$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft File: Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft (raw, json) Hash identifier: vtDK6nqA6t9d/Qts2G97xI/wOUbY7+BXr/Ss1Dg/moY= Subject key identifier: 0B:60:D4:30:FB:50:A7:27:04:4C:9C:27:06:00:20:62:B7:4F:3A:4C Authority key identifier: 22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54 Certificate issuer: /CN=A9171560/serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454 Certificate serial: 0DBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft Manifest number: 0D89 Signing time: Tue 04 Nov 2025 18:07:21 +0000 Manifest this update: Tue 04 Nov 2025 18:07:21 +0000 Manifest next update: Tue 11 Nov 2025 18:07:21 +0000 Files and hashes: 1: Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl (hash: BXi0E9ee7fdPZiT/u445wRG17M43smSPuF8KsNNULu8=) 2: 610944B422D911EA8E735D5CC4F9AE02.roa (hash: EfyBsaHY8sXfh+FtDY0lWUNRe0HDOeGbUlITqUD7/qY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3518 (0xdbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560, serialNumber=227ABE4DF04F85F4E013357A904E3C8C3C918454 Validity Not Before: Nov 4 18:07:21 2025 GMT Not After : Nov 11 18:07:21 2025 GMT Subject: CN=690a40d9-1050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:27:1a:7b:3f:de:a7:f1:f2:f6:3d:00:c7:ed: d3:82:bb:4d:2c:89:12:32:35:98:da:df:6d:46:2e: 99:88:94:bb:db:13:a2:68:1b:76:c5:2e:46:18:1c: aa:2a:3a:e2:98:cb:95:d7:93:78:51:bf:cb:d8:a5: a7:08:6f:61:78:58:09:f6:47:44:21:37:19:04:7f: 86:4a:3b:1d:a1:4f:0f:4e:0c:02:02:3d:e1:ae:db: b6:7a:79:a0:9a:41:b8:15:91:85:d9:04:a3:d1:ae: fd:e3:0f:7a:da:1d:24:ef:73:bb:2b:1f:7b:52:02: 7d:5a:26:6e:83:c4:db:5d:1b:bb:12:8f:47:11:3b: de:97:4e:9c:ff:ee:7c:27:db:e7:56:c5:fd:45:16: 92:d7:45:87:73:67:53:bd:34:b4:27:fa:17:ad:23: df:2f:ce:47:96:b7:af:2d:56:1b:a5:a3:f0:70:2c: 3b:d8:06:4b:8e:13:45:22:74:62:92:cd:fd:18:e9: e6:1c:1a:aa:3d:c0:81:00:7e:d2:d7:19:28:1a:75: 83:29:7e:3d:0d:eb:f2:a1:1a:ad:bb:53:18:dd:2e: 6e:2b:2a:96:6d:8e:a4:4b:4b:c4:14:60:72:29:6b: 3d:d9:81:89:b1:11:c2:c6:3f:41:4a:fe:03:5d:7a: 66:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:60:D4:30:FB:50:A7:27:04:4C:9C:27:06:00:20:62:B7:4F:3A:4C X509v3 Authority Key Identifier: keyid:22:7A:BE:4D:F0:4F:85:F4:E0:13:35:7A:90:4E:3C:8C:3C:91:84:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Inq-TfBPhfTgEzV6kE48jDyRhFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/ADCDB82AE41D11E98F5B9819C4F9AE02/Inq-TfBPhfTgEzV6kE48jDyRhFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:0a:54:83:9b:f7:ba:3f:76:c8:87:c8:05:34:14:fd:16:38: 22:71:55:19:e7:fa:e0:85:63:b1:ed:bc:1a:c9:4c:a5:24:be: bb:95:e2:28:58:21:6f:c7:22:f5:1b:f6:b4:1f:41:f8:42:ab: 5a:ad:35:f7:e1:30:26:d5:8d:55:f6:37:88:55:fd:b4:39:c9: 94:40:0e:f6:49:8f:80:a2:c8:ec:3f:10:5c:79:6e:87:21:d0: 19:3f:b2:dc:46:1b:90:70:a6:ad:81:1d:09:08:e3:6f:7b:8d: ac:29:f7:f3:d5:bb:7f:99:d6:6c:4d:67:ba:b6:ea:e3:7a:18: 7a:56:23:fb:1e:0f:3b:96:16:23:7c:92:69:7b:de:74:7f:26: cc:a4:04:06:1d:db:17:8a:bd:d1:18:32:43:a4:9d:00:c9:13: b1:7b:4c:80:08:0a:94:98:c8:43:8e:78:a1:72:2a:70:67:57: c9:0c:42:e7:b5:1f:d0:29:69:fb:e6:87:8a:2a:dc:b5:25:fc: bc:25:13:5f:52:3f:c1:07:60:b1:71:bc:d2:df:f0:9d:28:bf: bc:73:81:fc:6d:91:36:5a:96:bb:f2:53:24:e3:e2:d1:45:b3: ea:6a:0d:8b:bb:c2:e5:34:66:b0:94:be:78:b7:19:fa:8c:5d: 2e:37:47:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKDIyN0FCRTRERjA0Rjg1RjRFMDEzMzU3QTkwNEUzQzhD M0M5MTg0NTQwHhcNMjUxMTA0MTgwNzIxWhcNMjUxMTExMTgwNzIxWjAYMRYwFAYD VQQDEw02OTBhNDBkOS0xMDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Scaez/ep/Hy9j0Ax+3TgrtNLIkSMjWY2t9tRi6ZiJS72xOiaBt2xS5GGByq KjrimMuV15N4Ub/L2KWnCG9heFgJ9kdEITcZBH+GSjsdoU8PTgwCAj3hrtu2enmg mkG4FZGF2QSj0a794w962h0k73O7Kx97UgJ9WiZug8TbXRu7Eo9HETvel06c/+58 J9vnVsX9RRaS10WHc2dTvTS0J/oXrSPfL85HlrevLVYbpaPwcCw72AZLjhNFInRi ks39GOnmHBqqPcCBAH7S1xkoGnWDKX49DevyoRqtu1MY3S5uKyqWbY6kS0vEFGBy KWs92YGJsRHCxj9BSv4DXXpmuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtg1DD7 UKcnBEycJwYAIGK3TzpMMB8GA1UdIwQYMBaAFCJ6vk3wT4X04BM1epBOPIw8kYRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BRENEQjgyQUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhmVGdFelY2a0U0OGpEeVJo RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lucS1UZkJQaGZUZ0V6VjZrRTQ4akR5UmhGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BRENEQjgyQUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi9JbnEtVGZCUGhm VGdFelY2a0U0OGpEeVJoRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1ClSDm/e6P3bIh8gFNBT9FjgicVUZ5/rghWOx7bwayUylJL67leIo WCFvxyL1G/a0H0H4QqtarTX34TAm1Y1V9jeIVf20OcmUQA72SY+AosjsPxBceW6H IdAZP7LcRhuQcKatgR0JCONve42sKffz1bt/mdZsTWe6turjehh6ViP7Hg87lhYj fJJpe950fybMpAQGHdsXir3RGDJDpJ0AyROxe0yACAqUmMhDjnihcipwZ1fJDELn tR/QKWn75oeKKty1Jfy8JRNfUj/BB2CxcbzS3/CdKL+8c4H8bZE2Wpa78lMk4+LR RbPqag2Lu8LlNGawlL54txn6jF0uN0fk -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:37 2025 by rpki-client