:0c:ab:a3:13:7b:5d:e7:a3:e3:d5:4f:d1:68:80: da:0c:f4:4b:d5:28:d1:08:b2:ac:e3:02:30:2e:05:2f:17:24: fa:f8:bb:87:0e:a6:fc:91:f5:65:82:24:7f:cf:5b:19:f6:65: 84:e6:10:0b:ac:47:bc:6b:74:84:8d:a3:c0:61:fd:be:ae:57: dd:47:9c:f7:4b:6f:98:09:82:72:d1:44:8e:6b:70:bf:d5:54: ef:22:2a:62:b9:02:6f:52:76:f0:c4:98:ca:ec:5b:d4:9f:43: 98:33:78:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU2NzgxMTAvBgNVBAUTKDAwOEY1RDA2RjBGRUZDNDBGRDgzMEIyNkNENzY2MEEz ODMxMTBDOTEwHhcNMjUxMTA1MDM1NTEzWhcNMjUxMTEyMDM1NTEzWjAYMRYwFAYD VQQDEw02OTBhY2FhMS1hN2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0a7sO263kOCkW3zugwdtePzk4XXzARXiL8+eZa2JhDEk5TT3y8sLMNlvFZ/S C6pgRWemWbVc5q7Pr9CJr5nQ2Cme1vTt6ZQtyw6hqzw5+GoYHXYQX9IHQ+tf+WA8 cY33chm/bFZZUO7u7mkeb0mh1llZW6See9mrqjsTfyJ7HbvH0nLkcLbDj6tuPG2d m5GvowxnBzmUDkKd3kf6kyh+QLEv4nA/yMpnHai08D5/3JxLnaWvNq5tDVY5EGmw /2LJmlVHsqyQjwGpDTAzCIrutEQGpTbeteLlURYhI2xgHHy6NhRb/dtJok88qN7N 5xEapJEgDVoEHkUxMaKH+wveowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwL6lvK hb+REPz6dUh3Efva/iRPMB8GA1UdIwQYMBaAFACPXQbw/vxA/YMLJs12YKODEQyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTY3OC83QUVFRDg2Mjc5 MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9FRDlnd3NtelhaZ280TVJE SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJOWRCdkQtX0VEOWd3c216WFpnbzRNUkRKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTY3OC83QUVFRDg2Mjc5MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9F RDlnd3NtelhaZ280TVJESkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDD3L+LXAv8B9NHq+/hQmJxBJaUS7oSW28rd99rIBNtqYI3YtleVJAi KXx13vWCDEB8isqsevfQhNcL9VohyTlj1kmRyPaDtQ3s+FJ3N40+kaZxYKH43/JI 3YbzWUrA9EkOrfYZ/Kw7X9mYwT+F4dEQ6ZWMiqbdDGyz/Ps+zZnmx05re7t8XTg8 EjuhhN+bEfezLXLSDKujE3td56Pj1U/RaIDaDPRL1SjRCLKs4wIwLgUvFyT6+LuH Dqb8kfVlgiR/z1sZ9mWE5hALrEe8a3SEjaPAYf2+rlfdR5z3S2+YCYJy0USOa3C/ 1VTvIipiuQJvUnbwxJjK7FvUn0OYM3hD -----END CERTIFICATE-----Generated at Wed Nov 5 19:46:42 2025 by rpki-client