$ rpki-client -vvf rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft File: ISgYkHWJssqEa0nRCd0zrJ4utUM.mft (raw, json) Hash identifier: SBhAyzjiGjGjT9CdXtfU1p/xtece9jp2ItE9/eEdDdY= Subject key identifier: C2:51:C8:6C:57:2C:51:76:84:49:5A:1E:66:F5:3F:E0:23:F0:AB:6E Authority key identifier: 21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43 Certificate issuer: /CN=A913695E/serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft Manifest number: 4E Signing time: Sun 19 Oct 2025 10:56:58 +0000 Manifest this update: Sun 19 Oct 2025 10:56:58 +0000 Manifest next update: Sun 26 Oct 2025 10:56:58 +0000 Files and hashes: 1: ISgYkHWJssqEa0nRCd0zrJ4utUM.crl (hash: NkxbeHFBXPDaWRbq6AIiRR0h/L/vsUh4Nm0Xd3phn5s=) 2: 4567CDC2A0EE11F081D8CB27C4F9AE02.roa (hash: NZk8gPQKW1EfRq0UDEGtez/4CFQTjjGfw0ouBgNdDzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913695E, serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543 Validity Not Before: Oct 19 10:56:58 2025 GMT Not After : Oct 26 10:56:58 2025 GMT Subject: CN=68f4c3fa-c6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:19:86:af:6b:10:61:83:0d:dd:c8:f5:7d:5c: f9:8f:47:3e:e1:50:82:0d:c2:0e:e6:9a:93:c0:e0: 55:0c:75:0f:a2:30:1a:f9:75:c0:fb:fb:74:6b:f1: 34:68:6a:b4:92:28:e2:6e:30:6b:4c:68:68:d3:81: 33:8a:63:9e:0a:c6:c3:ab:80:19:01:67:12:a2:ca: b0:32:77:3a:67:7c:9a:56:90:56:5a:1a:5f:37:68: d2:02:5a:b3:21:08:45:e9:6a:7d:1c:36:79:e4:e0: 0d:9f:d3:07:6e:e1:85:d5:e9:1f:67:25:34:dc:01: 4d:01:b7:cf:38:ed:6d:60:57:6c:93:7b:66:9d:30: 57:c9:0e:af:d8:2f:04:b2:ab:7d:dd:ec:ad:48:6d: e0:34:04:bc:a6:df:df:c6:54:12:9f:9b:5a:59:88: 70:b0:51:89:d4:cf:9a:81:ec:4b:98:89:8c:7b:44: 5a:f0:77:32:f1:47:1e:7a:eb:6b:27:9e:27:d6:d9: c3:c2:25:2c:57:81:fe:64:e1:fe:e0:4a:3b:24:cc: e6:4f:11:a4:eb:b8:6d:9b:ab:da:6f:0b:df:2c:6f: f8:d9:26:d9:03:05:a2:41:4f:0a:5b:7d:59:42:38: d8:4b:02:8a:74:6d:e4:5c:53:61:b5:55:e2:24:7c: 7d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:51:C8:6C:57:2C:51:76:84:49:5A:1E:66:F5:3F:E0:23:F0:AB:6E X509v3 Authority Key Identifier: keyid:21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:19:77:fd:df:c9:18:67:87:d6:d7:37:30:ad:f6:0a:29:23: 99:69:a5:ba:28:c9:99:47:53:a4:f1:fa:3f:41:a6:c4:ee:2f: e2:42:d2:c2:a9:d6:6f:fd:e6:85:29:3d:34:90:ad:7f:05:80: db:09:81:5b:3e:7e:91:8c:49:5e:e5:ab:fe:df:1b:70:e8:31: 9b:d2:86:8b:70:e7:73:43:2a:69:e4:cf:67:e1:3f:ba:31:bc: bd:ad:22:12:b0:99:6f:1a:f0:af:49:eb:16:75:66:73:c3:d4: 74:2e:95:5d:c7:45:cb:1f:fd:88:a8:c7:ed:1d:d1:76:1f:7f: 07:e1:e1:d9:e1:e3:f8:a6:04:f1:37:3f:48:c4:a0:e0:64:ba: 49:00:27:1d:c1:65:f0:88:b0:22:c6:c3:e2:bf:fa:4e:9d:0b: bb:87:da:34:27:4a:db:b4:c4:8f:cb:72:c6:5f:21:1e:22:65: e4:3c:0c:f9:33:9a:c6:8c:3a:91:ad:b2:fb:e6:19:44:64:0f: 41:ef:66:23:39:e3:8a:fb:27:bb:a2:68:ae:07:d2:ec:43:e4: c5:2e:db:e3:1d:ec:0e:30:6f:79:af:c5:57:2c:6a:f1:31:7d: 44:c9:e1:57:2e:c1:8e:d6:78:66:0e:44:e4:77:2e:21:d1:8a: 6f:8c:bb:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz Njk1RTExMC8GA1UEBRMoMjEyODE4OTA3NTg5QjJDQTg0NkI0OUQxMDlERDMzQUM5 RTJFQjU0MzAeFw0yNTEwMTkxMDU2NThaFw0yNTEwMjYxMDU2NThaMBgxFjAUBgNV BAMTDTY4ZjRjM2ZhLWM2ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChGYavaxBhgw3dyPV9XPmPRz7hUIINwg7mmpPA4FUMdQ+iMBr5dcD7+3Rr8TRo arSSKOJuMGtMaGjTgTOKY54KxsOrgBkBZxKiyrAydzpnfJpWkFZaGl83aNICWrMh CEXpan0cNnnk4A2f0wdu4YXV6R9nJTTcAU0Bt8847W1gV2yTe2adMFfJDq/YLwSy q33d7K1IbeA0BLym39/GVBKfm1pZiHCwUYnUz5qB7EuYiYx7RFrwdzLxRx5662sn nifW2cPCJSxXgf5k4f7gSjskzOZPEaTruG2bq9pvC98sb/jZJtkDBaJBTwpbfVlC ONhLAop0beRcU2G1VeIkfH0LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwlHIbFcs UXaESVoeZvU/4CPwq24wHwYDVR0jBBgwFoAUISgYkHWJssqEa0nRCd0zrJ4utUMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2OTVFL0U3QjM0OTcyNTM0 MDExRjA4Qzg2OTQ0MUM0RjlBRTAyL0lTZ1lrSFdKc3NxRWEwblJDZDB6cko0dXRV TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSVNnWWtIV0pzc3FFYTBuUkNkMHpySjR1dFVNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 OTVFL0U3QjM0OTcyNTM0MDExRjA4Qzg2OTQ0MUM0RjlBRTAyL0lTZ1lrSFdKc3Nx RWEwblJDZDB6cko0dXRVTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABwZd/3fyRhnh9bXNzCt9gopI5lppbooyZlHU6Tx+j9BpsTuL+JC0sKp 1m/95oUpPTSQrX8FgNsJgVs+fpGMSV7lq/7fG3DoMZvShotw53NDKmnkz2fhP7ox vL2tIhKwmW8a8K9J6xZ1ZnPD1HQulV3HRcsf/Yiox+0d0XYffwfh4dnh4/imBPE3 P0jEoOBkukkAJx3BZfCIsCLGw+K/+k6dC7uH2jQnStu0xI/LcsZfIR4iZeQ8DPkz msaMOpGtsvvmGURkD0HvZiM544r7J7uiaK4H0uxD5MUu2+Md7A4wb3mvxVcsavEx fUTJ4VcuwY7WeGYOROR3LiHRim+Mu94= -----END CERTIFICATE-----Generated at Mon Oct 20 20:41:43 2025 by rpki-client