$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft File: ixqAZb6Iqmwbo_7bVOCH59KttN4.mft (raw, json) Hash identifier: KaDl4dXWj8WABkVtg/V9sGy74sv+ZtSEZ9d6QXRFHd4= Subject key identifier: EE:61:2C:CC:00:B2:7F:E6:2E:36:63:EC:91:2B:D0:C7:4C:5F:97:57 Authority key identifier: 8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE Certificate issuer: /CN=A91DC068/serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft Manifest number: 0134 Signing time: Sun 19 Oct 2025 07:20:06 +0000 Manifest this update: Sun 19 Oct 2025 07:20:06 +0000 Manifest next update: Sun 26 Oct 2025 07:20:06 +0000 Files and hashes: 1: ixqAZb6Iqmwbo_7bVOCH59KttN4.crl (hash: md7gj+0HJ7b+PKh/JsO8bUEqUYfBdkoiuGQdcxs0hCI=) 2: 4DDA8A18D5DD11EEA5B1C711C4F9AE02.roa (hash: FHRlsB48eK0jdLR0VwZXrRd3F+Rj548sH8y8zKsy5+s=) 3: 4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa (hash: PAO2tzUE6VhuIQPWRUUuXZiVK/zRgbkDyCoIJqVq33M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Validity Not Before: Oct 19 07:20:06 2025 GMT Not After : Oct 26 07:20:06 2025 GMT Subject: CN=68f49126-a378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:2c:ca:f5:ad:22:6a:0a:f3:a1:e5:72:3e: 58:3a:51:37:e6:e7:13:8f:8b:92:3f:f7:77:ee:c7: 77:6e:5a:98:ea:e5:a5:36:a7:43:ea:9b:9c:8d:3d: 64:29:8d:21:fa:c6:8e:9b:e7:42:9c:8f:4d:f6:82: c6:d8:71:41:dd:45:7b:4f:e1:25:51:a8:c2:a9:96: 38:d5:ce:08:96:f0:51:11:43:f1:05:fb:ef:3d:7e: 8d:8b:c2:6a:76:87:af:67:58:a1:97:39:de:d7:4c: 06:f2:2e:83:4e:8b:b1:a1:16:2a:d3:08:d1:90:a0: d8:5f:2a:7f:79:3c:37:e3:7e:9d:9c:ed:8b:f9:0c: a2:51:1c:20:76:d2:c1:12:3c:9f:65:e5:80:d0:10: f4:04:1f:89:64:f7:ca:d6:9a:7a:3d:7e:10:5d:84: 5d:29:b4:7b:4e:0d:4a:b3:d7:2a:bf:eb:fb:09:0a: a4:18:43:26:91:db:cb:06:0d:9e:e1:8c:c5:33:27: 76:92:5c:ae:2b:93:c0:6e:0d:61:7c:c9:bb:3a:c0: d1:b4:7a:c5:0b:ee:6f:f8:20:f5:ff:7a:d3:aa:44: 1b:28:c2:93:00:95:46:79:47:a7:42:52:ed:86:ac: b0:56:bd:9e:ee:ed:a9:bc:35:86:2e:5f:1c:6f:50: c9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:61:2C:CC:00:B2:7F:E6:2E:36:63:EC:91:2B:D0:C7:4C:5F:97:57 X509v3 Authority Key Identifier: keyid:8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:41:ed:5a:69:9d:c1:c1:ad:cb:74:f1:91:15:e5:21:8e:49: 55:07:99:e8:f9:4c:29:9c:48:26:d8:4b:ea:4a:9d:ed:4e:30: ee:f7:8c:2f:ba:57:ab:c9:1c:2f:87:35:4f:4a:f5:14:b5:c4: fe:54:7e:f1:ad:de:e9:5b:97:73:cc:05:fd:de:86:2c:bf:7b: de:f8:5f:ce:2e:a5:49:96:7d:70:51:ab:39:7a:79:89:ab:f0: 4e:db:2c:97:24:3f:59:9d:15:0c:e6:f9:d7:74:15:0d:c7:d5: 8f:19:fd:d3:1d:62:04:0c:dd:19:d7:cc:00:d1:dd:42:24:8b: de:43:21:82:69:a9:15:01:7a:cb:b5:c0:7d:41:e2:46:e7:19: 47:11:76:8c:32:7f:77:40:ac:43:95:2e:2f:9f:d6:c3:1b:35: 31:f4:d8:ee:75:51:29:40:a0:ba:19:89:95:e1:45:ea:29:dc: 89:51:05:16:19:68:5e:ce:a5:b8:f7:63:79:4b:1a:27:19:18: 5e:56:51:d2:db:0a:2e:32:43:6e:27:39:b4:3e:02:3c:3e:4f: 59:3b:03:b1:fa:63:63:f6:a6:c5:0f:c5:2d:aa:6e:f7:45:1b: e0:02:43:6f:27:4f:63:6b:e9:49:bf:62:c8:68:7e:86:f5:08: 70:20:ba:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKDhCMUE4MDY1QkU4OEFBNkMxQkEzRkVEQjU0RTA4N0U3 RDJBREI0REUwHhcNMjUxMDE5MDcyMDA2WhcNMjUxMDI2MDcyMDA2WjAYMRYwFAYD VQQDEw02OGY0OTEyNi1hMzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4UsyvWtImoK86Hlcj5YOlE35ucTj4uSP/d37sd3blqY6uWlNqdD6pucjT1k KY0h+saOm+dCnI9N9oLG2HFB3UV7T+ElUajCqZY41c4IlvBREUPxBfvvPX6Ni8Jq doevZ1ihlzne10wG8i6DTouxoRYq0wjRkKDYXyp/eTw3436dnO2L+QyiURwgdtLB EjyfZeWA0BD0BB+JZPfK1pp6PX4QXYRdKbR7Tg1Ks9cqv+v7CQqkGEMmkdvLBg2e 4YzFMyd2klyuK5PAbg1hfMm7OsDRtHrFC+5v+CD1/3rTqkQbKMKTAJVGeUenQlLt hqywVr2e7u2pvDWGLl8cb1DJgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5hLMwA sn/mLjZj7JEr0MdMX5dXMB8GA1UdIwQYMBaAFIsagGW+iKpsG6P+21Tgh+fSrbTe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC9ENzdCOUQ2NkQ1 QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFtd2JvXzdiVk9DSDU5S3R0 TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l4cUFaYjZJcW13Ym9fN2JWT0NINTlLdHRONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzA2OC9ENzdCOUQ2NkQ1QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFt d2JvXzdiVk9DSDU5S3R0TjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApQe1aaZ3Bwa3LdPGRFeUhjklVB5no+UwpnEgm2EvqSp3tTjDu94wv uleryRwvhzVPSvUUtcT+VH7xrd7pW5dzzAX93oYsv3ve+F/OLqVJln1wUas5enmJ q/BO2yyXJD9ZnRUM5vnXdBUNx9WPGf3THWIEDN0Z18wA0d1CJIveQyGCaakVAXrL tcB9QeJG5xlHEXaMMn93QKxDlS4vn9bDGzUx9NjudVEpQKC6GYmV4UXqKdyJUQUW GWhezqW492N5SxonGRheVlHS2wouMkNuJzm0PgI8Pk9ZOwOx+mNj9qbFD8Utqm73 RRvgAkNvJ09ja+lJv2LIaH6G9QhwILrG -----END CERTIFICATE-----Generated at Tue Oct 21 08:07:01 2025 by rpki-client