$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft File: IrN0ThSJpKURK82Mvxepj_HbZnU.mft (raw, json) Hash identifier: xZNf0L3VquAWk4DRU96lTR0hKp5Uj6wjdXqAfBZMnHI= Subject key identifier: 39:70:6E:6D:3B:DF:24:58:84:83:E4:A8:17:97:2B:A2:F8:33:5F:37 Authority key identifier: 22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75 Certificate issuer: /CN=A91F2B54/serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675 Certificate serial: 035A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft Manifest number: 0353 Signing time: Sun 19 Oct 2025 03:02:25 +0000 Manifest this update: Sun 19 Oct 2025 03:02:25 +0000 Manifest next update: Sun 26 Oct 2025 03:02:25 +0000 Files and hashes: 1: IrN0ThSJpKURK82Mvxepj_HbZnU.crl (hash: BPivw4llOZDypDf1S3t1I9dAeGBsAYczmWvhgTCr204=) 2: F2C91F5678BE11EFBB3FC76DC4F9AE02.roa (hash: du3inK9qkjwR/A2n6vO6SMQjDynHJ0y0PAziJifzAng=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 858 (0x35a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B54, serialNumber=22B3744E1489A4A5112BCD8CBF17A98FF1DB6675 Validity Not Before: Oct 19 03:02:25 2025 GMT Not After : Oct 26 03:02:25 2025 GMT Subject: CN=68f454c1-c68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e6:cd:44:06:cf:bc:30:d4:b9:44:14:df:54: 4e:6a:27:0b:dd:ca:12:f5:98:2c:d2:05:28:72:ed: 6a:2a:97:8c:4c:dd:11:76:0d:f9:99:ef:af:0b:0f: ad:f1:67:94:a4:9a:22:44:03:db:47:9a:1f:32:2a: 30:f9:8f:47:81:c9:03:b1:54:0a:df:7a:eb:2c:2c: dc:c8:da:52:6e:d9:0e:9b:e5:15:ac:8b:16:b3:36: fc:85:64:2b:c9:dd:98:89:55:1a:ba:9a:32:28:5e: 3e:87:55:59:57:c6:53:18:ed:b8:aa:d1:81:5d:f7: 41:46:58:7b:36:65:ab:5d:fb:e8:34:6f:46:82:56: be:9a:b5:7e:58:1a:86:ff:c3:d8:39:d7:cd:38:99: 9f:d7:e4:08:4f:b3:64:8c:e6:00:6a:17:61:db:7d: c7:1f:ca:d1:0f:43:a1:f6:5b:8a:e8:82:7d:8f:2a: 0a:ea:50:cd:bc:bf:37:bd:64:c0:99:39:14:f0:16: f2:19:25:33:32:c2:2d:00:97:37:3c:b5:3e:85:33: c1:19:b6:04:b2:f8:2c:71:64:de:2f:8d:f4:25:b5: 2d:3c:72:1a:da:f2:89:c4:cb:7f:a7:f9:41:70:f6: 33:93:e0:77:96:0f:ba:82:6c:c0:9d:ed:6b:97:fb: 00:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:70:6E:6D:3B:DF:24:58:84:83:E4:A8:17:97:2B:A2:F8:33:5F:37 X509v3 Authority Key Identifier: keyid:22:B3:74:4E:14:89:A4:A5:11:2B:CD:8C:BF:17:A9:8F:F1:DB:66:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrN0ThSJpKURK82Mvxepj_HbZnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B54/727375B4D4F511EC8E13FE4EC4F9AE02/IrN0ThSJpKURK82Mvxepj_HbZnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:56:d0:c5:6d:88:74:c8:9f:c7:9f:39:0c:7f:b3:75:49:ea: 