$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft File: i0b6Eepu4jUJnkhDPIJJehl7nXw.mft (raw, json) Hash identifier: 9wuvsOzVXWL5byG0hin4AE5srz77rTCgVw7CznvgUZI= Subject key identifier: 96:D1:A8:40:26:D0:0B:56:5C:CC:15:03:20:3D:D2:8C:A5:47:E2:BE Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C Certificate issuer: /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C Certificate serial: 025B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft Manifest number: 0251 Signing time: Sun 19 Oct 2025 03:59:33 +0000 Manifest this update: Sun 19 Oct 2025 03:59:32 +0000 Manifest next update: Sun 26 Oct 2025 03:59:32 +0000 Files and hashes: 1: i0b6Eepu4jUJnkhDPIJJehl7nXw.crl (hash: CwKHfG2xMzjUQLP15NYJvxluWqDwKqNjBaLY8buhOtk=) 2: 0B3B85D63A1B11EDAE662B14C4F9AE02.roa (hash: NR8OS1L1YDEOVGgB6cb2fttAqoXgsKVRMpQfg5GvzjQ=) 3: 0BF33B7C3A1B11EDAE662B14C4F9AE02.roa (hash: U57sQE5yclVx7OH+nAtAbjTBaki6Yvzg4fauYYq6XuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB03A, serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C Validity Not Before: Oct 19 03:59:32 2025 GMT Not After : Oct 26 03:59:32 2025 GMT Subject: CN=68f46224-67c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b0:03:96:01:a3:43:9b:7b:3f:1f:c3:4f:0e: bb:6a:06:b4:a5:7c:f2:cc:2f:05:af:4e:11:62:e0: 10:c0:2f:3a:be:bb:25:4b:e7:45:f4:18:47:5a:17: 76:7a:1a:ab:ba:23:f3:c8:8c:4c:fe:8b:cd:1b:cc: 2f:97:f4:aa:38:ab:6e:9d:5f:60:72:f9:29:ea:27: 5e:4e:fa:1d:e2:ae:7a:93:92:c7:0b:d1:13:76:54: 7a:4a:55:5b:b9:8f:af:3d:5f:95:c4:b9:5a:cc:e4: 7e:c8:30:40:76:f5:df:1b:f4:fb:93:fe:5d:0f:57: b8:a1:21:85:ae:46:34:cb:ee:09:0b:6a:69:ed:6c: b7:16:a4:8d:b5:6d:1a:7e:58:64:2c:72:fe:41:b5: 73:31:c6:55:c8:a7:22:61:8f:ce:c7:27:82:b6:56: ea:09:38:1a:c4:59:00:97:dc:db:3b:16:e3:c2:0c: 4b:ed:d8:1e:da:74:5a:67:ce:72:a8:8b:58:fe:e9: 69:16:72:31:f6:5d:b3:e5:34:72:59:36:c2:85:f2: 94:26:3c:f6:f8:5b:8d:cf:54:9f:5d:46:8b:99:92: 81:bc:37:49:7e:69:6d:e3:bb:da:80:48:1f:0b:e0: 5c:57:1e:f9:59:a5:b8:e6:c3:2f:d3:c5:cb:8c:24: 6b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D1:A8:40:26:D0:0B:56:5C:CC:15:03:20:3D:D2:8C:A5:47:E2:BE X509v3 Authority Key Identifier: keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:b1:50:17:ee:6e:91:21:97:fc:1d:c8:1b:c8:4d:8d:ff:ea: 77:05:02:a2:74:4d:05:28:7b:64:8a:09:22:49:18:ab:f6:89: b3:83:0b:dd:6e:98:98:4c:40:6a:4d:ac:15:85:b8:e3:d7:4d: 7b:27:bb:07:5f:74:8e:eb:77:84:3c:2b:26:5d:0d:4a:e8:e2: 49:8f:72:8d:17:9a:57:bb:4a:0a:82:4c:22:79:08:6a:13:7f: 6f:b0:10:7f:b0:d2:08:9b:ce:48:a4:1b:2e:bc:a3:ee:b6:39: 00:e2:33:0b:aa:56:78:26:ef:fc:f2:1b:2d:2d:d7:83:be:71: d8:4a:11:48:1c:0c:4e:ad:68:e6:e0:3f:a4:22:53:33:a6:0e: 9e:e2:91:06:9d:c2:83:77:65:7a:98:8c:a3:67:5c:8f:da:40: ca:e3:88:54:a3:b7:32:6d:08:79:56:f1:54:3a:9c:6c:bb:fc: 7d:1b:0b:bc:00:e6:6f:bf:8d:e8:80:47:64:b9:8c:40:0f:dd: ea:08:2d:61:05:92:e0:20:7d:b1:b3:b9:81:b8:10:14:d1:ee: 7d:f9:b9:6d:1a:a9:ca:75:77:b8:55:d9:b3:05:b3:2e:1e:de: 5a:8e:61:d4:ad:f0:e8:fb:d3:59:25:f9:94:44:98:21:8a:28: a4:5e:17:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwM0ExMTAvBgNVBAUTKDhCNDZGQTExRUE2RUUyMzUwOTlFNDg0MzNDODI0OTdB MTk3QjlEN0MwHhcNMjUxMDE5MDM1OTMyWhcNMjUxMDI2MDM1OTMyWjAYMRYwFAYD VQQDEw02OGY0NjIyNC02N2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbADlgGjQ5t7Px/DTw67aga0pXzyzC8Fr04RYuAQwC86vrslS+dF9BhHWhd2 ehqruiPzyIxM/ovNG8wvl/SqOKtunV9gcvkp6ideTvod4q56k5LHC9ETdlR6SlVb uY+vPV+VxLlazOR+yDBAdvXfG/T7k/5dD1e4oSGFrkY0y+4JC2pp7Wy3FqSNtW0a flhkLHL+QbVzMcZVyKciYY/OxyeCtlbqCTgaxFkAl9zbOxbjwgxL7dge2nRaZ85y qItY/ulpFnIx9l2z5TRyWTbChfKUJjz2+FuNz1SfXUaLmZKBvDdJfmlt47vagEgf C+BcVx75WaW45sMv08XLjCRrkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbRqEAm 0AtWXMwVAyA90oylR+K+MB8GA1UdIwQYMBaAFItG+hHqbuI1CZ5IQzyCSXoZe518 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjAzQS9ERkM2OEQ2NDNB MTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRqVUpua2hEUElKSmVobDdu WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kwYjZFZXB1NGpVSm5raERQSUpKZWhsN25Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjAzQS9ERkM2OEQ2NDNBMTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRq VUpua2hEUElKSmVobDduWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnsVAX7m6RIZf8HcgbyE2N/+p3BQKidE0FKHtkigkiSRir9omzgwvd bpiYTEBqTawVhbjj1017J7sHX3SO63eEPCsmXQ1K6OJJj3KNF5pXu0oKgkwieQhq E39vsBB/sNIIm85IpBsuvKPutjkA4jMLqlZ4Ju/88hstLdeDvnHYShFIHAxOrWjm 4D+kIlMzpg6e4pEGncKDd2V6mIyjZ1yP2kDK44hUo7cybQh5VvFUOpxsu/x9Gwu8 AOZvv43ogEdkuYxAD93qCC1hBZLgIH2xs7mBuBAU0e59+bltGqnKdXe4VdmzBbMu Ht5ajmHUrfDo+9NZJfmURJghiiikXhfl -----END CERTIFICATE-----Generated at Sun Oct 19 23:23:43 2025 by rpki-client