$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft File: aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json) Hash identifier: DrO7R8KyX8FeI9yL8JeLKDcpuD87dAa/INqkUP3Lurs= Subject key identifier: 8C:36:AD:BC:4A:36:5B:06:E7:A0:3E:12:F5:63:71:58:E3:61:8F:43 Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft Manifest number: 01F7 Signing time: Wed 29 Oct 2025 02:48:43 +0000 Manifest this update: Wed 29 Oct 2025 02:48:42 +0000 Manifest next update: Wed 05 Nov 2025 02:48:42 +0000 Files and hashes: 1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: /tXUFU9gVAK+bfNghheWsMRxA1fB7i9cAybnKXrNSjo=) 2: AF2D50BE562B11F0A2095579C4F9AE02.roa (hash: 8RemKyfJQtXvAOB/Ei52MDI9KMaFn3vaXMJC+OL2BTo=) 3: 2F03F3FCB3AF11F0B9165B5BC4F9AE02.roa (hash: /H0+uJjrBUM5k1a0PlilTjkv6OXrTMlJFAf/4vjgSHc=) 4: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: jgvNZRe9TtRr8CjiSGyPeDv21uzfhNhZZ8tu5qtOBO0=) 5: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: 6GO7eV9ptg4bEhjgmfPj3OiDNEEWB+tcYPU19G/hzs4=) 6: F16963D8B3AE11F0A879E65AC4F9AE02.roa (hash: 1iYx6AnDG5k3WAo1cEbcn3Zch3QKy9Aj+tVhGhOpm2M=) 7: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: xJf9OjyZ9tl22O94Y+hCu+z+3Ka7jvHkbMt39lHsOuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 02:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Validity Not Before: Oct 29 02:48:42 2025 GMT Not After : Nov 5 02:48:42 2025 GMT Subject: CN=6901808a-378f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:43:6e:bc:4b:2b:92:71:c1:a1:25:f6:ed:f7: 62:56:7e:0e:d6:75:3e:62:73:f2:25:1e:5b:c7:7e: 86:e1:5f:af:0d:4a:fd:d1:54:33:93:aa:9b:2e:98: 04:71:e8:21:69:43:77:4f:3e:05:5c:2d:d0:31:dc: 9b:8c:3e:18:64:61:e8:96:6d:b5:9b:57:9f:84:a7: 78:0b:5a:94:12:5b:15:97:1c:3d:b8:28:8a:55:1a: 77:c0:ff:41:bd:b9:cb:ad:bf:be:cf:4b:99:7e:b3: 33:30:47:21:d7:a7:05:86:fb:58:52:83:af:18:82: 51:03:50:f7:86:00:b9:20:e7:c9:b1:91:c6:17:9e: 86:09:7a:9f:9d:d1:36:1b:4f:35:5f:05:f7:0b:f2: 93:b5:98:8c:26:80:51:24:2d:52:ef:72:f0:81:ce: 86:98:3a:4d:39:3b:d1:ae:04:b7:df:5c:ab:94:92: 35:d7:45:65:93:2c:51:20:15:9c:43:5f:ae:b2:e2: 76:b8:3b:a3:50:b1:2c:c0:f0:26:89:8d:b6:7c:ae: d0:07:8d:ad:c6:00:fc:2d:28:52:25:fc:d7:c8:11: 70:f9:1f:7b:1f:2e:74:52:8f:43:e0:7b:cd:d0:ce: 7b:a5:79:76:c4:d2:d9:1c:50:46:71:4c:34:b4:9e: 25:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:36:AD:BC:4A:36:5B:06:E7:A0:3E:12:F5:63:71:58:E3:61:8F:43 X509v3 Authority Key Identifier: keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:25:f2:d1:14:44:c5:a4:3e:a4:99:73:bf:4a:3d:f4:49:fe: f2:ea:12:d4:f8:fe:0c:9c:88:e5:55:0b:4b:7d:af:0c:d8:cb: 7d:66:55:be:11:53:85:c4:9d:e2:05:d6:3c:7b:f7:ca:fb:85: b6:a2:d3:b6:ac:44:85:49:28:91:5d:a4:a2:51:85:f0:99:ef: 11:e0:ed:34:b7:36:20:48:af:f1:cb:c9:59:52:0f:76:13:b3: 96:73:a3:dd:63:70:a3:b1:47:be:f8:76:60:0a:ba:53:c9:bd: 0e:e6:6b:4f:62:88:9d:6e:ba:6c:69:c6:9f:de:11:1a:4c:53: 8d:40:6f:76:99:ad:57:30:06:a5:3e:76:de:8d:a8:40:4d:84: 3b:44:9e:33:ff:94:ca:f4:aa:bd:27:d0:9d:1b:6a:d1:63:ad: 68:f1:93:cc:5e:65:84:70:08:6d:08:da:42:d2:68:23:71:c1: c1:5e:42:30:c4:5f:2d:3c:d1:81:d9:02:3b:5d:c0:0d:c3:06: af:a1:5a:52:83:1e:a9:a9:5e:b2:74:0b:39:17:b0:7e:b7:cb: b4:96:c1:22:c3:01:8f:84:66:73:05:f9:65:4a:ee:05:63:7f: 36:97:45:d2:47:95:f2:e2:5b:22:5f:48:a6:d7:7a:0e:ce:4b: 2d:0f:3a:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3RkQxMTAvBgNVBAUTKDY4ODUyQUI3RjI3MTRGQ0Y1NEQ3NUYwQUFFMzA2OEFE QzM4QjM1Q0MwHhcNMjUxMDI5MDI0ODQyWhcNMjUxMTA1MDI0ODQyWjAYMRYwFAYD VQQDEw02OTAxODA4YS0zNzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtENuvEsrknHBoSX27fdiVn4O1nU+YnPyJR5bx36G4V+vDUr90VQzk6qbLpgE ceghaUN3Tz4FXC3QMdybjD4YZGHolm21m1efhKd4C1qUElsVlxw9uCiKVRp3wP9B vbnLrb++z0uZfrMzMEch16cFhvtYUoOvGIJRA1D3hgC5IOfJsZHGF56GCXqfndE2 G081XwX3C/KTtZiMJoBRJC1S73Lwgc6GmDpNOTvRrgS331yrlJI110VlkyxRIBWc Q1+usuJ2uDujULEswPAmiY22fK7QB42txgD8LShSJfzXyBFw+R97Hy50Uo9D4HvN 0M57pXl2xNLZHFBGcUw0tJ4leQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIw2rbxK NlsG56A+EvVjcVjjYY9DMB8GA1UdIwQYMBaAFGiFKrfycU/PVNdfCq4waK3DizXM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdGRC81NUVENkExNjEw QTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4OVUxMThLcmpCb3JjT0xO Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJVXF0X0p4VDg5VTExOEtyakJvcmNPTE5jdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODdGRC81NUVENkExNjEwQTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4 OVUxMThLcmpCb3JjT0xOY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqJfLRFETFpD6kmXO/Sj30Sf7y6hLU+P4MnIjlVQtLfa8M2Mt9ZlW+ EVOFxJ3iBdY8e/fK+4W2otO2rESFSSiRXaSiUYXwme8R4O00tzYgSK/xy8lZUg92 E7OWc6PdY3CjsUe++HZgCrpTyb0O5mtPYoidbrpsacaf3hEaTFONQG92ma1XMAal PnbejahATYQ7RJ4z/5TK9Kq9J9CdG2rRY61o8ZPMXmWEcAhtCNpC0mgjccHBXkIw xF8tPNGB2QI7XcANwwavoVpSgx6pqV6ydAs5F7B+t8u0lsEiwwGPhGZzBfllSu4F Y382l0XSR5Xy4lsiX0im13oOzkstDzrO -----END CERTIFICATE-----Generated at Fri Oct 31 02:44:00 2025 by rpki-client