$ rpki-client -vvf rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft File: 9iXmzAOQJv9byda9xC2NHBir8zs.mft (raw, json) Hash identifier: /leb+3XJHxwfsFVBdSrjaa1gXNc1SJ4GKE8g2D/aCeo= Subject key identifier: EC:C3:EC:A1:57:91:B0:04:59:43:FA:69:A9:D7:37:09:0E:CD:13:9B Authority key identifier: F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B Certificate issuer: /CN=A91B88CA/serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft Manifest number: 0123 Signing time: Wed 29 Oct 2025 04:55:18 +0000 Manifest this update: Wed 29 Oct 2025 04:55:17 +0000 Manifest next update: Wed 05 Nov 2025 04:55:17 +0000 Files and hashes: 1: 9iXmzAOQJv9byda9xC2NHBir8zs.crl (hash: BHk5wY6nmYSwSWvjcuy9uMm89xwvyyncMeX5D5Pr618=) 2: 4857445643A911F0AD37044DC4F9AE02.roa (hash: WkSg+sBSiJcoCE4RbowJKmOS2e9RO49Iq4fHf9Kfe8E=) 3: CD2AE9AE71B611F0A1F6DD29C4F9AE02.roa (hash: V4fGvQxawrO0GIrbZluiaRPHvMfeQYeoae8AjpWNDHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 04:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B88CA, serialNumber=F625E6CC039026FF5BC9D6BDC42D8D1C18ABF33B Validity Not Before: Oct 29 04:55:17 2025 GMT Not After : Nov 5 04:55:17 2025 GMT Subject: CN=69019e36-4050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:29:1c:ab:15:63:7c:04:67:10:0d:e0:87:99: a4:0b:a4:91:e0:ea:4f:2e:0b:79:4c:a8:39:44:22: c1:14:ae:c6:37:21:1f:5c:f9:53:bf:4c:9d:1c:d0: 86:0a:a8:7d:49:30:a0:d1:86:c7:46:bd:4d:04:92: 3b:2c:cf:9a:a3:2b:21:f9:64:05:8b:25:74:7a:07: f2:fc:c7:cb:89:52:fc:cb:52:da:bf:11:bd:56:fe: cf:bf:b3:01:f1:02:f4:c8:ae:4b:2e:44:49:8a:ee: 12:55:7b:a0:5d:d5:34:04:a6:de:47:ae:12:3b:94: 60:85:2c:2d:c6:7d:c1:40:7c:00:c7:a2:4a:f4:55: d2:c2:ca:51:ac:51:7a:f8:98:6c:1e:c3:cd:95:2d: 9d:db:bb:2d:94:1c:d6:71:de:a5:ea:1f:18:5f:01: 89:78:56:24:e5:0f:48:c4:4c:b4:70:35:5d:a2:1c: 29:db:39:58:e3:82:4f:d2:7c:6b:9e:1c:7f:50:5c: 7d:cb:de:f4:10:c3:af:11:3a:fe:33:3c:54:8b:e7: b3:75:16:3e:87:af:b5:42:eb:1d:5d:81:6c:9c:6a: d0:0a:fc:fe:b7:bc:5f:52:e5:b4:c1:c0:06:53:03: 05:3c:42:8f:dc:66:1f:21:eb:18:98:65:35:0b:83: bb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C3:EC:A1:57:91:B0:04:59:43:FA:69:A9:D7:37:09:0E:CD:13:9B X509v3 Authority Key Identifier: keyid:F6:25:E6:CC:03:90:26:FF:5B:C9:D6:BD:C4:2D:8D:1C:18:AB:F3:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9iXmzAOQJv9byda9xC2NHBir8zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B88CA/5696E746346511EFAF6DEB4EC4F9AE02/9iXmzAOQJv9byda9xC2NHBir8zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:5c:75:f6:34:9c:76:dd:61:eb:18:a1:81:1f:75:63:24:67: 