$ rpki-client -vvf rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft File: IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft (raw, json) Hash identifier: ZiLNYbLHYy2rlVFLeYxhtJEksQsC+CEibXQrZbr7cXI= Subject key identifier: 9C:FB:0E:5E:72:B7:70:A2:A8:43:D2:AE:98:63:53:7B:4D:7C:F0:EF Authority key identifier: 21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 Certificate issuer: /CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Certificate serial: 0D51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft Manifest number: 0D44 Signing time: Sat 18 Oct 2025 18:42:29 +0000 Manifest this update: Sat 18 Oct 2025 18:42:29 +0000 Manifest next update: Sat 25 Oct 2025 18:42:29 +0000 Files and hashes: 1: IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl (hash: /MJy2Y28f8KTtB7jddlU6UcjzUbRKrQsxL3D2F0cJIA=) 2: 7FC0801ED4EF11EC84AABC0CC4F9AE02.roa (hash: KmGf8Zvcyufmo51iUasTSRX2HWDW8cDhuB6ClqAH62g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3409 (0xd51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91159B7, serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Validity Not Before: Oct 18 18:42:29 2025 GMT Not After : Oct 25 18:42:29 2025 GMT Subject: CN=68f3df95-88fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:28:8c:76:44:f1:2a:95:f4:c2:df:83:84: f6:b5:b6:7e:e7:40:26:e4:23:c5:b9:c0:72:97:41: 89:b6:cb:ec:cf:e3:73:b4:6a:f3:76:4e:dc:4e:6e: 3f:a8:83:39:51:b9:ac:7d:38:95:55:b9:15:5f:fd: 2b:35:79:f4:07:83:50:99:f8:da:a2:a1:a1:b6:59: fb:85:67:f7:94:5a:fe:8b:09:c3:7f:41:45:ac:81: 9b:2d:c8:e8:5e:cc:b2:9b:b7:45:51:6f:37:ee:45: ad:3b:88:2d:c8:6d:c0:a9:be:d0:08:f3:a2:04:d8: bb:86:41:69:0c:60:4d:3f:53:0d:1b:81:8d:44:85: 62:bf:e2:f4:58:a7:d5:6d:81:c2:8b:c9:dd:bb:f8: 3d:a0:a2:e7:52:60:f4:d4:a8:0c:1b:24:cb:18:03: 5b:43:d3:cf:75:17:82:04:ec:f2:4b:3f:64:81:b4: 6d:d2:07:f4:b3:83:a6:06:9e:04:b4:4f:1f:01:c8: 42:16:e0:b8:38:73:43:6b:7c:c2:53:d7:65:e5:19: a7:04:2f:cf:3c:08:08:e4:b2:86:5d:74:d9:98:c7: 61:3f:15:78:e2:e4:46:01:86:ee:be:9e:9c:0a:a9: 17:3f:3c:fa:66:3c:c0:c5:ce:de:c7:6f:04:3f:30: a8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FB:0E:5E:72:B7:70:A2:A8:43:D2:AE:98:63:53:7B:4D:7C:F0:EF X509v3 Authority Key Identifier: keyid:21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:bd:55:49:28:be:e6:1a:39:fe:7a:24:f6:8a:f0:43:31:49: b9:ea:b8:3f:3e:40:a3:02:06:49:8c:1e:9e:9d:6a:2f:ea:ea: d2:a1:36:c1:ba:1a:7f:f4:67:a6:cd:23:d3:c1:18:d5:01:8b: 8c:61:f6:62:8e:a3:f0:c8:41:70:4f:bc:46:8e:52:ea:97:21: 8e:e8:56:4e:0e:10:26:36:e1:55:7d:71:2c:44:25:7c:1b:9a: ff:4e:c0:82:c2:d2:3b:97:c2:cf:38:fd:f5:4c:45:68:c8:b6: a1:9e:09:40:a0:37:bc:e9:97:cc:2e:05:af:d7:fc:3b:39:b4: a4:dd:d6:f6:6a:39:86:b6:79:a6:be:2d:db:70:22:e3:4a:67: 3d:63:bb:b1:cb:5c:4f:a8:f1:d1:61:f2:fb:a6:88:78:7d:c1: dc:b5:fc:cb:17:7d:55:d8:90:9f:b4:85:ee:fe:fe:e4:91:91: b1:c5:af:d8:38:03:d0:09:ba:4e:8b:9f:bb:4e:b1:fe:0f:82: 99:16:a2:49:da:2a:24:f4:0f:cb:c0:ea:4e:1b:40:4c:17:de: ef:0f:e5:f2:5e:b8:ec:89:60:fb:a9:fb:a3:be:36:0d:23:a2: 40:5b:8c:f5:70:f1:8f:78:60:64:9a:df:93:d6:5a:1f:3d:48: c7:96:d1:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU5QjcxMTAvBgNVBAUTKDIxRjIwMjI3NTU5REIxRjg2Mzg0OUFCNjQzMjMzQzNF OTM1Nzc2QTYwHhcNMjUxMDE4MTg0MjI5WhcNMjUxMDI1MTg0MjI5WjAYMRYwFAYD VQQDEw02OGYzZGY5NS04OGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwgojHZE8SqV9MLfg4T2tbZ+50Am5CPFucByl0GJtsvsz+NztGrzdk7cTm4/ qIM5UbmsfTiVVbkVX/0rNXn0B4NQmfjaoqGhtln7hWf3lFr+iwnDf0FFrIGbLcjo Xsyym7dFUW837kWtO4gtyG3Aqb7QCPOiBNi7hkFpDGBNP1MNG4GNRIViv+L0WKfV bYHCi8ndu/g9oKLnUmD01KgMGyTLGANbQ9PPdReCBOzySz9kgbRt0gf0s4OmBp4E tE8fAchCFuC4OHNDa3zCU9dl5RmnBC/PPAgI5LKGXXTZmMdhPxV44uRGAYbuvp6c CqkXPzz6ZjzAxc7ex28EPzCofwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJz7Dl5y t3CiqEPSrphjU3tNfPDvMB8GA1UdIwQYMBaAFCHyAidVnbH4Y4SatkMjPD6TV3am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTlCNy9BNEVDNTNGNkUy QjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNmaGpoSnEyUXlNOFBwTlhk cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmSUNKMVdkc2ZoamhKcTJReU04UHBOWGRxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTlCNy9BNEVDNTNGNkUyQjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNm aGpoSnEyUXlNOFBwTlhkcVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdvVVJKL7mGjn+eiT2ivBDMUm56rg/PkCjAgZJjB6enWov6urSoTbB uhp/9GemzSPTwRjVAYuMYfZijqPwyEFwT7xGjlLqlyGO6FZODhAmNuFVfXEsRCV8 G5r/TsCCwtI7l8LPOP31TEVoyLahnglAoDe86ZfMLgWv1/w7ObSk3db2ajmGtnmm vi3bcCLjSmc9Y7uxy1xPqPHRYfL7poh4fcHctfzLF31V2JCftIXu/v7kkZGxxa/Y OAPQCbpOi5+7TrH+D4KZFqJJ2iok9A/LwOpOG0BMF97vD+XyXrjsiWD7qfujvjYN I6JAW4z1cPGPeGBkmt+T1lofPUjHltHs -----END CERTIFICATE-----Generated at Mon Oct 20 05:37:30 2025 by rpki-client