$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft File: IipN0tbRTG-_SJJOZqD4y98SVRg.mft (raw, json) Hash identifier: rmIU++65pLNmbewgdX0s4rPfiR/eR3ToWc2BcbusX00= Subject key identifier: 0C:01:6A:98:CF:50:8C:BF:87:D6:86:4A:6A:1B:91:29:BD:1E:EA:55 Authority key identifier: 22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 Certificate issuer: /CN=A91B9D33/serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Certificate serial: 0735 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft Manifest number: 072A Signing time: Sat 18 Oct 2025 23:11:46 +0000 Manifest this update: Sat 18 Oct 2025 23:11:45 +0000 Manifest next update: Sat 25 Oct 2025 23:11:45 +0000 Files and hashes: 1: IipN0tbRTG-_SJJOZqD4y98SVRg.crl (hash: KkiAwKtufQXjb8Hwt9Rpcty3dJxNWlcWmmf/6QdVq1o=) 2: 1B047818141E11EFB957692CC4F9AE02.roa (hash: ZE0tBApDZzaQ+O4EZGcawrB6RxmvKTQ6iYLr+X4ZOpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1845 (0x735) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9D33, serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518 Validity Not Before: Oct 18 23:11:45 2025 GMT Not After : Oct 25 23:11:45 2025 GMT Subject: CN=68f41eb2-cb82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a7:b5:54:dc:8b:55:8e:61:d9:87:f4:62:94: 5a:c5:48:55:87:ca:19:d9:94:6b:c1:87:a2:9b:49: 52:a1:cd:34:e7:12:a8:91:b8:e0:8c:39:5f:64:fc: 53:19:b2:f9:c8:21:ae:03:08:1a:a8:ae:75:6a:e7: 10:a7:15:c4:c3:b9:2c:07:b5:b3:dd:b4:bd:29:0f: b2:6f:69:43:27:f0:dd:72:12:ea:fc:8a:bb:a0:d7: 81:8b:f0:5d:5f:3a:cb:26:35:fb:25:58:9f:f4:2a: 9e:c4:1a:b4:0d:df:f8:23:fc:01:0c:84:47:3a:9c: 24:05:8e:a3:df:66:be:f1:45:6e:09:fd:9e:0b:18: f5:41:57:f3:29:57:8f:2d:be:c9:fb:58:e8:9f:6b: 2e:e1:0d:f6:39:e9:28:d0:6c:bd:84:2f:af:c5:89: 45:86:10:bb:ae:9c:80:15:c5:2d:dd:41:37:73:7b: 7b:d3:f3:ec:a7:6d:8d:42:9f:cd:8d:f0:c4:1d:0f: 24:f8:d9:d8:c4:b5:3e:67:50:7e:83:12:58:24:9b: 8d:6d:1e:ac:09:3d:ef:4c:d1:dd:55:b1:6d:6a:92: 1c:32:cb:b2:ef:bb:a0:67:bc:41:4a:58:e9:83:3e: 27:01:22:8a:b2:1d:b6:da:e9:65:24:60:7d:30:de: 11:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:01:6A:98:CF:50:8C:BF:87:D6:86:4A:6A:1B:91:29:BD:1E:EA:55 X509v3 Authority Key Identifier: keyid:22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:32:ef:9e:bd:76:03:09:90:46:c4:0e:ee:57:54:44:41:2b: e9:f6:22:d1:c5:56:51:d6:b0:81:01:67:24:d8:71:e0:c3:5f: b5:69:45:b1:2a:cc:1c:df:b5:cb:55:52:58:cd:09:0c:2d:32: 5c:af:d0:1d:56:c2:90:b4:08:1e:99:30:49:af:f5:10:2a:a1: a6:a0:6b:62:a0:b5:03:d9:bc:0f:2c:67:42:9c:f7:65:6c:60: af:80:10:e4:44:21:95:b7:de:fa:fc:f5:7d:95:7c:50:91:bd: 7b:d5:14:45:49:74:d2:e8:cd:19:fe:f3:6d:72:8b:b5:73:79: b3:67:48:91:9b:32:7a:f2:b8:2a:64:c7:3d:27:4a:88:a7:d5: c9:38:d6:00:7e:7e:b8:10:68:bd:e5:0f:97:c2:6b:e6:54:4b: 7a:39:62:74:c2:b7:e0:d5:fd:a7:ab:4a:0a:b6:63:7a:6f:34: 08:80:24:f4:f8:03:92:9b:06:97:64:5b:4c:00:51:da:fa:97: 66:04:dc:40:c7:42:1d:84:be:87:84:06:12:eb:2b:b7:0a:16: 91:d5:14:e1:43:0c:ae:62:0b:dd:0b:bc:c7:48:1b:36:b0:6b: 5a:f1:97:7d:8a:27:8b:4c:c8:5c:ee:58:12:a9:78:3d:d3:cf: 9c:32:6e:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlEMzMxMTAvBgNVBAUTKDIyMkE0REQyRDZEMTRDNkZCRjQ4OTI0RTY2QTBGOENC REYxMjU1MTgwHhcNMjUxMDE4MjMxMTQ1WhcNMjUxMDI1MjMxMTQ1WjAYMRYwFAYD VQQDEw02OGY0MWViMi1jYjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuae1VNyLVY5h2Yf0YpRaxUhVh8oZ2ZRrwYeim0lSoc005xKokbjgjDlfZPxT GbL5yCGuAwgaqK51aucQpxXEw7ksB7Wz3bS9KQ+yb2lDJ/DdchLq/Iq7oNeBi/Bd XzrLJjX7JVif9CqexBq0Dd/4I/wBDIRHOpwkBY6j32a+8UVuCf2eCxj1QVfzKVeP Lb7J+1jon2su4Q32Oeko0Gy9hC+vxYlFhhC7rpyAFcUt3UE3c3t70/Psp22NQp/N jfDEHQ8k+NnYxLU+Z1B+gxJYJJuNbR6sCT3vTNHdVbFtapIcMsuy77ugZ7xBSljp gz4nASKKsh222ullJGB9MN4RnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwBapjP UIy/h9aGSmobkSm9HupVMB8GA1UdIwQYMBaAFCIqTdLW0Uxvv0iSTmag+MvfElUY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUQzMy9DMkUxQ0FEQzUz QzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRHLV9TSkpPWnFENHk5OFNW UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpcE4wdGJSVEctX1NKSk9acUQ0eTk4U1ZSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUQzMy9DMkUxQ0FEQzUzQzMxMUVCOEExODg0MzFDNEY5QUUwMi9JaXBOMHRiUlRH LV9TSkpPWnFENHk5OFNWUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnMu+evXYDCZBGxA7uV1REQSvp9iLRxVZR1rCBAWck2HHgw1+1aUWx Kswc37XLVVJYzQkMLTJcr9AdVsKQtAgemTBJr/UQKqGmoGtioLUD2bwPLGdCnPdl bGCvgBDkRCGVt976/PV9lXxQkb171RRFSXTS6M0Z/vNtcou1c3mzZ0iRmzJ68rgq ZMc9J0qIp9XJONYAfn64EGi95Q+XwmvmVEt6OWJ0wrfg1f2nq0oKtmN6bzQIgCT0 +AOSmwaXZFtMAFHa+pdmBNxAx0IdhL6HhAYS6yu3ChaR1RThQwyuYgvdC7zHSBs2 sGta8Zd9iieLTMhc7lgSqXg908+cMm7E -----END CERTIFICATE-----Generated at Mon Oct 20 21:40:58 2025 by rpki-client