$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft File: IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft (raw, json) Hash identifier: I4HdDL7QHD8q3b3rZsN87zEhzU2k/srKs5ZLsIKPP5M= Subject key identifier: 6E:81:DF:C9:95:F0:13:CE:40:E1:A4:5D:7B:9B:C9:24:62:C3:87:C5 Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 Certificate issuer: /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Certificate serial: 09D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft Manifest number: 09C8 Signing time: Sun 02 Nov 2025 19:56:55 +0000 Manifest this update: Sun 02 Nov 2025 19:56:54 +0000 Manifest next update: Sun 09 Nov 2025 19:56:54 +0000 Files and hashes: 1: IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl (hash: HTt4YLDXgmJeLqoiam5+JAu0WU3D85klCGTteFpYCIw=) 2: 371ADD3E9C9811EDA6AEF053C4F9AE02.roa (hash: 8JSwEQed2eJqn9OytcIj9IctVhOahjE7HP6K7LQO8mE=) 3: FE6C73289C9A11ED8123147BC4F9AE02.roa (hash: rFSplheoWDm+5MPYS0jTevwHFfJ593Fp0RQ1ghGpvEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2519 (0x9d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91D2, serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Validity Not Before: Nov 2 19:56:54 2025 GMT Not After : Nov 9 19:56:54 2025 GMT Subject: CN=6907b786-f831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8c:bf:d7:53:4e:7d:60:4e:89:71:c4:d4:3a: 8c:98:a6:08:2c:4a:bb:15:0d:a0:e4:4a:72:48:30: db:0d:3a:15:8a:94:5e:4c:d7:d2:ed:79:44:5f:58: dc:9b:22:4f:cc:1d:1e:a0:e9:a6:4e:9c:cc:f3:d4: 52:5b:9d:ab:4e:d2:66:f2:ec:7f:60:7a:07:99:3c: a8:a5:80:2d:13:12:c1:ea:5c:b0:09:7c:ee:89:9a: 4f:2b:59:ad:ea:b4:57:ad:24:08:3b:dd:06:46:03: e8:e8:50:84:68:7e:f3:8a:25:2e:79:dc:b4:7f:b8: a0:5c:da:ed:20:6e:4e:87:e5:8d:a0:e9:1f:d4:31: a5:b9:cf:10:f2:79:18:46:7c:f2:b9:48:f5:a7:ee: 73:8d:62:73:2b:54:33:8b:a0:fc:6d:57:aa:af:a5: 45:85:7e:77:ca:ef:07:89:1a:0f:93:25:44:77:29: 4b:28:18:51:6a:89:c9:74:c7:34:16:c2:b6:a7:07: 7b:7f:97:91:cc:9a:28:3e:22:4a:93:b4:c0:60:40: 36:2c:19:34:e9:90:0c:5e:a1:cc:b1:84:5f:9b:d4: fa:b9:43:70:36:ca:86:86:05:c9:46:7d:56:81:76: 2a:08:fc:92:3f:e3:d4:0c:77:4c:00:57:18:b7:4f: ce:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:81:DF:C9:95:F0:13:CE:40:E1:A4:5D:7B:9B:C9:24:62:C3:87:C5 X509v3 Authority Key Identifier: keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:bb:b3:76:64:85:5a:fc:74:5b:5c:cf:a9:b9:80:ba:36:ef: c9:1b:16:1d:fb:dd:19:12:fc:f0:78:05:0c:d7:a7:dc:e4:76: fe:bb:1e:98:96:db:f5:b9:3c:5d:71:10:09:da:8a:bb:b0:a2: 03:45:41:70:c7:4e:26:a6:41:7c:1f:7b:0f:36:97:59:86:cd: 3d:8e:9d:48:b9:c3:69:60:c1:aa:00:a6:7d:f0:84:8c:d8:b2: 16:2a:20:f3:54:d0:72:e3:f2:ff:ea:00:7f:3e:c7:0f:7e:75: 36:6f:76:c4:10:4d:04:6d:1b:2b:0f:3e:75:03:ba:81:54:3c: f9:5c:cf:3a:86:07:10:60:fe:2d:7f:fe:aa:e3:19:2c:b4:8a: c5:c1:c0:78:21:4f:d3:34:e5:cb:ee:46:9b:3d:2c:09:17:6d: 0d:ff:08:8f:f0:4d:23:54:de:7f:71:9d:ad:cd:67:c1:5e:36: 33:2f:aa:7c:c9:ee:47:8a:52:bd:61:f4:7a:47:84:7e:fc:02: dd:43:20:0a:29:11:bb:a8:b5:00:14:d0:c7:57:b5:4a:16:f3: db:5e:10:18:47:31:9b:2a:91:27:bb:9c:8b:75:20:d2:55:21: 9d:de:66:78:3b:96:92:03:20:b3:a4:16:d4:28:3a:2a:21:75: 9e:9d:8e:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxRDIxMTAvBgNVBAUTKDIxRkM4MTVGQ0IxQ0VBRDc3MEJENkM5MDM2OTQ3NDVG NzFDQTcxOTUwHhcNMjUxMTAyMTk1NjU0WhcNMjUxMTA5MTk1NjU0WjAYMRYwFAYD VQQDEw02OTA3Yjc4Ni1mODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4y/11NOfWBOiXHE1DqMmKYILEq7FQ2g5EpySDDbDToVipReTNfS7XlEX1jc myJPzB0eoOmmTpzM89RSW52rTtJm8ux/YHoHmTyopYAtExLB6lywCXzuiZpPK1mt 6rRXrSQIO90GRgPo6FCEaH7ziiUuedy0f7igXNrtIG5Oh+WNoOkf1DGluc8Q8nkY RnzyuUj1p+5zjWJzK1Qzi6D8bVeqr6VFhX53yu8HiRoPkyVEdylLKBhRaonJdMc0 FsK2pwd7f5eRzJooPiJKk7TAYEA2LBk06ZAMXqHMsYRfm9T6uUNwNsqGhgXJRn1W gXYqCPySP+PUDHdMAFcYt0/ObwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6B38mV 8BPOQOGkXXubySRiw4fFMB8GA1UdIwQYMBaAFCH8gV/LHOrXcL1skDaUdF9xynGV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFEMi84QzE0RTk0NDkx RDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0ZHd2V3lRTnBSMFgzSEtj WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmeUJYOHNjNnRkd3ZXeVFOcFIwWDNIS2NaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFEMi84QzE0RTk0NDkxRDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0 ZHd2V3lRTnBSMFgzSEtjWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdu7N2ZIVa/HRbXM+puYC6Nu/JGxYd+90ZEvzweAUM16fc5Hb+ux6Y ltv1uTxdcRAJ2oq7sKIDRUFwx04mpkF8H3sPNpdZhs09jp1IucNpYMGqAKZ98ISM 2LIWKiDzVNBy4/L/6gB/PscPfnU2b3bEEE0EbRsrDz51A7qBVDz5XM86hgcQYP4t f/6q4xkstIrFwcB4IU/TNOXL7kabPSwJF20N/wiP8E0jVN5/cZ2tzWfBXjYzL6p8 ye5HilK9YfR6R4R+/ALdQyAKKRG7qLUAFNDHV7VKFvPbXhAYRzGbKpEnu5yLdSDS VSGd3mZ4O5aSAyCzpBbUKDoqIXWenY5l -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:13 2025 by rpki-client