$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft File: iJGVOO7eyDINXq9rHzKymCOreBA.mft (raw, json) Hash identifier: tvRqAqKmO4bTEusCSqSUh/9UPYouc+zUNOfOsbND05U= Subject key identifier: BA:4F:EA:B9:E8:63:CF:0C:C5:E9:A5:0A:8A:30:49:E1:48:6F:A2:85 Authority key identifier: 88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10 Certificate issuer: /CN=A91B4460/serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft Manifest number: 64 Signing time: Sat 25 Oct 2025 10:57:03 +0000 Manifest this update: Sat 25 Oct 2025 10:57:02 +0000 Manifest next update: Sat 01 Nov 2025 10:57:02 +0000 Files and hashes: 1: iJGVOO7eyDINXq9rHzKymCOreBA.crl (hash: k4mykZbBJvG3DJ3toNzw4hrxdliq20F5DP1fdwkCbeE=) 2: 7A85F9D2148711F0AF960528C4F9AE02.roa (hash: v93VVwAanSucSOqj9EwS1pD5Lqih1cuGiSwwM282Dpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 10:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4460, serialNumber=88919538EEDEC8320D5EAF6B1F32B29823AB7810 Validity Not Before: Oct 25 10:57:02 2025 GMT Not After : Nov 1 10:57:02 2025 GMT Subject: CN=68fcacfe-8409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9b:7b:38:33:5f:d9:fa:d3:94:a0:95:98:3a: 99:94:40:80:32:50:d8:68:61:2b:90:86:b0:64:f4: bd:49:8f:89:4f:c5:ca:47:3f:66:8e:c0:9f:f6:8e: 01:36:77:df:35:f8:9b:40:03:96:b8:65:d8:b8:e6: 2f:50:dc:a8:b9:10:77:6e:8a:6c:39:86:6a:94:1c: 4a:9b:cc:e0:81:c0:ba:1e:2f:73:4f:87:57:4b:16: 2d:cc:91:8b:fb:51:52:8d:3d:4c:52:2f:70:b8:6a: c1:9b:b7:68:75:9e:94:d7:6d:b3:23:55:c6:c3:ec: d4:67:dd:8e:a3:b0:a3:ca:cc:8e:71:8c:92:6e:39: 31:e8:e1:af:7c:d2:2f:c9:31:07:57:dc:f7:c7:19: 53:c4:3c:ec:fa:6d:79:45:1d:b4:a0:eb:ff:37:a0: 30:79:61:d5:67:9f:f4:91:5e:8e:53:d4:33:e8:89: b4:47:63:81:cc:08:ab:f0:a6:8a:21:65:72:24:f2: ff:f3:80:ad:93:4b:26:17:f2:a9:e3:1f:f6:4e:77: 7f:09:66:07:39:6b:6f:07:d2:47:6d:79:80:54:c2: 1a:53:b6:c9:08:a5:13:7e:8d:2d:53:24:c2:84:3c: ec:45:4f:11:55:b1:2f:69:0b:9c:d3:a0:17:c3:ad: 19:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4F:EA:B9:E8:63:CF:0C:C5:E9:A5:0A:8A:30:49:E1:48:6F:A2:85 X509v3 Authority Key Identifier: keyid:88:91:95:38:EE:DE:C8:32:0D:5E:AF:6B:1F:32:B2:98:23:AB:78:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iJGVOO7eyDINXq9rHzKymCOreBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4460/04986476148711F0A79EAB26C4F9AE02/iJGVOO7eyDINXq9rHzKymCOreBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:fe:97:81:02:61:22:8e:f7:4c:de:b5:cb:4b:68:6c:f5:be: cf:7a:aa:a7:19:a3:30:db:65:2d:8f:58:18:53:0d:db:d6:73: 92:13:1e:dc:e1:6a:48:6d:c7:b3:e6:71:fe:2f:26:f7:41:0d: 80:fa:b2:e9:90:55:1b:0e:10:5c:9e:ad:e1:c2:70:32:80:81: 21:e7:1b:37:2c:a6:43:4a:17:73:67:66:da:51:6f:45:90:ed: 12:7c:98:14:4d:fc:9b:f4:57:bb:ec:95:8d:d7:78:5c:ea:fa: cc:08:1e:81:73:49:70:b6:77:cc:5a:2c:33:7a:db:7d:57:90: ac:e0:54:9e:09:e3:14:e7:4e:11:a4:c9:1c:d0:a9:29:b7:51: 5c:62:17:a3:f4:a4:72:8b:45:71:46:87:33:03:93:f2:2b:c0: fc:49:10:26:b9:41:3b:1f:85:43:40:2f:9b:a5:5c:9c:75:88: 73:64:28:d5:70:9a:2f:92:82:d9:ea:7d:61:63:02:8c:61:27: 2b:c2:72:a5:57:aa:b3:ed:04:26:7e:b0:22:f7:78:c0:42:f7: 33:f4:03:42:7e:5b:fc:18:ea:2a:22:b2:5e:d0:d0:b5:81:53: 1e:d1:bf:33:46:8b:d0:f1:3a:a0:33:1e:9f:16:e8:a3:dc:b6: dc:5f:fd:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDQ2MDExMC8GA1UEBRMoODg5MTk1MzhFRURFQzgzMjBENUVBRjZCMUYzMkIyOTgy M0FCNzgxMDAeFw0yNTEwMjUxMDU3MDJaFw0yNTExMDExMDU3MDJaMBgxFjAUBgNV BAMTDTY4ZmNhY2ZlLTg0MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGm3s4M1/Z+tOUoJWYOpmUQIAyUNhoYSuQhrBk9L1Jj4lPxcpHP2aOwJ/2jgE2 d981+JtAA5a4Zdi45i9Q3Ki5EHduimw5hmqUHEqbzOCBwLoeL3NPh1dLFi3MkYv7 UVKNPUxSL3C4asGbt2h1npTXbbMjVcbD7NRn3Y6jsKPKzI5xjJJuOTHo4a980i/J MQdX3PfHGVPEPOz6bXlFHbSg6/83oDB5YdVnn/SRXo5T1DPoibRHY4HMCKvwpooh ZXIk8v/zgK2TSyYX8qnjH/ZOd38JZgc5a28H0kdteYBUwhpTtskIpRN+jS1TJMKE POxFTxFVsS9pC5zToBfDrRm/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuk/quehj zwzF6aUKijBJ4UhvooUwHwYDVR0jBBgwFoAUiJGVOO7eyDINXq9rHzKymCOreBAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0NDYwLzA0OTg2NDc2MTQ4 NzExRjBBNzlFQUIyNkM0RjlBRTAyL2lKR1ZPTzdleURJTlhxOXJIekt5bUNPcmVC QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaUpHVk9PN2V5RElOWHE5ckh6S3ltQ09yZUJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 NDYwLzA0OTg2NDc2MTQ4NzExRjBBNzlFQUIyNkM0RjlBRTAyL2lKR1ZPTzdleURJ TlhxOXJIekt5bUNPcmVCQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIL+l4ECYSKO90zetctLaGz1vs96qqcZozDbZS2PWBhTDdvWc5ITHtzh akhtx7Pmcf4vJvdBDYD6sumQVRsOEFyereHCcDKAgSHnGzcspkNKF3NnZtpRb0WQ 7RJ8mBRN/Jv0V7vslY3XeFzq+swIHoFzSXC2d8xaLDN6231XkKzgVJ4J4xTnThGk yRzQqSm3UVxiF6P0pHKLRXFGhzMDk/IrwPxJECa5QTsfhUNAL5ulXJx1iHNkKNVw mi+SgtnqfWFjAoxhJyvCcqVXqrPtBCZ+sCL3eMBC9zP0A0J+W/wY6ioisl7Q0LWB Ux7RvzNGi9DxOqAzHp8W6KPcttxf/VA= -----END CERTIFICATE-----Generated at Sat Oct 25 17:39:50 2025 by rpki-client