$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft File: aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json) Hash identifier: IDoa/Jw1Y4uMGPaZlICH/mInkxhB5gL+ay84w72VKXw= Subject key identifier: 3A:1C:3D:6A:45:97:C0:28:16:FB:E6:46:04:BE:EC:2E:2D:41:D9:E4 Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft Manifest number: 01F1 Signing time: Sun 19 Oct 2025 05:36:25 +0000 Manifest this update: Sun 19 Oct 2025 05:36:25 +0000 Manifest next update: Sun 26 Oct 2025 05:36:25 +0000 Files and hashes: 1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: yKL58TQpOnsyYEbv0SAX9wz26eJXZaYLAJQjOjgC6wU=) 2: AF2D50BE562B11F0A2095579C4F9AE02.roa (hash: 8RemKyfJQtXvAOB/Ei52MDI9KMaFn3vaXMJC+OL2BTo=) 3: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: jgvNZRe9TtRr8CjiSGyPeDv21uzfhNhZZ8tu5qtOBO0=) 4: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: 6GO7eV9ptg4bEhjgmfPj3OiDNEEWB+tcYPU19G/hzs4=) 5: A6888CA8562B11F0A9D71979C4F9AE02.roa (hash: iDmp89Xpkp1Fll7WvZDCHcwidt+lSLGg3Xgb3jX5mHY=) 6: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: xJf9OjyZ9tl22O94Y+hCu+z+3Ka7jvHkbMt39lHsOuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Validity Not Before: Oct 19 05:36:25 2025 GMT Not After : Oct 26 05:36:25 2025 GMT Subject: CN=68f478d9-f663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:96:a2:f5:00:85:55:17:40:05:35:53:c9:75: e0:7b:78:0c:82:84:fb:f5:5f:db:ec:e1:1a:df:c2: c5:95:f3:d1:a0:04:2f:e5:d8:5a:cb:53:3e:89:6c: e0:f0:8a:ff:df:30:66:a6:f9:49:8b:35:69:55:db: f5:a9:ed:ef:24:1c:d2:f7:d1:7b:b9:19:a7:56:ec: 72:ab:92:8a:4d:be:67:f3:02:58:78:88:6e:e7:0e: 2c:14:08:2c:79:a8:a5:79:26:74:2f:0e:ca:d6:c6: 78:bd:19:de:03:23:f5:c6:ed:99:16:b2:0d:fc:56: a3:04:f1:e3:1c:8c:48:39:4d:a4:23:4a:7f:99:90: af:b8:1b:a5:32:65:8c:cc:f0:b9:46:cc:e6:0a:ab: 09:82:ea:02:90:9d:7a:f6:ee:f2:b3:32:cf:d9:60: c2:27:25:63:42:10:83:fb:03:41:8f:dc:22:74:ba: 94:08:9a:c2:17:79:c2:c4:3c:71:66:e9:95:94:ad: 01:0e:45:8d:af:40:82:50:b9:3b:5a:fd:55:a9:aa: d2:15:ed:b1:f2:6a:be:8b:17:2c:7f:75:26:72:38: 78:b8:3d:6b:90:72:ac:33:6d:4d:47:76:10:53:84: e4:22:fe:a4:2b:e1:bc:5a:42:4f:0f:50:15:dc:73: cc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1C:3D:6A:45:97:C0:28:16:FB:E6:46:04:BE:EC:2E:2D:41:D9:E4 X509v3 Authority Key Identifier: keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:57:aa:e0:42:ac:ed:2d:ea:90:30:00:2a:65:b6:c4:78:7e: