$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft File: iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft (raw, json) Hash identifier: F1Yy4EGZ8qRIV/w5GoQs86dfCXO1z3xQoSXG4JAsDR8= Subject key identifier: E1:FE:74:5B:24:05:6B:AB:AD:37:B2:44:EC:BD:D9:FC:B9:B7:48:6E Authority key identifier: 89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34 Certificate issuer: /CN=A91F2046/serialNumber=894809630956924382CC39D460FA4764B0175934 Certificate serial: 0C40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft Manifest number: 0C39 Signing time: Sat 18 Oct 2025 19:26:21 +0000 Manifest this update: Sat 18 Oct 2025 19:26:21 +0000 Manifest next update: Sat 25 Oct 2025 19:26:21 +0000 Files and hashes: 1: iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl (hash: xzW/F7Je2DBijMrcz27GJecxNG5buS0Vi0/6TZLWheM=) 2: 0D2573FA173E11EA947B2976C4F9AE02.roa (hash: LIAL0RVUWvTNgpPqawClJ1GtfpOkeD0nFPnq/+uTw9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3136 (0xc40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2046, serialNumber=894809630956924382CC39D460FA4764B0175934 Validity Not Before: Oct 18 19:26:21 2025 GMT Not After : Oct 25 19:26:21 2025 GMT Subject: CN=68f3e9dd-7fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e2:85:3b:31:93:ad:8b:25:3b:7e:00:48:7d: 0e:1e:a1:bd:f1:08:54:a6:eb:78:4c:69:71:5d:a5: eb:ca:fe:66:e1:fd:1c:c7:15:78:e3:6e:36:31:31: 94:aa:d1:7f:76:69:7f:8d:4f:6a:32:5c:c9:d6:e4: 2a:c3:8e:ec:58:4e:8a:c3:ae:66:51:bd:d1:2f:b0: ce:a6:14:7b:e9:76:17:c1:4e:26:ea:80:ab:13:6b: 80:12:61:f1:b4:b7:2b:66:8c:e6:6f:b0:2d:10:1d: 36:a2:0e:12:7e:fd:05:fb:0a:f2:80:54:3c:a1:af: cd:06:29:61:8b:d4:14:dc:a0:77:04:06:e7:30:74: b4:c3:25:3a:e8:d1:4e:2d:d3:9a:d5:bd:cb:7d:e7: f9:e2:ac:64:bd:5b:07:00:e8:c0:13:84:5e:13:ad: 05:95:00:ce:ec:17:0d:a0:8a:7e:44:1f:97:81:0d: 6e:22:18:fe:d1:13:97:00:66:a0:b2:f8:66:d7:5a: 9a:2d:61:3a:0a:5e:f8:ba:bf:f1:32:f9:c8:55:71: a9:bb:4b:17:cd:0f:a9:4e:a8:fb:02:b3:43:e4:68: 63:b0:c5:88:d5:15:7c:3c:78:f7:4d:59:62:4a:db: 89:38:bc:84:ef:92:fa:58:8e:2c:d7:bc:af:1d:01: 65:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FE:74:5B:24:05:6B:AB:AD:37:B2:44:EC:BD:D9:FC:B9:B7:48:6E X509v3 Authority Key Identifier: keyid:89:48:09:63:09:56:92:43:82:CC:39:D4:60:FA:47:64:B0:17:59:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2046/3FB02AE214D511EA8126400DC4F9AE02/iUgJYwlWkkOCzDnUYPpHZLAXWTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:fc:24:fa:a3:2b:ee:c7:24:30:ee:62:c1:12:67:75:06:b4: 