61:50:94:12:2c:60:a8:59:ee:b8:11:4a:79:af:9a:b5:27:f4: 32:61:7f:65:b4:63:74:14:16:57:9e:5e:e0:3a:34:10:94:06: 76:45:27:b6:7e:e5:4d:8a:4e:3b:3d:12:57:dd:46:c4:c3:06: f5:33:51:95:8b:b2:d1:95:fd:6b:ef:85:aa:ac:ef:fd:29:26: 5d:09:e4:12:9a:c2:19:45:8d:29:14:dd:01:ee:16:65:04:26: 6b:00:7c:6d:f7:3e:f9:ef:b2:ee:2b:d7:e4:f4:1f:d5:03:21: 5d:1a:66:a7:b8:f0:d8:a6:d3:a7:b3:ed:e3:0b:fb:28:16:89: 0b:ac:45:ee:ea:d6:e1:5e:82:1e:24:e5:3a:79:24:91:3d:6d: b1:f2:91:d6:56:ce:38:11:7c:d1:85:80:4f:01:d6:39:23:45: 77:ea:4a:8d:49:53:2d:f1:d7:0c:b8:57:13:cd:73:f3:c3:5a: a5:02:78:74:2a:cf:c1:ed:db:aa:a3:dc:e1:4e:4b:60:8f:1f: 0f:14:cf:8a:50:b0:cf:66:7e:ec:0c:db:04:3c:87:92:5b:3a: 8a:a7:a9:6c:fd:d3:d7:1e:7a:ff:a4:1e:dc:ce:38:c3:06:f6: 28:67:5c:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg4Q0ExMTAvBgNVBAUTKEY2MjVFNkNDMDM5MDI2RkY1QkM5RDZCREM0MkQ4RDFD MThBQkYzM0IwHhcNMjUxMDI5MDQ1NTE3WhcNMjUxMTA1MDQ1NTE3WjAYMRYwFAYD VQQDEw02OTAxOWUzNi00MDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsikcqxVjfARnEA3gh5mkC6SR4OpPLgt5TKg5RCLBFK7GNyEfXPlTv0ydHNCG Cqh9STCg0YbHRr1NBJI7LM+aoysh+WQFiyV0egfy/MfLiVL8y1LavxG9Vv7Pv7MB 8QL0yK5LLkRJiu4SVXugXdU0BKbeR64SO5RghSwtxn3BQHwAx6JK9FXSwspRrFF6 +JhsHsPNlS2d27stlBzWcd6l6h8YXwGJeFYk5Q9IxEy0cDVdohwp2zlY44JP0nxr nhx/UFx9y970EMOvETr+MzxUi+ezdRY+h6+1QusdXYFsnGrQCvz+t7xfUuW0wcAG UwMFPEKP3GYfIesYmGU1C4O7vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzD7KFX kbAEWUP6aanXNwkOzRObMB8GA1UdIwQYMBaAFPYl5swDkCb/W8nWvcQtjRwYq/M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODhDQS81Njk2RTc0NjM0 NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2OWJ5ZGE5eEMyTkhCaXI4 enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpWG16QU9RSnY5YnlkYTl4QzJOSEJpcjh6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODhDQS81Njk2RTc0NjM0NjUxMUVGQUY2REVCNEVDNEY5QUUwMi85aVhtekFPUUp2 OWJ5ZGE5eEMyTkhCaXI4enMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIXHX2NJx23WHrGKGBH3VjJGdhUJQSLGCoWe64EUp5r5q1J/QyYX9l tGN0FBZXnl7gOjQQlAZ2RSe2fuVNik47PRJX3UbEwwb1M1GVi7LRlf1r74WqrO/9 KSZdCeQSmsIZRY0pFN0B7hZlBCZrAHxt9z7577LuK9fk9B/VAyFdGmanuPDYptOn s+3jC/soFokLrEXu6tbhXoIeJOU6eSSRPW2x8pHWVs44EXzRhYBPAdY5I0V36kqN SVMt8dcMuFcTzXPzw1qlAnh0Ks/B7duqo9zhTktgjx8PFM+KULDPZn7sDNsEPIeS WzqKp6ls/dPXHnr/pB7czjjDBvYoZ1wJ -----END CERTIFICATE-----Generated at Wed Oct 29 08:35:39 2025 by rpki-client