$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft File: iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft (raw, json) Hash identifier: 8MfxbjKwK5gEnU9ZufsBshufOUz1hj+RgaKzBTM9Gu0= Subject key identifier: CA:02:CB:C4:18:CA:87:F5:6E:3F:37:C2:8B:32:93:66:63:A2:83:FB Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Certificate serial: 016A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft Manifest number: 015B Signing time: Wed 05 Nov 2025 04:24:11 +0000 Manifest this update: Wed 05 Nov 2025 04:24:11 +0000 Manifest next update: Wed 12 Nov 2025 04:24:11 +0000 Files and hashes: 1: iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl (hash: BLX7jQOhCI49WTvcpljnxe0VhF7XZo9h8XL/oj6yD94=) 2: 87662556555511EF88D9F680C4F9AE02.roa (hash: k8ciaOJiovKzhjLhsMW8Olbo59H12ftecdkV4UavoKg=) 3: F406C3F26AE311EF82D7860FC4F9AE02.roa (hash: BGxl2SOPQW6C/i2r2VN80go3aEYSETpmK67AkebR/E4=) 4: D7FEF354562111EFA7B3F00AC4F9AE02.roa (hash: Z74c44o/GimXrdeWvw94wRAl3MPTrcV7W0A3AuI0ILk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F7B, serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Validity Not Before: Nov 5 04:24:11 2025 GMT Not After : Nov 12 04:24:11 2025 GMT Subject: CN=690ad16b-31d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:8a:aa:af:aa:eb:ca:1e:db:9b:1e:ad:9d: 52:46:0f:d8:8b:a4:21:34:1b:6b:29:e6:63:04:c4: a3:4b:91:26:6c:44:3d:3a:ff:10:9d:b7:af:81:6e: 25:78:5d:10:f7:30:8f:dc:0d:a1:e9:76:f9:e0:74: 28:0c:1e:43:02:8f:78:4f:47:b1:9d:33:d0:2c:5f: a4:ce:82:00:c9:81:7a:02:26:1a:6d:fa:4e:2e:b8: c5:2c:a4:55:3d:52:88:5a:b8:ec:52:0e:0c:27:ba: 2c:d3:52:52:e4:4d:d3:bd:01:82:22:da:07:87:c9: 8b:d4:ff:c5:d4:13:e0:31:04:a0:c5:6a:99:25:5b: a9:c3:13:db:91:a9:44:49:ee:0a:e6:fb:10:8c:c1: 89:e3:db:b7:61:84:89:a1:a3:01:02:a8:05:c1:37: 7b:73:b2:d9:79:98:dd:bd:fd:54:81:df:59:b0:d5: e6:b3:30:d2:e0:b6:75:4c:3e:52:c3:93:5a:eb:9e: 70:b1:59:ce:00:09:63:2b:21:f6:74:30:57:d9:72: 55:7e:fc:57:27:86:a6:b7:f7:47:d2:9e:d4:bb:71: ce:43:6c:fd:65:54:77:b4:18:f0:42:b8:69:37:27: 04:20:48:06:20:29:a7:a5:6c:5d:88:dc:36:69:a3: 4c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:02:CB:C4:18:CA:87:F5:6E:3F:37:C2:8B:32:93:66:63:A2:83:FB X509v3 Authority Key Identifier: keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:dd:e6:d0:58:9a:ae:f6:2d:13:ab:c9:1c:1e:4c:12:84:11: 03:8e:e6:ba:c9:a0:01:6e:77:3c:d2:78:07:4e:0f:b4:d1:8d: 87:da:47:88:6e:92:3a:f7:0e:60:69:f1:3f:dd:56:59:ac:8c: dc:8d:32:84:cb:7f:e3:80:82:19:55:d1:a5:28:ea:bb:7f:d9: 48:a9:73:09:f7:de:f6:f1:ab:9c:9e:b9:6f:d1:2b:9c:6d:02: d4:0c:b3:6f:50:cc:5d:93:80:90:90:fd:dd:55:81:10:c5:64: 11:c3:b2:c4:58:0b:c0:ee:b0:1e:d2:0b:55:e6:10:27:85:b2: 8b:a1:cb:97:89:85:2e:61:0d:2a:b7:97:18:ab:0e:72:39:b0: ae:f2:75:79:dc:8b:61:c7:49:f2:ab:aa:84:f7:dc:cc:95:32: 0a:ce:d3:2c:6b:0f:af:f8:3e:19:36:1a:3b:3c:4e:a2:f0:a1: 04:4e:c8:86:b0:0f:ed:6e:78:5b:c3:2d:f2:56:a1:5e:e6:2b: d1:3d:2c:ea:8d:6a:74:f6:e1:da:fb:4c:32:3d:90:51:e2:7e: 98:1d:28:f5:71:55:4d:2c:af:15:58:09:dc:84:44:c3:92:96: ba:03:6c:10:7e:c9:fa:18:db:b4:a0:48:45:5e:90:04:cb:3b: 4e:f4:91:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGN0IxMTAvBgNVBAUTKDg5MEIxREVGRTg4RDU5MTk2QkNDN0I2NTI2OEM2MkU4 NkU1NEQ0NkQwHhcNMjUxMTA1MDQyNDExWhcNMjUxMTEyMDQyNDExWjAYMRYwFAYD VQQDEw02OTBhZDE2Yi0zMWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgCKqq+q68oe25serZ1SRg/Yi6QhNBtrKeZjBMSjS5EmbEQ9Ov8QnbevgW4l eF0Q9zCP3A2h6Xb54HQoDB5DAo94T0exnTPQLF+kzoIAyYF6AiYabfpOLrjFLKRV PVKIWrjsUg4MJ7os01JS5E3TvQGCItoHh8mL1P/F1BPgMQSgxWqZJVupwxPbkalE Se4K5vsQjMGJ49u3YYSJoaMBAqgFwTd7c7LZeZjdvf1Ugd9ZsNXmszDS4LZ1TD5S w5Na655wsVnOAAljKyH2dDBX2XJVfvxXJ4amt/dH0p7Uu3HOQ2z9ZVR3tBjwQrhp NycEIEgGICmnpWxdiNw2aaNM6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoCy8QY yof1bj83wosyk2ZjooP7MB8GA1UdIwQYMBaAFIkLHe/ojVkZa8x7ZSaMYuhuVNRt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY3Qi9BMTMxQjM5NEJC MzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldSbHJ6SHRsSm94aTZHNVUx RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRc2Q3LWlOV1JscnpIdGxKb3hpNkc1VTFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUY3Qi9BMTMxQjM5NEJCMzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldS bHJ6SHRsSm94aTZHNVUxRzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG3ebQWJqu9i0Tq8kcHkwShBEDjua6yaABbnc80ngHTg+00Y2H2keI bpI69w5gafE/3VZZrIzcjTKEy3/jgIIZVdGlKOq7f9lIqXMJ99728aucnrlv0Suc bQLUDLNvUMxdk4CQkP3dVYEQxWQRw7LEWAvA7rAe0gtV5hAnhbKLocuXiYUuYQ0q t5cYqw5yObCu8nV53Ithx0nyq6qE99zMlTIKztMsaw+v+D4ZNho7PE6i8KEETsiG sA/tbnhbwy3yVqFe5ivRPSzqjWp09uHa+0wyPZBR4n6YHSj1cVVNLK8VWAnchETD kpa6A2wQfsn6GNu0oEhFXpAEyztO9JG/ -----END CERTIFICATE-----Generated at Wed Nov 5 13:07:01 2025 by rpki-client