$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft File: AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft (raw, json) Hash identifier: noh/xx4ORHU5sjTmbSWgTer8ZodUVAQDy2YDnglGdh8= Subject key identifier: 0D:94:47:AD:04:6D:8D:68:E8:72:A2:DE:99:71:0D:59:75:80:7A:14 Authority key identifier: 00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3 Certificate issuer: /CN=A916E9E3/serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft Manifest number: 18 Signing time: Mon 03 Nov 2025 07:57:01 +0000 Manifest this update: Mon 03 Nov 2025 07:57:00 +0000 Manifest next update: Mon 10 Nov 2025 07:57:00 +0000 Files and hashes: 1: AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl (hash: UMo/Q+qJR9rYLk53fkQVq0T9kSKNsUGaT01u+B14Feo=) 2: 9F57DB96B42211F09BF7B44BC4F9AE02.roa (hash: GSocOIU4gJGXAsCNtlbHDTRRIj+08JXL+H5AQwRagYs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9E3, serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3 Validity Not Before: Nov 3 07:57:00 2025 GMT Not After : Nov 10 07:57:00 2025 GMT Subject: CN=6908604d-8178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b6:83:54:71:4e:03:f9:e7:d3:f5:d2:8c:1f: 3a:c3:0d:39:a0:9b:22:84:b3:a4:4a:37:b8:b3:2f: 90:6e:1a:d7:1e:34:1b:77:f4:ba:cb:ad:94:74:50: 3d:73:ce:9d:70:6d:b3:4d:c9:aa:30:f9:a0:d0:fa: 75:b0:0b:88:ff:40:c8:f9:72:49:f0:d5:89:b6:bf: 03:56:87:b3:79:fc:78:74:24:13:98:75:d8:52:21: 1f:07:1b:14:96:95:fc:84:31:aa:cf:c4:3a:9c:ac: 96:92:19:c5:0a:51:aa:71:9d:6f:0c:31:94:41:dd: c4:4a:99:8b:aa:49:a1:76:09:db:49:fa:fa:5a:1e: 13:1b:c4:5c:a9:ce:4f:f0:21:5e:b4:55:90:99:ab: 4e:23:f2:40:68:74:da:2a:ca:64:dc:e9:19:2e:8a: 35:5f:c1:c0:b1:29:8a:17:95:4c:79:a4:98:22:d5: 60:2e:4b:23:a9:35:0e:48:cf:7e:75:9f:b5:9c:f3: fa:73:fd:9c:1a:9d:e5:95:53:e8:63:24:57:58:0b: a3:e9:53:07:12:5f:a2:14:41:93:3b:0e:c7:81:1d: a9:65:10:5f:c7:6a:e7:f8:13:42:fb:bd:47:66:1e: 23:75:fc:70:b4:4e:31:c2:af:16:50:fb:54:5a:8f: 47:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:94:47:AD:04:6D:8D:68:E8:72:A2:DE:99:71:0D:59:75:80:7A:14 X509v3 Authority Key Identifier: keyid:00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f7:d7:86:e6:23:20:35:37:04:d6:8a:47:cd:9c:af:89:16: cf:ee:2d:bc:85:e1:49:d2:0b:b0:f7:e8:96:22:b1:f2:ed:7b: f8:ae:c4:1c:e3:97:53:33:b5:72:bd:38:9e:26:a1:44:38:ef: d4:5c:a1:07:23:f6:1c:95:51:17:58:4e:d5:b9:46:16:28:11: 27:e0:1a:b1:cc:4b:ab:3d:6f:19:96:08:39:a4:be:02:ac:5d: 76:77:0d:6b:ac:f9:e9:b1:36:20:60:c9:3f:78:a9:f5:0d:98: b8:b1:9c:6d:a5:ac:7c:ae:ae:f6:74:70:a3:65:70:65:75:f0: 27:fb:c8:eb:5e:eb:db:48:f1:17:e3:ea:d2:d0:cd:89:47:d7: 2d:93:23:f4:1a:31:26:87:0b:5d:e3:df:ff:9d:7d:28:70:3e: d1:f4:ee:b7:34:5d:9c:2e:ee:52:03:4c:8b:ad:35:dd:3d:dc: e6:ef:db:1a:8b:17:53:6e:20:bb:0a:e7:d6:3d:f2:c6:52:ba: a3:18:46:af:3c:b2:39:4a:37:94:8f:e1:92:74:2a:d7:4e:bb: 1d:d9:77:b5:20:2c:13:eb:20:8f:4e:5b:a8:40:6f:eb:f8:6c: e3:99:e4:20:06:c3:2b:e8:91:c4:9c:72:73:85:e9:44:98:e3: e1:20:87:6b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RTlFMzExMC8GA1UEBRMoMDA4NEY0N0E0MzcyQzhGOEE3RDUxMTgzRDUwMzZDNTkz RDE5RTFDMzAeFw0yNTExMDMwNzU3MDBaFw0yNTExMTAwNzU3MDBaMBgxFjAUBgNV BAMTDTY5MDg2MDRkLTgxNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCotoNUcU4D+efT9dKMHzrDDTmgmyKEs6RKN7izL5BuGtceNBt39LrLrZR0UD1z zp1wbbNNyaow+aDQ+nWwC4j/QMj5cknw1Ym2vwNWh7N5/Hh0JBOYddhSIR8HGxSW lfyEMarPxDqcrJaSGcUKUapxnW8MMZRB3cRKmYuqSaF2CdtJ+vpaHhMbxFypzk/w IV60VZCZq04j8kBodNoqymTc6RkuijVfwcCxKYoXlUx5pJgi1WAuSyOpNQ5Iz351 n7Wc8/pz/ZwaneWVU+hjJFdYC6PpUwcSX6IUQZM7DseBHallEF/Hauf4E0L7vUdm HiN1/HC0TjHCrxZQ+1Raj0c5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDZRHrQRt jWjocqLemXENWXWAehQwHwYDVR0jBBgwFoAUAIT0ekNyyPin1RGD1QNsWT0Z4cMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFOUUzLzQ0Q0U0RUQyQTNB NDExRjA5MjAxM0UyOUM0RjlBRTAyL0FJVDBla055eVBpbjFSR0QxUU5zV1QwWjRj TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQUlUMGVrTnl5UGluMVJHRDFRTnNXVDBaNGNNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF OUUzLzQ0Q0U0RUQyQTNBNDExRjA5MjAxM0UyOUM0RjlBRTAyL0FJVDBla055eVBp bjFSR0QxUU5zV1QwWjRjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJv314bmIyA1NwTWikfNnK+JFs/uLbyF4UnSC7D36JYisfLte/iuxBzj l1MztXK9OJ4moUQ479RcoQcj9hyVURdYTtW5RhYoESfgGrHMS6s9bxmWCDmkvgKs XXZ3DWus+emxNiBgyT94qfUNmLixnG2lrHyurvZ0cKNlcGV18Cf7yOte69tI8Rfj 6tLQzYlH1y2TI/QaMSaHC13j3/+dfShwPtH07rc0XZwu7lIDTIutNd093Obv2xqL F1NuILsK59Y98sZSuqMYRq88sjlKN5SP4ZJ0KtdOux3Zd7UgLBPrII9OW6hAb+v4 bOOZ5CAGwyvokcSccnOF6USY4+Egh2s= -----END CERTIFICATE-----Generated at Wed Nov 5 02:37:23 2025 by rpki-client