$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft File: 9iXmzAOQJv9byda9xC2NHBir8zs.mft (raw, json) Hash identifier: 0A+EeFdSc7MQjQ5Vvw7QcAX7FgGshbFwEpENZW28ckA= Subject key identifier: B0:8B:33:BF:93:FE:6C:A5:F6:0B:06:9F:97:FC:E3:47:2A:BA:FB:F7 Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B Certificate issuer: /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft Manifest number: 011F Signing time: Sun 19 Oct 2025 08:08:56 +0000 Manifest this update: Sun 19 Oct 2025 08:08:56 +0000 Manifest next update: Sun 26 Oct 2025 08:08:56 +0000 Files and hashes: 1: 9iXmzAOQJv9byda9xC2NHBir8zs.crl (hash: CXGUT5yRBW2A4C+DDjIp+/ELz6Om1HUpyb/VNk5IB3w=) 2: 4857445643A911F0AD37044DC4F9AE02.roa (hash: WkSg+sBSiJcoCE4RbowJKmOS2e9RO49Iq4fHf9Kfe8E=) 3: CD2AE9AE71B611F0A1F6DD29C4F9AE02.roa (hash: V4fGvQxawrO0GIrbZluiaRPHvMfeQYeoae8AjpWNDHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:08:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B88CA, serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Validity Not Before: Oct 19 08:08:56 2025 GMT Not After : Oct 26 08:08:56 2025 GMT Subject: CN=68f49c98-3ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:8e:be:45:a6:e9:64:05:4e:88:c1:66:72: 96:18:33:76:a3:c2:5d:75:7c:00:82:79:af:68:55: 82:53:b8:97:73:e5:64:2b:45:bd:99:81:d8:c6:e4: ff:3b:ac:0d:77:41:0b:a3:d0:26:49:9a:c2:1c:34: 90:de:a0:54:1e:2c:e2:b0:cc:8a:1a:13:43:5e:8f: 1d:7e:a2:97:c9:09:9b:7b:2b:f5:17:23:7b:ab:94: 99:90:a3:9e:d3:1e:55:0a:b3:91:89:da:14:7b:15: 2e:5f:f7:ab:6a:59:4b:78:9e:d0:ee:f4:8e:0d:52: 60:c5:8a:8e:2d:b3:1f:46:28:59:94:91:94:d1:21: 00:7c:b4:43:9f:86:b5:9c:13:b6:ec:84:9a:eb:f1: 98:ac:68:f2:10:70:c1:fb:ec:8f:c5:1b:69:e5:b6: 0c:02:dd:38:b7:7b:2a:55:3e:84:ac:a2:b3:ff:b2: 0b:d3:ba:1e:a2:b5:c3:8d:6b:61:2c:95:54:b8:cc: 22:db:5e:20:3c:d2:b5:11:06:42:8c:de:5d:4a:af: a8:4f:9e:d7:03:ab:2b:1d:4c:89:fd:b6:15:32:42: f4:69:1a:56:a3:e7:9b:de:47:fe:d6:58:20:e4:c1: a8:67:c9:6e:c0:ce:19:6d:c3:57:e8:54:28:77:24: 63:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8B:33:BF:93:FE:6C:A5:F6:0B:06:9F:97:FC:E3:47:2A:BA:FB:F7 X509v3 Authority Key Identifier: keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:54:c1:c0:9b:fe:2e:71:9a:6e:a9:be:a0:e8:a1:b3:97:3b: 93:6d:d2:12:d3:82:cb:ea:ec:b5:a8:21:b9:38:55:46:7c:48: b9:87:c3:db:62:39:df:e0:2f:53:d2:92:0e:1c:dc:13:82:bd: bf:33:20:78:f1:23:f5:96:aa:53:11:89:7a:3d:d8:c7:bf:51: 1e:8b:0d:86:5f:3e:a8:29:3a:27:b1:b8:24:7a:e1:b4:d7:3a: 4b:97:60:94:eb:b5:3a:d2:6a:c9:b7:d3:a8:d0:f0:31:53:ca: e3:17:87:6a:4a:64:92:be:fd:29:3d:9b:84:1d:14:1a:08:3d: 11:14:42:72:0b:8c:57:a3:0e:f9:7b:f5:3e:46:88:ff:84:7e: 6b:d2:ba:15:30:e1:08:43:29:f7:b1:be:a1:40:b4:40:0b:12: 9f:bc:c0:7d:a4:89:76:52:a1:3a:0d:13:ad:7c:4a:86:f1:c1: 72:30:f2:db:9d:a6:03:f9:3b:b3:92:bf:7e:14:2b:41:e3:ab: 5e:5b:04:90:6f:cf:21:ff:f0:fe:51:7b:5e:a9:5d:74:ad:5b: 28:a9:4b:f7:95:a2:b8:e6:06:a7:0c:bd:d6:fe:36:23:06:d4: 91:b6:09:60:8b:bb:bf:bc:75:c3:16:41:46:07:c3:d3:35:52: 8f:41:02:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4Q0ExMTAvBgNVBAUTKEY2MjVFNkNDMDM5MDI2RkY1QkM5RDZCREM0MkQ4RDFD MThBQkYzM0IwHhcNMjUxMDE5MDgwODU2WhcNMjUxMDI2MDgwODU2WjAYMRYwFAYD VQQDEw02OGY0OWM5OC0zY2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSmOvkWm6WQFTojBZnKWGDN2o8JddXwAgnmvaFWCU7iXc+VkK0W9mYHYxuT/ O6wNd0ELo9AmSZrCHDSQ3qBUHizisMyKGhNDXo8dfqKXyQmbeyv1FyN7q5SZkKOe 0x5VCrORidoUexUuX/erallLeJ7Q7vSODVJgxYqOLbMfRihZlJGU0SEAfLRDn4a1 nBO27ISa6/GYrGjyEHDB++yPxRtp5bYMAt04t3sqVT6ErKKz/7IL07oeorXDjWth LJVUuMwi214gPNK1EQZCjN5dSq+oT57XA6srHUyJ/bYVMkL0aRpWo+eb3kf+1lgg 5MGoZ8luwM4ZbcNX6FQodyRjTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCLM7+T /myl9gsGn5f840cquvv3MB8GA1UdIwQYMBaAFPYl5swDkCb/W8nWvcQtjRwYq/M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODhDQS81Njk2RTc0NjM0 NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2OWJ5ZGE5eEMyTkhCaXI4 enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpWG16QU9RSnY5YnlkYTl4QzJOSEJpcjh6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODhDQS81Njk2RTc0NjM0NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2 OWJ5ZGE5eEMyTkhCaXI4enMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGVMHAm/4ucZpuqb6g6KGzlzuTbdIS04LL6uy1qCG5OFVGfEi5h8Pb Yjnf4C9T0pIOHNwTgr2/MyB48SP1lqpTEYl6PdjHv1Eeiw2GXz6oKTonsbgkeuG0 1zpLl2CU67U60mrJt9Oo0PAxU8rjF4dqSmSSvv0pPZuEHRQaCD0RFEJyC4xXow75 e/U+Roj/hH5r0roVMOEIQyn3sb6hQLRACxKfvMB9pIl2UqE6DROtfEqG8cFyMPLb naYD+Tuzkr9+FCtB46teWwSQb88h//D+UXteqV10rVsoqUv3laK45ganDL3W/jYj BtSRtglgi7u/vHXDFkFGB8PTNVKPQQKW -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:23 2025 by rpki-client