$ rpki-client -vvf rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft File: IkB3DhUcdBqE3pTijHUgArg5--0.mft (raw, json) Hash identifier: e7WMBno5YW60yUUIAkeCUS3jmfjhpkJKAShsDaVb5do= Subject key identifier: 13:7C:86:E0:A3:9A:10:01:25:EA:BE:1D:62:20:FA:C2:D9:A1:39:E6 Authority key identifier: 22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED Certificate issuer: /CN=A91A665A/serialNumber=2240770E151C741A84DE94E28C752002B839FBED Certificate serial: 07A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft Manifest number: 0797 Signing time: Sun 02 Nov 2025 21:26:03 +0000 Manifest this update: Sun 02 Nov 2025 21:26:02 +0000 Manifest next update: Sun 09 Nov 2025 21:26:02 +0000 Files and hashes: 1: IkB3DhUcdBqE3pTijHUgArg5--0.crl (hash: exugel+8mzQCCLwfVu0amlGtKvwqdjD12xZ8hTHtiK8=) 2: 05E355AEA03811EDBC101B49C4F9AE02.roa (hash: CNZBv4FK9ZWvTtzm+cWIR1zfUXJg63OkryMkTZVFNpg=) 3: 8224075A293711EB9DE16C62C4F9AE02.roa (hash: BlNMvykSVEqNeWKjQSI6MISWgcMVQUYKsr+oWp8+db0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1954 (0x7a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A665A, serialNumber=2240770E151C741A84DE94E28C752002B839FBED Validity Not Before: Nov 2 21:26:02 2025 GMT Not After : Nov 9 21:26:02 2025 GMT Subject: CN=6907cc6a-eab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bb:99:5d:5a:81:27:1f:88:b2:06:30:62:4c: d5:bb:d9:d6:d7:4b:57:87:0e:8b:54:e4:55:7d:c2: 60:3a:c6:f9:cd:f4:05:15:3c:3e:f8:73:04:9a:12: 7b:18:15:de:f8:5f:f7:24:81:a7:2f:42:92:dc:74: cb:55:4d:6a:6a:c5:84:5b:d8:f3:27:58:92:82:f7: 67:13:74:c3:24:f8:cc:ea:4e:0f:c5:cd:ba:b5:c2: a1:50:0c:2f:a8:48:18:99:aa:73:a7:21:12:d8:8a: 2f:16:d6:95:4d:12:71:63:d6:a1:9f:0d:bc:83:8d: 3e:68:4a:d7:0b:b0:d8:20:22:e8:37:15:d9:40:ce: ad:5b:58:bb:f3:5c:bf:0b:b1:fb:12:d6:7d:ba:60: 56:e3:e7:75:d7:ec:77:da:ad:47:d2:3d:1b:32:87: 6b:5b:1f:75:95:02:1a:10:7d:22:d3:17:9b:c2:d5: f4:ab:6e:83:57:fc:f6:e4:ef:62:e1:f3:4f:e5:3c: 94:5b:c0:0b:ea:20:c4:44:0a:a5:47:b6:c0:d7:e5: 57:72:24:c2:7d:6b:9b:3f:82:8f:69:94:e2:ea:16: 66:c3:17:0d:48:4b:6a:82:24:68:39:9c:60:13:66: b6:1c:72:fa:ea:16:fc:9d:a4:2e:27:aa:6f:4c:c4: e9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7C:86:E0:A3:9A:10:01:25:EA:BE:1D:62:20:FA:C2:D9:A1:39:E6 X509v3 Authority Key Identifier: keyid:22:40:77:0E:15:1C:74:1A:84:DE:94:E2:8C:75:20:02:B8:39:FB:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IkB3DhUcdBqE3pTijHUgArg5--0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A665A/C8FAD138293511EBAE725E61C4F9AE02/IkB3DhUcdBqE3pTijHUgArg5--0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f5:45:9f:8c:67:9c:f0:d0:75:f8:a0:42:9b:5c:b9:27:9b: