$ rpki-client -vvf rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft File: IooLm4TrYOtGFVZbAhDVR1xRiKk.mft (raw, json) Hash identifier: t1zezKrr1qvDGVCDF9FXJeShKnscw1YF0iqDMkzLw/Y= Subject key identifier: 96:A0:9B:04:5B:55:A2:DE:01:56:BA:71:BD:77:61:1B:87:79:EA:8E Authority key identifier: 22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 Certificate issuer: /CN=A916BE2F/serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Certificate serial: 0B86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft Manifest number: 0B7E Signing time: Sun 02 Nov 2025 19:01:18 +0000 Manifest this update: Sun 02 Nov 2025 19:01:18 +0000 Manifest next update: Sun 09 Nov 2025 19:01:18 +0000 Files and hashes: 1: IooLm4TrYOtGFVZbAhDVR1xRiKk.crl (hash: HqWfVqKBNsZCP0++Ce96dhCsuEE8gTG5g1FNB0inlcQ=) 2: CFF490F63B3211EAA19CAB2DC4F9AE02.roa (hash: Q4J9l++n+la5Zfxccf3dc2lEQlGumKMJ7Sd1OPrz7gM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2950 (0xb86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BE2F, serialNumber=228A0B9B84EB60EB4615565B0210D5475C5188A9 Validity Not Before: Nov 2 19:01:18 2025 GMT Not After : Nov 9 19:01:18 2025 GMT Subject: CN=6907aa7e-ce4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8a:26:a8:1e:ee:f8:67:d9:c8:31:7a:75:21: 40:c1:56:13:74:8f:89:43:46:0f:d1:57:b0:61:ee: 48:7f:2a:78:a7:40:42:c0:2c:1f:e6:dd:80:ee:65: eb:96:c9:f9:1f:0b:0b:75:04:92:8c:56:c5:07:af: 09:ce:2c:70:a9:f6:0d:ec:05:b3:2a:03:1f:50:74: 3b:d7:2b:40:d2:94:0b:df:0a:6c:78:14:ea:51:88: d8:d4:36:6e:14:e2:8b:57:6c:2e:df:19:2a:db:b9: 76:61:1a:37:89:8e:66:ed:3d:cd:09:00:c3:ec:2d: b8:9e:02:1e:02:fe:fe:e9:11:55:eb:ca:58:6f:75: b9:56:39:43:f7:73:0c:54:a8:28:f3:97:c1:e5:64: 65:77:85:da:02:ed:3c:f5:10:a7:01:14:38:2c:25: d2:9f:c7:fe:a9:c7:8f:8c:a4:2e:4d:12:b9:2a:25: 95:dc:cb:c6:9a:7b:8e:12:73:13:12:20:e4:69:60: 15:1d:ce:b1:07:ed:c7:fb:a6:97:b0:09:5e:8a:f7: 4e:85:a2:4f:bd:a1:93:ab:5d:16:ef:57:31:e4:32: 76:e4:ad:54:f1:8c:f8:80:be:d2:58:42:60:cc:4f: 14:f0:c1:e9:da:c7:4a:de:25:df:36:44:e0:e9:c3: b8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A0:9B:04:5B:55:A2:DE:01:56:BA:71:BD:77:61:1B:87:79:EA:8E X509v3 Authority Key Identifier: keyid:22:8A:0B:9B:84:EB:60:EB:46:15:56:5B:02:10:D5:47:5C:51:88:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IooLm4TrYOtGFVZbAhDVR1xRiKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE2F/FEB122583B3011EAA9B7A027C4F9AE02/IooLm4TrYOtGFVZbAhDVR1xRiKk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ee:2a:69:70:9f:3c:99:f9:b8:c3:e9:df:89:74:04:00:48: 