$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft File: IQlGzanedd75YJiV-_Ie2Exy9Oc.mft (raw, json) Hash identifier: NNsSGRCymBCJi6wcnQREo4uHNX3JvfTdtmtCQPgJCvE= Subject key identifier: BC:75:FA:EA:1C:15:50:F1:5D:5C:1E:35:ED:69:5A:4F:50:CF:65:2D Authority key identifier: 21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7 Certificate issuer: /CN=A91F7537/serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft Manifest number: AE Signing time: Sun 19 Oct 2025 09:18:25 +0000 Manifest this update: Sun 19 Oct 2025 09:18:24 +0000 Manifest next update: Sun 26 Oct 2025 09:18:24 +0000 Files and hashes: 1: IQlGzanedd75YJiV-_Ie2Exy9Oc.crl (hash: wSjcWedPFopTq0PypZ1ywKl09PajGBbu6vs0gvwD25E=) 2: 6156C7F6A27311EFBF7D5E22C4F9AE02.roa (hash: S974N0P9f8Bg6Jc7BIscRXeUqpVDlIBE/NP1Bo0j0PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7537, serialNumber=210946CDA9DE75DEF9609895FBF21ED84C72F4E7 Validity Not Before: Oct 19 09:18:24 2025 GMT Not After : Oct 26 09:18:24 2025 GMT Subject: CN=68f4ace0-9015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:d8:ff:7c:42:01:0a:1c:55:ad:e0:c6:09: d4:0c:60:ff:67:63:4d:db:1c:51:b2:db:8b:0f:fd: cc:04:84:1f:86:37:f4:74:f0:28:12:bf:0d:16:7d: 90:8d:4f:81:aa:b9:e2:4f:79:43:7f:10:46:01:e7: 00:2f:09:b3:d0:6f:5d:71:79:54:9e:b3:26:91:35: 1c:80:d9:2a:a2:43:5d:ee:2c:d5:7d:31:dc:13:4c: bc:29:97:d2:f2:fe:ec:2c:e4:88:59:ff:84:7e:f0: 94:63:60:be:ef:89:7c:aa:d4:fc:12:a4:03:f1:60: 85:bc:9c:e6:75:47:c7:fd:4c:32:33:2c:4f:79:5d: 3d:0c:85:77:0d:0f:c0:eb:2c:d2:4e:49:04:0b:6e: 67:f8:8f:6e:9e:26:45:86:cc:41:b3:bf:84:a6:da: b3:97:11:0d:d1:53:70:e5:4b:c7:8f:d4:1d:7c:60: a8:86:ab:72:0c:cf:d1:31:33:f8:63:a0:85:32:70: 11:0f:5e:a7:62:d8:b0:79:40:85:b6:5b:1c:51:dc: 62:32:a9:c3:49:60:99:bc:58:42:d8:89:3c:be:2e: 32:b9:86:ce:73:2c:42:df:ab:80:f9:a3:5d:71:a0: 6e:9c:59:38:07:12:ed:b7:9b:d8:5b:3e:64:36:6d: e0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:75:FA:EA:1C:15:50:F1:5D:5C:1E:35:ED:69:5A:4F:50:CF:65:2D X509v3 Authority Key Identifier: keyid:21:09:46:CD:A9:DE:75:DE:F9:60:98:95:FB:F2:1E:D8:4C:72:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQlGzanedd75YJiV-_Ie2Exy9Oc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7537/87DD548CA27111EFA392F079C4F9AE02/IQlGzanedd75YJiV-_Ie2Exy9Oc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:55:2a:fc:98:88:85:9d:d8:46:78:88:9b:df:ae:78:11:12: 