1b:12:fb:31:17:c0:f4:cc:a3:56:cb:6c:58:cb:7a:6b:d6:d7: 14:73:2d:94:f6:2c:41:72:d2:4c:1f:09:c0:e2:0f:c1:8f:c9: c8:96:de:fe:cc:2e:c4:c8:94:51:8a:85:c4:06:cd:26:db:22: d4:36:a2:fb:52:13:a9:11:a2:48:ac:bf:09:ae:85:68:41:c8: 15:a6:77:73:9b:87:d9:4d:f9:b4:7d:ed:4b:90:ad:e0:64:3f: 40:67:b8:e2:de:02:88:e9:b5:aa:92:2a:ee:63:e3:b2:fc:7b: dd:4d:de:df:b0:1b:52:43:9c:64:aa:16:42:af:37:49:1d:91: 2c:b6:04:d4:51:99:8b:2a:6a:ac:3e:a1:71:e4:32:d0:87:e7: 80:15:dd:b4:fe:15:04:3b:74:5f:4a:1d:9f:a1:0f:f0:89:54: 99:a3:e4:6c:50:40:22:1b:27:3b:f9:db:89:02:2a:e6:aa:ac: f4:82:88:22:e9:b4:76:32:e5:15:c3:1d:af:98:12:ef:d6:df: 42:18:e5:5e:78:0c:7b:56:d6:78:b2:04:b5:83:ba:cf:6e:c4: 8f:27:d5:f6:bc:3e:25:1e:a1:73:c7:ba:6f:0a:9b:25:00:5a: 6a:77:e6:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNTQxMTAvBgNVBAUTKDIyQjM3NDRFMTQ4OUE0QTUxMTJCQ0Q4Q0JGMTdBOThG RjFEQjY2NzUwHhcNMjUxMDE5MDMwMjI1WhcNMjUxMDI2MDMwMjI1WjAYMRYwFAYD VQQDEw02OGY0NTRjMS1jNjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuObNRAbPvDDUuUQU31ROaicL3coS9Zgs0gUocu1qKpeMTN0Rdg35me+vCw+t 8WeUpJoiRAPbR5ofMiow+Y9HgckDsVQK33rrLCzcyNpSbtkOm+UVrIsWszb8hWQr yd2YiVUaupoyKF4+h1VZV8ZTGO24qtGBXfdBRlh7NmWrXfvoNG9Ggla+mrV+WBqG /8PYOdfNOJmf1+QIT7NkjOYAahdh233HH8rRD0Oh9luK6IJ9jyoK6lDNvL83vWTA mTkU8BbyGSUzMsItAJc3PLU+hTPBGbYEsvgscWTeL430JbUtPHIa2vKJxMt/p/lB cPYzk+B3lg+6gmzAne1rl/sACwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlwbm07 3yRYhIPkqBeXK6L4M183MB8GA1UdIwQYMBaAFCKzdE4UiaSlESvNjL8XqY/x22Z1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI1NC83MjczNzVCNEQ0 RjUxMUVDOEUxM0ZFNEVDNEY5QUUwMi9Jck4wVGhTSnBLVVJLODJNdnhlcGpfSGJa blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyTjBUaFNKcEtVUks4Mk12eGVwal9IYlpuVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI1NC83MjczNzVCNEQ0RjUxMUVDOEUxM0ZFNEVDNEY5QUUwMi9Jck4wVGhTSnBL VVJLODJNdnhlcGpfSGJablUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEVtDFbYh0yJ/HnzkMf7N1SeobEvsxF8D0zKNWy2xYy3pr1tcUcy2U 9ixBctJMHwnA4g/Bj8nIlt7+zC7EyJRRioXEBs0m2yLUNqL7UhOpEaJIrL8JroVo QcgVpndzm4fZTfm0fe1LkK3gZD9AZ7ji3gKI6bWqkiruY+Oy/HvdTd7fsBtSQ5xk qhZCrzdJHZEstgTUUZmLKmqsPqFx5DLQh+eAFd20/hUEO3RfSh2foQ/wiVSZo+Rs UEAiGyc7+duJAirmqqz0gogi6bR2MuUVwx2vmBLv1t9CGOVeeAx7VtZ4sgS1g7rP bsSPJ9X2vD4lHqFzx7pvCpslAFpqd+a9 -----END CERTIFICATE-----Generated at Mon Oct 20 11:32:53 2025 by rpki-client