$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft File: IcjytuAdCoLRPDUYjDyT5vUUupQ.mft (raw, json) Hash identifier: t6XYec+KL5W2j+6qXrMbHmIpDFPR05GnspRRKwSBbtA= Subject key identifier: 62:87:3C:76:8C:CD:7A:84:1D:46:73:36:E4:32:94:68:71:30:8F:BE Authority key identifier: 21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94 Certificate issuer: /CN=A91A9C62/serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft Manifest number: 2E Signing time: Sun 19 Oct 2025 11:12:41 +0000 Manifest this update: Sun 19 Oct 2025 11:12:40 +0000 Manifest next update: Sun 26 Oct 2025 11:12:40 +0000 Files and hashes: 1: IcjytuAdCoLRPDUYjDyT5vUUupQ.crl (hash: hXlXNcj+I/LHF5Hm5XFBNoK3eRZK1HxCclz21X5xIAE=) 2: 08EAF5106C2111F0B46AAC57C4F9AE02.roa (hash: WDMb5z1Oep3KObXAq9yk+eELcjcBrGqtQZEb/aGlqi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9C62, serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94 Validity Not Before: Oct 19 11:12:40 2025 GMT Not After : Oct 26 11:12:40 2025 GMT Subject: CN=68f4c7a8-29dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:ef:fe:3c:cd:6b:70:8c:0b:b5:3a:25:97: 03:da:28:73:f0:85:d1:be:73:f3:71:2f:77:ab:f4: f0:f7:2b:5e:b4:55:93:cf:3c:d4:a1:5d:d0:86:d8: e1:42:5f:74:c0:8a:24:a2:69:48:07:29:d2:f2:e3: 97:8c:3e:8b:a8:6f:9c:f1:9b:6e:9e:86:3b:e3:da: ee:bf:53:1c:05:eb:4e:85:37:a8:de:c2:74:2a:aa: 94:f7:de:78:2e:ee:77:95:6b:80:ac:32:53:fa:a5: 5b:ae:a1:09:c8:2c:ba:66:65:ee:83:69:d5:ef:e4: dd:76:a2:ea:58:b0:3f:29:16:1a:10:5c:c4:d3:38: 2b:b9:64:dc:0b:b4:bc:4d:e3:fd:34:d5:87:96:8c: cf:24:9c:49:2c:1d:8f:86:bf:6d:c1:6d:6a:68:80: 57:57:87:6c:db:27:69:e4:2a:a4:03:21:72:be:ff: 7d:4b:d1:d3:e2:9f:f7:4e:4c:9a:53:32:50:0f:44: 9d:93:24:d9:54:fb:a2:db:0b:9d:e0:e6:54:da:e3: 87:3b:6e:09:72:f0:dd:f5:f3:87:c2:80:1f:3e:dd: e6:6f:58:cb:0d:92:99:e4:b7:4a:2f:4e:12:ef:99: 0a:35:40:c4:f9:16:64:3f:e7:6a:88:e0:37:21:a6: 4a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:87:3C:76:8C:CD:7A:84:1D:46:73:36:E4:32:94:68:71:30:8F:BE X509v3 Authority Key Identifier: keyid:21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:96:c4:37:4c:68:1e:72:8f:69:0d:12:fd:a0:cd:8d:77:23: 65:00:39:b5:37:09:cb:bb:23:84:56:66:28:98:5e:d4:63:33: b9:b3:57:a0:40:ec:52:3c:89:23:3b:6f:38:26:11:ad:50:21: 40:b7:b3:cf:f6:c6:ea:ed:00:3d:da:0e:41:9f:d4:70:49:b5: 31:ce:46:c2:e5:65:3c:b1:d6:72:9a:c5:df:05:3e:95:cb:ff: f6:6a:d9:b9:13:07:c4:8f:1d:f3:1c:86:2f:43:44:65:67:c3: 15:f7:5d:73:ed:93:bf:72:f3:77:20:eb:d1:d5:1e:64:1f:40: c9:dc:6b:8b:cf:0e:83:3f:ba:8a:d1:71:74:0e:73:c6:ba:c5: aa:21:86:41:d5:de:5f:47:6a:ec:24:99:67:5e:16:1f:fc:6f: ef:46:00:d2:b9:a9:b9:aa:80:d8:23:e6:83:fa:a3:f0:2c:2e: 35:42:ef:03:60:7c:96:24:a5:78:4f:5e:b2:6a:d6:a0:bd:89: 25:0b:0b:8b:8d:01:89:cb:25:d0:44:10:5b:97:02:1d:84:f0: 51:d7:51:54:90:8a:89:a0:40:fb:a1:41:94:d5:92:be:13:e6: e0:a0:42:7a:a6:4f:64:89:7e:d7:6b:e4:66:4c:8d:40:56:87: 7f:b6:11:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUM2MjExMC8GA1UEBRMoMjFDOEYyQjZFMDFEMEE4MkQxM0MzNTE4OEMzQzkzRTZG NTE0QkE5NDAeFw0yNTEwMTkxMTEyNDBaFw0yNTEwMjYxMTEyNDBaMBgxFjAUBgNV BAMTDTY4ZjRjN2E4LTI5ZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEpO/+PM1rcIwLtTollwPaKHPwhdG+c/NxL3er9PD3K160VZPPPNShXdCG2OFC X3TAiiSiaUgHKdLy45eMPouob5zxm26ehjvj2u6/UxwF606FN6jewnQqqpT33ngu 7neVa4CsMlP6pVuuoQnILLpmZe6DadXv5N12oupYsD8pFhoQXMTTOCu5ZNwLtLxN 4/001YeWjM8knEksHY+Gv23BbWpogFdXh2zbJ2nkKqQDIXK+/31L0dPin/dOTJpT MlAPRJ2TJNlU+6LbC53g5lTa44c7bgly8N3184fCgB8+3eZvWMsNkpnkt0ovThLv mQo1QMT5FmQ/52qI4DchpkqlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYoc8dozN eoQdRnM25DKUaHEwj74wHwYDVR0jBBgwFoAUIcjytuAdCoLRPDUYjDyT5vUUupQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5QzYyLzBBRUFBQ0Q2NkI2 NjExRjBCN0Y4RUI0MEM0RjlBRTAyL0ljanl0dUFkQ29MUlBEVVlqRHlUNXZVVXVw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSWNqeXR1QWRDb0xSUERVWWpEeVQ1dlVVdXBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 QzYyLzBBRUFBQ0Q2NkI2NjExRjBCN0Y4RUI0MEM0RjlBRTAyL0ljanl0dUFkQ29M UlBEVVlqRHlUNXZVVXVwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHaWxDdMaB5yj2kNEv2gzY13I2UAObU3Ccu7I4RWZiiYXtRjM7mzV6BA 7FI8iSM7bzgmEa1QIUC3s8/2xurtAD3aDkGf1HBJtTHORsLlZTyx1nKaxd8FPpXL //Zq2bkTB8SPHfMchi9DRGVnwxX3XXPtk79y83cg69HVHmQfQMnca4vPDoM/uorR cXQOc8a6xaohhkHV3l9HauwkmWdeFh/8b+9GANK5qbmqgNgj5oP6o/AsLjVC7wNg fJYkpXhPXrJq1qC9iSULC4uNAYnLJdBEEFuXAh2E8FHXUVSQiomgQPuhQZTVkr4T 5uCgQnqmT2SJftdr5GZMjUBWh3+2Eec= -----END CERTIFICATE-----Generated at Mon Oct 20 17:02:49 2025 by rpki-client