$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft File: I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json) Hash identifier: 7Ca5K8XQqyMZGuNwLggjtZamf+5sQkVrWculF6xKj0Y= Subject key identifier: 91:D8:9C:AA:94:14:0E:81:F7:1A:F3:44:6D:8C:D6:55:73:05:A2:98 Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft Manifest number: 022C Signing time: Sun 19 Oct 2025 04:24:59 +0000 Manifest this update: Sun 19 Oct 2025 04:24:59 +0000 Manifest next update: Sun 26 Oct 2025 04:24:59 +0000 Files and hashes: 1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: LCltsHnsDFvFFDdRBMeUo++c520bSIG4zfm4n44YZzQ=) 2: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (hash: Qc3ACPBC+H3iasNyw+1g5xftexl02S0P/76vcceWhqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: Oct 19 04:24:59 2025 GMT Not After : Oct 26 04:24:59 2025 GMT Subject: CN=68f4681b-4f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:86:ce:3f:b0:25:0a:81:fa:af:3f:34:6f: b4:48:e4:f5:6b:30:12:95:1f:21:90:71:a9:d3:a4: e1:8a:d5:4b:fd:13:37:51:c6:1c:21:62:5e:1f:26: 76:b2:e9:dc:4f:2b:ed:83:58:5e:1a:40:fb:56:56: 6d:0c:b0:50:26:29:89:3a:30:ea:dc:8e:97:70:8d: bd:9d:6f:3c:f9:96:3e:d9:c3:da:14:21:bd:58:63: 1c:78:99:82:38:46:4a:eb:63:c8:22:97:f3:71:17: 89:93:6e:7a:32:69:dd:86:97:5a:cd:b5:e2:2c:c6: 40:80:08:da:e7:0e:d1:b5:77:01:34:d1:97:ba:32: ea:17:52:e1:32:a7:4e:6d:20:93:6a:60:b2:57:62: 4c:8c:28:85:ce:45:61:84:f0:0e:ae:29:c4:6c:31: c2:50:57:a5:22:7e:4e:30:5d:5e:87:c2:5a:7b:f7: 42:35:52:4a:3d:e5:b3:8f:9d:a8:6c:26:79:65:d3: 86:67:62:17:1d:87:88:d6:59:a8:06:86:1f:04:3c: 65:ed:e0:eb:af:86:d6:ad:c6:0d:d4:06:82:f1:77: 79:2d:15:73:aa:0a:c3:b2:de:84:fa:a8:4c:7e:df: 34:9b:85:00:a6:ee:31:80:2a:62:ff:ed:9f:a5:06: 2b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D8:9C:AA:94:14:0E:81:F7:1A:F3:44:6D:8C:D6:55:73:05:A2:98 X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:c2:39:6f:29:86:8b:72:6a:ce:c8:0d:b5:ad:49:a8:dd:1d: d1:52:86:57:51:63:c4:6e:ee:c5:8a:71:f8:bd:99:6b:83:6c: 5a:14:5d:e3:11:7b:01:f7:55:00:72:9e:fd:fc:8a:48:3c:62: 44:0c:6b:b0:52:39:f6:67:41:dc:12:95:db:61:6d:e4:20:ab: 37:8a:89:a1:52:73:bb:1b:6e:99:ec:71:aa:da:6a:20:0b:01: f6:39:02:fe:ab:a1:8b:b9:9f:4d:d0:4e:e8:fe:ea:8d:1e:7a: dc:fe:44:af:18:dc:e5:83:c0:c0:ab:d1:cd:16:86:1e:25:97: e2:55:cb:44:69:48:ef:d1:b2:3a:50:13:59:2c:6a:5d:05:1d: 6f:02:37:41:0e:a5:81:e4:5d:34:a4:6c:4e:8a:c1:3a:98:16: 66:b2:1f:a5:ab:da:f0:40:10:30:cc:bb:74:34:19:a9:d9:fc: 98:a4:3d:88:86:d5:fa:76:44:b8:67:96:0b:96:b8:76:80:ba: 33:e0:21:84:c0:7d:50:44:df:3c:a7:93:75:37:a8:28:c5:71: 9a:f5:03:a3:29:bf:14:5c:f1:0b:f2:67:c6:bf:cf:cc:3b:ba: 4a:7c:ce:51:9e:57:e1:fb:88:00:a4:f8:f0:80:24:20:d5:f1: 0c:cc:64:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjUxMDE5MDQyNDU5WhcNMjUxMDI2MDQyNDU5WjAYMRYwFAYD VQQDEw02OGY0NjgxYi00ZjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtp+Gzj+wJQqB+q8/NG+0SOT1azASlR8hkHGp06ThitVL/RM3UcYcIWJeHyZ2 suncTyvtg1heGkD7VlZtDLBQJimJOjDq3I6XcI29nW88+ZY+2cPaFCG9WGMceJmC OEZK62PIIpfzcReJk256MmndhpdazbXiLMZAgAja5w7RtXcBNNGXujLqF1LhMqdO bSCTamCyV2JMjCiFzkVhhPAOrinEbDHCUFelIn5OMF1eh8Jae/dCNVJKPeWzj52o bCZ5ZdOGZ2IXHYeI1lmoBoYfBDxl7eDrr4bWrcYN1AaC8Xd5LRVzqgrDst6E+qhM ft80m4UApu4xgCpi/+2fpQYrOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHYnKqU FA6B9xrzRG2M1lVzBaKYMB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGOC81NjJDM0NCNDcyNEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0 WDhTVmpVZ1pIemFoUzhlaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWwjlvKYaLcmrOyA21rUmo3R3RUoZXUWPEbu7FinH4vZlrg2xaFF3j EXsB91UAcp79/IpIPGJEDGuwUjn2Z0HcEpXbYW3kIKs3iomhUnO7G26Z7HGq2mog CwH2OQL+q6GLuZ9N0E7o/uqNHnrc/kSvGNzlg8DAq9HNFoYeJZfiVctEaUjv0bI6 UBNZLGpdBR1vAjdBDqWB5F00pGxOisE6mBZmsh+lq9rwQBAwzLt0NBmp2fyYpD2I htX6dkS4Z5YLlrh2gLoz4CGEwH1QRN88p5N1N6goxXGa9QOjKb8UXPEL8mfGv8/M O7pKfM5Rnlfh+4gApPjwgCQg1fEMzGSR -----END CERTIFICATE-----Generated at Tue Oct 21 00:54:24 2025 by rpki-client