$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft File: IsfsPNntTFDolKEbzXDQMQzV-Fk.mft (raw, json) Hash identifier: 8ASlT2mF0s9fA5bPEcTuhTcmq36Ypdpmei3xLmsN6ro= Subject key identifier: 5D:BF:C6:61:07:8E:E5:B7:1B:BE:AE:6E:27:6B:4C:46:44:51:24:4E Authority key identifier: 22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 Certificate issuer: /CN=A91EC225/serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft Manifest number: 9E Signing time: Mon 20 Oct 2025 18:07:42 +0000 Manifest this update: Mon 20 Oct 2025 18:07:41 +0000 Manifest next update: Mon 27 Oct 2025 18:07:41 +0000 Files and hashes: 1: IsfsPNntTFDolKEbzXDQMQzV-Fk.crl (hash: ExQo/5U3L00pbM9UuJsIBxfZGFCpPTf2jOtSoOJjZD8=) 2: 25D2B94CDECD11EFA79E4065C4F9AE02.roa (hash: AoCtdlkJJmrM0z3AC3jCQKm47jbQAWLBDnBBfT5EtYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Validity Not Before: Oct 20 18:07:41 2025 GMT Not After : Oct 27 18:07:41 2025 GMT Subject: CN=68f67a6e-9596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1c:5d:59:85:85:27:86:15:b4:f3:31:f6:95: 6b:1b:8c:1d:cf:75:2a:c5:5d:48:4b:dd:4f:39:b6: 00:a0:fd:24:91:45:f3:53:f1:f2:96:23:60:79:66: 74:6e:7b:9d:65:00:3e:3d:9d:0a:f0:d8:ad:b4:66: bf:ef:3d:ca:a6:97:4e:05:10:d5:ac:c2:93:49:cf: 24:ef:c2:28:83:f5:ad:fa:77:d7:30:9c:a2:a3:9d: ab:29:4a:b1:9a:fe:c3:79:15:e0:f4:c4:4d:e9:bd: f0:50:c6:53:f4:ef:8c:19:53:ef:c4:fc:5b:a0:63: 9c:0e:ab:52:f1:63:6c:bf:62:e7:56:62:9d:46:95: d8:1c:72:4a:e1:b0:c1:21:42:f8:ee:23:c8:9a:df: 85:40:a0:c8:4d:5b:58:be:dc:fa:d4:6b:94:24:77: 96:66:c4:4b:3a:d3:7b:16:01:72:59:6d:d0:92:95: b4:df:90:de:51:ef:24:75:34:32:0b:30:6e:f3:08: bd:cd:16:4b:1d:cc:c9:f3:2b:09:4e:6d:28:5c:3d: b2:df:e1:e6:a4:00:74:43:b5:92:cb:b3:7e:b2:3f: 7b:89:f5:21:b5:03:49:06:7b:47:1d:cb:f2:ce:45: e0:1c:93:1a:3e:16:92:6c:a6:62:a6:c2:03:00:b2: 9b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BF:C6:61:07:8E:E5:B7:1B:BE:AE:6E:27:6B:4C:46:44:51:24:4E X509v3 Authority Key Identifier: keyid:22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:6a:24:67:30:ba:f0:ad:64:20:ee:5d:27:96:83:c4:04:74: e0:55:a0:61:56:ff:72:fe:4d:cc:94:97:d1:3c:a8:35:19:a7: b5:6c:3c:c1:d5:f7:1f:b9:b8:62:03:27:62:05:cb:cd:5d:0b: d5:19:a2:1c:bd:b3:08:56:c4:78:18:8a:26:51:37:e2:cb:a4: a8:a5:7e:68:a5:cf:d0:09:20:47:f0:84:f0:c2:f1:23:a3:33: 5c:4d:c6:46:a4:ef:13:dd:7a:2f:14:82:50:71:5d:95:81:8d: bd:82:7a:cd:3a:f8:04:f5:5f:4f:ab:09:93:cf:78:8f:03:0f: 26:7b:27:df:92:d1:6b:00:91:86:f5:f5:6f:98:98:9e:35:1e: 9c:08:44:7f:7e:2e:e0:8b:ed:5c:9d:84:88:d2:77:1f:0f:ab: 62:34:04:7e:9a:21:2c:f1:e4:ef:b9:9a:e4:3a:1c:30:fb:48: 57:07:d6:ba:3a:36:ff:72:d2:be:8b:3b:74:0f:c6:be:76:56: a0:29:59:7a:ab:67:07:04:92:a4:74:85:cf:9c:66:c2:47:9f: b1:b0:5a:2d:ac:97:81:04:c9:d2:ce:bb:3a:9f:eb:8b:d5:6b: ae:2c:53:e2:96:44:5e:37:2e:1a:13:6e:e1:e5:1b:df:fc:6e: 3d:0f:9f:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKDIyQzdFQzNDRDlFRDRDNTBFODk0QTExQkNENzBEMDMx MENENUY4NTkwHhcNMjUxMDIwMTgwNzQxWhcNMjUxMDI3MTgwNzQxWjAYMRYwFAYD VQQDEw02OGY2N2E2ZS05NTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8hxdWYWFJ4YVtPMx9pVrG4wdz3UqxV1IS91PObYAoP0kkUXzU/HyliNgeWZ0 bnudZQA+PZ0K8NittGa/7z3KppdOBRDVrMKTSc8k78Iog/Wt+nfXMJyio52rKUqx mv7DeRXg9MRN6b3wUMZT9O+MGVPvxPxboGOcDqtS8WNsv2LnVmKdRpXYHHJK4bDB IUL47iPImt+FQKDITVtYvtz61GuUJHeWZsRLOtN7FgFyWW3QkpW035DeUe8kdTQy CzBu8wi9zRZLHczJ8ysJTm0oXD2y3+HmpAB0Q7WSy7N+sj97ifUhtQNJBntHHcvy zkXgHJMaPhaSbKZipsIDALKbewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2/xmEH juW3G76ubidrTEZEUSROMB8GA1UdIwQYMBaAFCLH7DzZ7UxQ6JShG81w0DEM1fhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS9DOTQ0N0ZGMEJF RjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRGRG9sS0VielhEUU1RelYt RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lzZnNQTm50VEZEb2xLRWJ6WERRTVF6Vi1Gay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS9DOTQ0N0ZGMEJFRjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRG RG9sS0VielhEUU1RelYtRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgaiRnMLrwrWQg7l0nloPEBHTgVaBhVv9y/k3MlJfRPKg1Gae1bDzB 1fcfubhiAydiBcvNXQvVGaIcvbMIVsR4GIomUTfiy6SopX5opc/QCSBH8ITwwvEj ozNcTcZGpO8T3XovFIJQcV2VgY29gnrNOvgE9V9PqwmTz3iPAw8meyffktFrAJGG 9fVvmJieNR6cCER/fi7gi+1cnYSI0ncfD6tiNAR+miEs8eTvuZrkOhww+0hXB9a6 Ojb/ctK+izt0D8a+dlagKVl6q2cHBJKkdIXPnGbCR5+xsFotrJeBBMnSzrs6n+uL 1WuuLFPilkReNy4aE27h5Rvf/G49D5+3 -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:53 2025 by rpki-client