$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft File: IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft (raw, json) Hash identifier: NGoY7KPVzOZQNkWxoYV0giVisMUS3OQOB0qBXu4/7kE= Subject key identifier: F8:05:F5:6C:EE:F3:1A:FD:DA:73:D2:A7:31:6B:06:35:B0:AB:81:E3 Authority key identifier: 21:76:05:A5:DE:DE:2D:62:2F:98:AE:A6:C2:F6:F9:5D:8F:AE:1B:66 Certificate issuer: /CN=A91AE81E/serialNumber=217605A5DEDE2D622F98AEA6C2F6F95D8FAE1B66 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft Manifest number: 08 Signing time: Mon 03 Nov 2025 08:02:20 +0000 Manifest this update: Mon 03 Nov 2025 08:02:20 +0000 Manifest next update: Mon 10 Nov 2025 08:02:20 +0000 Files and hashes: 1: IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl (hash: OMh1VWMneEDv8c+ZaHgf6hrYWa/LjtSdhaz9KhFBV+U=) 2: 06048736B08B11F087892851C4F9AE02.roa (hash: MGTRUGiY/PpMjOJIUcW60kEx30zE7nrfm4YqqIZVmAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE81E, serialNumber=217605A5DEDE2D622F98AEA6C2F6F95D8FAE1B66 Validity Not Before: Nov 3 08:02:20 2025 GMT Not After : Nov 10 08:02:20 2025 GMT Subject: CN=6908618c-907a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0f:4c:df:88:6e:ed:df:06:b4:bb:ec:a1:10: ed:5b:d6:4f:6d:cf:3d:b6:c6:aa:d6:ae:a6:d8:5f: f4:53:39:16:6c:9a:4c:80:44:cc:ae:e8:f1:61:71: 14:c6:d0:5b:ab:9e:3b:08:55:1e:cf:92:85:6d:90: 28:cb:ac:d1:2d:49:cc:8d:cb:64:74:30:f7:d7:d3: 03:77:4f:e7:0a:04:35:b6:16:69:d2:4a:da:97:22: 7d:67:dc:a0:93:c2:27:43:3f:68:e5:f3:4d:bd:0e: b1:02:ad:bc:60:54:58:c8:7f:1f:d9:03:3a:72:ba: ea:d5:7a:14:b8:15:a8:56:71:b4:28:1d:16:f3:f8: 39:8e:fc:47:da:44:b0:d5:e9:a6:e3:1f:4d:4a:7c: 1d:96:0f:86:7b:e2:44:7c:09:05:14:b9:42:17:e3: b1:0a:df:a9:56:96:52:50:f4:d1:ec:c5:b7:ed:b0: cd:a0:f3:e3:eb:45:9d:b1:f0:a4:49:a4:61:93:06: 24:ff:90:d3:5f:0c:97:21:cd:af:65:c9:ec:ba:a3: cc:7e:7c:03:00:c9:00:c6:93:14:bd:0d:e3:a8:4f: a5:49:b3:72:74:14:d6:3b:5e:0d:df:f8:0f:69:31: f5:b0:b9:32:45:64:2e:fe:ff:52:3c:4f:b5:7d:4d: 27:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:05:F5:6C:EE:F3:1A:FD:DA:73:D2:A7:31:6B:06:35:B0:AB:81:E3 X509v3 Authority Key Identifier: keyid:21:76:05:A5:DE:DE:2D:62:2F:98:AE:A6:C2:F6:F9:5D:8F:AE:1B:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:c3:c0:13:1a:5d:10:98:69:71:8f:5c:78:18:28:45:0f:db: fb:3a:a9:85:20:80:4c:db:e7:ee:0a:e4:97:cd:a8:7b:f8:ed: 43:72:43:45:4d:d5:63:b2:af:69:71:ac:de:64:11:67:80:e6: 9c:b7:c8:b6:37:0b:0c:78:e6:36:54:25:d9:0f:1d:8e:88:c4: 84:a5:3a:fc:71:77:9c:15:4e:e0:3a:f6:29:a4:0e:a1:ed:85: d9:be:a2:c2:61:7d:e6:c3:e8:8e:37:0d:4a:40:ed:29:73:5c: 6c:6c:4c:d3:6c:a0:cc:b9:a5:e7:d1:6f:ac:93:d0:8e:85:36: 95:99:2a:75:c8:93:8e:f2:49:16:b7:7f:45:55:b0:f0:1c:57: 1d:62:dc:90:6e:39:94:3d:97:ae:0f:5d:57:35:c9:22:1d:2f: 1c:28:4e:a2:d5:22:2b:19:29:d9:e6:24:e0:f9:dd:fd:cb:47: 47:5f:0a:66:51:b7:19:96:c4:36:fe:fe:f6:0b:35:6a:db:9e: 44:fe:64:07:38:0c:cd:24:d1:11:f7:2d:d7:22:b1:1b:3a:7b: 11:ad:de:b8:1f:94:42:23:c9:7f:fd:6a:be:39:1a:01:29:26: b8:29:6f:19:04:87:e6:94:97:ba:6d:fc:50:86:a7:59:a3:11: 6f:9c:25:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RTgxRTExMC8GA1UEBRMoMjE3NjA1QTVERURFMkQ2MjJGOThBRUE2QzJGNkY5NUQ4 RkFFMUI2NjAeFw0yNTExMDMwODAyMjBaFw0yNTExMTAwODAyMjBaMBgxFjAUBgNV BAMTDTY5MDg2MThjLTkwN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiD0zfiG7t3wa0u+yhEO1b1k9tzz22xqrWrqbYX/RTORZsmkyARMyu6PFhcRTG 0FurnjsIVR7PkoVtkCjLrNEtScyNy2R0MPfX0wN3T+cKBDW2FmnSStqXIn1n3KCT widDP2jl8029DrECrbxgVFjIfx/ZAzpyuurVehS4FahWcbQoHRbz+DmO/EfaRLDV 6abjH01KfB2WD4Z74kR8CQUUuUIX47EK36lWllJQ9NHsxbftsM2g8+PrRZ2x8KRJ pGGTBiT/kNNfDJchza9lyey6o8x+fAMAyQDGkxS9DeOoT6VJs3J0FNY7Xg3f+A9p MfWwuTJFZC7+/1I8T7V9TScpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+AX1bO7z Gv3ac9KnMWsGNbCrgeMwHwYDVR0jBBgwFoAUIXYFpd7eLWIvmK6mwvb5XY+uG2Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFODFFL0VBNzgyMEQ4QjA4 ODExRjA5QzIyMkIyRUM0RjlBRTAyL0lYWUZwZDdlTFdJdm1LNm13dmI1WFktdUcy WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVhZRnBkN2VMV0l2bUs2bXd2YjVYWS11RzJZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF ODFFL0VBNzgyMEQ4QjA4ODExRjA5QzIyMkIyRUM0RjlBRTAyL0lYWUZwZDdlTFdJ dm1LNm13dmI1WFktdUcyWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEXDwBMaXRCYaXGPXHgYKEUP2/s6qYUggEzb5+4K5JfNqHv47UNyQ0VN 1WOyr2lxrN5kEWeA5py3yLY3Cwx45jZUJdkPHY6IxISlOvxxd5wVTuA69imkDqHt hdm+osJhfebD6I43DUpA7SlzXGxsTNNsoMy5pefRb6yT0I6FNpWZKnXIk47ySRa3 f0VVsPAcVx1i3JBuOZQ9l64PXVc1ySIdLxwoTqLVIisZKdnmJOD53f3LR0dfCmZR txmWxDb+/vYLNWrbnkT+ZAc4DM0k0RH3LdcisRs6exGt3rgflEIjyX/9ar45GgEp JrgpbxkEh+aUl7pt/FCGp1mjEW+cJRQ= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:54 2025 by rpki-client