$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json) Hash identifier: 6VQsdKRJDpwl5CVtGQgTZDbdhErBqznPjSlES1yCm7c= Subject key identifier: C4:09:80:A4:77:26:37:C8:02:96:69:4C:25:D8:A7:F2:8A:88:F1:FF Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft Manifest number: 021C Signing time: Sun 19 Oct 2025 04:24:35 +0000 Manifest this update: Sun 19 Oct 2025 04:24:35 +0000 Manifest next update: Sun 26 Oct 2025 04:24:35 +0000 Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: k6y2yp8lIBtdX0dyGIrmOHRt1ZiDZT00DLDZ4Voy0vU=) 2: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: mzTY+yHaxiOoTmhIGnRxe8TteP35OSc9TDFULhxG7es=) 3: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: TCA2TacY4ZsDEXX4IqBFag6vpZrZlhAMEJDWvtGJDWs=) 4: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: Tjdi12mwJxE8vytdEEm6LYs9NXU4cX9jhBUfI2VO1fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: Oct 19 04:24:35 2025 GMT Not After : Oct 26 04:24:35 2025 GMT Subject: CN=68f46803-7ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a9:d7:86:84:a6:87:45:21:0a:9e:c7:d6:d0: 59:59:eb:f8:48:9f:f5:89:48:33:52:93:32:4e:fe: 84:25:f4:25:f4:be:b3:98:55:b5:bc:19:42:94:06: 2d:bc:ca:ce:21:60:2a:48:06:25:e3:27:52:5c:d1: df:df:23:14:76:19:90:b3:e2:36:08:f7:ee:12:4f: 6b:fd:cc:1e:08:8f:9e:9c:d9:14:5d:66:63:af:52: cd:1d:c3:e6:c4:02:4c:1f:e2:0a:63:55:71:35:6a: 52:2e:4f:d4:5e:0f:2a:ac:1f:ea:a2:32:7f:76:28: 96:a5:3d:91:41:8d:17:1c:5b:e6:a1:d1:59:48:f4: 13:ce:af:13:33:50:70:1b:23:f2:e0:cc:78:b2:da: 9d:27:23:83:d1:0f:96:18:7d:b1:89:d7:8e:22:ce: 72:ad:4f:90:53:1f:ee:97:87:dd:90:5a:91:e4:6a: a1:92:59:94:0e:1b:27:de:5c:ad:86:2a:3f:3b:5d: 65:88:0f:56:21:93:62:ef:9d:42:94:85:03:84:a6: 54:1c:02:76:ae:64:68:f9:4d:b3:ae:65:15:75:e7: 48:42:6b:ed:16:b8:49:28:4d:d9:d9:d5:78:19:34: 13:45:e9:5b:bc:b3:97:66:77:0e:c8:27:d4:5e:ae: 60:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:09:80:A4:77:26:37:C8:02:96:69:4C:25:D8:A7:F2:8A:88:F1:FF X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:54:7f:50:7b:57:98:2e:42:bb:1d:f9:f7:10:b2:b2:6b:40: a1:06:48:6d:e2:3c:c4:7e:84:cb:b7:b2:7b:84:5d:d3:01:94: 96:08:2c:2f:7f:40:a4:0c:91:e8:c8:08:78:b8:78:4d:9e:68: a3:1c:3a:b5:96:31:2b:6c:d2:5a:56:61:83:bb:d4:b8:86:49: 2b:1a:86:75:89:7b:05:0a:bf:66:09:c9:ff:bf:88:73:c2:7a: 2e:c4:2b:1b:16:75:7b:34:57:72:65:07:af:56:88:fc:3e:8d: e7:47:f5:64:64:12:7a:98:b7:83:8f:dd:43:43:b7:ab:64:93: e4:51:36:e8:17:3e:dc:bc:38:08:c9:90:41:b3:75:01:fc:aa: 0f:26:50:f5:cb:bb:22:62:a2:04:66:84:85:55:31:f6:6e:59: 45:26:11:5c:13:bf:36:8b:e8:24:30:53:26:87:2e:ec:1d:91: 28:96:4c:38:34:a7:29:27:b3:4f:4f:e2:e5:b0:db:10:bc:d0: 1f:03:67:b9:77:f9:19:1e:bf:83:ff:13:52:45:30:08:66:1b: 07:6e:1b:fe:ae:89:6b:fe:72:fe:e5:55:81:73:c8:1a:ef:46: 9f:af:8e:91:49:a2:49:48:87:2e:73:bc:5c:7a:d4:30:45:f0: 74:45:06:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjUxMDE5MDQyNDM1WhcNMjUxMDI2MDQyNDM1WjAYMRYwFAYD VQQDEw02OGY0NjgwMy03ZmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6nXhoSmh0UhCp7H1tBZWev4SJ/1iUgzUpMyTv6EJfQl9L6zmFW1vBlClAYt vMrOIWAqSAYl4ydSXNHf3yMUdhmQs+I2CPfuEk9r/cweCI+enNkUXWZjr1LNHcPm xAJMH+IKY1VxNWpSLk/UXg8qrB/qojJ/diiWpT2RQY0XHFvmodFZSPQTzq8TM1Bw GyPy4Mx4stqdJyOD0Q+WGH2xideOIs5yrU+QUx/ul4fdkFqR5GqhklmUDhsn3lyt hio/O11liA9WIZNi751ClIUDhKZUHAJ2rmRo+U2zrmUVdedIQmvtFrhJKE3Z2dV4 GTQTRelbvLOXZncOyCfUXq5gVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQJgKR3 JjfIApZpTCXYp/KKiPH/MB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1 Njh6dk9aaDVEajliQ05hMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByVH9Qe1eYLkK7Hfn3ELKya0ChBkht4jzEfoTLt7J7hF3TAZSWCCwv f0CkDJHoyAh4uHhNnmijHDq1ljErbNJaVmGDu9S4hkkrGoZ1iXsFCr9mCcn/v4hz wnouxCsbFnV7NFdyZQevVoj8Po3nR/VkZBJ6mLeDj91DQ7erZJPkUTboFz7cvDgI yZBBs3UB/KoPJlD1y7siYqIEZoSFVTH2bllFJhFcE782i+gkMFMmhy7sHZEolkw4 NKcpJ7NPT+LlsNsQvNAfA2e5d/kZHr+D/xNSRTAIZhsHbhv+rolr/nL+5VWBc8ga 70afr46RSaJJSIcuc7xcetQwRfB0RQaf -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:36 2025 by rpki-client