$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft File: 7iTJi5YTEPUN8Nyy0naWug69fUs.mft (raw, json) Hash identifier: CZ0cro4LZwv7kZYkfwKSh2l+y8oRi37JTc3ki54ntoE= Subject key identifier: D7:43:B4:64:E8:77:95:FF:51:32:C8:1E:2F:B4:DA:44:97:90:7F:D0 Authority key identifier: EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B Certificate issuer: /CN=A9186883/serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft Manifest number: 0189 Signing time: Wed 05 Nov 2025 03:41:39 +0000 Manifest this update: Wed 05 Nov 2025 03:41:38 +0000 Manifest next update: Wed 12 Nov 2025 03:41:38 +0000 Files and hashes: 1: 7iTJi5YTEPUN8Nyy0naWug69fUs.crl (hash: z2xFq1KY7+RzuCCPtnbXfqYRKrswo/GwDaNGVDOMj0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883, serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B Validity Not Before: Nov 5 03:41:38 2025 GMT Not After : Nov 12 03:41:38 2025 GMT Subject: CN=690ac772-6733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8a:b0:6d:cf:87:07:d0:21:d7:e2:11:c1:51: b0:70:96:45:37:19:01:b8:35:54:b7:1e:9c:ea:09: 1c:3b:84:3b:c1:98:2e:52:aa:bc:4d:c6:73:8b:bc: 25:d6:da:22:82:56:d7:7c:79:52:bb:d8:4c:45:25: ca:bc:24:f8:d7:70:12:21:80:d4:cf:88:7a:97:ae: 8e:a2:c1:6e:aa:38:08:87:a6:4f:30:86:6f:14:21: 82:fb:0f:b8:6f:7f:53:35:09:d3:6d:e4:5e:76:93: ac:b1:3e:25:53:f0:32:42:88:a5:58:61:bc:ca:72: 3a:14:05:cf:15:96:68:cf:7e:4f:be:fb:c0:39:b8: d5:c6:ee:08:df:c8:48:24:70:a1:1d:36:e7:ad:e6: c2:f5:1d:72:da:cc:e8:4c:00:0c:10:b9:1b:d8:6a: aa:4c:4c:24:de:21:bb:8d:44:5a:d9:f2:00:70:1c: 6e:10:44:6b:e6:15:af:66:53:3b:78:d7:89:7d:3e: e8:b3:0f:b3:c9:83:dd:0e:a7:a9:8e:ad:45:d0:6a: cc:30:c9:36:1f:3b:31:68:e7:94:a2:04:94:1f:e3: 43:18:b7:ec:d4:4a:f7:8d:47:05:df:a6:6e:be:de: ed:ba:60:2b:50:fa:60:89:32:c2:c9:8b:b5:17:eb: 30:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:43:B4:64:E8:77:95:FF:51:32:C8:1E:2F:B4:DA:44:97:90:7F:D0 X509v3 Authority Key Identifier: keyid:EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:b5:10:e5:ba:10:0c:20:52:bd:43:e3:91:ea:0b:bc:e2:f4: cf:86:58:cc:79:c6:4c:65:0f:42:9b:e2:5d:31:cf:1b:44:5d: ae:5c:8a:00:77:d8:f9:3e:0e:88:a7:97:d9:7e:0a:db:8c:9c: b2:6e:e5:7a:d6:a7:41:1f:1c:d3:35:86:d4:42:d7:10:f5:29: 0a:08:a4:cc:36:38:f7:0c:d5:5d:b8:f2:30:6d:b9:5f:8c:40: 2d:f6:06:02:f4:91:31:d4:8b:49:08:e9:46:e8:93:bc:93:2e: 35:f2:0d:52:d5:98:65:b9:de:c9:00:d3:e9:79:ae:c0:0c:a8: ec:94:7a:dd:7d:ad:2b:52:3d:7a:8a:b9:36:92:49:19:5b:9d: 50:e1:1b:b6:ef:22:bc:e3:e4:14:fb:80:b2:ab:45:4b:3c:a9: 32:9d:9c:2e:36:f3:2b:ad:62:76:f3:88:9e:f8:3e:0e:36:73: e2:4f:46:d8:68:e6:af:f3:88:83:56:fd:d3:81:38:c6:c9:20: 44:95:dc:c8:54:35:2a:3b:ec:67:f1:95:7d:aa:90:34:6b:d4: 73:45:43:8b:8c:0d:cb:06:e2:52:4b:f5:f7:90:bb:22:99:10: 19:2e:7f:bf:2b:9f:97:99:3b:66:f0:51:d4:68:48:40:0b:35: 31:91:de:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKEVFMjRDOThCOTYxMzEwRjUwREYwRENCMkQyNzY5NkJB MEVCRDdENEIwHhcNMjUxMTA1MDM0MTM4WhcNMjUxMTEyMDM0MTM4WjAYMRYwFAYD VQQDEw02OTBhYzc3Mi02NzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIqwbc+HB9Ah1+IRwVGwcJZFNxkBuDVUtx6c6gkcO4Q7wZguUqq8TcZzi7wl 1toiglbXfHlSu9hMRSXKvCT413ASIYDUz4h6l66OosFuqjgIh6ZPMIZvFCGC+w+4 b39TNQnTbeRedpOssT4lU/AyQoilWGG8ynI6FAXPFZZoz35PvvvAObjVxu4I38hI JHChHTbnrebC9R1y2szoTAAMELkb2GqqTEwk3iG7jURa2fIAcBxuEERr5hWvZlM7 eNeJfT7osw+zyYPdDqepjq1F0GrMMMk2HzsxaOeUogSUH+NDGLfs1Er3jUcF36Zu vt7tumArUPpgiTLCyYu1F+swaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdDtGTo d5X/UTLIHi+02kSXkH/QMB8GA1UdIwQYMBaAFO4kyYuWExD1DfDcstJ2lroOvX1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9BODhGRkNGODVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQVU44Tnl5MG5hV3VnNjlm VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdpVEppNVlURVBVTjhOeXkwbmFXdWc2OWZVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9BODhGRkNGODVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQ VU44Tnl5MG5hV3VnNjlmVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHtRDluhAMIFK9Q+OR6gu84vTPhljMecZMZQ9Cm+JdMc8bRF2uXIoA d9j5Pg6Ip5fZfgrbjJyybuV61qdBHxzTNYbUQtcQ9SkKCKTMNjj3DNVduPIwbblf jEAt9gYC9JEx1ItJCOlG6JO8ky418g1S1Zhlud7JANPpea7ADKjslHrdfa0rUj16 irk2kkkZW51Q4Ru27yK84+QU+4Cyq0VLPKkynZwuNvMrrWJ284ie+D4ONnPiT0bY aOav84iDVv3TgTjGySBEldzIVDUqO+xn8ZV9qpA0a9RzRUOLjA3LBuJSS/X3kLsi mRAZLn+/K5+XmTtm8FHUaEhACzUxkd7w -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:56 2025 by rpki-client