$ rpki-client -vvf rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft File: nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft (raw, json) Hash identifier: eYyADqcTe/V3PjHQS+Gn+FrFJHAbK3/quW3blgwNAp8= Subject key identifier: 44:AC:32:AF:A1:BC:CE:50:AA:73:49:62:31:8A:31:6C:FF:9B:20:5A Authority key identifier: 9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 Certificate issuer: /CN=A91688D4/serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Certificate serial: 0548 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft Manifest number: 0525 Signing time: Sat 25 Oct 2025 02:26:15 +0000 Manifest this update: Sat 25 Oct 2025 02:26:14 +0000 Manifest next update: Sat 01 Nov 2025 02:26:14 +0000 Files and hashes: 1: nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl (hash: t/C5SSyUqjNtS+T+klTUbcypHwlZIMR23QCvaIMyBnc=) 2: D2D714387F6A11F0932D5109C4F9AE02.roa (hash: Cng37RmGs09g9dbHO+ShWe6tnoOJsgQFmF1ZQB1DAkI=) 3: 9EABFF288CA011F0B1F47C12C4F9AE02.roa (hash: BaDUL34/Gwa3G8jGhtSk9P3jmeq3rCjBk1zIOgJr1cM=) 4: 9E3C65828CA011F0B1F47C12C4F9AE02.roa (hash: AhcbearK6iV6xBjXUDN0qGwO1GubeQ+m8AdvrMUpw0Q=) 5: FBBECF1A694111F08D368069C4F9AE02.roa (hash: Hxo/oVA2HgH6qQ01M6fl9cqj5vSj3O9qRMc68jJm0P4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 02:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1352 (0x548) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91688D4, serialNumber=9C8AE3DC7B05B385396790CA7323D3A0906FED82 Validity Not Before: Oct 25 02:26:14 2025 GMT Not After : Nov 1 02:26:14 2025 GMT Subject: CN=68fc3546-0593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:e0:59:8f:85:69:ca:0e:b7:01:8d:fd:4f: f3:51:21:80:85:72:b9:b8:50:40:0e:78:83:d4:82: b4:9c:66:09:95:67:1e:71:b7:42:e3:7b:15:3a:60: a1:d9:13:19:61:a8:ee:35:f6:8e:44:89:30:53:73: ac:d6:b0:11:6b:f1:63:9c:fb:c3:3c:11:75:30:3d: 46:cf:a0:d8:ba:a7:69:a5:c0:cb:ef:13:25:da:69: 18:e7:87:0d:33:b5:5f:20:19:29:6d:82:1c:d3:40: d9:9f:87:7b:06:3f:e2:51:55:65:7b:c4:57:d6:02: 9d:5d:2e:ca:2e:22:67:d4:51:42:83:9c:58:1a:7b: 17:66:d7:9c:53:c7:f3:b2:a3:eb:54:a6:eb:14:e3: 5d:ce:2b:de:1d:25:17:20:37:a4:57:18:67:c0:e7: 11:b8:c9:8c:42:aa:12:fd:b7:c3:39:4d:85:65:cc: cd:b5:a1:30:87:01:79:55:f2:95:24:79:56:7e:cd: 9d:12:cd:36:51:8b:2f:f4:c8:00:49:26:b0:6a:f8: c1:09:5b:81:8f:ae:e1:ca:a0:04:95:46:be:5d:5f: ea:d1:5d:c3:d3:b4:d6:a9:56:99:5d:14:c2:7e:08: 02:75:a1:04:c6:8e:37:b3:ff:d6:ad:75:5e:fb:b7: 7f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AC:32:AF:A1:BC:CE:50:AA:73:49:62:31:8A:31:6C:FF:9B:20:5A X509v3 Authority Key Identifier: