$ rpki-client -vvf rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft File: aPPOswXHv_fe-qaMB-tBwLjjcWw.mft (raw, json) Hash identifier: hiv5zq33sYkHRfIUP4g08v1HFE4ksAyrVnAk4ywWgPY= Subject key identifier: 1C:1A:9F:1C:83:33:43:09:29:A1:6C:25:A9:04:C4:48:EB:0E:A0:AF Authority key identifier: 68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C Certificate issuer: /CN=A9189EA6/serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C Certificate serial: 07DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft Manifest number: 07D9 Signing time: Tue 04 Nov 2025 21:16:28 +0000 Manifest this update: Tue 04 Nov 2025 21:16:28 +0000 Manifest next update: Tue 11 Nov 2025 21:16:28 +0000 Files and hashes: 1: aPPOswXHv_fe-qaMB-tBwLjjcWw.crl (hash: X3mcEuUlctHtHdFPnZ/yT30dhO/RTsZdK0TeEF2y3H8=) 2: E4C5DB840E7C11EB8625AE5AC4F9AE02.roa (hash: tku8g/IBMXsDJnLZ5j41i0Ddo6BJiQ1UMhvs9gK1Tr0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2015 (0x7df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189EA6, serialNumber=68F3CEB305C7BFF7DEFAA68C07EB41C0B8E3716C Validity Not Before: Nov 4 21:16:28 2025 GMT Not After : Nov 11 21:16:28 2025 GMT Subject: CN=690a6d2c-8754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:df:0b:ce:d3:1b:84:c8:53:37:2e:42:bb:3b: 7b:e5:f9:38:16:26:bf:52:91:e1:49:89:b6:51:9a: eb:a0:bc:c9:1d:aa:2c:99:44:4e:e2:ae:97:98:47: 36:77:40:b1:e8:4d:5f:6e:b1:d8:53:f1:8a:06:60: 1f:36:98:89:27:d8:6d:83:25:e3:59:58:28:bf:85: c5:a1:a5:c0:f5:22:85:ba:0c:12:bc:33:e2:9d:a8: 2c:bf:4c:f6:0e:01:d6:11:ea:6f:48:27:17:90:da: 5b:86:f6:4a:b1:97:bd:b0:05:0a:74:01:cf:9f:0b: e4:71:b0:0c:8c:18:de:5b:9e:0b:7a:09:40:50:0a: 92:ea:06:2e:b3:83:62:dd:6f:44:91:70:f8:15:45: f5:6d:7a:cf:e1:48:a6:ac:90:23:0a:b8:24:2f:98: 86:ed:d1:a0:c8:fb:66:ac:f6:2e:79:85:30:84:5d: 61:53:26:3b:c9:c0:7f:88:ec:62:ce:23:e5:4d:14: 2d:38:db:0a:f4:7a:d6:79:a9:c0:45:53:cf:e2:b9: 5a:e6:a9:2c:6a:f9:ce:56:1d:fb:bc:37:f5:53:27: 57:db:7a:2c:c7:61:1a:18:c8:43:9c:38:45:fb:60: 41:07:23:27:af:d1:4b:1c:83:ff:24:66:82:fe:12: ed:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1A:9F:1C:83:33:43:09:29:A1:6C:25:A9:04:C4:48:EB:0E:A0:AF X509v3 Authority Key Identifier: keyid:68:F3:CE:B3:05:C7:BF:F7:DE:FA:A6:8C:07:EB:41:C0:B8:E3:71:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPPOswXHv_fe-qaMB-tBwLjjcWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189EA6/CD93F36C0E7A11EB91D84B3FC4F9AE02/aPPOswXHv_fe-qaMB-tBwLjjcWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:cb:9c:9d:e1:5d:84:f8:15:dd:84:de:1d:12:fc:d8:19:5b: