$ rpki-client -vvf rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft File: IgUecf7QG75bnNYkR2DObpAwevc.mft (raw, json) Hash identifier: c84+H0gwiOmfEQ/f8zo0hj2gzT+CPm7aBLNP8qcSo7M= Subject key identifier: C2:B0:98:09:7C:11:06:F2:AD:56:91:04:5B:9D:DD:96:03:B5:4F:7E Authority key identifier: 22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7 Certificate issuer: /CN=A9190226/serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7 Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft Manifest number: 023A Signing time: Wed 05 Nov 2025 01:59:24 +0000 Manifest this update: Wed 05 Nov 2025 01:59:24 +0000 Manifest next update: Wed 12 Nov 2025 01:59:24 +0000 Files and hashes: 1: IgUecf7QG75bnNYkR2DObpAwevc.crl (hash: poC8VvSCygfCArGx6jXTCPWcthSuaRrpzVOuivEBrCE=) 2: AF9BA1D2717111ED8518666EC4F9AE02.roa (hash: ArJFnlnVhsrJcFwhi1wglVXIencAnedBRPQm/FHkems=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190226, serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7 Validity Not Before: Nov 5 01:59:24 2025 GMT Not After : Nov 12 01:59:24 2025 GMT Subject: CN=690aaf7c-60bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:93:b3:3e:7b:da:b5:5b:75:55:f1:f3:01:60: d4:be:ba:e2:2f:f8:0f:8c:50:b9:4b:90:26:b9:b6: 10:b3:18:7b:a3:28:9f:4e:d8:7c:f4:fe:ab:dd:89: f4:f3:c9:dd:e4:da:0f:08:4e:22:8a:c0:b7:e9:39: 3c:35:e4:e3:5f:21:a9:f3:36:81:9a:0e:42:77:3d: 15:aa:d0:5b:fa:62:44:f5:a2:51:29:af:33:10:b5: e5:64:a2:d7:1c:a8:e6:0d:e0:5d:63:bd:7d:bd:05: a7:5a:00:1e:1c:08:1a:9e:20:34:6d:29:f1:e6:6a: 2b:c2:63:a5:10:2a:0d:c0:23:64:c0:55:65:cd:e1: 83:63:04:3e:c7:50:57:e0:15:b3:b4:1e:7f:f8:5d: 70:76:b7:90:05:58:2a:6d:83:59:a9:05:cb:64:14: 48:b2:95:b0:53:a1:d2:aa:c7:8c:6b:cf:64:21:d8: fd:d9:9d:90:7f:2c:30:c6:88:08:cc:45:f0:cd:7c: d1:73:e9:0f:a2:d8:9e:cc:80:40:a7:b7:21:da:2b: e8:2d:d6:c7:96:66:29:b6:d8:08:05:b0:2a:f5:f7: 8d:1b:7f:33:b3:4e:bf:b5:42:02:96:88:6e:d2:f0: ea:59:0f:98:0a:fd:0f:4e:a9:8a:fb:b6:19:3a:64: b4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B0:98:09:7C:11:06:F2:AD:56:91:04:5B:9D:DD:96:03:B5:4F:7E X509v3 Authority Key Identifier: keyid:22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:c5:5b:7d:33:3a:70:a5:40:9d:3b:c0:09:15:28:ae:cb:d5: 89:19:9e:76:88:e0:9e:ae:50:8a:27:99:76:68:f9:f5:3d:ed: 88:9b:bf:da:2b:78:2a:75:56:79:3c:69:d8:5e:8e:d3:86:82: 1d:27:45:aa:ad:47:b6:02:88:2f:87:64:3f:63:61:f0:2b:3f: b5:61:81:b3:77:ab:a6:3e:2f:be:08:11:03:d8:ee:d8:60:b2: 19:d7:02:fd:df:c3:40:19:c4:14:7d:42:d7:cf:a9:65:63:11: 67:36:46:7a:03:79:da:fe:7d:c5:b8:14:48:a5:99:89:a4:22: a2:13:ba:6e:52:e1:95:03:80:53:7f:f4:8b:13:89:0d:56:ba: b9:6c:cf:6e:fb:26:ad:61:79:06:36:a5:f6:0f:86:f1:21:11: c4:96:7f:57:a7:0a:b3:1a:b5:d1:cf:a1:f3:51:7e:0f:ce:37: fc:5a:8c:34:26:83:e0:c5:69:ab:97:07:43:10:64:42:25:62: 2e:de:38:a0:2e:7a:a9:48:4c:18:57:60:13:75:f5:9c:1d:7c: 5d:54:c4:c5:61:28:62:91:c6:8d:63:f7:d1:1e:64:60:14:6f: fb:1e:ff:7a:fc:60:21:08:85:b3:70:a8:82:90:a4:85:f7:a8: 13:1a:97:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTAyMjYxMTAvBgNVBAUTKDIyMDUxRTcxRkVEMDFCQkU1QjlDRDYyNDQ3NjBDRTZF OTAzMDdBRjcwHhcNMjUxMTA1MDE1OTI0WhcNMjUxMTEyMDE1OTI0WjAYMRYwFAYD VQQDEw02OTBhYWY3Yy02MGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypOzPnvatVt1VfHzAWDUvrriL/gPjFC5S5AmubYQsxh7oyifTth89P6r3Yn0 88nd5NoPCE4iisC36Tk8NeTjXyGp8zaBmg5Cdz0VqtBb+mJE9aJRKa8zELXlZKLX HKjmDeBdY719vQWnWgAeHAganiA0bSnx5morwmOlECoNwCNkwFVlzeGDYwQ+x1BX 4BWztB5/+F1wdreQBVgqbYNZqQXLZBRIspWwU6HSqseMa89kIdj92Z2QfywwxogI zEXwzXzRc+kPotiezIBAp7ch2ivoLdbHlmYpttgIBbAq9feNG38zs06/tUIClohu 0vDqWQ+YCv0PTqmK+7YZOmS0JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKwmAl8 EQbyrVaRBFud3ZYDtU9+MB8GA1UdIwQYMBaAFCIFHnH+0Bu+W5zWJEdgzm6QMHr3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDIyNi9CNThFQkEzMDU1 QjQxMUVEQTA3OTUwNTNDNEY5QUUwMi9JZ1VlY2Y3UUc3NWJuTllrUjJET2JwQXdl dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lnVWVjZjdRRzc1Ym5OWWtSMkRPYnBBd2V2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDIyNi9CNThFQkEzMDU1QjQxMUVEQTA3OTUwNTNDNEY5QUUwMi9JZ1VlY2Y3UUc3 NWJuTllrUjJET2JwQXdldmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVxVt9MzpwpUCdO8AJFSiuy9WJGZ52iOCerlCKJ5l2aPn1Pe2Im7/a K3gqdVZ5PGnYXo7ThoIdJ0WqrUe2Aogvh2Q/Y2HwKz+1YYGzd6umPi++CBED2O7Y YLIZ1wL938NAGcQUfULXz6llYxFnNkZ6A3na/n3FuBRIpZmJpCKiE7puUuGVA4BT f/SLE4kNVrq5bM9u+yatYXkGNqX2D4bxIRHEln9XpwqzGrXRz6HzUX4Pzjf8Wow0 JoPgxWmrlwdDEGRCJWIu3jigLnqpSEwYV2ATdfWcHXxdVMTFYShikcaNY/fRHmRg FG/7Hv96/GAhCIWzcKiCkKSF96gTGpeN -----END CERTIFICATE-----Generated at Wed Nov 5 05:22:45 2025 by rpki-client