21:5c:1f:ae:6f:21:e1:c7:e6:16:5e:fc:52:09:73:6e:e7:b9: 94:76:dd:0f:2f:fe:d1:0f:c6:6f:52:29:69:04:0b:81:fb:e8: 99:87:a9:33:78:fa:9e:75:a9:8b:45:5e:97:6f:18:4b:6e:67: 49:8a:61:9a:9f:f3:29:f6:ef:d8:bb:44:23:5a:91:b2:08:96: 40:be:05:9a:e6:78:a9:cf:0c:2d:90:91:bc:bb:82:20:bf:df: af:76:06:9a:e0:2c:d5:05:75:49:ff:09:6d:95:67:db:99:5c: 1c:f1:97:a0:63:4e:d8:f7:ba:40:1c:ae:f9:b3:3a:ff:2b:9b: 78:29:94:fc:4f:e4:bd:30:39:5f:1c:3a:f3:36:23:bc:91:39: 52:ce:6f:04:05:74:e2:0c:6b:97:68:dc:1a:e6:d3:e3:ec:11: c3:03:bb:6b:ab:94:b8:13:88:ce:69:7b:53:e2:49:ee:6f:8a: c3:0c:f1:4f:1e:46:af:22:89:fd:dc:82:b9:cb:dc:48:03:2d: 14:1c:bd:cb:ad:fa:c5:05:e6:ff:ac:dd:fb:fd:6f:fd:42:fd: eb:40:50:4a:50:22:d5:8b:64:df:49:9c:5a:61:ef:65:15:87: 32:d2:45:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwNDYxMTAvBgNVBAUTKDg5NDgwOTYzMDk1NjkyNDM4MkNDMzlENDYwRkE0NzY0 QjAxNzU5MzQwHhcNMjUxMDE4MTkyNjIxWhcNMjUxMDI1MTkyNjIxWjAYMRYwFAYD VQQDEw02OGYzZTlkZC03ZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6uKFOzGTrYslO34ASH0OHqG98QhUput4TGlxXaXryv5m4f0cxxV44242MTGU qtF/dml/jU9qMlzJ1uQqw47sWE6Kw65mUb3RL7DOphR76XYXwU4m6oCrE2uAEmHx tLcrZozmb7AtEB02og4Sfv0F+wrygFQ8oa/NBilhi9QU3KB3BAbnMHS0wyU66NFO LdOa1b3Lfef54qxkvVsHAOjAE4ReE60FlQDO7BcNoIp+RB+XgQ1uIhj+0ROXAGag svhm11qaLWE6Cl74ur/xMvnIVXGpu0sXzQ+pTqj7ArND5GhjsMWI1RV8PHj3TVli StuJOLyE75L6WI4s17yvHQFllwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOH+dFsk BWurrTeyROy92fy5t0huMB8GA1UdIwQYMBaAFIlICWMJVpJDgsw51GD6R2SwF1k0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjA0Ni8zRkIwMkFFMjE0 RDUxMUVBODEyNjQwMERDNEY5QUUwMi9pVWdKWXdsV2trT0N6RG5VWVBwSFpMQVhX VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVZ0pZd2xXa2tPQ3pEblVZUHBIWkxBWFdUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjA0Ni8zRkIwMkFFMjE0RDUxMUVBODEyNjQwMERDNEY5QUUwMi9pVWdKWXdsV2tr T0N6RG5VWVBwSFpMQVhXVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM/CT6oyvuxyQw7mLBEmd1BrQhXB+ubyHhx+YWXvxSCXNu57mUdt0P L/7RD8ZvUilpBAuB++iZh6kzePqedamLRV6XbxhLbmdJimGan/Mp9u/Yu0QjWpGy CJZAvgWa5nipzwwtkJG8u4Igv9+vdgaa4CzVBXVJ/wltlWfbmVwc8ZegY07Y97pA HK75szr/K5t4KZT8T+S9MDlfHDrzNiO8kTlSzm8EBXTiDGuXaNwa5tPj7BHDA7tr q5S4E4jOaXtT4knub4rDDPFPHkavIon93IK5y9xIAy0UHL3LrfrFBeb/rN37/W/9 Qv3rQFBKUCLVi2TfSZxaYe9lFYcy0kUF -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:18 2025 by rpki-client