$ rpki-client -vvf rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft File: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft (raw, json) Hash identifier: ZYJgJ88ErxiLJANxMGre09Ex4tS+77jQyt9GVV8ZM+o= Subject key identifier: 58:97:50:9F:A9:14:45:8B:B1:FC:3D:37:08:6F:70:2A:11:B0:93:5E Authority key identifier: FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6 Certificate issuer: /CN=A91820AF/serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6 Certificate serial: 06B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft Manifest number: 06B0 Signing time: Sat 18 Oct 2025 23:40:51 +0000 Manifest this update: Sat 18 Oct 2025 23:40:50 +0000 Manifest next update: Sat 25 Oct 2025 23:40:50 +0000 Files and hashes: 1: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl (hash: aaziJLCZZ/y9lRsiqDjxxgI0QDI8iLd7c2V2IGSpj+Q=) 2: D4DE5FF8A01F11EC87D72549C4F9AE02.roa (hash: 87anj6ScVkwh+H5EUFqHglOTYr+0YgLiGreNRecvlKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1719 (0x6b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820AF, serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6 Validity Not Before: Oct 18 23:40:50 2025 GMT Not After : Oct 25 23:40:50 2025 GMT Subject: CN=68f42583-d837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:d8:31:be:78:fb:62:26:33:e9:68:07:52: 35:50:22:5e:75:77:5b:50:96:1f:ce:62:61:32:dd: 6e:42:79:8f:17:4d:1c:5d:da:c3:5c:ae:6c:2b:2e: 39:d1:e3:93:cf:cc:f1:8b:48:06:a1:ec:67:6f:92: 7f:6c:82:44:9c:30:7e:65:82:6e:ac:0b:85:f7:f6: fe:9a:0e:2d:66:2c:40:64:12:77:19:29:2a:05:82: 85:e5:22:14:2a:74:0f:6e:83:01:ee:96:01:1f:26: 72:8a:03:23:54:1d:22:12:8e:ed:8b:e6:a2:c2:0e: 22:cc:0f:1e:37:aa:8a:4f:8f:c2:f7:62:f0:65:00: e0:2f:b8:20:3f:93:8e:38:6c:bc:05:36:86:f0:30: 0c:c0:e9:5f:af:af:ca:5e:25:9b:a8:9a:d6:eb:6e: f8:8e:82:f5:3c:f5:7d:18:b5:90:da:ca:9d:56:1b: 04:af:f9:05:1c:9f:ee:b5:e0:08:f6:9b:ee:e9:c2: 3b:f1:c3:16:71:89:34:55:6a:dc:7f:7b:f3:22:ca: 99:b9:50:2b:8f:5d:8d:d9:e5:6d:68:77:15:95:4d: 63:f6:86:01:24:31:2b:20:3b:c0:c6:e8:b0:61:9d: 61:49:a1:26:3b:e3:f9:ec:c1:2b:04:03:bf:a8:34: 01:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:97:50:9F:A9:14:45:8B:B1:FC:3D:37:08:6F:70:2A:11:B0:93:5E X509v3 Authority Key Identifier: keyid:FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:65:06:7d:5a:f3:a8:92:fc:de:d0:79:fb:02:b8:b0:01:95: 0d:89:0d:96:2f:4f:45:ca:4f:ce:4d:bc:5a:fb:5e:59:48:a3: c4:b2:d4:c2:b3:68:6f:5f:ba:43:bb:b7:47:f4:b6:b0:e5:d0: 0d:2c:fc:28:26:e3:55:3d:5f:43:fd:98:40:6c:4f:8b:2b:4f: b0:69:e7:6d:34:97:e3:cb:5e:bf:57:17:bf:95:05:1c:ac:42: 66:6f:19:a1:59:bf:08:9b:1d:3a:6b:23:56:01:23:69:b5:4e: 0e:bc:35:01:4a:02:6c:71:e8:12:c5:04:3c:dd:b2:89:2a:82: d6:8e:8b:8f:ce:39:db:e8:6f:33:80:6a:77:db:55:5c:d1:ec: 61:be:26:88:02:75:be:2b:08:e4:74:4a:69:1e:73:ff:34:84: 04:9a:cf:e6:b3:b1:96:ec:cb:78:94:d4:b2:1c:95:b6:83:c2: 19:91:8c:75:17:f6:1c:18:73:4f:16:cd:de:86:b5:b2:18:d6: e0:4a:b2:b7:2d:cf:70:ff:1f:4d:8d:4c:f3:59:b8:38:2d:5f: 41:21:9c:e9:78:2d:a2:36:a5:c8:7a:07:c7:e2:a7:f5:64:9e: da:c7:77:69:eb:0a:ec:f5:50:4b:da:1d:d6:f9:ee:2b:17:c7: c4:28:2b:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwQUYxMTAvBgNVBAUTKEZFMkE0OTM5OEU2NTAwNkIwNkU5REZFQzI3MERFMkU5 NzZGOEFBRjYwHhcNMjUxMDE4MjM0MDUwWhcNMjUxMDI1MjM0MDUwWjAYMRYwFAYD VQQDEw02OGY0MjU4My1kODM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4vYMb54+2ImM+loB1I1UCJedXdbUJYfzmJhMt1uQnmPF00cXdrDXK5sKy45 0eOTz8zxi0gGoexnb5J/bIJEnDB+ZYJurAuF9/b+mg4tZixAZBJ3GSkqBYKF5SIU KnQPboMB7pYBHyZyigMjVB0iEo7ti+aiwg4izA8eN6qKT4/C92LwZQDgL7ggP5OO OGy8BTaG8DAMwOlfr6/KXiWbqJrW6274joL1PPV9GLWQ2sqdVhsEr/kFHJ/uteAI 9pvu6cI78cMWcYk0VWrcf3vzIsqZuVArj12N2eVtaHcVlU1j9oYBJDErIDvAxuiw YZ1hSaEmO+P57MErBAO/qDQBLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiXUJ+p FEWLsfw9NwhvcCoRsJNeMB8GA1UdIwQYMBaAFP4qSTmOZQBrBunf7CcN4ul2+Kr2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBBRi8wRUYzREZBNDgw N0ExMUVCQkQwRThENThDNEY5QUUwMi9faXBKT1k1bEFHc0c2ZF9zSnczaTZYYjRx dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19pcEpPWTVsQUdzRzZkX3NKdzNpNlhiNHF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjBBRi8wRUYzREZBNDgwN0ExMUVCQkQwRThENThDNEY5QUUwMi9faXBKT1k1bEFH c0c2ZF9zSnczaTZYYjRxdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzZQZ9WvOokvze0Hn7AriwAZUNiQ2WL09Fyk/OTbxa+15ZSKPEstTC s2hvX7pDu7dH9Law5dANLPwoJuNVPV9D/ZhAbE+LK0+waedtNJfjy16/Vxe/lQUc rEJmbxmhWb8Imx06ayNWASNptU4OvDUBSgJscegSxQQ83bKJKoLWjouPzjnb6G8z gGp321Vc0exhviaIAnW+KwjkdEppHnP/NIQEms/ms7GW7Mt4lNSyHJW2g8IZkYx1 F/YcGHNPFs3ehrWyGNbgSrK3Lc9w/x9NjUzzWbg4LV9BIZzpeC2iNqXIegfH4qf1 ZJ7ax3dp6wrs9VBL2h3W+e4rF8fEKCum -----END CERTIFICATE-----Generated at Mon Oct 20 04:05:54 2025 by rpki-client