$ rpki-client -vvf rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft File: IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft (raw, json) Hash identifier: 9vJVLSfF3pT8wNiJ7Hzyjk9kNN8plkQtpXG/7j+BgsU= Subject key identifier: 19:A5:C2:38:A4:F4:C6:AC:9D:36:AA:BC:4B:D7:44:D3:F6:0D:09:F3 Authority key identifier: 20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D Certificate issuer: /CN=A918754F/serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Certificate serial: 265C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft Manifest number: 25CD Signing time: Tue 04 Nov 2025 15:48:37 +0000 Manifest this update: Tue 04 Nov 2025 15:48:36 +0000 Manifest next update: Tue 11 Nov 2025 15:48:36 +0000 Files and hashes: 1: IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl (hash: y+ebmBpmMkB+adLTx/ihEsJ4A7ZX3a4anQnZjzyFNw0=) 2: 9ED46D5C72F611EE857CC13FC4F9AE02.roa (hash: /CgW1RCBBKg0G9J60cVrkPNi3RQ9sxBskKzs6426hF8=) 3: B6C42C027E7111ECA6454787C4F9AE02.roa (hash: wmE3dy22cCh7DDeNE31Jx/DmkbwsEQ9KR2+uUk3Z/H8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9820 (0x265c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918754F, serialNumber=20CB58BB7CD424E761BC393BFCB8D676685F6C0D Validity Not Before: Nov 4 15:48:36 2025 GMT Not After : Nov 11 15:48:36 2025 GMT Subject: CN=690a2055-86af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:84:d9:cd:28:9e:f2:ca:ae:d1:3f:3b:f7:13: 1e:87:01:43:6b:4e:dd:39:8e:38:5b:63:0b:69:53: 7d:6a:ac:c3:77:f0:90:ef:30:c8:1b:d6:67:06:5d: cd:66:af:f1:71:25:4f:10:93:a1:13:c7:34:f2:86: 88:98:fc:01:0b:1d:0e:79:c1:2b:ac:a3:33:8b:7b: c7:21:3a:6b:20:0f:09:77:cb:07:8f:a2:51:9d:58: 09:ad:a4:d2:67:8b:76:55:98:0a:f3:0c:a5:b0:eb: 19:a6:47:38:1f:f1:11:77:83:93:b5:e7:2c:91:eb: 18:c9:6a:3a:98:0f:26:f9:83:6a:25:64:34:95:ff: f9:61:91:72:2f:37:ad:fb:c5:4e:45:61:cd:b5:39: 92:1f:66:0a:77:12:32:ff:bd:6d:df:b8:81:d1:c6: ab:d2:22:3c:e2:85:2d:37:c6:e8:9f:c2:81:40:b4: 0c:8f:e5:15:0e:1c:45:72:c0:99:97:dc:d1:12:59: b8:a9:06:11:9a:cc:d4:6a:0d:fc:21:91:c4:55:bf: 60:e5:e4:d3:76:2f:c6:c4:be:ca:df:88:36:d0:c1: b6:6a:7b:a5:f3:ba:d6:ee:cb:17:d5:74:b3:33:66: b1:53:70:e9:e4:bd:d7:09:c2:b7:80:56:40:a0:ba: 01:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A5:C2:38:A4:F4:C6:AC:9D:36:AA:BC:4B:D7:44:D3:F6:0D:09:F3 X509v3 Authority Key Identifier: keyid:20:CB:58:BB:7C:D4:24:E7:61:BC:39:3B:FC:B8:D6:76:68:5F:6C:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IMtYu3zUJOdhvDk7_LjWdmhfbA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918754F/2AD16F301A4A11E59209ED72C4F9AE02/IMtYu3zUJOdhvDk7_LjWdmhfbA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:87:83:5e:7b:cf:6b:30:af:cd:0e:7c:20:62:6f:ea:c0:c1: 