$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft File: 7IKxn5B5ht6zu4AtInPQNNFBSy0.mft (raw, json) Hash identifier: 9KuaqAC9vNlYUk5Iem8BEcFXdMrUlADX4kNaO9p+s8Q= Subject key identifier: 34:5C:D8:BE:E0:B4:32:04:36:AA:C9:83:20:1D:52:FE:6C:18:7A:A1 Authority key identifier: EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D Certificate issuer: /CN=A91EC3CA/serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D Certificate serial: 0BFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft Manifest number: 0BF5 Signing time: Sat 18 Oct 2025 19:39:22 +0000 Manifest this update: Sat 18 Oct 2025 19:39:21 +0000 Manifest next update: Sat 25 Oct 2025 19:39:21 +0000 Files and hashes: 1: 7IKxn5B5ht6zu4AtInPQNNFBSy0.crl (hash: awuCda3a/YX17aaMSyyPaOtr840E8oKrffdFZPMeUro=) 2: 8C76CF46218411EAA6A8DB38C4F9AE02.roa (hash: ygQ6vfqXgCOjWaI/M9+8sSQcLe6CReohgnbLpV4rvKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3067 (0xbfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3CA, serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D Validity Not Before: Oct 18 19:39:21 2025 GMT Not After : Oct 25 19:39:21 2025 GMT Subject: CN=68f3ece9-0bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:15:41:72:b1:d9:c4:86:5b:85:1c:82:b7: 23:ed:24:62:77:df:8e:97:05:0d:44:77:6a:b8:ce: ba:41:b4:26:c1:ca:13:9d:dd:b5:f1:03:04:44:af: 79:cb:c1:f4:07:1b:bc:a8:cc:f7:1b:c8:05:c1:2b: 25:c8:5b:22:e2:87:e1:15:51:e7:f1:f1:21:17:03: 8f:b6:66:1b:db:23:e5:9a:a8:3c:a0:f8:24:f4:3d: 91:87:2c:55:55:14:f6:08:db:1c:a8:b8:2c:e5:b8: 6b:9b:19:bb:22:50:41:df:7e:d6:12:5b:4a:80:a0: 29:d9:64:43:ef:b5:6b:e8:5e:af:f1:70:55:ad:94: c3:b8:60:c4:47:e6:17:0b:41:a5:11:7d:3d:de:87: 9d:6a:97:25:b1:51:a2:52:3a:b1:ab:3c:40:65:e7: 38:6b:18:89:6c:da:6d:99:31:7e:62:c0:05:02:05: 76:eb:1e:b7:70:7e:67:37:21:d2:64:11:7c:f9:5a: 48:d4:4f:86:c4:c7:77:ab:1f:b0:fc:f4:7f:5b:96: 20:3c:70:cd:a8:76:a0:e6:93:13:71:0d:a6:55:b8: e4:e9:39:6e:44:0a:db:48:e4:05:ff:de:ac:24:98: f3:7e:a2:3e:58:bb:c5:21:e6:71:5c:40:bb:37:98: 2c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5C:D8:BE:E0:B4:32:04:36:AA:C9:83:20:1D:52:FE:6C:18:7A:A1 X509v3 Authority Key Identifier: keyid:EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:c6:d9:28:20:88:8a:3f:9a:97:5b:fe:e2:e4:b3:f2:b3:7f: 92:8b:74:7e:b1:c5:fe:62:cf:ea:b3:2a:08:9c:78:e7:90:cf: c0:81:1a:0d:5b:4d:b4:a0:9f:51:e0:f5:f7:1b:99:74:d3:a4: 38:8c:17:6e:06:13:7a:23:dc:7d:ab:9b:cf:b1:92:3f:d9:66: a9:37:b6:15:2a:ab:ff:6e:b6:23:8e:b0:61:63:9e:bd:a6:56: e6:9b:08:ac:2b:8d:ab:b8:cb:ef:a3:b6:20:bc:90:ac:a7:8e: a3:a5:a9:48:ed:24:72:84:78:a4:8c:e3:98:02:1d:b5:ff:1e: 18:49:bd:11:97:2d:09:94:35:76:a6:1e:30:93:ea:25:47:cd: fb:f7:93:20:b8:0b:a8:ab:3f:30:60:e5:3a:32:00:6c:03:73: 68:41:bb:4a:c6:7d:7e:0a:0f:d3:57:0e:4f:cb:7d:65:e3:e1: d2:36:45:77:aa:f4:bc:05:10:27:7d:f4:a2:08:75:b3:96:b6: ef:e5:a7:fe:e5:be:29:0d:cd:b3:01:7e:c4:75:32:8f:bf:36: 02:fc:14:80:91:ec:36:aa:d5:6f:b3:2c:31:a7:bf:67:e6:49: c6:4c:29:c8:47:41:33:e0:01:57:ad:e4:7c:a2:46:36:69:00: ff:e2:48:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQ0ExMTAvBgNVBAUTKEVDODJCMTlGOTA3OTg2REVCM0JCODAyRDIyNzNEMDM0 RDE0MTRCMkQwHhcNMjUxMDE4MTkzOTIxWhcNMjUxMDI1MTkzOTIxWjAYMRYwFAYD VQQDEw02OGYzZWNlOS0wYmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunUVQXKx2cSGW4Ucgrcj7SRid9+OlwUNRHdquM66QbQmwcoTnd218QMERK95 y8H0Bxu8qMz3G8gFwSslyFsi4ofhFVHn8fEhFwOPtmYb2yPlmqg8oPgk9D2RhyxV VRT2CNscqLgs5bhrmxm7IlBB337WEltKgKAp2WRD77Vr6F6v8XBVrZTDuGDER+YX C0GlEX093oedapclsVGiUjqxqzxAZec4axiJbNptmTF+YsAFAgV26x63cH5nNyHS ZBF8+VpI1E+GxMd3qx+w/PR/W5YgPHDNqHag5pMTcQ2mVbjk6TluRArbSOQF/96s JJjzfqI+WLvFIeZxXEC7N5gsIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRc2L7g tDIENqrJgyAdUv5sGHqhMB8GA1UdIwQYMBaAFOyCsZ+QeYbes7uALSJz0DTRQUst MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNDQS84MTM4NjA0NjIx ODMxMUVBOENCODQ3MzdDNEY5QUUwMi83SUt4bjVCNWh0Nnp1NEF0SW5QUU5ORkJT eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdJS3huNUI1aHQ2enU0QXRJblBRTk5GQlN5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNDQS84MTM4NjA0NjIxODMxMUVBOENCODQ3MzdDNEY5QUUwMi83SUt4bjVCNWh0 Nnp1NEF0SW5QUU5ORkJTeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCxtkoIIiKP5qXW/7i5LPys3+Si3R+scX+Ys/qsyoInHjnkM/AgRoN W020oJ9R4PX3G5l006Q4jBduBhN6I9x9q5vPsZI/2WapN7YVKqv/brYjjrBhY569 plbmmwisK42ruMvvo7YgvJCsp46jpalI7SRyhHikjOOYAh21/x4YSb0Rly0JlDV2 ph4wk+olR83795MguAuoqz8wYOU6MgBsA3NoQbtKxn1+Cg/TVw5Py31l4+HSNkV3 qvS8BRAnffSiCHWzlrbv5af+5b4pDc2zAX7EdTKPvzYC/BSAkew2qtVvsywxp79n 5knGTCnIR0Ez4AFXreR8okY2aQD/4ki+ -----END CERTIFICATE-----Generated at Mon Oct 20 13:35:01 2025 by rpki-client