$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft File: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft (raw, json) Hash identifier: 5Zy+/y8weWfQVAsCLk40I+V7jeG6w2VW+JNgmf8oKMg= Subject key identifier: 03:2C:2D:98:18:18:10:D8:82:CE:11:F5:40:91:72:51:5C:E1:31:F3 Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Certificate serial: 137D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft Manifest number: 131F Signing time: Tue 04 Nov 2025 17:09:23 +0000 Manifest this update: Tue 04 Nov 2025 17:09:22 +0000 Manifest next update: Tue 11 Nov 2025 17:09:22 +0000 Files and hashes: 1: iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl (hash: c2pYPJWFEHlCsUPLn8FrUArmZknPN2r2LQX5Pt2QT9Q=) 2: C6618F98BD0511EB9BB8C97CC4F9AE02.roa (hash: 7cgMEZO8tN+1Cmn/CZonBr3at8tPmq+bBhIi3Hlmo8w=) 3: 349FE3280DA811EBB62F0126C4F9AE02.roa (hash: Wnr6Nu+wn4KpT3jxG77VWtuMf2NiqHg0vBMGp2AER8s=) 4: 1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (hash: nCv8KSq1x9Ijvp8OSX/9bUAYQko+S3mPDE0oXqFbbRA=) 5: 429A130C13D811EEBE72B647C4F9AE02.roa (hash: Yr7221/AjrFVZuk28SsMWsCKf7jgwJUz8UL6k6tO024=) 6: 93E44A3C2E7F11ED9AA3A30AC4F9AE02.roa (hash: 5H1pM+kreN4Oi8C8HZm8e4S8ShHr8LgmiJJ+cKgYRHo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4989 (0x137d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5 Validity Not Before: Nov 4 17:09:22 2025 GMT Not After : Nov 11 17:09:22 2025 GMT Subject: CN=690a3342-0b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:75:99:b4:c8:9a:fa:ed:6c:52:ee:4f:0c:11: 8a:bd:2b:a2:47:d1:d6:df:85:08:eb:51:1f:aa:71: 61:60:f9:8e:8c:2a:52:9b:08:85:a4:a2:2f:bb:24: f5:98:34:4b:f5:04:a0:c0:9f:22:53:ec:0f:4c:87: cf:a9:51:7a:60:7d:ff:70:44:1b:07:2d:4b:ad:63: 37:15:a4:ad:c0:e3:97:55:13:e9:b1:e3:9a:af:a3: 0b:9c:20:42:70:b4:a6:01:cb:99:24:cd:1c:e3:3a: 7c:0d:46:da:4c:9a:66:f6:48:ca:2c:99:93:3d:ec: e1:00:ad:50:96:65:a1:f3:d0:2e:9d:6e:c9:71:78: 06:01:3e:c0:87:79:b5:82:58:f3:86:0a:30:24:34: 53:ab:c5:96:b3:b0:29:b0:d9:9a:0b:48:89:40:3e: e8:e2:55:3e:b9:14:02:75:c5:63:d8:cb:3a:47:8e: 91:51:4a:96:ae:a8:f1:6c:7b:43:31:e5:9d:ad:46: d0:d8:fa:7e:d2:cb:19:f5:fb:b6:3c:50:5e:1c:de: a4:63:17:b6:12:8a:1d:72:10:25:50:56:34:4f:88: 0b:e2:60:bb:a0:f5:0d:a4:f7:cc:86:9b:21:ca:ca: 79:cd:f1:f4:50:f7:e5:da:11:df:1b:aa:e7:19:db: 3c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2C:2D:98:18:18:10:D8:82:CE:11:F5:40:91:72:51:5C:E1:31:F3 X509v3 Authority Key Identifier: keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:4a:7c:d4:55:9c:35:f6:56:38:a5:a6:c4:60:ef:20:aa:bb: b1:e1:95:5f:bb:5a:3b:08:cd:e9:0c:81:49:bd:ff:fd:f7:34: b7:e5:a8:bf:2d:56:56:db:84:5d:ce:6d:fd:54:b4:fa:6c:d2: 3c:df:56:63:56:3a:53:90:fb:6c:75:98:ca:ba:ec:28:c2:60: e0:22:7d:5b:b0:20:46:0f:bf:2f:09:f9:59:6c:09:4f:fe:22: fc:e2:a4:79:7b:d3:62:3a:4b:0e:58:cf:dc:8e:b7:1f:a3:c3: d5:f5:5b:2f:a3:a8:c1:60:5f:0c:90:ce:c4:fd:db:16:6e:91: fa:65:d6:1b:22:f9:51:f5:1d:7a:91:a5:2d:e0:06:31:a8:bb: 53:0d:22:8d:a6:2c:43:b8:21:a5:6f:e5:5c:4b:cd:6b:21:48: 29:91:6e:b7:86:36:a6:98:a3:3e:af:3a:1f:38:f4:1b:d8:92: 6f:81:6f:a7:43:b9:c4:cb:70:85:57:2b:0d:ea:af:b6:ab:f2: 4f:b0:0f:1a:96:04:7b:48:e1:4b:4d:22:5a:23:db:39:0d:9a: 77:2b:7c:1d:5a:a8:fa:e7:9a:5d:cb:98:3e:b9:76:4c:de:da: 6c:4d:42:ee:85:40:22:a2:c3:21:35:1d:88:90:7a:9f:ab:97: 8c:0e:c6:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE5ODMxMTAvBgNVBAUTKDg4RDg3QjEwMkY1QzI3NzFDMzY3MDY0RTIwNDlCNjhB OTAzQzcxQjUwHhcNMjUxMTA0MTcwOTIyWhcNMjUxMTExMTcwOTIyWjAYMRYwFAYD VQQDEw02OTBhMzM0Mi0wYjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA53WZtMia+u1sUu5PDBGKvSuiR9HW34UI61EfqnFhYPmOjCpSmwiFpKIvuyT1 mDRL9QSgwJ8iU+wPTIfPqVF6YH3/cEQbBy1LrWM3FaStwOOXVRPpseOar6MLnCBC cLSmAcuZJM0c4zp8DUbaTJpm9kjKLJmTPezhAK1QlmWh89AunW7JcXgGAT7Ah3m1 gljzhgowJDRTq8WWs7ApsNmaC0iJQD7o4lU+uRQCdcVj2Ms6R46RUUqWrqjxbHtD MeWdrUbQ2Pp+0ssZ9fu2PFBeHN6kYxe2EoodchAlUFY0T4gL4mC7oPUNpPfMhpsh ysp5zfH0UPfl2hHfG6rnGds8hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMsLZgY GBDYgs4R9UCRclFc4THzMB8GA1UdIwQYMBaAFIjYexAvXCdxw2cGTiBJtoqQPHG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTk4My8wRTA4MkU3MkNE MEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0ozSERad1pPSUVtMmlwQThj YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lOaDdFQzljSjNIRFp3Wk9JRW0yaXBBOGNiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTk4My8wRTA4MkU3MkNEMEYxMUU4OUQ5RkYxNjVDNEY5QUUwMi9pTmg3RUM5Y0oz SERad1pPSUVtMmlwQThjYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwSnzUVZw19lY4pabEYO8gqrux4ZVfu1o7CM3pDIFJvf/99zS35ai/ LVZW24Rdzm39VLT6bNI831ZjVjpTkPtsdZjKuuwowmDgIn1bsCBGD78vCflZbAlP /iL84qR5e9NiOksOWM/cjrcfo8PV9Vsvo6jBYF8MkM7E/dsWbpH6ZdYbIvlR9R16 kaUt4AYxqLtTDSKNpixDuCGlb+VcS81rIUgpkW63hjammKM+rzofOPQb2JJvgW+n Q7nEy3CFVysN6q+2q/JPsA8algR7SOFLTSJaI9s5DZp3K3wdWqj655pdy5g+uXZM 3tpsTULuhUAiosMhNR2IkHqfq5eMDsYo -----END CERTIFICATE-----Generated at Tue Nov 4 21:32:49 2025 by rpki-client