7d:d6:75:8c:9f:8e:dd:aa:c4:66:29:76:68:94:8e:41:df:f9: bb:44:a3:1f:4a:a1:c7:c4:59:d6:c6:3b:9d:de:7d:b4:4f:4b: 9b:ea:37:ea:f7:88:57:2f:f9:6f:a2:f4:45:51:81:46:76:bf: e2:58:fe:0d:b0:92:f5:20:dd:6a:1f:89:a7:e2:6d:47:f9:7a: c1:be:86:9b:e6:3c:73:1d:cd:42:ed:82:fb:36:43:7b:3f:1e: 26:87:15:df:ae:1a:7a:80:c8:54:72:2f:b3:ce:dd:32:99:60: 21:97:8b:84:a1:71:83:d4:63:73:78:c2:db:bb:98:ea:51:83: 80:b7:76:2e:5f:e7:b5:4f:6d:fc:e9:67:6f:81:df:25:12:f3: c0:e5:8f:48:ec:69:b0:e2:47:a7:6d:36:71:3f:e5:a8:8f:b4: 3d:0b:c5:c4:f3:79:01:c8:70:75:89:d0:3e:89:35:f4:c3:84: e4:0c:44:d2:21:36:b2:d6:20:f7:74:a3:30:bd:ea:61:ca:f4: 23:f9:3e:5c:0b:e5:8f:27:63:85:18:4a:d4:8b:99:61:25:60: b3:fa:9f:e0:7f:f1:50:9a:14:0c:ea:b3:5a:eb:15:ed:6f:50: 39:47:ef:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc1NEYxMTAvBgNVBAUTKDIwQ0I1OEJCN0NENDI0RTc2MUJDMzkzQkZDQjhENjc2 Njg1RjZDMEQwHhcNMjUxMTA0MTU0ODM2WhcNMjUxMTExMTU0ODM2WjAYMRYwFAYD VQQDEw02OTBhMjA1NS04NmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoTZzSie8squ0T879xMehwFDa07dOY44W2MLaVN9aqzDd/CQ7zDIG9ZnBl3N Zq/xcSVPEJOhE8c08oaImPwBCx0OecErrKMzi3vHITprIA8Jd8sHj6JRnVgJraTS Z4t2VZgK8wylsOsZpkc4H/ERd4OTtecskesYyWo6mA8m+YNqJWQ0lf/5YZFyLzet +8VORWHNtTmSH2YKdxIy/71t37iB0car0iI84oUtN8bon8KBQLQMj+UVDhxFcsCZ l9zRElm4qQYRmszUag38IZHEVb9g5eTTdi/GxL7K34g20MG2anul87rW7ssX1XSz M2axU3Dp5L3XCcK3gFZAoLoB1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmlwjik 9MasnTaqvEvXRNP2DQnzMB8GA1UdIwQYMBaAFCDLWLt81CTnYbw5O/y41nZoX2wN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzU0Ri8yQUQxNkYzMDFB NEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpPZGh2RGs3X0xqV2RtaGZi QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lNdFl1M3pVSk9kaHZEazdfTGpXZG1oZmJBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzU0Ri8yQUQxNkYzMDFBNEExMUU1OTIwOUVENzJDNEY5QUUwMi9JTXRZdTN6VUpP ZGh2RGs3X0xqV2RtaGZiQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAh4Nee89rMK/NDnwgYm/qwMF91nWMn47dqsRmKXZolI5B3/m7RKMf SqHHxFnWxjud3n20T0ub6jfq94hXL/lvovRFUYFGdr/iWP4NsJL1IN1qH4mn4m1H +XrBvoab5jxzHc1C7YL7NkN7Px4mhxXfrhp6gMhUci+zzt0ymWAhl4uEoXGD1GNz eMLbu5jqUYOAt3YuX+e1T2386Wdvgd8lEvPA5Y9I7Gmw4kenbTZxP+Woj7Q9C8XE 83kByHB1idA+iTX0w4TkDETSITay1iD3dKMwvephyvQj+T5cC+WPJ2OFGErUi5lh JWCz+p/gf/FQmhQM6rNa6xXtb1A5R+9P -----END CERTIFICATE-----Generated at Wed Nov 5 04:00:28 2025 by rpki-client