$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft File: ihprqbt2zysN7jXqTP0vX_jAieM.mft (raw, json) Hash identifier: P00arJ9wanSqyWRVtE5o9BBmjaa4+ZuPEOml/vFLKjM= Subject key identifier: A7:EA:68:8F:7D:97:EB:59:B9:E1:65:58:29:86:88:29:08:65:A3:15 Authority key identifier: 8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3 Certificate issuer: /CN=A91C36EE/serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3 Certificate serial: 0C2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft Manifest number: 0C25 Signing time: Sat 18 Oct 2025 19:28:50 +0000 Manifest this update: Sat 18 Oct 2025 19:28:49 +0000 Manifest next update: Sat 25 Oct 2025 19:28:49 +0000 Files and hashes: 1: ihprqbt2zysN7jXqTP0vX_jAieM.crl (hash: VDMrzCd1TkAint2bVPs3FH9zcVFZHtI3M5J1gkF+fXk=) 2: 6FCF7FF2180411EA9AA70A57C4F9AE02.roa (hash: Kec3OJ0yXeD5eottWlXfmKbDVOHd3PQe3ZSjrmCo8jA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3115 (0xc2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C36EE, serialNumber=8A1A6BA9BB76CF2B0DEE35EA4CFD2F5FF8C089E3 Validity Not Before: Oct 18 19:28:49 2025 GMT Not After : Oct 25 19:28:49 2025 GMT Subject: CN=68f3ea72-9bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d7:7e:d5:7c:35:5e:5a:28:3d:12:f0:f0:0b: 58:68:a9:23:fc:97:10:3f:5d:e7:cd:c3:5a:17:c0: 3d:88:62:0e:cb:12:25:06:e0:08:85:69:97:ef:98: ea:52:e4:6f:f0:23:5e:7a:cf:4b:d9:ac:7f:19:18: 29:cb:46:6a:ef:1e:18:f2:f1:4f:ef:a4:d3:b0:1d: 88:25:c3:77:ea:a7:b3:35:36:05:37:ce:ec:f5:bc: bb:76:6c:dd:19:0b:84:11:d1:67:19:36:e3:e8:c4: ab:74:4b:69:55:50:2c:68:c5:79:60:66:50:e4:6f: 46:84:b6:f7:22:cf:6c:5f:b2:96:0e:53:e5:a8:64: 86:fd:2a:07:b8:ca:5e:76:27:02:54:23:89:5f:84: 34:8b:e7:95:61:7e:1d:82:63:91:11:a0:85:12:b2: 12:12:d1:fc:0a:4b:ff:dd:63:3e:1e:0b:7b:5b:c8: ad:ce:86:12:15:77:df:5a:17:6e:36:d1:d8:30:f2: 4f:43:4e:03:19:ec:cc:42:19:db:2a:8d:e3:8c:15: 9f:b6:20:22:73:1f:8c:1d:40:18:9b:96:aa:3c:6b: 83:53:4b:07:43:b0:c1:ca:4e:69:f3:28:00:fd:7a: b5:58:6a:06:1c:3d:17:98:98:3d:c1:23:4d:bf:91: 08:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EA:68:8F:7D:97:EB:59:B9:E1:65:58:29:86:88:29:08:65:A3:15 X509v3 Authority Key Identifier: keyid:8A:1A:6B:A9:BB:76:CF:2B:0D:EE:35:EA:4C:FD:2F:5F:F8:C0:89:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihprqbt2zysN7jXqTP0vX_jAieM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36EE/A8C1C87A180311EABEC82B56C4F9AE02/ihprqbt2zysN7jXqTP0vX_jAieM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:96:ec:e6:4c:b2:26:df:a6:2e:c4:24:e3:cd:89:42:be:83: 