$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft File: nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json) Hash identifier: n01OHF2QXqYcZ04Dpda6XBpqUFWL95TPV2DSG9lFM88= Subject key identifier: DD:DE:84:E4:50:A9:EC:6C:9B:93:98:3D:6A:BA:E2:CC:1E:22:E0:2D Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Certificate serial: 0546 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft Manifest number: 0523 Signing time: Sun 19 Oct 2025 01:27:09 +0000 Manifest this update: Sun 19 Oct 2025 01:27:09 +0000 Manifest next update: Sun 26 Oct 2025 01:27:09 +0000 Files and hashes: 1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: m6KP15BrFm09AOa9SdXBi/UAEtu6W23jKYUDWfl1MnU=) 2: D2D714387F6A11F0932D5109C4F9AE02.roa (hash: Cng37RmGs09g9dbHO+ShWe6tnoOJsgQFmF1ZQB1DAkI=) 3: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (hash: BaDUL34/Gwa3G8jGhtSk9P3jmeq3rCjBk1zIOgJr1cM=) 4: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (hash: AhcbearK6iV6xBjXUDN0qGwO1GubeQ+m8AdvrMUpw0Q=) 5: FBBECF1A694111F08D368069C4F9AE02.roa (hash: Hxo/oVA2HgH6qQ01M6fl9cqj5vSj3O9qRMc68jJm0P4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1350 (0x546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Validity Not Before: Oct 19 01:27:09 2025 GMT Not After : Oct 26 01:27:09 2025 GMT Subject: CN=68f43e6d-8215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:b9:31:84:0b:3d:ad:81:ba:c1:74:2e:cb: 7f:f1:e1:f9:2f:83:c6:df:db:9d:e5:00:b3:fb:60: 6e:d8:74:0b:58:b6:6c:5e:48:2e:3b:84:fb:ff:b6: f1:97:4f:0c:68:e2:5f:8b:e5:af:ff:25:71:b6:2f: 14:d4:f2:ea:42:ac:ca:4b:83:cc:25:11:3d:5a:1a: a4:ea:7a:e8:72:27:dd:41:37:d7:8f:16:65:12:19: dc:ea:7c:07:38:6d:dc:38:5b:3e:2f:7c:cc:29:31: 67:2e:f1:0b:66:e2:24:5c:68:f6:7f:b4:07:37:e5: 7c:36:c7:60:81:e5:a6:ee:b1:9b:87:16:eb:ba:cb: d8:4e:3d:99:95:65:a3:47:77:aa:78:90:e1:a5:e1: d7:a6:fb:e5:e1:e8:f4:a6:1b:38:06:5b:33:f7:60: bf:a5:54:f9:90:7c:ea:bd:b7:18:9f:77:f3:e0:13: 87:71:ac:cf:c2:07:fa:1c:9a:b9:10:80:e8:48:7b: e2:cc:93:87:71:4a:cb:1b:61:e5:99:0b:52:5e:51: 33:87:15:99:01:97:e4:00:31:a6:74:76:3d:36:f5: 34:93:d8:f2:16:26:d9:20:d0:49:85:2c:ef:c6:15: 38:8b:16:7e:83:53:36:92:e1:6c:57:14:40:ab:b4: c5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DE:84:E4:50:A9:EC:6C:9B:93:98:3D:6A:BA:E2:CC:1E:22:E0:2D X509v3 Authority Key Identifier: keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:66:ef:8a:c2:69:90:a8:c0:09:15:65:e9:d3:8b:40:a5:73: 03:d8:4c:bf:3b:20:a4:c3:e7:47:ed:10:a6:fb:2d:b3:4e:5d: 16:c3:8b:13:05:9d:40:cb:a3:3d:16:39:a6:23:51:56:75:74: 7b:c3:c4:60:88:5a:93:14:ab:cf:81:a3:76:d4:46:79:b5:2e: 2c:1a:da:a7:6e:46:f2:16:11:ee:cf:df:ed:23:3f:a8:00:1f: a6:c7:85:dc:5b:79:61:f7:48:8d:4e:ef:15:75:60:f7:66:5c: 26:20:75:20:82:d3:e8:2b:e0:30:2a:30:45:3b:97:f9:76:41: 58:37:a0:e8:d5:0a:5b:32:51:9a:6e:9d:e1:9f:81:ee:c8:32: a0:3b:88:e9:48:69:47:3d:ad:08:b3:e2:94:86:53:ff:1f:3f: 75:ea:ee:f5:2e:72:25:3a:8e:a6:a4:a1:c6:48:aa:b6:99:da: 3d:20:2e:e4:75:d4:f2:d9:ba:93:50:aa:31:67:4b:af:a3:89: 18:b4:b1:ac:2c:25:bf:ae:0b:d6:b5:ba:e7:69:3b:e4:77:52: 8e:2d:f9:4d:27:d5:05:5b:a7:60:a7:99:54:eb:0f:b3:d3:ff: 4c:e4:0a:aa:0f:45:3e:f5:a7:85:cb:ce:6b:a3:ac:54:81:fe: 66:17:fa:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew OTA2RkVEODIwHhcNMjUxMDE5MDEyNzA5WhcNMjUxMDI2MDEyNzA5WjAYMRYwFAYD VQQDEw02OGY0M2U2ZC04MjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTC5MYQLPa2BusF0Lst/8eH5L4PG39ud5QCz+2Bu2HQLWLZsXkguO4T7/7bx l08MaOJfi+Wv/yVxti8U1PLqQqzKS4PMJRE9Whqk6nrocifdQTfXjxZlEhnc6nwH OG3cOFs+L3zMKTFnLvELZuIkXGj2f7QHN+V8NsdggeWm7rGbhxbrusvYTj2ZlWWj R3eqeJDhpeHXpvvl4ej0phs4Blsz92C/pVT5kHzqvbcYn3fz4BOHcazPwgf6HJq5 EIDoSHvizJOHcUrLG2HlmQtSXlEzhxWZAZfkADGmdHY9NvU0k9jyFibZINBJhSzv xhU4ixZ+g1M2kuFsVxRAq7TFcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3ehORQ qexsm5OYPWq64sweIuAtMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODhENC8yRjU4RTQ3MjJFNTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0 VTVaNURLY3lQVG9KQnY3WUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlZu+KwmmQqMAJFWXp04tApXMD2Ey/OyCkw+dH7RCm+y2zTl0Ww4sT BZ1Ay6M9FjmmI1FWdXR7w8RgiFqTFKvPgaN21EZ5tS4sGtqnbkbyFhHuz9/tIz+o AB+mx4XcW3lh90iNTu8VdWD3ZlwmIHUggtPoK+AwKjBFO5f5dkFYN6Do1QpbMlGa bp3hn4HuyDKgO4jpSGlHPa0Is+KUhlP/Hz916u71LnIlOo6mpKHGSKq2mdo9IC7k ddTy2bqTUKoxZ0uvo4kYtLGsLCW/rgvWtbrnaTvkd1KOLflNJ9UFW6dgp5lU6w+z 0/9M5AqqD0U+9aeFy85ro6xUgf5mF/oS -----END CERTIFICATE-----Generated at Mon Oct 20 08:02:56 2025 by rpki-client