$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft File: iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json) Hash identifier: VGPug4MeSwLWNIt6+wqjUDJ/HkrHB0rYvldBbNR+5Rc= Subject key identifier: C9:6D:E7:F5:F9:1B:A9:81:73:58:E1:D8:19:46:D8:59:E9:8D:AA:02 Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Certificate serial: 0589 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft Manifest number: 057D Signing time: Sun 19 Oct 2025 00:57:50 +0000 Manifest this update: Sun 19 Oct 2025 00:57:49 +0000 Manifest next update: Sun 26 Oct 2025 00:57:49 +0000 Files and hashes: 1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: o5Yh9htIY896VPdvdVrH3h4ZivJEtdQ8GT+OEieqbHo=) 2: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: xQl2oR7pAbge5iF8YPhv/hbmMFqMQxGSZC11zhknFak=) 3: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: M0rop6u3XFd48CsMz0Ik0R+4A+HjyQyG2cdgIdeoY8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1417 (0x589) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Validity Not Before: Oct 19 00:57:49 2025 GMT Not After : Oct 26 00:57:49 2025 GMT Subject: CN=68f4378d-a976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:65:ce:75:11:1f:e2:6b:e5:e6:ed:32:63:4d: c7:d0:20:33:fe:87:47:7b:d2:fd:a5:17:a7:f5:a3: 68:6a:3a:41:82:72:7f:1c:e2:37:79:97:f2:d4:d6: 7f:8d:45:de:cc:82:ae:57:19:0c:0a:52:a4:79:15: 71:bb:29:6b:33:0d:1d:e7:68:f2:7e:f8:34:ea:2b: bd:57:0d:35:a6:86:cd:70:07:a4:65:c8:41:84:df: 61:76:f0:2a:04:dd:5d:80:e6:7a:d9:b9:d6:02:2e: 73:93:f8:43:3b:1c:a8:7a:eb:6f:0f:b7:fd:a5:d3: a8:e1:bd:b2:2b:6a:8d:f4:37:52:ae:50:fd:80:42: 89:08:46:e7:e4:17:9b:17:f0:ea:5f:c8:b4:0d:40: ce:4b:20:b8:12:34:58:43:a3:b2:6b:b5:79:13:32: c9:cf:e3:68:44:a4:0c:ab:d2:3b:2c:b5:1e:67:21: f8:b2:34:7d:ef:3a:0f:93:66:dd:ca:c5:4d:9c:10: c6:ff:6e:a3:79:40:bf:65:e2:66:c0:32:fe:af:d0: 79:24:3f:04:ee:7d:df:6b:50:cd:2b:3d:bc:df:f9: 5b:52:5c:94:68:e8:62:c9:a9:d2:41:15:4e:93:ec: 5a:51:32:42:88:24:11:bf:1a:f7:a5:fe:24:fd:86: 01:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6D:E7:F5:F9:1B:A9:81:73:58:E1:D8:19:46:D8:59:E9:8D:AA:02 X509v3 Authority Key Identifier: keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:51:48:9b:9f:4c:87:84:e1:48:8e:28:53:09:8b:2a:7b:da: 5e:ef:d8:69:63:86:31:e2:af:bf:f1:8f:fc:4e:97:7b:55:d0: 7a:5e:a7:46:6b:5a:df:d2:a8:af:65:36:4f:71:4f:0b:b8:cb: 2f:40:6d:11:fb:b6:90:ca:06:fd:07:90:be:f7:61:aa:43:4c: fb:f0:95:81:10:c5:c9:1b:16:48:b9:b2:29:ca:10:6a:80:85: 37:d6:17:73:75:86:cc:a6:71:32:dd:7d:07:ad:8c:96:82:36: 16:b2:e9:36:93:43:f1:c4:5a:3e:07:80:6e:b6:74:8a:c9:e3: 7c:fd:23:5f:17:03:cf:40:91:66:5c:f9:45:39:ef:6b:13:f8: 94:c4:08:d1:75:2b:c8:8e:ea:c7:9d:3f:ce:96:88:aa:bf:81: d8:f6:10:04:5e:4a:20:e0:77:23:af:a9:56:61:f6:46:27:01: de:ed:3b:92:eb:87:6f:a0:c1:a4:e0:f6:dc:c0:d3:e7:de:95: 1d:33:69:84:70:75:42:23:9a:0d:77:91:c6:28:b8:97:75:da: b9:4f:18:43:a0:86:47:f9:2e:40:f5:33:70:6e:b5:fa:bc:ac: 61:42:d0:0d:07:9c:3d:a8:3d:d8:d2:cd:2b:e7:11:50:fc:44: 3f:5c:2b:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyREMxMTAvBgNVBAUTKDg5NzBBNDAwQ0NDQ0YwMTA5MzNDMzMwQzM3NjBBMUVD NURCNEUwQUQwHhcNMjUxMDE5MDA1NzQ5WhcNMjUxMDI2MDA1NzQ5WjAYMRYwFAYD VQQDEw02OGY0Mzc4ZC1hOTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2XOdREf4mvl5u0yY03H0CAz/odHe9L9pRen9aNoajpBgnJ/HOI3eZfy1NZ/ jUXezIKuVxkMClKkeRVxuylrMw0d52jyfvg06iu9Vw01pobNcAekZchBhN9hdvAq BN1dgOZ62bnWAi5zk/hDOxyoeutvD7f9pdOo4b2yK2qN9DdSrlD9gEKJCEbn5Beb F/DqX8i0DUDOSyC4EjRYQ6Oya7V5EzLJz+NoRKQMq9I7LLUeZyH4sjR97zoPk2bd ysVNnBDG/26jeUC/ZeJmwDL+r9B5JD8E7n3fa1DNKz283/lbUlyUaOhiyanSQRVO k+xaUTJCiCQRvxr3pf4k/YYB4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlt5/X5 G6mBc1jh2BlG2FnpjaoCMB8GA1UdIwQYMBaAFIlwpADMzPAQkzwzDDdgoexdtOCt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTJEQy9DNjA1NzhBMEY5 OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThCQ1RQRE1NTjJDaDdGMjA0 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQ2tBTXpNOEJDVFBETU1OMkNoN0YyMDRLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTJEQy9DNjA1NzhBMEY5OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThC Q1RQRE1NTjJDaDdGMjA0SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASUUibn0yHhOFIjihTCYsqe9pe79hpY4Yx4q+/8Y/8Tpd7VdB6XqdG a1rf0qivZTZPcU8LuMsvQG0R+7aQygb9B5C+92GqQ0z78JWBEMXJGxZIubIpyhBq gIU31hdzdYbMpnEy3X0HrYyWgjYWsuk2k0PxxFo+B4ButnSKyeN8/SNfFwPPQJFm XPlFOe9rE/iUxAjRdSvIjurHnT/Oloiqv4HY9hAEXkog4Hcjr6lWYfZGJwHe7TuS 64dvoMGk4PbcwNPn3pUdM2mEcHVCI5oNd5HGKLiXddq5TxhDoIZH+S5A9TNwbrX6 vKxhQtANB5w9qD3Y0s0r5xFQ/EQ/XCv2 -----END CERTIFICATE-----Generated at Mon Oct 20 14:36:50 2025 by rpki-client