0f:32:72:ee:57:cf:db:b1:03:8c:0c:8e:c4:c7:76:38:af:e6: df:74:8b:75:f2:b2:07:86:f1:af:c7:bc:48:a5:e4:db:8c:11: d2:89:90:b3:f9:cf:c5:87:b3:1c:e4:93:28:71:4e:ff:53:9a: 0b:9b:43:0a:3e:e7:b3:12:e2:f9:1f:94:d6:de:d4:f7:1f:ba: 62:3b:6b:e5:41:b4:33:31:5f:91:c6:4e:88:1a:57:28:8c:6d: 21:ba:84:1b:36:f1:09:69:64:46:23:77:6b:ba:67:a8:c3:d5: c3:4d:cf:f0:89:a0:65:b0:06:a4:36:b8:d5:98:ac:02:57:b7: 53:1c:3f:95:0f:00:8f:f1:65:1e:f7:54:84:70:a5:71:36:4f: 16:33:de:59:fe:6f:56:02:b9:27:3b:95:97:c7:4e:35:a1:86: bd:93:bc:af:61:62:0e:5d:9b:66:7e:8d:25:6c:82:0b:73:63: b1:d7:17:5b:21:4e:24:fd:f1:f7:8c:67:e0:3a:65:ed:a2:d7: 88:f7:5b:fa:94:6b:34:08:bd:1a:60:d0:31:9e:75:97:29:7b: c0:c7:3c:b5:84:a1:9c:b9:90:b3:5d:ab:01:2d:a7:7e:82:17: ea:68:62:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM2RUUxMTAvBgNVBAUTKDhBMUE2QkE5QkI3NkNGMkIwREVFMzVFQTRDRkQyRjVG RjhDMDg5RTMwHhcNMjUxMDE4MTkyODQ5WhcNMjUxMDI1MTkyODQ5WjAYMRYwFAYD VQQDEw02OGYzZWE3Mi05YmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNd+1Xw1XlooPRLw8AtYaKkj/JcQP13nzcNaF8A9iGIOyxIlBuAIhWmX75jq UuRv8CNees9L2ax/GRgpy0Zq7x4Y8vFP76TTsB2IJcN36qezNTYFN87s9by7dmzd GQuEEdFnGTbj6MSrdEtpVVAsaMV5YGZQ5G9GhLb3Is9sX7KWDlPlqGSG/SoHuMpe dicCVCOJX4Q0i+eVYX4dgmOREaCFErISEtH8Ckv/3WM+Hgt7W8itzoYSFXffWhdu NtHYMPJPQ04DGezMQhnbKo3jjBWftiAicx+MHUAYm5aqPGuDU0sHQ7DByk5p8ygA /Xq1WGoGHD0XmJg9wSNNv5EI9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfqaI99 l+tZueFlWCmGiCkIZaMVMB8GA1UdIwQYMBaAFIoaa6m7ds8rDe416kz9L1/4wInj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzZFRS9BOEMxQzg3QTE4 MDMxMUVBQkVDODJCNTZDNEY5QUUwMi9paHBycWJ0Mnp5c043alhxVFAwdlhfakFp ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2locHJxYnQyenlzTjdqWHFUUDB2WF9qQWllTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzZFRS9BOEMxQzg3QTE4MDMxMUVBQkVDODJCNTZDNEY5QUUwMi9paHBycWJ0Mnp5 c043alhxVFAwdlhfakFpZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlluzmTLIm36YuxCTjzYlCvoMPMnLuV8/bsQOMDI7Ex3Y4r+bfdIt1 8rIHhvGvx7xIpeTbjBHSiZCz+c/Fh7Mc5JMocU7/U5oLm0MKPuezEuL5H5TW3tT3 H7piO2vlQbQzMV+Rxk6IGlcojG0huoQbNvEJaWRGI3drumeow9XDTc/wiaBlsAak NrjVmKwCV7dTHD+VDwCP8WUe91SEcKVxNk8WM95Z/m9WArknO5WXx041oYa9k7yv YWIOXZtmfo0lbIILc2Ox1xdbIU4k/fH3jGfgOmXtoteI91v6lGs0CL0aYNAxnnWX KXvAxzy1hKGcuZCzXasBLad+ghfqaGL3 -----END CERTIFICATE-----Generated at Mon Oct 20 05:38:46 2025 by rpki-client