$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft File: iJGVOO7eyDINXq9rHzKymCOreBA.mft (raw, json) Hash identifier: /NOEcdiEguR2jX4XtfXL2fzgZILmv7/ak/8iiqiM+qo= Subject key identifier: 95:EA:34:55:F1:21:56:EF:81:D1:C8:46:C9:C3:48:DD:C1:27:B4:E1 Authority key identifier: 88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10 Certificate issuer: /CN=A91B4460/serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft Manifest number: 62 Signing time: Sun 19 Oct 2025 10:25:12 +0000 Manifest this update: Sun 19 Oct 2025 10:25:12 +0000 Manifest next update: Sun 26 Oct 2025 10:25:12 +0000 Files and hashes: 1: iJGVOO7eyDINXq9rHzKymCOreBA.crl (hash: 4t0sVC5SQ7TzIUuJ9YSMGnwtFHjP7MJXr14KV/euuhQ=) 2: 7A85F9D2148711F0AF960528C4F9AE02.roa (hash: v93VVwAanSucSOqj9EwS1pD5Lqih1cuGiSwwM282Dpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4460, serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810 Validity Not Before: Oct 19 10:25:12 2025 GMT Not After : Oct 26 10:25:12 2025 GMT Subject: CN=68f4bc88-0e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a7:49:5e:10:a1:20:47:d4:b5:22:b1:62:52: 43:73:fa:b9:04:22:2f:4c:4b:cd:4f:4f:ab:92:50: 7f:34:70:f3:45:94:1d:41:17:36:42:eb:09:84:3b: 5b:55:18:c3:45:75:ce:5c:36:25:4e:7a:43:f3:55: be:2e:79:2f:8e:cc:82:cc:cd:f5:8d:92:6a:8a:da: b4:f8:88:86:42:0e:0e:88:fc:0b:72:00:e9:c4:6a: 9a:b8:3a:ed:49:d7:eb:a0:a8:b8:7b:0f:a4:71:29: 9d:15:a3:b2:81:10:df:fe:52:7d:26:6e:54:82:21: 5f:11:63:67:5e:76:78:64:e2:c7:ff:0e:34:20:f0: 1a:bd:d2:36:d4:1a:92:07:ef:f2:c3:ac:04:fe:ea: 58:07:ff:7c:72:8a:74:b8:92:66:77:b6:6b:d5:9c: da:d6:2c:1f:42:51:bf:d8:01:c1:ec:be:85:3b:84: 8b:8d:5f:54:83:6e:ac:bf:98:ed:aa:3b:02:37:13: 62:8b:a0:57:bd:6e:30:4f:a6:37:5a:36:82:85:0e: de:a2:6f:33:00:52:1d:bc:49:c3:6d:e6:55:bd:7a: c7:11:36:19:a2:3e:a1:c8:b5:cc:d2:d7:c8:83:13: 86:a9:92:c6:f7:a5:5d:4c:cd:9c:55:23:fd:e1:a1: fd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:EA:34:55:F1:21:56:EF:81:D1:C8:46:C9:C3:48:DD:C1:27:B4:E1 X509v3 Authority Key Identifier: keyid:88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:76:9a:76:00:1d:55:2b:36:8b:e5:cc:95:c7:6c:38:5d:63: 43:b1:ca:5f:84:2d:b7:34:23:6e:16:90:ac:82:9f:dd:c5:82: a7:54:ba:94:b5:4b:d4:a8:1a:06:71:07:cb:f0:ad:9c:2b:d7: 55:80:73:34:d0:c9:78:04:32:8b:48:a8:81:0b:d2:11:a7:02: 2e:6c:2d:f7:21:41:4e:b2:39:62:be:5f:45:43:cb:3b:88:f0: 0c:bb:53:21:cb:73:d6:0b:ea:5d:bd:50:f4:d1:2e:10:15:db: 5a:8d:b9:c1:16:ae:d2:ba:6d:53:ed:8f:e7:52:47:42:29:c9: bc:c1:91:fc:af:3e:da:a9:49:c0:03:0a:3a:33:71:ba:17:34: 3c:25:cb:b2:21:88:02:93:c5:e9:e4:c6:55:27:e7:47:6e:89: fd:f6:75:7d:fc:92:31:69:54:0e:ac:3a:63:9b:17:c2:99:20: 6b:7f:2e:a4:c6:1f:ad:1c:3d:b9:66:b5:9c:b7:c3:60:0e:79: e0:af:10:4e:cc:9b:11:09:36:74:ba:12:45:d2:bd:02:ae:4c: c9:35:a5:45:ff:d4:4f:58:a1:61:01:b9:94:74:c9:ed:ff:35: e3:0e:49:73:d7:c6:0f:85:65:03:c1:77:5e:de:33:71:0e:33: 27:80:42:58 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDQ2MDExMC8GA1UEBRMoODg5MTk1MzhFRURFQzgzMjBENUVBRjZCMUYzMkIyOTgy M0FCNzgxMDAeFw0yNTEwMTkxMDI1MTJaFw0yNTEwMjYxMDI1MTJaMBgxFjAUBgNV BAMTDTY4ZjRiYzg4LTBlNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbp0leEKEgR9S1IrFiUkNz+rkEIi9MS81PT6uSUH80cPNFlB1BFzZC6wmEO1tV GMNFdc5cNiVOekPzVb4ueS+OzILMzfWNkmqK2rT4iIZCDg6I/AtyAOnEapq4Ou1J 1+ugqLh7D6RxKZ0Vo7KBEN/+Un0mblSCIV8RY2dednhk4sf/DjQg8Bq90jbUGpIH 7/LDrAT+6lgH/3xyinS4kmZ3tmvVnNrWLB9CUb/YAcHsvoU7hIuNX1SDbqy/mO2q OwI3E2KLoFe9bjBPpjdaNoKFDt6ibzMAUh28ScNt5lW9escRNhmiPqHItczS18iD E4apksb3pV1MzZxVI/3hof0XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUleo0VfEh Vu+B0chGycNI3cEntOEwHwYDVR0jBBgwFoAUiJGVOO7eyDINXq9rHzKymCOreBAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0NDYwLzA0OTg2NDc2MTQ4 NzExRjBBNzlFQUIyNkM0RjlBRTAyL2lKR1ZPTzdleURJTlhxOXJIekt5bUNPcmVC QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaUpHVk9PN2V5RElOWHE5ckh6S3ltQ09yZUJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 NDYwLzA0OTg2NDc2MTQ4NzExRjBBNzlFQUIyNkM0RjlBRTAyL2lKR1ZPTzdleURJ TlhxOXJIekt5bUNPcmVCQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABZ2mnYAHVUrNovlzJXHbDhdY0Oxyl+ELbc0I24WkKyCn93FgqdUupS1 S9SoGgZxB8vwrZwr11WAczTQyXgEMotIqIEL0hGnAi5sLfchQU6yOWK+X0VDyzuI 8Ay7UyHLc9YL6l29UPTRLhAV21qNucEWrtK6bVPtj+dSR0IpybzBkfyvPtqpScAD CjozcboXNDwly7IhiAKTxenkxlUn50duif32dX38kjFpVA6sOmObF8KZIGt/LqTG H60cPblmtZy3w2AOeeCvEE7MmxEJNnS6EkXSvQKuTMk1pUX/1E9YoWEBuZR0ye3/ NeMOSXPXxg+FZQPBd17eM3EOMyeAQlg= -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:38 2025 by rpki-client