$ rpki-client -vvf rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft File: i0WgWBIZndhsv8hCI_2BqzMGJrk.mft (raw, json) Hash identifier: Fc4MYWjEYcpv2lrI2ba8QEJhW0Ku9sUy5SJfkGsvoc4= Subject key identifier: 76:FB:4C:09:EF:65:69:DC:5E:FC:E0:8F:75:99:F3:A3:87:40:14:2D Authority key identifier: 8B:45:A0:58:12:19:9D:D8:6C:BF:C8:42:23:FD:81:AB:33:06:26:B9 Certificate issuer: /CN=A919762A/serialNumber=8B45A05812199DD86CBFC84223FD81AB330626B9 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0WgWBIZndhsv8hCI_2BqzMGJrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft Manifest number: 1B Signing time: Wed 05 Nov 2025 08:02:11 +0000 Manifest this update: Wed 05 Nov 2025 08:02:10 +0000 Manifest next update: Wed 12 Nov 2025 08:02:10 +0000 Files and hashes: 1: i0WgWBIZndhsv8hCI_2BqzMGJrk.crl (hash: VG4r0BVNp+M/k4q48iPymRWqrqM1BA2DzsjeVVwmAjI=) 2: 9724DB52944911F0BBB4490AC4F9AE02.roa (hash: lpN7ylnahjPKcKqzXzMQXkmAw/ItFEQm+gEhm6BkKOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.crl rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0WgWBIZndhsv8hCI_2BqzMGJrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919762A, serialNumber=8B45A05812199DD86CBFC84223FD81AB330626B9 Validity Not Before: Nov 5 08:02:10 2025 GMT Not After : Nov 12 08:02:10 2025 GMT Subject: CN=690b0482-7bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fd:3e:8b:12:64:41:18:b6:0f:93:b6:d7:8d: d3:1e:3e:20:25:ed:cb:1d:fa:de:3a:cd:9b:08:8a: 66:98:f0:e8:69:87:97:9c:7f:a8:72:b2:c5:46:1b: 52:97:b7:b3:18:88:88:b9:3c:09:3f:ce:33:50:dc: 3a:7b:13:85:2e:96:83:ac:35:94:a8:bb:04:1f:2a: 35:7b:74:19:b2:b6:1b:b8:56:1d:01:7e:ef:9d:3f: d2:0c:06:f5:68:2f:f4:eb:40:21:19:61:eb:b0:e0: 92:20:8f:f8:7c:cd:c3:d8:98:5f:ad:ff:48:ce:8c: ec:fc:3e:88:af:95:a1:36:41:9b:9e:63:9f:d6:4f: 53:d1:5a:98:8d:78:b5:a5:81:55:97:28:48:74:de: 2e:a2:a0:b1:ee:73:f1:62:b1:57:af:8a:98:60:26: 80:ff:2f:00:03:de:7f:57:e9:90:39:f5:39:ee:96: 85:66:af:5d:58:c6:88:c7:7e:26:2d:11:38:39:b1: 29:18:21:96:f9:27:80:1f:e3:1c:d9:cb:96:ba:42: c5:b8:13:b6:d1:0f:4b:8c:72:14:ca:31:53:f0:33: 37:33:25:b6:a4:0e:76:5c:28:fd:e1:e3:de:ba:c3: 57:30:46:01:9e:b4:fa:d8:fa:50:a1:31:32:65:c8: e7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FB:4C:09:EF:65:69:DC:5E:FC:E0:8F:75:99:F3:A3:87:40:14:2D X509v3 Authority Key Identifier: keyid:8B:45:A0:58:12:19:9D:D8:6C:BF:C8:42:23:FD:81:AB:33:06:26:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0WgWBIZndhsv8hCI_2BqzMGJrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919762A/4C8CE1C0944911F08B0DC109C4F9AE02/i0WgWBIZndhsv8hCI_2BqzMGJrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:45:c7:13:84:e3:87:71:a1:17:74:41:4f:b6:98:c1:af:b0: