$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft File: I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json) Hash identifier: whdrcCAf5apEKxJBAa+x1M66hUjkUli4P+iTd1YSquw= Subject key identifier: 5E:51:D6:26:52:FD:35:50:96:7F:9B:8F:FA:7F:1A:45:95:B5:06:95 Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F Certificate issuer: /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F Certificate serial: 0C68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft Manifest number: 0C52 Signing time: Sat 18 Oct 2025 19:26:13 +0000 Manifest this update: Sat 18 Oct 2025 19:26:12 +0000 Manifest next update: Sat 25 Oct 2025 19:26:12 +0000 Files and hashes: 1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: G1CRbryWtQyXIYdPCxwQttvmuUJU7EzyyfgF4pUrnlE=) 2: 7B96F1340C6011F088E6FD2FC4F9AE02.roa (hash: AlkpfpZwpFAFSNpnhnUShgrrcb/AfgC29z6/e4zKojg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3176 (0xc68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91829E3, serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F Validity Not Before: Oct 18 19:26:12 2025 GMT Not After : Oct 25 19:26:12 2025 GMT Subject: CN=68f3e9d5-3b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e5:4a:b7:3d:ac:ad:2f:2a:09:2b:c0:4f:bc: 62:f9:dc:54:d7:ed:fa:1b:a9:50:a8:c5:65:2e:93: 8c:e3:32:df:7f:c7:12:35:3b:40:34:bd:b9:19:5a: 35:37:a8:00:de:4f:b4:a9:9c:64:40:a3:09:cc:16: a1:2f:0a:32:7c:48:89:37:99:01:3c:4a:73:41:b2: a6:64:d8:e2:fc:bf:58:45:65:ca:f6:4b:85:09:25: 00:88:15:16:92:e3:cf:79:90:10:6b:d5:1d:67:8e: 25:37:17:7d:e1:d2:fd:05:c4:78:fb:d2:39:f8:53: 0d:a7:81:22:c5:bd:7b:f4:1f:af:59:6b:a9:0f:30: d3:78:6f:83:a8:87:3e:3d:b7:c5:3b:44:b7:e9:3d: 56:62:a4:3f:75:96:dd:fa:6a:5a:9d:18:3d:85:7c: f3:38:4b:e4:9f:17:f5:d8:95:c0:54:09:7f:67:70: 26:80:b4:ea:06:9a:83:06:b3:c3:69:34:77:0c:b5: 02:f7:fe:fe:4c:08:49:18:b7:a0:4a:7d:fc:c8:4c: 6f:49:fd:b3:b3:16:5c:d4:d4:23:b4:3d:74:a6:9a: f9:17:a8:0a:93:6f:86:df:14:f5:12:95:f0:44:59: e6:fb:d8:7c:7b:ef:36:33:c4:af:92:02:c6:80:08: 8b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:51:D6:26:52:FD:35:50:96:7F:9B:8F:FA:7F:1A:45:95:B5:06:95 X509v3 Authority Key Identifier: keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:0e:e9:c2:18:00:64:14:80:cc:b5:c5:2e:a0:31:2b:b6:7c: ee:8c:18:bd:b1:c7:78:0e:a2:e3:00:f0:39:f8:b9:2c:25:27: fe:37:a8:20:b3:14:56:ab:42:e3:78:7d:a1:bf:3a:94:62:c6: 7e:0b:68:db:fd:88:74:c8:df:3c:6f:e3:0e:82:23:22:34:99: 90:02:37:69:52:56:7b:d2:9e:5c:e0:4b:d8:d0:f2:20:c2:66: 38:d0:fd:33:07:8e:55:94:21:77:e0:c7:95:47:5a:f2:75:73: fc:9d:ce:ed:41:0f:0e:2b:2d:15:e6:1b:74:50:02:6e:86:35: 54:b5:2b:a1:18:c7:0b:1b:79:53:cc:83:bc:63:0b:f6:e6:e4: 9e:53:f7:50:b6:e9:48:5c:f1:4c:c7:c7:77:27:4c:3b:c6:69: 23:10:d2:8d:8b:92:cb:a6:81:e4:57:51:60:ea:16:be:e3:a4: c2:7d:11:86:42:06:3e:55:14:d7:eb:13:d6:03:2d:54:a5:8b: f1:31:d2:09:d2:be:a2:45:56:61:c3:99:71:45:11:57:20:90: a7:df:4c:85:76:0e:20:16:02:3e:d6:6e:79:7a:fd:42:d5:75: ee:ae:0c:86:43:3f:b1:69:09:b0:48:1e:2b:8d:44:37:95:45: 6f:03:4e:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI5RTMxMTAvBgNVBAUTKDIzRDIwREEyMDlDODk1QzMwMEVFNkI2NTlCNkIxODI5 OTI1RkJENEYwHhcNMjUxMDE4MTkyNjEyWhcNMjUxMDI1MTkyNjEyWjAYMRYwFAYD VQQDEw02OGYzZTlkNS0zYjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+VKtz2srS8qCSvAT7xi+dxU1+36G6lQqMVlLpOM4zLff8cSNTtANL25GVo1 N6gA3k+0qZxkQKMJzBahLwoyfEiJN5kBPEpzQbKmZNji/L9YRWXK9kuFCSUAiBUW kuPPeZAQa9UdZ44lNxd94dL9BcR4+9I5+FMNp4Eixb179B+vWWupDzDTeG+DqIc+ PbfFO0S36T1WYqQ/dZbd+mpanRg9hXzzOEvknxf12JXAVAl/Z3AmgLTqBpqDBrPD aTR3DLUC9/7+TAhJGLegSn38yExvSf2zsxZc1NQjtD10ppr5F6gKk2+G3xT1EpXw RFnm+9h8e+82M8SvkgLGgAiLtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5R1iZS /TVQln+bj/p/GkWVtQaVMB8GA1UdIwQYMBaAFCPSDaIJyJXDAO5rZZtrGCmSX71P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjlFMy9DNDVGNjBEQTE0 MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxjTUE3bXRsbTJzWUtaSmZ2 VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5SU5vZ25JbGNNQTdtdGxtMnNZS1pKZnZVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjlFMy9DNDVGNjBEQTE0MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxj TUE3bXRsbTJzWUtaSmZ2VTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWDunCGABkFIDMtcUuoDErtnzujBi9scd4DqLjAPA5+LksJSf+N6gg sxRWq0LjeH2hvzqUYsZ+C2jb/Yh0yN88b+MOgiMiNJmQAjdpUlZ70p5c4EvY0PIg wmY40P0zB45VlCF34MeVR1rydXP8nc7tQQ8OKy0V5ht0UAJuhjVUtSuhGMcLG3lT zIO8Ywv25uSeU/dQtulIXPFMx8d3J0w7xmkjENKNi5LLpoHkV1Fg6ha+46TCfRGG QgY+VRTX6xPWAy1UpYvxMdIJ0r6iRVZhw5lxRRFXIJCn30yFdg4gFgI+1m55ev1C 1XXurgyGQz+xaQmwSB4rjUQ3lUVvA07c -----END CERTIFICATE-----Generated at Mon Oct 20 16:13:25 2025 by rpki-client