$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json) Hash identifier: fxRpKyGZsna5F0EpMQhmDNUTOc5wp5S7xnLMqkQ/nXc= Subject key identifier: 7A:73:11:B1:B9:98:23:3F:AF:D4:F9:2D:22:BD:62:AE:5C:9C:D9:06 Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Certificate serial: 039C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft Manifest number: 038A Signing time: Sun 19 Oct 2025 02:49:03 +0000 Manifest this update: Sun 19 Oct 2025 02:49:03 +0000 Manifest next update: Sun 26 Oct 2025 02:49:03 +0000 Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: gJ3UTgP7chHZIuIecXvMBVXv/VqBsFocCzfKNUUg7bc=) 2: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: jPTVwsGJwTtYxGq4/k3kM5VWiV1n8hGmQtDrb+dxPSo=) 3: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: R9SBhXEhOf+gMa/m0vryBFjGp9sBxlfHO7G/5GujZAU=) 4: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: PlCOgT/H+ZebbdqL9OriSJeX2NeXIzVYubJJm3a+JOU=) 5: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: xG6dNUlA+c724kNwKX8NUp4Jh1K9Q2v6tE8mpl0ElKc=) 6: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: Mxx0NjOtuBLL5qPMv7dyQqyOzCktL0daliI6SvMVL7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 924 (0x39c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005 Validity Not Before: Oct 19 02:49:03 2025 GMT Not After : Oct 26 02:49:03 2025 GMT Subject: CN=68f4519f-d056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d8:65:7a:28:42:e2:f8:c8:1b:6b:a5:72:01: d1:ae:2b:fa:b9:58:c2:31:1e:80:33:57:5b:b0:5c: 6e:6d:5f:85:9e:b8:4f:17:f4:6c:36:f4:a8:f5:c6: 92:f1:b1:85:d1:36:8f:c6:cf:3b:f4:6f:76:9d:27: 38:62:f2:02:93:d5:c4:9f:d1:a5:49:c9:c4:c3:d8: ba:29:22:41:d7:6f:7c:59:81:6f:5e:f3:27:07:f8: cc:ad:66:1c:4a:4b:ec:4e:be:e1:db:19:68:06:48: 38:15:75:55:73:41:5c:60:15:1e:8d:37:72:2b:09: 43:05:4f:43:ca:fc:41:db:4c:c9:6c:e1:bf:4c:c1: a5:74:a3:34:4f:57:be:37:f0:07:3b:9c:ae:ca:0a: d7:18:80:4a:2d:ed:b3:f0:e8:91:3a:01:2a:ae:4e: 2c:1a:88:12:02:3c:4f:a0:fc:de:ea:0b:93:28:5b: d2:b4:41:e8:08:61:06:84:b6:2d:e6:80:9d:a9:be: 75:42:91:1d:20:b2:26:bd:d8:21:a2:ac:59:1b:39: af:a4:cd:fd:98:8b:72:70:0d:db:f8:a7:c0:93:71: 82:88:44:e4:30:b9:f8:19:3b:12:10:e5:a8:a5:02: 44:a4:86:79:83:f4:51:2d:9a:a0:46:aa:97:32:ae: de:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:73:11:B1:B9:98:23:3F:AF:D4:F9:2D:22:BD:62:AE:5C:9C:D9:06 X509v3 Authority Key Identifier: keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:63:39:1e:ae:fa:ca:27:91:f6:37:66:0b:f5:4c:e2:a7:7b: ed:4d:f7:e4:0d:f0:e2:59:8a:06:99:38:9c:9b:57:d9:07:94: 1f:6e:03:b8:e8:35:6e:ca:43:58:b5:15:83:40:be:cc:62:80: 39:cd:75:2e:d5:ba:c6:97:ec:ea:ef:f0:8a:ad:d2:02:16:05: d4:dd:0e:0d:6b:79:58:f8:86:fd:91:76:c4:f7:80:cf:0c:23: 0a:d5:85:55:af:9b:41:90:fd:ec:41:db:27:6f:b1:f6:8b:ab: c1:1d:ff:2b:77:8c:0c:e2:ff:11:f7:ed:30:86:86:29:54:c0: 95:86:db:08:34:d5:37:92:86:03:d5:ea:55:c4:c4:12:1d:77: 30:69:ce:42:5b:fb:88:f6:c5:4d:a5:2a:fe:c2:b6:c4:e4:97: ed:38:0c:97:b9:4b:ca:a8:9b:1d:e0:8d:72:e1:e9:7e:ea:c5: 71:c7:58:e5:33:d3:ed:71:ba:e3:6e:bb:7a:86:34:48:b1:c7: eb:ca:73:13:c8:cd:8b:00:33:d7:01:f4:b2:62:8d:4a:8c:88: 0b:f7:cc:78:62:6a:76:7a:5f:76:64:a3:73:4d:34:38:9a:90: 5e:c4:da:28:b9:d1:17:91:80:76:3f:d5:51:05:e0:73:a9:82: 5e:cf:c8:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0 RTM3OEQwMDUwHhcNMjUxMDE5MDI0OTAzWhcNMjUxMDI2MDI0OTAzWjAYMRYwFAYD VQQDEw02OGY0NTE5Zi1kMDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9hleihC4vjIG2ulcgHRriv6uVjCMR6AM1dbsFxubV+FnrhPF/RsNvSo9caS 8bGF0TaPxs879G92nSc4YvICk9XEn9GlScnEw9i6KSJB1298WYFvXvMnB/jMrWYc SkvsTr7h2xloBkg4FXVVc0FcYBUejTdyKwlDBU9DyvxB20zJbOG/TMGldKM0T1e+ N/AHO5yuygrXGIBKLe2z8OiROgEqrk4sGogSAjxPoPze6guTKFvStEHoCGEGhLYt 5oCdqb51QpEdILImvdghoqxZGzmvpM39mItycA3b+KfAk3GCiETkMLn4GTsSEOWo pQJEpIZ5g/RRLZqgRqqXMq7eWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpzEbG5 mCM/r9T5LSK9Yq5cnNkGMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjdGNi83ODI0RUJENEJGQkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpF cFlrUjIzT0RSaGhPTjQwQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQYzkervrKJ5H2N2YL9Uzip3vtTffkDfDiWYoGmTicm1fZB5QfbgO4 6DVuykNYtRWDQL7MYoA5zXUu1brGl+zq7/CKrdICFgXU3Q4Na3lY+Ib9kXbE94DP DCMK1YVVr5tBkP3sQdsnb7H2i6vBHf8rd4wM4v8R9+0whoYpVMCVhtsINNU3koYD 1epVxMQSHXcwac5CW/uI9sVNpSr+wrbE5JftOAyXuUvKqJsd4I1y4el+6sVxx1jl M9Ptcbrjbrt6hjRIscfrynMTyM2LADPXAfSyYo1KjIgL98x4Ymp2el92ZKNzTTQ4 mpBexNooudEXkYB2P9VRBeBzqYJez8gq -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:44 2025 by rpki-client