$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft File: InYg_8vfrJXUbmodsxewi6VihIA.mft (raw, json) Hash identifier: tnml6CQwGX2LP8CbxNWuIZCLtnOwqG+iTD0VpsGDS8o= Subject key identifier: 32:90:37:20:47:19:E4:36:90:1E:77:5B:1D:32:21:5B:93:E5:73:CE Authority key identifier: 22:76:20:FF:CB:DF:AC:95:D4:6E:6A:1D:B3:17:B0:8B:A5:62:84:80 Certificate issuer: /CN=A91D4781/serialNumber=227620FFCBDFAC95D46E6A1DB317B08BA5628480 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/InYg_8vfrJXUbmodsxewi6VihIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft Manifest number: 08 Signing time: Sun 19 Oct 2025 11:39:12 +0000 Manifest this update: Sun 19 Oct 2025 11:39:11 +0000 Manifest next update: Sun 26 Oct 2025 11:39:11 +0000 Files and hashes: 1: InYg_8vfrJXUbmodsxewi6VihIA.crl (hash: +edmxZEYuMiOf7Bhr3st+1TRWMXOzlmbUSj6eueSEaU=) 2: 9F7CD49AA55A11F0A8F84D83C4F9AE02.roa (hash: pbHyabcv277elA+5L6jLrPBHXOT6ujxTAobCaGjI5cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.crl rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/InYg_8vfrJXUbmodsxewi6VihIA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4781, serialNumber=227620FFCBDFAC95D46E6A1DB317B08BA5628480 Validity Not Before: Oct 19 11:39:11 2025 GMT Not After : Oct 26 11:39:11 2025 GMT Subject: CN=68f4cddf-db28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ed:4a:05:93:f0:73:66:22:9e:90:82:59:49: 4c:eb:ec:8a:83:3b:41:27:2e:4f:08:8e:aa:06:ee: e3:79:c5:9f:08:8b:80:b5:81:64:70:bc:3f:f1:56: 55:2b:44:53:4c:dc:0f:51:57:d7:e1:0b:8a:a8:e6: fb:11:f5:50:71:84:a6:36:0b:d6:5f:c9:cc:48:76: c7:ee:8d:d0:f8:07:f4:bd:dd:52:d0:6d:d9:d2:c9: ee:6f:43:29:00:47:28:74:ba:23:8c:c1:57:b6:b2: 29:d9:af:5c:af:45:59:03:6c:68:77:e2:f5:5b:b1: 74:1e:90:f3:8e:f5:62:d3:d3:ad:58:a3:5e:30:27: 52:39:3e:05:0b:14:2f:67:59:29:e5:bb:34:20:8a: 9b:d3:4e:4c:8d:6d:10:5f:6a:66:ec:1f:07:81:4f: 6c:eb:5a:ad:09:c0:65:11:28:ff:eb:98:5d:b5:52: 2a:f2:ab:b8:8e:8d:a4:10:d5:04:3a:48:b9:87:09: 11:a6:3c:c1:2b:ba:14:82:ec:ae:bf:ba:d6:8d:74: a0:3d:4c:94:49:44:2a:ec:e0:76:56:95:33:f0:39: 40:ae:d1:1c:5e:00:56:c5:2c:61:4b:ce:f1:36:ca: 67:f1:f9:6b:f7:3e:9d:b0:3b:23:ff:21:5f:ff:12: 2e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:90:37:20:47:19:E4:36:90:1E:77:5B:1D:32:21:5B:93:E5:73:CE X509v3 Authority Key Identifier: keyid:22:76:20:FF:CB:DF:AC:95:D4:6E:6A:1D:B3:17:B0:8B:A5:62:84:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/InYg_8vfrJXUbmodsxewi6VihIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d5:0e:5e:eb:9d:ba:b3:71:84:4f:69:01:0a:ec:96:4a:0d: bd:a2:e0:0b:62:54:3d:8b:c8:5c:d2:04:9d:c1:b8:c7:3e:36: 74:bf:7c:4b:ad:38:70:82:d8:58:4a:e8:90:49:04:5a:9f:f2: aa:7d:aa:39:f0:a3:c0:bc:b2:c2:1c:39:61:ad:fc:17:08:6e: d5:5b:90:44:5a:9e:06:51:9e:be:c8:83:53:e6:16:95:60:b4: 84:a9:00:f8:dc:97:0c:d7:4b:f0:7f:10:35:97:ba:2f:71:4d: f3:5b:4f:7b:b5:3d:37:ab:d3:28:5b:4c:d2:20:c6:27:1e:b7: 55:a1:93:1a:ff:c4:ad:13:b6:1f:95:fd:d7:c9:57:de:9b:de: d1:4f:b2:f4:ef:6b:58:9d:10:b2:26:a1:63:0a:19:34:8e:67: f2:53:4e:d4:20:d7:40:db:a0:3c:4d:05:cb:0e:c4:d6:71:8e: b5:3a:54:05:24:67:fd:a5:01:51:18:27:b0:dc:91:4e:fb:ae: d9:2a:c2:2e:88:58:4a:6a:63:70:e8:71:d6:8e:ac:84:ac:52: 33:0a:fe:be:8f:f1:32:29:a7:8b:47:a7:00:4b:30:65:92:fa: 40:fe:a1:dd:20:97:ce:45:f6:d2:04:4a:5b:4f:04:00:5a:58: 1f:96:67:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDc4MTExMC8GA1UEBRMoMjI3NjIwRkZDQkRGQUM5NUQ0NkU2QTFEQjMxN0IwOEJB NTYyODQ4MDAeFw0yNTEwMTkxMTM5MTFaFw0yNTEwMjYxMTM5MTFaMBgxFjAUBgNV BAMTDTY4ZjRjZGRmLWRiMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZ7UoFk/BzZiKekIJZSUzr7IqDO0EnLk8IjqoG7uN5xZ8Ii4C1gWRwvD/xVlUr RFNM3A9RV9fhC4qo5vsR9VBxhKY2C9ZfycxIdsfujdD4B/S93VLQbdnSye5vQykA Ryh0uiOMwVe2sinZr1yvRVkDbGh34vVbsXQekPOO9WLT061Yo14wJ1I5PgULFC9n WSnluzQgipvTTkyNbRBfambsHweBT2zrWq0JwGURKP/rmF21Uiryq7iOjaQQ1QQ6 SLmHCRGmPMEruhSC7K6/utaNdKA9TJRJRCrs4HZWlTPwOUCu0RxeAFbFLGFLzvE2 ymfx+Wv3Pp2wOyP/IV//Ei55AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMpA3IEcZ 5DaQHndbHTIhW5Plc84wHwYDVR0jBBgwFoAUInYg/8vfrJXUbmodsxewi6VihIAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0NzgxL0Q5MDA0MkNFQTQ4 RDExRjBBRDk3RjAxNkM0RjlBRTAyL0luWWdfOHZmckpYVWJtb2RzeGV3aTZWaWhJ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSW5ZZ184dmZySlhVYm1vZHN4ZXdpNlZpaElBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 NzgxL0Q5MDA0MkNFQTQ4RDExRjBBRDk3RjAxNkM0RjlBRTAyL0luWWdfOHZmckpY VWJtb2RzeGV3aTZWaWhJQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIzVDl7rnbqzcYRPaQEK7JZKDb2i4AtiVD2LyFzSBJ3BuMc+NnS/fEut OHCC2FhK6JBJBFqf8qp9qjnwo8C8ssIcOWGt/BcIbtVbkERangZRnr7Ig1PmFpVg tISpAPjclwzXS/B/EDWXui9xTfNbT3u1PTer0yhbTNIgxicet1Whkxr/xK0Tth+V /dfJV96b3tFPsvTva1idELImoWMKGTSOZ/JTTtQg10DboDxNBcsOxNZxjrU6VAUk Z/2lAVEYJ7DckU77rtkqwi6IWEpqY3DocdaOrISsUjMK/r6P8TIpp4tHpwBLMGWS +kD+od0gl85F9tIESltPBABaWB+WZwI= -----END CERTIFICATE-----Generated at Mon Oct 20 23:03:58 2025 by rpki-client