51:04:b8:71:f2:b2:54:48:8b:ee:85:de:a0:f9:7d:94:72:31: 29:68:6a:55:17:60:16:99:58:ee:13:08:18:9f:f3:46:08:bc: 09:61:10:29:a1:b8:20:b8:02:d4:00:6d:81:4e:f5:42:0a:7e: c8:50:2a:b1:97:0e:96:72:a1:92:d8:73:ba:a4:75:df:23:28: db:04:d4:56:27:00:cc:7a:3f:05:4c:de:b3:05:b2:46:65:c8: 1e:72:78:53:7c:93:70:53:fe:0b:2b:ad:f2:6b:7b:27:97:90: 23:6f:92:a2:99:64:28:f9:93:a7:39:3a:64:40:37:f8:16:85: be:62:b8:27:38:5f:8e:2b:87:c1:39:35:9a:98:cc:1a:23:48: a7:89:92:2c:3a:60:8e:58:4c:44:6f:02:9c:3b:38:26:8f:78: 93:07:e1:5e:db:5e:8b:50:de:e3:b4:51:51:78:d3:b2:49:4d: c8:2f:48:6f:97:23:3b:b0:e1:39:47:95:b8:cd:0b:d0:8e:c2: 1c:dd:a3:3d:33:1b:4c:48:2e:ee:16:94:a1:09:7b:c4:0b:01: d9:49:ff:4b:a5:1f:a3:c4:d4:dc:51:e8:13:c6:e8:ef:0d:09: dd:b2:d5:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MzcxMTAvBgNVBAUTKDIxMDk0NkNEQTlERTc1REVGOTYwOTg5NUZCRjIxRUQ4 NEM3MkY0RTcwHhcNMjUxMDE5MDkxODI0WhcNMjUxMDI2MDkxODI0WjAYMRYwFAYD VQQDEw02OGY0YWNlMC05MDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1vY/3xCAQocVa3gxgnUDGD/Z2NN2xxRstuLD/3MBIQfhjf0dPAoEr8NFn2Q jU+BqrniT3lDfxBGAecALwmz0G9dcXlUnrMmkTUcgNkqokNd7izVfTHcE0y8KZfS 8v7sLOSIWf+EfvCUY2C+74l8qtT8EqQD8WCFvJzmdUfH/UwyMyxPeV09DIV3DQ/A 6yzSTkkEC25n+I9uniZFhsxBs7+EptqzlxEN0VNw5UvHj9QdfGCohqtyDM/RMTP4 Y6CFMnARD16nYtiweUCFtlscUdxiMqnDSWCZvFhC2Ik8vi4yuYbOcyxC36uA+aNd caBunFk4BxLtt5vYWz5kNm3g4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLx1+uoc FVDxXVweNe1pWk9Qz2UtMB8GA1UdIwQYMBaAFCEJRs2p3nXe+WCYlfvyHthMcvTn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUzNy84N0RENTQ4Q0Ey NzExMUVGQTM5MkYwNzlDNEY5QUUwMi9JUWxHemFuZWRkNzVZSmlWLV9JZTJFeHk5 T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRbEd6YW5lZGQ3NVlKaVYtX0llMkV4eTlPYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUzNy84N0RENTQ4Q0EyNzExMUVGQTM5MkYwNzlDNEY5QUUwMi9JUWxHemFuZWRk NzVZSmlWLV9JZTJFeHk5T2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCVSr8mIiFndhGeIib3654ERJRBLhx8rJUSIvuhd6g+X2UcjEpaGpV F2AWmVjuEwgYn/NGCLwJYRApobgguALUAG2BTvVCCn7IUCqxlw6WcqGS2HO6pHXf IyjbBNRWJwDMej8FTN6zBbJGZcgecnhTfJNwU/4LK63ya3snl5Ajb5KimWQo+ZOn OTpkQDf4FoW+YrgnOF+OK4fBOTWamMwaI0iniZIsOmCOWExEbwKcOzgmj3iTB+Fe 216LUN7jtFFReNOySU3IL0hvlyM7sOE5R5W4zQvQjsIc3aM9MxtMSC7uFpShCXvE CwHZSf9LpR+jxNTcUegTxujvDQndstVx -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:29 2025 by rpki-client