$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json) Hash identifier: Qyv1ati3bpnT0/jXSoLDENdLzvo5IobT/4EmglGFxa8= Subject key identifier: CC:D0:9C:36:FE:5C:18:5B:2D:8A:7B:24:8B:D4:D8:A2:63:30:0D:14 Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Certificate serial: 16C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft Manifest number: 16B0 Signing time: Tue 04 Nov 2025 16:46:15 +0000 Manifest this update: Tue 04 Nov 2025 16:46:15 +0000 Manifest next update: Tue 11 Nov 2025 16:46:15 +0000 Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: n3F7VSPqoEHTEJZ9XN6y6AShphN33xnRLdtFfhPe+Fk=) 2: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: gYVrbtrIqWm9akFMSRfLyBApZQdsKZ/TGrfXdq2YQZg=) 3: E259315C57CA11EA8D931284C4F9AE02.roa (hash: Oe0ZhNHc+oTi0v0pEyomCNHZHmLGtOgid/cHD2LWfB4=) 4: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: iK4wxE4X5dwuMQMPvFE//EwoDLAL1trl9tc0x5zzbqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5831 (0x16c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19 Validity Not Before: Nov 4 16:46:15 2025 GMT Not After : Nov 11 16:46:15 2025 GMT Subject: CN=690a2dd7-1ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2a:45:0d:00:c7:4a:f2:d0:da:dc:cc:73:eb: 7e:5b:0a:8b:17:2e:71:46:22:49:b5:dd:1a:56:f6: 36:15:8d:6c:0d:e1:f7:61:f0:b0:21:cd:8c:ca:81: 82:11:ad:da:76:d7:19:92:41:fe:15:5f:60:a3:69: b9:24:c3:92:c0:f3:5a:ee:21:4b:fd:e4:0e:3c:e5: 7a:4c:66:b0:16:ce:09:8a:b4:58:c2:90:c0:13:3f: 5f:88:4d:83:86:51:06:06:8b:67:9e:7a:7d:0f:2e: 75:9f:35:7e:b6:f7:a0:15:dd:13:c7:da:19:af:99: 11:61:ee:f5:e7:b5:04:5e:bb:04:7c:93:66:4d:47: 0a:c3:db:d0:f5:0b:57:3c:f2:b3:f6:c3:57:7c:f7: d6:81:ff:63:e7:a5:53:e6:08:5f:fa:cc:c8:9e:75: bf:d5:e1:63:b1:df:6e:57:92:30:53:12:49:91:bc: f0:b1:72:74:fc:2d:2e:bb:38:94:e5:01:9e:ac:9b: e7:28:e7:64:a0:d0:51:73:8f:41:d0:f9:36:6b:49: 56:95:2c:ec:66:37:40:80:19:e2:c2:a9:a8:7f:ab: c4:53:84:b5:a7:56:43:66:30:d9:15:82:e3:75:4b: 5f:87:3c:11:0b:cc:7c:cb:67:a8:f5:60:bc:01:d4: cc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D0:9C:36:FE:5C:18:5B:2D:8A:7B:24:8B:D4:D8:A2:63:30:0D:14 X509v3 Authority Key Identifier: keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:e7:2b:5b:9b:84:76:fb:f3:41:5f:2c:23:96:51:d6:e7:1d: 8d:53:6b:f4:94:3e:e2:d5:bf:7e:96:a5:de:97:34:29:07:ae: 20:86:73:b7:33:df:0d:c1:63:f5:09:2d:f3:f8:56:69:9c:1f: 60:08:5b:20:9b:57:26:cb:67:5a:44:02:d3:c0:c7:f2:3f:b0: c3:68:04:a4:1d:a4:08:f4:55:87:b3:1d:a9:3e:0a:18:3d:18: d8:3d:51:e5:c2:25:fa:5a:a9:29:9f:79:3c:10:c1:a0:64:12: 4b:82:2b:c1:4f:eb:95:4c:34:e4:24:e8:94:cf:ea:66:9e:5a: 28:e9:29:01:96:4c:b2:a6:2d:cc:2c:f6:38:e7:7e:3a:85:a3: f0:75:37:1f:a1:45:73:a6:fe:95:75:2c:a0:00:59:1f:4e:c9: 6b:e0:df:90:b6:44:ee:c8:70:23:40:be:8c:8f:5f:26:25:76: 40:b6:94:7b:99:68:54:54:69:59:28:e6:0e:5b:06:21:e1:ba: a9:b4:30:ab:19:11:8e:40:5f:89:d4:6d:b7:d8:4f:11:c9:f0: 47:b6:a1:3a:5c:31:75:df:3f:6c:f8:2c:ba:17:62:22:70:a4: 83:66:06:bc:09:df:e5:e4:1d:c3:a9:55:91:a3:30:63:85:23: c2:cb:8e:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3 M0IwNDdCMTkwHhcNMjUxMTA0MTY0NjE1WhcNMjUxMTExMTY0NjE1WjAYMRYwFAYD VQQDEw02OTBhMmRkNy0xYWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyypFDQDHSvLQ2tzMc+t+WwqLFy5xRiJJtd0aVvY2FY1sDeH3YfCwIc2MyoGC Ea3adtcZkkH+FV9go2m5JMOSwPNa7iFL/eQOPOV6TGawFs4JirRYwpDAEz9fiE2D hlEGBotnnnp9Dy51nzV+tvegFd0Tx9oZr5kRYe7157UEXrsEfJNmTUcKw9vQ9QtX PPKz9sNXfPfWgf9j56VT5ghf+szInnW/1eFjsd9uV5IwUxJJkbzwsXJ0/C0uuziU 5QGerJvnKOdkoNBRc49B0Pk2a0lWlSzsZjdAgBniwqmof6vEU4S1p1ZDZjDZFYLj dUtfhzwRC8x8y2eo9WC8AdTMYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzQnDb+ XBhbLYp7JIvU2KJjMA0UMB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQ2NS9CMUFGQjZGQTBBNTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdG UEkwRDEwRElqcGR6c0VleGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn5ytbm4R2+/NBXywjllHW5x2NU2v0lD7i1b9+lqXelzQpB64ghnO3 M98NwWP1CS3z+FZpnB9gCFsgm1cmy2daRALTwMfyP7DDaASkHaQI9FWHsx2pPgoY PRjYPVHlwiX6Wqkpn3k8EMGgZBJLgivBT+uVTDTkJOiUz+pmnloo6SkBlkyypi3M LPY45346haPwdTcfoUVzpv6VdSygAFkfTslr4N+QtkTuyHAjQL6Mj18mJXZAtpR7 mWhUVGlZKOYOWwYh4bqptDCrGRGOQF+J1G232E8RyfBHtqE6XDF13z9s+Cy6F2Ii cKSDZga8Cd/l5B3DqVWRozBjhSPCy47d -----END CERTIFICATE-----Generated at Wed Nov 5 18:35:37 2025 by rpki-client