keyid:9C:8A:E3:DC:7B:05:B3:85:39:67:90:CA:73:23:D3:A0:90:6F:ED:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIrj3HsFs4U5Z5DKcyPToJBv7YI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688D4/2F58E4722E5011ECA04B6C25C4F9AE02/nIrj3HsFs4U5Z5DKcyPToJBv7YI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:cb:c3:22:18:92:34:a7:8c:c9:05:26:63:1d:b7:91:2d:b4: 79:13:ff:c2:40:98:21:47:dc:4b:e3:e6:ad:04:a8:67:47:eb: 51:cb:15:de:56:ce:37:e1:2c:e7:aa:8b:54:25:72:c4:3c:54: 2f:2f:c6:8b:54:69:6b:b9:ea:aa:4a:1a:ae:1a:e2:40:16:d0: ca:0a:ec:02:92:05:25:17:b5:ba:73:5f:fb:fe:6f:b6:4f:36: fa:8d:15:3d:51:84:f9:fd:86:2b:67:6e:21:0c:62:d6:10:79: da:b1:77:3a:e6:4b:fe:93:3e:b7:fe:d0:04:e4:fe:9c:0e:84: f6:4b:e9:18:69:6c:1a:e1:72:3f:7a:e4:81:2d:49:b1:06:76: 8d:b6:65:e9:11:e9:a2:1a:29:67:53:01:55:a5:ea:e6:30:69: 01:c8:84:a0:65:fd:1f:2e:1a:14:17:2b:76:e4:b6:e6:fa:2f: a4:a3:58:39:40:dd:22:d5:92:3e:48:cd:1a:fc:96:12:06:f2: cd:5d:7c:c6:80:15:77:3a:c7:a3:42:a4:88:98:38:27:db:d1: 16:b1:11:74:b8:fa:bf:fc:61:bd:d0:0a:a6:69:a9:c0:75:88: dc:2b:67:6b:39:1b:52:2d:3b:0f:a9:27:24:8f:da:33:e3:ca: 83:58:29:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg4RDQxMTAvBgNVBAUTKDlDOEFFM0RDN0IwNUIzODUzOTY3OTBDQTczMjNEM0Ew OTA2RkVEODIwHhcNMjUxMDI1MDIyNjE0WhcNMjUxMTAxMDIyNjE0WjAYMRYwFAYD VQQDEw02OGZjMzU0Ni0wNTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLvgWY+FacoOtwGN/U/zUSGAhXK5uFBADniD1IK0nGYJlWcecbdC43sVOmCh 2RMZYajuNfaORIkwU3Os1rARa/FjnPvDPBF1MD1Gz6DYuqdppcDL7xMl2mkY54cN M7VfIBkpbYIc00DZn4d7Bj/iUVVle8RX1gKdXS7KLiJn1FFCg5xYGnsXZtecU8fz sqPrVKbrFONdziveHSUXIDekVxhnwOcRuMmMQqoS/bfDOU2FZczNtaEwhwF5VfKV JHlWfs2dEs02UYsv9MgASSawavjBCVuBj67hyqAElUa+XV/q0V3D07TWqVaZXRTC fggCdaEExo43s//WrXVe+7d/gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESsMq+h vM5QqnNJYjGKMWz/myBaMB8GA1UdIwQYMBaAFJyK49x7BbOFOWeQynMj06CQb+2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhENC8yRjU4RTQ3MjJF NTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0VTVaNURLY3lQVG9KQnY3 WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25JcmozSHNGczRVNVo1REtjeVBUb0pCdjdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODhENC8yRjU4RTQ3MjJFNTAxMUVDQTA0QjZDMjVDNEY5QUUwMi9uSXJqM0hzRnM0 VTVaNURLY3lQVG9KQnY3WUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWy8MiGJI0p4zJBSZjHbeRLbR5E//CQJghR9xL4+atBKhnR+tRyxXe Vs434SznqotUJXLEPFQvL8aLVGlrueqqShquGuJAFtDKCuwCkgUlF7W6c1/7/m+2 Tzb6jRU9UYT5/YYrZ24hDGLWEHnasXc65kv+kz63/tAE5P6cDoT2S+kYaWwa4XI/ euSBLUmxBnaNtmXpEemiGilnUwFVpermMGkByISgZf0fLhoUFyt25Lbm+i+ko1g5 QN0i1ZI+SM0a/JYSBvLNXXzGgBV3OsejQqSImDgn29EWsRF0uPq//GG90AqmaanA dYjcK2drORtSLTsPqSckj9oz48qDWCli -----END CERTIFICATE-----Generated at Sun Oct 26 20:46:16 2025 by rpki-client