f3:4b:f7:3c:2b:64:d3:84:6e:e0:c0:ad:80:d5:24:d8:31:f8: 0a:ae:6d:74:e3:b7:5f:3b:1e:f6:a8:94:ee:93:f9:ad:f0:de: 36:c2:67:ea:1a:63:af:32:e1:06:b6:39:fa:ce:e6:40:21:49: fa:a2:4d:5c:a8:4c:c5:88:a4:04:8d:01:bb:6b:9d:13:b2:f2: 23:72:40:3f:1d:16:cf:74:bc:bf:42:ec:22:fb:9f:f4:4d:4a: 5b:df:a5:82:9b:0d:c4:0f:ad:3e:71:2a:cf:f9:e0:7b:68:3f: 85:ff:e4:59:7b:8d:63:52:42:9d:fa:e0:28:50:14:e3:84:b7: a0:f4:6b:b3:be:98:de:5c:81:6b:43:9a:86:85:45:44:5d:da: 4a:67:4d:90:46:3a:f2:bf:0b:ea:e9:16:66:6b:97:4b:46:8b: d1:29:28:cf:66:20:da:ec:53:eb:81:91:b7:cb:ad:0e:9b:63: 23:99:e5:79:46:9e:16:1f:08:c9:4c:7f:a5:fc:64:b1:ad:b9: af:c8:06:88:15:ee:1c:23:23:e6:89:0d:26:2f:85:da:5b:db: a1:69:3c:5e:28:7c:2b:1f:4b:e4:c1:3c:d9:29:41:72:0b:3e: 70:ff:d5:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3RkQxMTAvBgNVBAUTKDY4ODUyQUI3RjI3MTRGQ0Y1NEQ3NUYwQUFFMzA2OEFE QzM4QjM1Q0MwHhcNMjUxMDE5MDUzNjI1WhcNMjUxMDI2MDUzNjI1WjAYMRYwFAYD VQQDEw02OGY0NzhkOS1mNjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05ai9QCFVRdABTVTyXXge3gMgoT79V/b7OEa38LFlfPRoAQv5dhay1M+iWzg 8Ir/3zBmpvlJizVpVdv1qe3vJBzS99F7uRmnVuxyq5KKTb5n8wJYeIhu5w4sFAgs eaileSZ0Lw7K1sZ4vRneAyP1xu2ZFrIN/FajBPHjHIxIOU2kI0p/mZCvuBulMmWM zPC5RszmCqsJguoCkJ169u7yszLP2WDCJyVjQhCD+wNBj9widLqUCJrCF3nCxDxx ZumVlK0BDkWNr0CCULk7Wv1VqarSFe2x8mq+ixcsf3Umcjh4uD1rkHKsM21NR3YQ U4TkIv6kK+G8WkJPD1AV3HPM6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDocPWpF l8AoFvvmRgS+7C4tQdnkMB8GA1UdIwQYMBaAFGiFKrfycU/PVNdfCq4waK3DizXM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdGRC81NUVENkExNjEw QTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4OVUxMThLcmpCb3JjT0xO Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJVXF0X0p4VDg5VTExOEtyakJvcmNPTE5jdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODdGRC81NUVENkExNjEwQTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4 OVUxMThLcmpCb3JjT0xOY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiV6rgQqztLeqQMAAqZbbEeH7zS/c8K2TThG7gwK2A1STYMfgKrm10 47dfOx72qJTuk/mt8N42wmfqGmOvMuEGtjn6zuZAIUn6ok1cqEzFiKQEjQG7a50T svIjckA/HRbPdLy/Quwi+5/0TUpb36WCmw3ED60+cSrP+eB7aD+F/+RZe41jUkKd +uAoUBTjhLeg9GuzvpjeXIFrQ5qGhUVEXdpKZ02QRjryvwvq6RZma5dLRovRKSjP ZiDa7FPrgZG3y60Om2MjmeV5Rp4WHwjJTH+l/GSxrbmvyAaIFe4cIyPmiQ0mL4Xa W9uhaTxeKHwrH0vkwTzZKUFyCz5w/9U4 -----END CERTIFICATE-----Generated at Tue Oct 21 03:04:36 2025 by rpki-client