$ rpki-client -vvf rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft File: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft (raw, json) Hash identifier: zjlduaalH0FI23jG1Xpa62YO1413Q3t5g7EBCXSz3YE= Subject key identifier: 47:52:58:A1:23:1F:77:FC:EF:C3:F7:59:6A:71:E8:11:8C:79:A6:48 Authority key identifier: FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6 Certificate issuer: /CN=A91820AF/serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6 Certificate serial: 06BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft Manifest number: 06B7 Signing time: Sun 02 Nov 2025 22:10:20 +0000 Manifest this update: Sun 02 Nov 2025 22:10:20 +0000 Manifest next update: Sun 09 Nov 2025 22:10:20 +0000 Files and hashes: 1: _ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl (hash: RlF0Tr2YktSwWMCvNfrB6WXrRZc1e1QWB6xSqjciMo8=) 2: D4DE5FF8A01F11EC87D72549C4F9AE02.roa (hash: 87anj6ScVkwh+H5EUFqHglOTYr+0YgLiGreNRecvlKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1726 (0x6be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820AF, serialNumber=FE2A49398E65006B06E9DFEC270DE2E976F8AAF6 Validity Not Before: Nov 2 22:10:20 2025 GMT Not After : Nov 9 22:10:20 2025 GMT Subject: CN=6907d6cc-1e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ab:14:c0:dd:dd:97:04:77:45:7e:ec:7e:9c: 43:85:c9:f0:80:86:25:d2:ba:2e:43:2d:92:33:cd: e8:24:60:85:95:0c:cf:84:4c:b9:19:b8:be:9e:0a: 8f:7b:26:b8:6a:84:ec:45:8b:9f:8c:88:7f:30:3c: 7f:c7:99:b4:c9:47:88:ca:eb:4a:d3:38:63:f7:36: ea:9e:91:d8:e3:e4:42:3a:7e:3f:df:35:48:5f:29: c0:70:cc:43:45:2c:7b:5d:73:26:bd:34:49:00:29: 11:07:f1:9b:99:49:a6:7c:8c:ee:62:61:57:e8:06: 84:35:fd:0c:d6:7d:30:f0:02:db:b2:85:5b:a7:50: c1:53:57:52:ce:87:5d:f8:8d:79:f8:fc:56:55:59: 70:b4:4a:17:fb:f1:85:6e:a6:03:ab:86:41:84:65: 56:51:41:39:e6:a0:f7:12:ec:6a:38:8e:d2:12:6b: a0:73:ad:d5:df:de:01:8c:78:b4:40:6e:7a:8b:4c: d1:fd:98:71:03:20:7a:2a:95:2d:7b:8f:5d:d4:fc: 30:26:34:5d:31:c2:07:3e:1d:5a:77:25:a6:2b:7f: 6b:08:a7:c3:89:65:64:16:86:6a:c6:d7:af:99:88: ec:68:2e:a5:24:5f:9d:72:1d:8f:1b:95:2a:8c:1d: 22:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:52:58:A1:23:1F:77:FC:EF:C3:F7:59:6A:71:E8:11:8C:79:A6:48 X509v3 Authority Key Identifier: keyid:FE:2A:49:39:8E:65:00:6B:06:E9:DF:EC:27:0D:E2:E9:76:F8:AA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820AF/0EF3DFA4807A11EBBD0E8D58C4F9AE02/_ipJOY5lAGsG6d_sJw3i6Xb4qvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:1d:6e:33:45:2d:8e:8a:bd:f2:a0:ff:c2:8b:c9:b7:1b:5d: 