fa:7c:81:6f:af:1b:2c:c0:3a:e7:cf:b5:53:97:e9:86:8d:5e: c9:f6:04:13:c3:e4:b1:e4:7f:3f:81:df:7b:bd:e8:c6:60:e9: e2:c0:51:23:84:b1:c3:6c:7f:51:4a:a6:ca:dd:ad:cf:ae:dd: a5:4d:3a:6b:dc:56:68:a4:7b:8b:f2:52:1e:28:1d:1a:7e:ca: 41:4b:8e:a2:a5:24:db:0f:37:67:09:76:51:df:83:18:93:44: 56:76:fc:9c:16:92:4f:90:25:e5:6b:2f:27:bf:4f:f6:2e:b2: ea:21:be:4a:25:3d:27:cd:7d:eb:3a:02:08:02:ae:d6:5a:75: b0:dc:0e:39:98:be:f6:85:ef:56:b8:69:84:a8:4d:78:ad:34: 01:80:1f:98:6b:3a:8c:26:50:70:a8:96:c1:fc:ca:7d:59:4f: 34:2a:3d:c8:90:9a:8d:09:42:f5:97:2e:94:0a:21:e0:4f:0f: a4:ab:57:ec:74:1b:0b:55:c2:11:06:7d:31:0b:31:81:81:57: a7:37:16:3a:b0:4c:c2:37:47:52:58:88:85:67:18:ac:bb:8a: 1d:cd:6f:2e:bd:96:be:62:e8:6f:f1:32:6f:c8:87:e8:8e:69: 5d:83:81:33 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzYyQTExMC8GA1UEBRMoOEI0NUEwNTgxMjE5OUREODZDQkZDODQyMjNGRDgxQUIz MzA2MjZCOTAeFw0yNTExMDUwODAyMTBaFw0yNTExMTIwODAyMTBaMBgxFjAUBgNV BAMTDTY5MGIwNDgyLTdiZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS/T6LEmRBGLYPk7bXjdMePiAl7csd+t46zZsIimaY8Ohph5ecf6hyssVGG1KX t7MYiIi5PAk/zjNQ3Dp7E4UuloOsNZSouwQfKjV7dBmythu4Vh0Bfu+dP9IMBvVo L/TrQCEZYeuw4JIgj/h8zcPYmF+t/0jOjOz8PoivlaE2QZueY5/WT1PRWpiNeLWl gVWXKEh03i6ioLHuc/FisVeviphgJoD/LwAD3n9X6ZA59TnuloVmr11YxojHfiYt ETg5sSkYIZb5J4Af4xzZy5a6QsW4E7bRD0uMchTKMVPwMzczJbakDnZcKP3h4966 w1cwRgGetPrY+lChMTJlyOdbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdvtMCe9l adxe/OCPdZnzo4dAFC0wHwYDVR0jBBgwFoAUi0WgWBIZndhsv8hCI/2BqzMGJrkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3NjJBLzRDOENFMUMwOTQ0 OTExRjA4QjBEQzEwOUM0RjlBRTAyL2kwV2dXQklabmRoc3Y4aENJXzJCcXpNR0py ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaTBXZ1dCSVpuZGhzdjhoQ0lfMkJxek1HSnJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 NjJBLzRDOENFMUMwOTQ0OTExRjA4QjBEQzEwOUM0RjlBRTAyL2kwV2dXQklabmRo c3Y4aENJXzJCcXpNR0pyay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAFFxxOE44dxoRd0QU+2mMGvsPp8gW+vGyzAOufPtVOX6YaNXsn2BBPD 5LHkfz+B33u96MZg6eLAUSOEscNsf1FKpsrdrc+u3aVNOmvcVmike4vyUh4oHRp+ ykFLjqKlJNsPN2cJdlHfgxiTRFZ2/JwWkk+QJeVrLye/T/YusuohvkolPSfNfes6 AggCrtZadbDcDjmYvvaF71a4aYSoTXitNAGAH5hrOowmUHColsH8yn1ZTzQqPciQ mo0JQvWXLpQKIeBPD6SrV+x0GwtVwhEGfTELMYGBV6c3FjqwTMI3R1JYiIVnGKy7 ih3Nby69lr5i6G/xMm/Ih+iOaV2DgTM= -----END CERTIFICATE-----Generated at Wed Nov 5 10:53:42 2025 by rpki-client