$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft File: ibqQy31EKoOHxquTBzjKIA4Te60.mft (raw, json) Hash identifier: 7zjAwYTQgHsMJkUhH7L0rwhk5sp1gjrrJlkA6S6JBzA= Subject key identifier: 59:0F:FE:A0:41:F7:75:0E:A2:B1:70:F0:70:AA:25:52:02:CC:57:60 Authority key identifier: 89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD Certificate issuer: /CN=A91DD25E/serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft Manifest number: 09 Signing time: Sun 19 Oct 2025 11:37:43 +0000 Manifest this update: Sun 19 Oct 2025 11:37:42 +0000 Manifest next update: Sun 26 Oct 2025 11:37:42 +0000 Files and hashes: 1: ibqQy31EKoOHxquTBzjKIA4Te60.crl (hash: MAhD/U9Hl1DPLWXRSZffwefJvx/xoS6q+cfI4Pcj4kM=) 2: 9CF6A89AA27B11F09D816A4BC4F9AE02.roa (hash: 0eBxKaOD/grMOoAgLIRsVrl+pKw/EreQcuXwa4ak1TU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD25E, serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD Validity Not Before: Oct 19 11:37:42 2025 GMT Not After : Oct 26 11:37:42 2025 GMT Subject: CN=68f4cd87-c7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:65:1a:65:03:76:1d:58:b7:1f:e0:f5:20: 70:62:9a:36:22:ee:0b:22:1d:c6:41:ef:ca:76:42: 4e:92:db:0f:5b:24:ce:83:41:f1:d8:0e:93:33:33: 36:af:21:c8:c5:cf:3e:66:27:1a:91:52:ed:8a:31: dd:86:66:6a:b4:c5:ea:fb:95:9b:94:23:b3:bc:47: 8f:2b:ef:a9:dd:53:6f:1b:4d:59:0f:fe:af:9d:59: 2f:c6:f1:1f:de:98:10:f0:0c:ae:b4:63:fb:47:4d: a5:e9:98:0b:ef:ef:10:85:94:ba:85:e1:9f:5d:cd: 78:4a:aa:75:79:54:ee:c2:7c:a5:35:1a:81:3a:8a: 2a:85:11:71:5a:c0:4c:e9:2a:ec:6d:2a:23:a1:c6: d5:2e:78:68:45:6c:d7:22:47:41:ad:75:97:a9:41: 91:0a:7d:bf:55:e2:9a:77:51:86:96:20:f6:f9:5f: b3:47:3f:24:7d:2c:d0:6c:59:1d:74:44:3f:3f:c5: 51:c7:2a:5b:3a:7e:ac:54:3a:9e:0f:dd:16:6f:b2: 74:9a:cc:da:64:9b:44:06:e9:51:05:96:e7:7a:5d: 8d:1c:db:42:8a:15:fc:46:b2:f9:38:b4:ff:0f:2b: 7d:4d:6a:ea:eb:2d:96:5c:2b:b7:19:29:bf:aa:3c: 18:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0F:FE:A0:41:F7:75:0E:A2:B1:70:F0:70:AA:25:52:02:CC:57:60 X509v3 Authority Key Identifier: keyid:89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b7:47:2d:57:6d:d3:7d:ec:27:15:51:54:c0:20:d9:87:58: 50:a1:b0:c0:c3:58:4b:15:6e:6f:7b:b0:42:b9:00:9c:56:30: 94:5f:a5:fc:ed:f5:bc:b3:63:ea:57:09:ef:af:b8:c9:d2:c9: 4d:cb:f1:8c:a9:e7:91:27:07:76:4c:e0:e9:99:76:ed:4f:c7: f0:52:98:34:71:7c:94:cc:ff:d4:55:f0:c9:db:f0:43:f4:99: 32:e8:6b:a4:aa:9b:8d:28:3d:9d:f5:3e:33:11:3b:d8:30:23: 68:74:ba:e4:f7:57:4d:3f:73:de:30:e9:20:99:e2:ca:8d:9e: ba:f4:e9:4c:cc:ab:2b:78:77:72:45:b5:52:e7:28:7f:02:88: 53:3b:07:0a:00:93:07:bb:39:ec:60:d4:83:31:db:6d:79:59: 46:30:c4:f9:8b:17:cd:00:a0:a8:70:db:29:be:18:3c:a6:50: fe:0d:62:01:9f:e1:d8:a4:5d:f2:f7:42:42:10:ff:00:78:a6: da:5a:bd:0d:ed:d9:80:e1:36:b4:da:de:c4:dc:b3:5e:a4:d6: 1d:0e:65:0b:51:86:c6:0e:d4:ec:9b:c9:1d:d7:bd:5b:c4:ee: b8:a5:2f:b2:39:f1:55:d7:80:2c:69:ca:50:e0:39:5f:a8:96: 63:e0:ce:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDI1RTExMC8GA1UEBRMoODlCQTkwQ0I3RDQ0MkE4Mzg3QzZBQjkzMDczOENBMjAw RTEzN0JBRDAeFw0yNTEwMTkxMTM3NDJaFw0yNTEwMjYxMTM3NDJaMBgxFjAUBgNV BAMTDTY4ZjRjZDg3LWM3YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxwGUaZQN2HVi3H+D1IHBimjYi7gsiHcZB78p2Qk6S2w9bJM6DQfHYDpMzMzav IcjFzz5mJxqRUu2KMd2GZmq0xer7lZuUI7O8R48r76ndU28bTVkP/q+dWS/G8R/e mBDwDK60Y/tHTaXpmAvv7xCFlLqF4Z9dzXhKqnV5VO7CfKU1GoE6iiqFEXFawEzp KuxtKiOhxtUueGhFbNciR0GtdZepQZEKfb9V4pp3UYaWIPb5X7NHPyR9LNBsWR10 RD8/xVHHKls6fqxUOp4P3RZvsnSazNpkm0QG6VEFlud6XY0c20KKFfxGsvk4tP8P K31NaurrLZZcK7cZKb+qPBidAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWQ/+oEH3 dQ6isXDwcKolUgLMV2AwHwYDVR0jBBgwFoAUibqQy31EKoOHxquTBzjKIA4Te60w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjVFLzM1NUJFQzg2QTI3 QjExRjA5ODBGRDA0QUM0RjlBRTAyL2licVF5MzFFS29PSHhxdVRCempLSUE0VGU2 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaWJxUXkzMUVLb09IeHF1VEJ6aktJQTRUZTYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MjVFLzM1NUJFQzg2QTI3QjExRjA5ODBGRDA0QUM0RjlBRTAyL2licVF5MzFFS29P SHhxdVRCempLSUE0VGU2MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA+3Ry1XbdN97CcVUVTAINmHWFChsMDDWEsVbm97sEK5AJxWMJRfpfzt 9byzY+pXCe+vuMnSyU3L8Yyp55EnB3ZM4OmZdu1Px/BSmDRxfJTM/9RV8Mnb8EP0 mTLoa6Sqm40oPZ31PjMRO9gwI2h0uuT3V00/c94w6SCZ4sqNnrr06UzMqyt4d3JF tVLnKH8CiFM7BwoAkwe7Oexg1IMx2215WUYwxPmLF80AoKhw2ym+GDymUP4NYgGf 4dikXfL3QkIQ/wB4ptpavQ3t2YDhNrTa3sTcs16k1h0OZQtRhsYO1OybyR3XvVvE 7rilL7I58VXXgCxpylDgOV+olmPgzsA= -----END CERTIFICATE-----Generated at Tue Oct 21 01:32:47 2025 by rpki-client