$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft File: iZOTjIV1ACgOj15T3As-kweu1Kc.mft (raw, json) Hash identifier: X1rc5iRRo4S7vra7Yii71n2h/VCR1C+07DjlQXC0N0E= Subject key identifier: 06:90:61:B7:8F:D2:88:5D:32:24:0C:C3:D2:51:2B:56:D5:5E:1F:DD Authority key identifier: 89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 Certificate issuer: /CN=A91BD3E1/serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft Manifest number: 86 Signing time: Mon 03 Nov 2025 06:39:34 +0000 Manifest this update: Mon 03 Nov 2025 06:39:34 +0000 Manifest next update: Mon 10 Nov 2025 06:39:34 +0000 Files and hashes: 1: iZOTjIV1ACgOj15T3As-kweu1Kc.crl (hash: CRpfvnDTVax5qsmh+vr53SDLRrCgC5Z7I6aniBRb4Oc=) 2: 459FAF10EF4811EF8F4B9284C4F9AE02.roa (hash: t4VsjBzDPnCNqQJ4/+l/e7o+o8AvICh72VVWJ8BMmY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3E1, serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Validity Not Before: Nov 3 06:39:34 2025 GMT Not After : Nov 10 06:39:34 2025 GMT Subject: CN=69084e26-1429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:e5:28:86:3b:ab:55:2e:16:7e:46:01:74: 33:8e:c4:2e:91:a1:24:af:2c:f3:e5:35:3a:39:d5: d7:5e:16:98:fa:7e:a7:4f:05:78:91:34:4a:19:64: 9f:1b:89:a9:42:e1:4b:2e:b7:f8:a9:ef:62:65:2b: e8:83:28:8a:e9:5b:07:c2:7b:46:00:81:49:05:71: ed:db:bc:a7:d3:12:32:28:8c:b8:3b:86:e5:1f:73: c3:80:b3:4f:49:60:8a:f3:29:01:2a:e4:86:8f:c2: 3c:f8:4a:dd:0e:b3:1d:6e:52:b6:37:33:c1:cc:e7: f4:5b:76:3a:74:fc:37:c0:b5:d2:fe:a0:48:f4:15: d4:95:d7:a0:19:d7:3a:46:ad:37:d6:7f:b4:4d:98: ec:02:60:ce:5e:c2:6a:b5:ac:8c:95:33:44:7f:b0: e2:c5:f1:7e:d7:48:6a:97:2f:07:88:a1:a0:d9:a5: 0a:d2:d6:40:af:e4:a2:8b:7e:43:ba:72:2c:62:f6: 69:70:a1:44:bb:aa:d0:7b:00:fa:37:9c:f8:9a:c2: 7b:4f:7a:0e:5f:7b:53:da:c9:ab:4d:2a:52:5a:dc: be:ba:55:3f:58:67:c9:3e:4b:44:c0:65:5d:fd:01: 7e:ac:9d:ae:f1:b4:8b:74:5a:2f:c5:3c:08:4d:5e: 1f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:90:61:B7:8F:D2:88:5D:32:24:0C:C3:D2:51:2B:56:D5:5E:1F:DD X509v3 Authority Key Identifier: keyid:89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3b:12:c5:78:c4:3a:c9:39:78:b3:8e:90:37:9c:1d:39:b0: c9:28:f1:09:26:8e:39:4e:da:48:0a:63:81:c3:d3:1d:70:eb: 55:ec:d6:f6:c8:e8:f8:ad:92:76:3c:fa:a5:ee:36:4f:af:62: cf:1a:52:d9:8c:b0:e7:3d:32:d9:55:ee:7b:65:d5:07:d4:0d: 1b:8e:57:99:f5:c1:25:9a:58:01:d3:5e:87:8c:d3:a1:2b:cc: d8:ff:ba:cb:1e:7c:00:16:f1:9c:ae:95:86:c9:9c:6b:41:5b: c4:4b:92:dc:4a:e5:5d:08:ab:b5:32:d2:2b:86:54:a4:b5:0b: ce:95:99:e0:5e:f6:c9:8c:7d:8c:97:21:52:0c:93:e5:6f:31: 12:8b:6e:e7:6a:e6:c9:17:02:db:4d:68:65:7d:8f:17:6f:61: 84:e0:f2:bc:9d:1c:b5:68:18:aa:35:57:33:68:2a:30:c4:20: 12:ad:85:53:16:f7:53:48:02:26:05:e4:3e:a0:7a:38:7e:81: 1d:b9:a3:74:83:54:47:39:4f:d2:01:f9:89:dd:ed:f4:89:b3: cf:31:94:23:ba:ff:ff:b2:39:fb:31:d9:70:2f:3a:2a:66:23: 5f:19:65:9a:ad:eb:fc:f7:47:65:f8:ca:ee:73:91:d9:96:4d: 78:a1:10:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQzRTExMTAvBgNVBAUTKDg5OTM5MzhDODU3NTAwMjgwRThGNUU1M0RDMEIzRTkz MDdBRUQ0QTcwHhcNMjUxMTAzMDYzOTM0WhcNMjUxMTEwMDYzOTM0WjAYMRYwFAYD VQQDEw02OTA4NGUyNi0xNDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfblKIY7q1UuFn5GAXQzjsQukaEkryzz5TU6OdXXXhaY+n6nTwV4kTRKGWSf G4mpQuFLLrf4qe9iZSvogyiK6VsHwntGAIFJBXHt27yn0xIyKIy4O4blH3PDgLNP SWCK8ykBKuSGj8I8+ErdDrMdblK2NzPBzOf0W3Y6dPw3wLXS/qBI9BXUldegGdc6 Rq031n+0TZjsAmDOXsJqtayMlTNEf7DixfF+10hqly8HiKGg2aUK0tZAr+Sii35D unIsYvZpcKFEu6rQewD6N5z4msJ7T3oOX3tT2smrTSpSWty+ulU/WGfJPktEwGVd /QF+rJ2u8bSLdFovxTwITV4fdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaQYbeP 0ohdMiQMw9JRK1bVXh/dMB8GA1UdIwQYMBaAFImTk4yFdQAoDo9eU9wLPpMHrtSn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDNFMS83Q0YwN0JDNkVG NDcxMUVGQUY0QzQ5NjhDNEY5QUUwMi9pWk9UaklWMUFDZ09qMTVUM0FzLWt3ZXUx S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2laT1RqSVYxQUNnT2oxNVQzQXMta3dldTFLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDNFMS83Q0YwN0JDNkVGNDcxMUVGQUY0QzQ5NjhDNEY5QUUwMi9pWk9UaklWMUFD Z09qMTVUM0FzLWt3ZXUxS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9OxLFeMQ6yTl4s46QN5wdObDJKPEJJo45TtpICmOBw9MdcOtV7Nb2 yOj4rZJ2PPql7jZPr2LPGlLZjLDnPTLZVe57ZdUH1A0bjleZ9cElmlgB016HjNOh K8zY/7rLHnwAFvGcrpWGyZxrQVvES5LcSuVdCKu1MtIrhlSktQvOlZngXvbJjH2M lyFSDJPlbzESi27naubJFwLbTWhlfY8Xb2GE4PK8nRy1aBiqNVczaCowxCASrYVT FvdTSAImBeQ+oHo4foEduaN0g1RHOU/SAfmJ3e30ibPPMZQjuv//sjn7MdlwLzoq ZiNfGWWarev890dl+Mruc5HZlk14oRCm -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:48 2025 by rpki-client