e5:ab:4e:88:e2:7e:4b:c0:62:d9:b7:f4:8a:06:27:93:2b:16: 9b:76:89:0c:91:5f:e1:14:32:bd:21:49:eb:57:42:12:d9:39: 08:d1:c8:10:60:16:06:98:5a:d2:5f:5f:04:8a:0c:15:66:e2: 88:02:3a:89:02:3c:60:ba:bb:69:d5:c7:27:88:8c:8d:4b:58: 1f:a6:40:15:a1:ca:26:46:4a:77:af:65:58:31:ce:5d:83:6f: a2:76:35:3a:1a:f4:45:96:4d:34:65:b9:7a:4b:3d:40:86:53: d1:5a:f4:63:9f:f7:da:67:9c:35:60:1b:25:5b:df:f2:96:ee: fb:04:33:c2:d7:fb:f1:ca:cb:3c:26:03:2e:e0:9f:d4:d4:7e: bf:53:bd:dd:f0:1a:c0:3e:97:07:0d:7c:a1:6c:7b:25:09:25: b1:14:46:02:9b:6a:c1:0e:42:a4:97:37:85:1b:27:14:09:8e: 0c:e7:21:a3:55:be:1d:f4:39:a5:bd:6f:41:6e:df:27:2b:3a: 7d:b5:4b:d7:da:6e:b9:59:02:1e:f9:d6:d7:99:55:b1:bd:b7: 89:da:5a:c5:70:7d:eb:38:51:1c:74:97:79:f4:4b:79:2b:c4: 67:f9:30:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY2NUExMTAvBgNVBAUTKDIyNDA3NzBFMTUxQzc0MUE4NERFOTRFMjhDNzUyMDAy QjgzOUZCRUQwHhcNMjUxMTAyMjEyNjAyWhcNMjUxMTA5MjEyNjAyWjAYMRYwFAYD VQQDEw02OTA3Y2M2YS1lYWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7uZXVqBJx+IsgYwYkzVu9nW10tXhw6LVORVfcJgOsb5zfQFFTw++HMEmhJ7 GBXe+F/3JIGnL0KS3HTLVU1qasWEW9jzJ1iSgvdnE3TDJPjM6k4Pxc26tcKhUAwv qEgYmapzpyES2IovFtaVTRJxY9ahnw28g40+aErXC7DYICLoNxXZQM6tW1i781y/ C7H7EtZ9umBW4+d11+x32q1H0j0bModrWx91lQIaEH0i0xebwtX0q26DV/z25O9i 4fNP5TyUW8AL6iDERAqlR7bA1+VXciTCfWubP4KPaZTi6hZmwxcNSEtqgiRoOZxg E2a2HHL66hb8naQuJ6pvTMTpLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBN8huCj mhABJeq+HWIg+sLZoTnmMB8GA1UdIwQYMBaAFCJAdw4VHHQahN6U4ox1IAK4Ofvt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjY1QS9DOEZBRDEzODI5 MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RCcUUzcFRpakhVZ0FyZzUt LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lrQjNEaFVjZEJxRTNwVGlqSFVnQXJnNS0tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjY1QS9DOEZBRDEzODI5MzUxMUVCQUU3MjVFNjFDNEY5QUUwMi9Ja0IzRGhVY2RC cUUzcFRpakhVZ0FyZzUtLTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL9UWfjGec8NB1+KBCm1y5J5vlq06I4n5LwGLZt/SKBieTKxabdokM kV/hFDK9IUnrV0IS2TkI0cgQYBYGmFrSX18EigwVZuKIAjqJAjxgurtp1ccniIyN S1gfpkAVocomRkp3r2VYMc5dg2+idjU6GvRFlk00Zbl6Sz1AhlPRWvRjn/faZ5w1 YBslW9/ylu77BDPC1/vxyss8JgMu4J/U1H6/U73d8BrAPpcHDXyhbHslCSWxFEYC m2rBDkKklzeFGycUCY4M5yGjVb4d9DmlvW9Bbt8nKzp9tUvX2m65WQIe+dbXmVWx vbeJ2lrFcH3rOFEcdJd59Et5K8Rn+TCb -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:41 2025 by rpki-client