6b:fa:26:fe:5a:3e:a7:1b:6c:35:c5:3b:be:ed:61:b4:75:61: d6:79:e4:77:36:6e:1d:01:21:e8:a2:28:5a:bd:17:80:d5:f2: bc:da:c3:0a:4a:70:9c:7e:32:d1:88:f2:f5:4a:38:c7:3d:44: 2c:81:c9:14:60:d7:f8:ec:14:e5:8e:56:69:52:38:58:11:f4: 65:9e:06:a6:a1:8c:37:4e:2d:84:67:2b:2a:24:f2:5a:e8:dd: 4c:70:72:16:40:ce:fd:2e:4d:eb:2e:4d:8f:7a:12:e3:60:48: 67:31:de:dd:ae:51:71:b8:f0:95:d3:ad:a8:fc:d2:a1:48:a1: 61:64:ac:26:f0:d8:cc:55:02:99:e4:bd:ca:33:a7:51:e7:f2: d8:7d:c9:8b:0e:90:8e:14:2e:1c:61:de:cc:36:52:36:4e:ab: 83:b3:22:9c:28:23:8e:ae:c3:52:fb:45:71:8a:65:0c:a6:e3: 0c:db:8f:69:65:fb:c7:bb:1f:19:a5:79:e2:79:55:bb:4d:b2: be:55:69:24:81:d1:50:6b:7a:99:6f:31:7c:e8:29:af:4d:cd: ce:87:f0:fd:b3:0d:b1:4d:6a:0c:8b:6d:93:4a:d8:54:ad:8c: 44:5e:29:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwQUYxMTAvBgNVBAUTKEZFMkE0OTM5OEU2NTAwNkIwNkU5REZFQzI3MERFMkU5 NzZGOEFBRjYwHhcNMjUxMTAyMjIxMDIwWhcNMjUxMTA5MjIxMDIwWjAYMRYwFAYD VQQDEw02OTA3ZDZjYy0xZTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApasUwN3dlwR3RX7sfpxDhcnwgIYl0rouQy2SM83oJGCFlQzPhEy5Gbi+ngqP eya4aoTsRYufjIh/MDx/x5m0yUeIyutK0zhj9zbqnpHY4+RCOn4/3zVIXynAcMxD RSx7XXMmvTRJACkRB/GbmUmmfIzuYmFX6AaENf0M1n0w8ALbsoVbp1DBU1dSzodd +I15+PxWVVlwtEoX+/GFbqYDq4ZBhGVWUUE55qD3EuxqOI7SEmugc63V394BjHi0 QG56i0zR/ZhxAyB6KpUte49d1PwwJjRdMcIHPh1adyWmK39rCKfDiWVkFoZqxtev mYjsaC6lJF+dch2PG5UqjB0iqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdSWKEj H3f878P3WWpx6BGMeaZIMB8GA1UdIwQYMBaAFP4qSTmOZQBrBunf7CcN4ul2+Kr2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBBRi8wRUYzREZBNDgw N0ExMUVCQkQwRThENThDNEY5QUUwMi9faXBKT1k1bEFHc0c2ZF9zSnczaTZYYjRx dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19pcEpPWTVsQUdzRzZkX3NKdzNpNlhiNHF2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjBBRi8wRUYzREZBNDgwN0ExMUVCQkQwRThENThDNEY5QUUwMi9faXBKT1k1bEFH c0c2ZF9zSnczaTZYYjRxdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtHW4zRS2Oir3yoP/Ci8m3G11r+ib+Wj6nG2w1xTu+7WG0dWHWeeR3 Nm4dASHooihavReA1fK82sMKSnCcfjLRiPL1SjjHPUQsgckUYNf47BTljlZpUjhY EfRlngamoYw3Ti2EZysqJPJa6N1McHIWQM79Lk3rLk2PehLjYEhnMd7drlFxuPCV 062o/NKhSKFhZKwm8NjMVQKZ5L3KM6dR5/LYfcmLDpCOFC4cYd7MNlI2TquDsyKc KCOOrsNS+0VximUMpuMM249pZfvHux8ZpXnieVW7TbK+VWkkgdFQa3qZbzF86Cmv Tc3Oh/D9sw2xTWoMi22TSthUrYxEXila -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:58 2025 by rpki-client