a3:d8:60:97:4d:11:a4:a4:62:e3:21:3b:2a:44:9b:a4:de:43: 12:d2:9f:17:a3:27:e4:79:86:78:43:29:d3:f7:c2:7a:65:ac: bf:61:e2:d8:32:dc:68:17:9b:a7:74:50:f6:f1:bb:c1:73:52: f4:f8:b2:a0:85:ed:e0:cc:71:17:61:fa:ef:3c:68:55:4b:92: 21:3f:15:89:e5:02:ac:a7:e9:82:91:6e:88:1c:a5:43:92:8e: dd:a5:ea:d0:19:3a:ef:4f:72:8e:61:0a:09:71:98:e1:14:49: 37:31:73:0c:b0:65:f4:39:0e:6a:24:7b:8e:1b:1b:b9:ca:b9: 1a:67:92:db:29:67:21:4e:f6:47:ab:7a:df:df:a1:68:77:f8: 54:91:6d:93:d8:b3:cb:44:4d:41:b8:0e:54:70:86:1c:e3:e3: 32:4c:2f:d3:cd:eb:6c:47:b8:e7:4e:7a:b7:65:9c:33:6c:d1: c9:57:7c:1c:c9:89:e6:70:cd:f5:31:87:b4:cf:20:f7:24:c5: 29:8a:e3:e2:92:a7:57:49:f3:8b:67:08:8e:29:73:1b:a1:e2: 93:0d:f5:ba:45:00:d3:c7:f5:1a:7d:5d:a1:66:cc:39:20:e1: e7:d3:46:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlFQTYxMTAvBgNVBAUTKDY4RjNDRUIzMDVDN0JGRjdERUZBQTY4QzA3RUI0MUMw QjhFMzcxNkMwHhcNMjUxMTA0MjExNjI4WhcNMjUxMTExMjExNjI4WjAYMRYwFAYD VQQDEw02OTBhNmQyYy04NzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxN8LztMbhMhTNy5Cuzt75fk4Fia/UpHhSYm2UZrroLzJHaosmURO4q6XmEc2 d0Cx6E1fbrHYU/GKBmAfNpiJJ9htgyXjWVgov4XFoaXA9SKFugwSvDPinagsv0z2 DgHWEepvSCcXkNpbhvZKsZe9sAUKdAHPnwvkcbAMjBjeW54LeglAUAqS6gYus4Ni 3W9EkXD4FUX1bXrP4UimrJAjCrgkL5iG7dGgyPtmrPYueYUwhF1hUyY7ycB/iOxi ziPlTRQtONsK9HrWeanARVPP4rla5qksavnOVh37vDf1UydX23osx2EaGMhDnDhF +2BBByMnr9FLHIP/JGaC/hLtHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwanxyD M0MJKaFsJakExEjrDqCvMB8GA1UdIwQYMBaAFGjzzrMFx7/33vqmjAfrQcC443Fs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUVBNi9DRDkzRjM2QzBF N0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZfZmUtcWFNQi10QndMampj V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FQUE9zd1hIdl9mZS1xYU1CLXRCd0xqamNXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUVBNi9DRDkzRjM2QzBFN0ExMUVCOTFEODRCM0ZDNEY5QUUwMi9hUFBPc3dYSHZf ZmUtcWFNQi10QndMampjV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHy5yd4V2E+BXdhN4dEvzYGVuj2GCXTRGkpGLjITsqRJuk3kMS0p8X oyfkeYZ4QynT98J6Zay/YeLYMtxoF5undFD28bvBc1L0+LKghe3gzHEXYfrvPGhV S5IhPxWJ5QKsp+mCkW6IHKVDko7dperQGTrvT3KOYQoJcZjhFEk3MXMMsGX0OQ5q JHuOGxu5yrkaZ5LbKWchTvZHq3rf36Fod/hUkW2T2LPLRE1BuA5UcIYc4+MyTC/T zetsR7jnTnq3ZZwzbNHJV3wcyYnmcM31MYe0zyD3JMUpiuPikqdXSfOLZwiOKXMb oeKTDfW6RQDTx/UafV2hZsw5IOHn00ai -----END CERTIFICATE-----Generated at Wed Nov 5 02:34:17 2025 by rpki-client