23:d9:68:15:3e:4d:e8:a3:e6:9a:97:a2:05:2c:33:ae:da:6e: 64:4b:47:3d:1e:e0:dd:dc:c1:48:1c:bb:e0:5b:cf:d7:67:73: 6f:01:fb:6e:22:08:00:44:37:7b:69:ea:a0:e2:a8:72:6b:ed: f8:41:4c:b0:db:fc:d3:92:4d:c6:ef:eb:6a:25:ed:9f:55:54: f8:50:10:f8:6e:c7:be:50:36:98:2a:59:9f:cd:a1:e2:ef:b1: f1:3c:b8:4e:e2:44:cf:01:f6:9e:2e:ae:8d:b5:9a:0b:bd:b6: c9:d7:8b:2c:2e:21:fc:92:65:ce:fc:c1:6e:a0:ca:8e:fb:c4: 4d:c9:72:4e:14:51:24:b6:02:82:d5:c6:05:28:dd:fd:91:37: 41:9b:7f:fd:5b:6c:be:8a:01:a9:59:83:9f:ac:dc:bf:d3:bd: d9:e0:47:75:d5:31:76:50:6c:4d:c3:38:d6:2a:a9:38:92:26: 35:a8:25:6b:bd:a6:1a:c1:04:32:bd:71:f4:5e:ab:01:0c:83: 4a:66:8a:9b:00:09:46:d4:47:d5:65:d8:85:52:dc:a9:14:d1: 3e:c0:3f:2c:97:89:3e:81:c4:84:81:de:8f:7e:8b:16:7a:fa: 8e:35:0e:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJFMkYxMTAvBgNVBAUTKDIyOEEwQjlCODRFQjYwRUI0NjE1NTY1QjAyMTBENTQ3 NUM1MTg4QTkwHhcNMjUxMTAyMTkwMTE4WhcNMjUxMTA5MTkwMTE4WjAYMRYwFAYD VQQDEw02OTA3YWE3ZS1jZTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoomqB7u+GfZyDF6dSFAwVYTdI+JQ0YP0VewYe5Ifyp4p0BCwCwf5t2A7mXr lsn5HwsLdQSSjFbFB68JzixwqfYN7AWzKgMfUHQ71ytA0pQL3wpseBTqUYjY1DZu FOKLV2wu3xkq27l2YRo3iY5m7T3NCQDD7C24ngIeAv7+6RFV68pYb3W5VjlD93MM VKgo85fB5WRld4XaAu089RCnARQ4LCXSn8f+qcePjKQuTRK5KiWV3MvGmnuOEnMT EiDkaWAVHc6xB+3H+6aXsAleivdOhaJPvaGTq10W71cx5DJ25K1U8Yz4gL7SWEJg zE8U8MHp2sdK3iXfNkTg6cO46wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJagmwRb VaLeAVa6cb13YRuHeeqOMB8GA1UdIwQYMBaAFCKKC5uE62DrRhVWWwIQ1UdcUYip MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkUyRi9GRUIxMjI1ODNC MzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllPdEdGVlpiQWhEVlIxeFJp S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvb0xtNFRyWU90R0ZWWmJBaERWUjF4UmlLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkUyRi9GRUIxMjI1ODNCMzAxMUVBQTlCN0EwMjdDNEY5QUUwMi9Jb29MbTRUcllP dEdGVlpiQWhEVlIxeFJpS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc7ippcJ88mfm4w+nfiXQEAEgj2WgVPk3oo+aal6IFLDOu2m5kS0c9 HuDd3MFIHLvgW8/XZ3NvAftuIggARDd7aeqg4qhya+34QUyw2/zTkk3G7+tqJe2f VVT4UBD4bse+UDaYKlmfzaHi77HxPLhO4kTPAfaeLq6NtZoLvbbJ14ssLiH8kmXO /MFuoMqO+8RNyXJOFFEktgKC1cYFKN39kTdBm3/9W2y+igGpWYOfrNy/073Z4Ed1 1TF2UGxNwzjWKqk4kiY1qCVrvaYawQQyvXH0XqsBDINKZoqbAAlG1EfVZdiFUtyp FNE+wD8sl4k+gcSEgd6PfosWevqONQ6h -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:24 2025 by rpki-client