$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft File: I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft (raw, json) Hash identifier: MBYduOuqU+ZST39BDJjVqiei07FBkog4ny8qKJD+NH8= Subject key identifier: 59:49:9F:41:A9:83:B4:8F:1C:62:C0:FE:AC:36:BB:24:5D:A8:04:1B Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 Certificate issuer: /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft Manifest number: E3 Signing time: Mon 27 Oct 2025 07:38:40 +0000 Manifest this update: Mon 27 Oct 2025 07:38:39 +0000 Manifest next update: Mon 03 Nov 2025 07:38:39 +0000 Files and hashes: 1: I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl (hash: UqVEZvuEZNhgrJHvJmwvj7GUucvYGWuzy1ZuX5Ediss=) 2: 43A05F96ABF111F0AF8F880CC4F9AE02.roa (hash: jHfK6IyCLOgzWRIKFIJt7aRe94FDSOoHp8+mPczDRNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 07:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91122B3, serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Validity Not Before: Oct 27 07:38:39 2025 GMT Not After : Nov 3 07:38:39 2025 GMT Subject: CN=68ff2180-b32f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f8:c4:a3:ff:8d:9e:82:48:6d:ae:da:71:da: be:b1:24:f1:bb:2f:17:1f:7a:b5:b4:b9:38:a6:ed: 70:a1:3e:8a:7a:35:72:30:1c:87:ad:27:7e:f3:2c: 6a:1a:b7:dd:a0:37:24:db:99:be:5e:72:ab:98:30: ce:ca:b6:ca:9b:5e:de:91:f3:47:27:a7:b5:4a:49: cf:d1:16:ab:7e:bb:21:b8:07:c4:92:e9:8e:0a:ee: 07:5d:37:a7:32:c7:38:b4:14:0c:2f:64:82:9f:bf: b8:20:c1:89:ad:4e:3a:87:51:d7:1a:34:ff:5e:96: bc:fb:19:3f:59:0d:c6:a7:5a:79:7d:57:f7:45:ea: b4:25:d4:8b:b4:36:a7:ec:1c:e8:d3:7e:6e:8a:53: 98:c0:ca:94:bb:11:1b:61:41:c7:37:76:28:6b:92: 8d:d2:25:a9:73:13:2e:68:af:26:f8:c3:c6:1d:67: c7:fb:ec:c5:8e:ef:d8:3f:d6:e2:8f:fd:96:d3:8d: b3:fd:8d:bc:d5:e3:7d:1d:15:02:48:de:e0:06:35: 9d:da:52:3a:c6:50:ca:f4:fe:11:0d:b8:8e:f5:ba: a1:06:64:48:f7:29:2d:b2:bd:5c:f0:e7:19:0b:63: 62:2c:f0:d7:75:e1:fe:44:ed:9d:64:8b:dd:b8:4d: 15:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:49:9F:41:A9:83:B4:8F:1C:62:C0:FE:AC:36:BB:24:5D:A8:04:1B X509v3 Authority Key Identifier: keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:56:8b:0e:d3:ab:ac:d6:21:00:21:4a:a3:76:ad:57:ac:64: 1e:f4:67:8f:92:a1:99:44:1a:49:17:f8:ad:56:ba:50:38:9c: 1f:c8:6f:fe:5a:97:0f:86:c8:54:95:87:d6:27:62:61:d6:e8: cf:e5:dd:f4:c8:22:d8:e4:1a:c0:6e:d7:bf:11:ba:17:7d:aa: 4a:c7:47:a4:25:63:de:59:ba:45:bc:04:00:77:86:e4:d8:71: fb:67:c2:bf:ad:6e:64:ee:43:56:a7:d1:19:ef:0f:21:7f:48: 24:73:63:c4:91:e5:eb:0f:4d:df:29:6e:7f:4d:77:26:37:e1: f7:f2:cf:df:47:e7:06:2b:df:d4:47:57:17:30:4f:eb:d0:0d: c4:c8:6d:13:cf:3a:b9:9f:9e:9c:bf:e2:53:54:b1:4b:1e:0b: 9f:fe:be:1c:39:8b:78:4f:3f:db:fc:8b:23:c7:49:a9:0a:7e: 2d:78:ca:f4:72:95:9c:47:87:df:bf:ed:c1:00:b2:fa:b2:db: f5:28:e3:31:96:ef:17:32:41:61:85:ff:67:61:f1:be:46:d4: 66:79:0e:03:0f:65:e6:a5:f8:df:23:37:79:9e:b8:f7:44:c5: 5d:da:9b:5f:0f:e8:15:93:e3:0d:d5:1a:ad:83:05:47:2a:6f: 0e:f7:cf:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIyQjMxMTAvBgNVBAUTKDIzQzBCMkQ3QUNFMTA5RDNERkU4M0FFQkVGMkVBMzE0 OUM1Q0FDMTcwHhcNMjUxMDI3MDczODM5WhcNMjUxMTAzMDczODM5WjAYMRYwFAYD VQQDEw02OGZmMjE4MC1iMzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/jEo/+NnoJIba7acdq+sSTxuy8XH3q1tLk4pu1woT6KejVyMByHrSd+8yxq GrfdoDck25m+XnKrmDDOyrbKm17ekfNHJ6e1SknP0RarfrshuAfEkumOCu4HXTen Msc4tBQML2SCn7+4IMGJrU46h1HXGjT/Xpa8+xk/WQ3Gp1p5fVf3Req0JdSLtDan 7Bzo035uilOYwMqUuxEbYUHHN3Yoa5KN0iWpcxMuaK8m+MPGHWfH++zFju/YP9bi j/2W042z/Y281eN9HRUCSN7gBjWd2lI6xlDK9P4RDbiO9bqhBmRI9yktsr1c8OcZ C2NiLPDXdeH+RO2dZIvduE0VKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlJn0Gp g7SPHGLA/qw2uyRdqAQbMB8GA1UdIwQYMBaAFCPAstes4QnT3+g66+8uoxScXKwX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjJCMy81RTRENDc2MjVC OUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9JOEN5MTZ6aENkUGY2RHJyN3k2akZKeGNy QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k4Q3kxNnpoQ2RQZjZEcnI3eTZqRkp4Y3JCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjJCMy81RTRENDc2MjVCOUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9JOEN5MTZ6aENk UGY2RHJyN3k2akZKeGNyQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAVosO06us1iEAIUqjdq1XrGQe9GePkqGZRBpJF/itVrpQOJwfyG/+ WpcPhshUlYfWJ2Jh1ujP5d30yCLY5BrAbte/EboXfapKx0ekJWPeWbpFvAQAd4bk 2HH7Z8K/rW5k7kNWp9EZ7w8hf0gkc2PEkeXrD03fKW5/TXcmN+H38s/fR+cGK9/U R1cXME/r0A3EyG0Tzzq5n56cv+JTVLFLHguf/r4cOYt4Tz/b/Isjx0mpCn4teMr0 cpWcR4ffv+3BALL6stv1KOMxlu8XMkFhhf9nYfG+RtRmeQ4DD2XmpfjfIzd5nrj3 RMVd2ptfD+gVk+MN1RqtgwVHKm8O989H -----END CERTIFICATE-----Generated at Tue Oct 28 16:20:17 2025 by rpki-client