$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft File: -iKAHFKuKl_EkbfL6-aO_KLI0dk.mft (raw, json) Hash identifier: CDm7/yw6YyEUclp+nWt7AQgIZIMgSsfqt9N8ghU+u7I= Subject key identifier: 38:4C:08:FC:3C:B6:99:52:65:B7:CE:09:66:F2:42:AB:FB:4A:33:7E Authority key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 Certificate issuer: /CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft Manifest number: A0 Signing time: Sun 19 Oct 2025 09:33:41 +0000 Manifest this update: Sun 19 Oct 2025 09:33:40 +0000 Manifest next update: Sun 26 Oct 2025 09:33:40 +0000 Files and hashes: 1: -iKAHFKuKl_EkbfL6-aO_KLI0dk.crl (hash: QQCsBSfLdggREwATdYXUqP5N2MgoIvq3c/7Oz/otD6o=) 2: 8F7DFE66C96E11EF98B64E15C4F9AE02.roa (hash: NJttL+qjjIMKQduatRuB9wCf9GQJviKk9JlU07XKUgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D837B, serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9 Validity Not Before: Oct 19 09:33:40 2025 GMT Not After : Oct 26 09:33:40 2025 GMT Subject: CN=68f4b075-6b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a6:92:09:67:35:b7:a1:9b:80:27:63:7d:53: be:00:31:dd:f6:2b:33:77:f3:ea:c0:fc:3a:09:c6: 88:bf:be:d3:bd:b1:9e:96:f1:91:37:1b:69:f4:86: ff:47:ef:32:d8:fa:b7:5c:ee:83:0a:6e:04:95:41: 6c:d9:8a:56:67:8c:39:e3:a8:f4:2f:1e:a9:39:01: 2a:c9:d1:7a:56:bb:86:f5:f4:d1:af:7e:3d:35:6e: c6:93:42:43:a8:f9:82:97:cb:b0:73:9b:c9:79:14: 65:27:16:e4:ef:31:67:27:0c:05:36:88:a8:29:3c: c6:e1:57:1a:0b:48:9e:2d:27:1b:18:62:ce:9b:96: 38:db:4b:23:c6:93:a4:60:38:06:5c:99:ca:4c:9f: c4:3b:0a:ee:2f:11:70:78:26:89:8f:31:b8:5b:cb: 50:f3:ed:63:57:53:34:74:18:81:fe:4c:6c:01:05: c5:f9:d4:43:3a:94:61:c3:90:87:85:9c:ab:6a:0d: ad:fa:e7:01:dc:7f:8b:bb:79:1f:bd:eb:d1:f1:de: e9:a9:90:27:94:1d:b2:63:76:a7:c9:ba:cd:42:c8: c3:68:c3:e8:aa:c2:1c:f5:ee:5e:07:b2:20:f5:56: a6:2e:3b:ab:4a:49:91:92:aa:90:a5:66:3f:e6:e4: 6e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4C:08:FC:3C:B6:99:52:65:B7:CE:09:66:F2:42:AB:FB:4A:33:7E X509v3 Authority Key Identifier: keyid:FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:4d:1c:8e:91:1c:8a:ec:3d:77:4f:84:28:ea:22:64:55:74: 7b:7c:4d:ee:9d:19:b0:34:3d:bf:3e:b2:a6:b2:11:ce:9a:74: 0e:b3:4e:d8:13:2d:ee:db:3d:39:72:2a:56:ff:1e:59:9d:ad: 60:da:b3:a0:33:97:40:e7:5d:59:7d:b5:da:e5:e2:d7:cd:ef: 7e:60:c9:3c:b3:28:81:b9:47:37:e6:9d:f9:ae:a5:d0:6c:68: 12:d6:47:8a:f3:9f:d7:e6:09:c0:1f:48:f2:a6:08:67:f0:6f: f0:ef:3e:8f:1e:a2:f1:53:df:89:4e:0f:52:cb:02:7f:85:0c: e5:d7:3c:7f:4c:2d:1f:23:77:03:ce:77:57:6d:ad:13:94:48: c0:95:4a:af:69:81:82:c1:60:b7:ec:0a:6b:e8:14:8f:f4:17: 9c:6b:b6:7b:11:b6:ea:c3:b3:d2:17:71:a1:66:e9:3d:05:b4: 66:2a:d6:83:1c:fb:e4:2a:5a:f6:dc:ea:81:d8:8c:c5:10:ea: 1e:3e:10:cb:47:02:a6:77:be:5f:22:33:03:b3:ac:d0:59:0e: 6e:a2:0f:16:87:43:c9:22:48:ed:c5:1d:97:43:21:9b:c3:00: 02:f9:0b:fa:59:c9:e3:16:de:e9:c2:3e:4b:d8:20:18:57:8f: 03:26:28:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzN0IxMTAvBgNVBAUTKEZBMjI4MDFDNTJBRTJBNUZDNDkxQjdDQkVCRTY4RUZD QTJDOEQxRDkwHhcNMjUxMDE5MDkzMzQwWhcNMjUxMDI2MDkzMzQwWjAYMRYwFAYD VQQDEw02OGY0YjA3NS02YjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqaSCWc1t6GbgCdjfVO+ADHd9iszd/PqwPw6CcaIv77TvbGelvGRNxtp9Ib/ R+8y2Pq3XO6DCm4ElUFs2YpWZ4w546j0Lx6pOQEqydF6VruG9fTRr349NW7Gk0JD qPmCl8uwc5vJeRRlJxbk7zFnJwwFNoioKTzG4VcaC0ieLScbGGLOm5Y420sjxpOk YDgGXJnKTJ/EOwruLxFweCaJjzG4W8tQ8+1jV1M0dBiB/kxsAQXF+dRDOpRhw5CH hZyrag2t+ucB3H+Lu3kfvevR8d7pqZAnlB2yY3anybrNQsjDaMPoqsIc9e5eB7Ig 9VamLjurSkmRkqqQpWY/5uRu7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhMCPw8 tplSZbfOCWbyQqv7SjN+MB8GA1UdIwQYMBaAFPoigBxSripfxJG3y+vmjvyiyNHZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM3Qi8xNThEN0YzQ0I5 OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi8taUtBSEZLdUtsX0VrYmZMNi1hT19LTEkw ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1pS0FIRkt1S2xfRWtiZkw2LWFPX0tMSTBkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODM3Qi8xNThEN0YzQ0I5OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi8taUtBSEZLdUts X0VrYmZMNi1hT19LTEkwZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlTRyOkRyK7D13T4Qo6iJkVXR7fE3unRmwND2/PrKmshHOmnQOs07Y Ey3u2z05cipW/x5Zna1g2rOgM5dA511ZfbXa5eLXze9+YMk8syiBuUc35p35rqXQ bGgS1keK85/X5gnAH0jypghn8G/w7z6PHqLxU9+JTg9SywJ/hQzl1zx/TC0fI3cD zndXba0TlEjAlUqvaYGCwWC37Apr6BSP9Beca7Z7Ebbqw7PSF3GhZuk9BbRmKtaD HPvkKlr23OqB2IzFEOoePhDLRwKmd75fIjMDs6zQWQ5uog8Wh0PJIkjtxR2XQyGb wwAC+Qv6WcnjFt7pwj5L2CAYV48DJiiR -----END CERTIFICATE-----Generated at Tue Oct 21 02:57:02 2025 by rpki-client