$ rpki-client -vvf rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft File: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft (raw, json) Hash identifier: DvcNPfxvYD7HCx/hJu9PJkhPtRGowjKJu6AVut0Hm8I= Subject key identifier: 8B:9B:2A:2D:BD:2C:C4:D4:D9:D4:92:5C:1F:CA:C0:09:D8:58:2D:AD Authority key identifier: FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03 Certificate issuer: /CN=A91226E9/serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503 Certificate serial: 0883 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft Manifest number: 0875 Signing time: Sat 18 Oct 2025 21:46:50 +0000 Manifest this update: Sat 18 Oct 2025 21:46:50 +0000 Manifest next update: Sat 25 Oct 2025 21:46:50 +0000 Files and hashes: 1: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl (hash: ntkGiaxffCrVdadmLcPHl3JqvZxiZLbGK22tG/07Aps=) 2: 22FDFFE88DF511EFB5AC9269C4F9AE02.roa (hash: aH5SgttT3yBxPoJZcOUIaaeUL8JdCzJhMaUjR/JZqLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2179 (0x883) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91226E9, serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503 Validity Not Before: Oct 18 21:46:50 2025 GMT Not After : Oct 25 21:46:50 2025 GMT Subject: CN=68f40aca-2f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:98:6c:23:74:51:56:bd:5d:03:5a:24:9b:d6: a1:a0:83:fd:aa:75:86:48:72:b5:15:0a:3e:7d:a2: 43:ba:63:31:14:7c:71:84:e1:a1:9e:f9:40:be:d3: 24:32:1c:1f:6e:8b:c9:8c:65:18:5c:ce:38:75:67: a4:de:66:ed:e7:a8:30:f7:fb:3f:ef:35:7d:59:3c: bf:fc:d8:ae:a7:a3:a3:24:50:27:2b:a4:ec:30:20: 70:eb:f9:57:f5:9a:48:8c:e5:45:81:89:1a:0b:9a: 7a:a3:43:9a:0e:e2:7e:7f:98:0e:af:f4:40:e1:04: 17:1e:72:1b:65:b4:b5:db:18:6f:c3:65:99:45:ef: 73:f3:dc:af:85:0d:7b:6a:83:28:10:93:17:d0:23: f7:d3:4d:2e:0c:00:62:99:c6:cb:5d:d6:3e:2c:48: 32:0f:e2:ab:16:80:c1:e7:04:90:35:e5:c9:de:8f: f5:10:93:da:34:16:a1:47:50:3c:cb:1c:d9:89:c2: b3:da:25:98:5c:48:1e:9a:f1:9c:ba:d6:10:32:f1: 0b:39:23:0f:1b:8f:b2:8c:da:42:31:51:bc:4d:db: 8d:56:1d:c0:60:8d:2d:14:26:85:fa:18:e6:a5:9b: fb:ab:f1:12:42:be:6f:17:90:7d:9e:be:3d:02:10: b6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9B:2A:2D:BD:2C:C4:D4:D9:D4:92:5C:1F:CA:C0:09:D8:58:2D:AD X509v3 Authority Key Identifier: keyid:FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:6c:64:b4:48:d0:f1:e3:e6:f7:9c:09:db:b1:17:f6:08:b5: a0:62:60:3f:55:f0:ef:75:61:74:08:70:84:f0:93:a7:bf:0d: f4:6e:f0:1f:60:34:3f:c1:cb:09:ee:c9:71:a3:68:87:85:8c: ee:7d:14:0c:b0:74:1d:be:82:f6:bd:a2:27:c3:72:45:50:b1: 92:e9:37:06:fd:ac:3e:39:c3:eb:ec:6b:06:06:42:69:7a:99: 26:11:53:82:dd:d7:4a:ba:86:df:61:6b:a6:57:fa:82:22:86: 9d:d4:43:da:ad:ff:fa:f3:2f:b2:80:e6:31:94:a5:91:4a:a2: 62:3b:3e:40:b5:4c:f3:11:d6:50:61:1e:19:54:16:a3:a4:df: aa:97:3e:72:fb:73:08:c1:19:9e:7c:22:f2:9f:66:4b:90:b8: 9a:da:f9:89:ba:29:dc:cf:f5:20:8c:b3:cf:a5:59:fc:5e:a2: e3:5d:4f:cc:95:2b:77:7a:bc:ee:6d:6e:74:21:33:a6:f0:66: 65:0c:6a:3f:11:8c:5c:35:f8:b0:ec:4c:19:e0:e3:fd:6c:8e: ae:ee:a0:80:97:94:1a:bb:4d:7c:b7:2c:77:b5:48:f9:2e:02: 09:1b:a2:6f:dd:ce:a3:63:70:78:7c:3d:51:f8:0f:7a:3a:4f: e4:61:9d:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI2RTkxMTAvBgNVBAUTKEZDOEVEMDhGQzkyMzAxNzRFMzExOTBFREFENTg1MkFD NDVDMzg1MDMwHhcNMjUxMDE4MjE0NjUwWhcNMjUxMDI1MjE0NjUwWjAYMRYwFAYD VQQDEw02OGY0MGFjYS0yZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJhsI3RRVr1dA1okm9ahoIP9qnWGSHK1FQo+faJDumMxFHxxhOGhnvlAvtMk MhwfbovJjGUYXM44dWek3mbt56gw9/s/7zV9WTy//Niup6OjJFAnK6TsMCBw6/lX 9ZpIjOVFgYkaC5p6o0OaDuJ+f5gOr/RA4QQXHnIbZbS12xhvw2WZRe9z89yvhQ17 aoMoEJMX0CP3000uDABimcbLXdY+LEgyD+KrFoDB5wSQNeXJ3o/1EJPaNBahR1A8 yxzZicKz2iWYXEgemvGcutYQMvELOSMPG4+yjNpCMVG8TduNVh3AYI0tFCaF+hjm pZv7q/ESQr5vF5B9nr49AhC2PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIubKi29 LMTU2dSSXB/KwAnYWC2tMB8GA1UdIwQYMBaAFPyO0I/JIwF04xGQ7a1YUqxFw4UD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjZFOS84M0RFNjg3OEQx RjkxMUVBQkVGMjgyNTdDNEY5QUUwMi9fSTdRajhrakFYVGpFWkR0clZoU3JFWERo UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JN1FqOGtqQVhUakVaRHRyVmhTckVYRGhRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjZFOS84M0RFNjg3OEQxRjkxMUVBQkVGMjgyNTdDNEY5QUUwMi9fSTdRajhrakFY VGpFWkR0clZoU3JFWERoUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkbGS0SNDx4+b3nAnbsRf2CLWgYmA/VfDvdWF0CHCE8JOnvw30bvAf YDQ/wcsJ7slxo2iHhYzufRQMsHQdvoL2vaInw3JFULGS6TcG/aw+OcPr7GsGBkJp epkmEVOC3ddKuobfYWumV/qCIoad1EParf/68y+ygOYxlKWRSqJiOz5AtUzzEdZQ YR4ZVBajpN+qlz5y+3MIwRmefCLyn2ZLkLia2vmJuincz/UgjLPPpVn8XqLjXU/M lSt3erzubW50ITOm8GZlDGo/EYxcNfiw7EwZ4OP9bI6u7qCAl5Qau018tyx3tUj5 LgIJG6Jv3c6jY3B4fD1R+A96Ok/kYZ21 -----END CERTIFICATE-----Generated at Mon Oct 20 10:16:44 2025 by rpki-client