$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft File: iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft (raw, json) Hash identifier: Rt3PhLdCNiX0+9HY/Xlbi4XAd+rz727/R9ah9jiubF4= Subject key identifier: 0D:56:6B:EA:02:5B:6B:E3:DA:BF:F7:29:E1:1C:8B:53:30:E2:40:8F Authority key identifier: 89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 Certificate issuer: /CN=A91D8185/serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft Manifest number: 1D Signing time: Sun 19 Oct 2025 11:23:05 +0000 Manifest this update: Sun 19 Oct 2025 11:23:05 +0000 Manifest next update: Sun 26 Oct 2025 11:23:05 +0000 Files and hashes: 1: iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl (hash: 1J42Qif6scQx0WOijw+WmHz5jpSyyQebc4tRCMD7VpM=) 2: CC2C3CB684AC11F0B7B8977DC4F9AE02.roa (hash: Iyg31gxgmZNKpKPcyuwxT2WShJvbdC1BGcvDKYneqcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8185, serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Validity Not Before: Oct 19 11:23:05 2025 GMT Not After : Oct 26 11:23:05 2025 GMT Subject: CN=68f4ca19-3ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:b8:3b:30:c4:57:7d:17:8d:51:25:76:1c:0e: 66:e8:23:d9:fe:01:f3:1f:43:53:44:be:72:d1:05: fd:ac:aa:d1:11:1b:ba:53:60:72:03:a2:a8:a0:59: 94:34:1e:b2:ef:d3:20:27:af:c0:89:7c:e5:a4:65: 23:3a:ac:80:66:26:49:4e:6b:ae:56:0c:40:d2:c5: 48:3b:a5:7c:c1:e1:54:e9:c4:ff:3b:42:d4:80:33: 29:23:e8:97:b8:d3:7a:3e:5a:a1:44:37:f9:91:b4: 22:33:5f:ff:e0:84:68:42:b5:f4:f3:bb:59:5f:cd: fc:ce:da:37:fd:60:aa:f2:7d:35:a5:4b:2a:50:43: b9:f2:30:e4:c7:d9:62:1b:a2:e1:56:4c:63:a3:b6: 7a:cb:5c:6a:80:47:d8:c0:3b:76:ae:8c:d2:5c:23: 9b:12:4e:4f:59:eb:12:4a:5f:3c:ac:eb:a3:4b:7e: d1:19:a8:d1:1f:d2:bb:01:9c:55:f1:f2:aa:13:71: 4b:13:8c:43:e0:b3:ca:6f:79:db:a0:9b:8a:b6:cf: e7:86:6f:de:ae:7e:f6:8c:7b:23:1e:db:18:e0:26: 7d:0e:01:97:ea:d5:95:b0:48:af:c3:1f:02:a4:f4: 27:aa:91:a3:b6:4a:c5:a0:55:9a:8b:2f:b8:5f:d8: cf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:56:6B:EA:02:5B:6B:E3:DA:BF:F7:29:E1:1C:8B:53:30:E2:40:8F X509v3 Authority Key Identifier: keyid:89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:02:59:42:91:c4:d7:0e:bf:3c:46:3b:50:99:a0:3b:f3:34: fa:a1:63:bb:8b:82:b2:16:85:95:15:eb:82:bd:fd:9b:8b:f7: e9:e1:c3:64:ec:5b:a6:b7:e7:9e:05:11:16:56:a8:ef:96:54: 0b:53:6a:5f:3e:e7:ad:93:27:17:84:64:3e:5e:7a:47:8f:a6: 96:c1:08:31:4a:83:17:b6:d3:6a:7d:e1:6a:83:0b:fa:c5:b9: 13:86:b7:49:e2:89:4d:57:65:b3:b5:1e:93:78:cf:ba:1b:7b: e7:33:85:3d:ed:a1:4d:8e:6c:9c:d4:a0:e2:12:c5:45:5b:8a: af:86:93:60:76:10:37:b0:4a:31:17:77:59:2a:da:b5:ff:f5: 75:ee:b1:37:1c:ed:c2:e9:ff:78:14:ad:5b:b9:ff:bd:2d:72: 37:72:1f:83:fb:e9:0d:e2:ac:bd:4a:ad:79:22:dc:58:4c:f3: 69:2e:cf:8e:02:41:d8:84:8d:12:9d:90:b0:52:12:44:fd:cd: 40:f7:90:36:51:65:b8:48:b4:eb:5f:d1:82:47:99:11:86:43: 01:57:df:08:6b:3d:fc:75:f0:75:7d:4c:d3:2d:41:a1:e6:0a: 0b:bb:80:3e:83:ae:ba:ad:68:3d:a5:7b:2b:fb:8c:b1:72:1b: e2:5e:ba:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODE4NTExMC8GA1UEBRMoODk3ODRENkQ5MzhCMDVDQzNCN0I2NjZFNUU3QUVFOTIy M0RFNEQ3MDAeFw0yNTEwMTkxMTIzMDVaFw0yNTEwMjYxMTIzMDVaMBgxFjAUBgNV BAMTDTY4ZjRjYTE5LTNlYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD5uDswxFd9F41RJXYcDmboI9n+AfMfQ1NEvnLRBf2sqtERG7pTYHIDoqigWZQ0 HrLv0yAnr8CJfOWkZSM6rIBmJklOa65WDEDSxUg7pXzB4VTpxP87QtSAMykj6Je4 03o+WqFEN/mRtCIzX//ghGhCtfTzu1lfzfzO2jf9YKryfTWlSypQQ7nyMOTH2WIb ouFWTGOjtnrLXGqAR9jAO3aujNJcI5sSTk9Z6xJKXzys66NLftEZqNEf0rsBnFXx 8qoTcUsTjEPgs8pvedugm4q2z+eGb96ufvaMeyMe2xjgJn0OAZfq1ZWwSK/DHwKk 9CeqkaO2SsWgVZqLL7hf2M+9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDVZr6gJb a+Pav/cp4RyLUzDiQI8wHwYDVR0jBBgwFoAUiXhNbZOLBcw7e2ZuXnrukiPeTXAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MTg1Lzg1MDExNTMyODRB QzExRjA4RDNBQjk3OUM0RjlBRTAyL2lYaE5iWk9MQmN3N2UyWnVYbnJ1a2lQZVRY QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVhoTmJaT0xCY3c3ZTJadVhucnVraVBlVFhBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MTg1Lzg1MDExNTMyODRBQzExRjA4RDNBQjk3OUM0RjlBRTAyL2lYaE5iWk9MQmN3 N2UyWnVYbnJ1a2lQZVRYQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIMCWUKRxNcOvzxGO1CZoDvzNPqhY7uLgrIWhZUV64K9/ZuL9+nhw2Ts W6a3554FERZWqO+WVAtTal8+562TJxeEZD5eekePppbBCDFKgxe202p94WqDC/rF uROGt0niiU1XZbO1HpN4z7obe+czhT3toU2ObJzUoOISxUVbiq+Gk2B2EDewSjEX d1kq2rX/9XXusTcc7cLp/3gUrVu5/70tcjdyH4P76Q3irL1KrXki3FhM82kuz44C QdiEjRKdkLBSEkT9zUD3kDZRZbhItOtf0YJHmRGGQwFX3whrPfx18HV9TNMtQaHm Cgu7gD6DrrqtaD2leyv7jLFyG+Jeuh8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:27:35 2025 by rpki-client