$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft File: i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft (raw, json) Hash identifier: EA3D48u55C3079jGueuh9Du9BlW6zpybsQGZG08dkoc= Subject key identifier: 18:D0:83:00:90:3B:B7:CF:F7:92:C9:0A:08:F4:22:5B:65:56:6C:5E Authority key identifier: 8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C Certificate issuer: /CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft Manifest number: 0141 Signing time: Mon 03 Nov 2025 04:24:41 +0000 Manifest this update: Mon 03 Nov 2025 04:24:40 +0000 Manifest next update: Mon 10 Nov 2025 04:24:40 +0000 Files and hashes: 1: i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl (hash: af6E3hZrUIlj7NQqJ+YX3QoSf4HTaM3Ga5nhCb/xmO0=) 2: 52333EB4CFAE11EEB928CD25C4F9AE02.roa (hash: 6P1QigKgDh/og+D4IavE2ADNPbY260YTNHIn9cQtib4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0EDF, serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Validity Not Before: Nov 3 04:24:40 2025 GMT Not After : Nov 10 04:24:40 2025 GMT Subject: CN=69082e89-5b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bb:0d:93:bf:99:58:56:89:96:ab:9d:86:b3: 1d:c7:6a:ab:45:4d:1b:9c:73:7a:74:11:75:6c:ad: 54:bb:b2:8a:b9:66:b3:5c:42:3f:e7:ed:44:64:44: 35:98:1d:92:9b:d4:88:c3:cb:aa:7b:29:57:90:35: 72:dd:fc:29:ff:d9:52:0e:17:bd:cc:7b:07:cf:05: b9:76:9d:62:9d:ed:d4:c6:2d:b8:f3:2d:3a:83:f6: 95:c5:45:b7:cf:50:07:59:a4:4f:bf:89:8e:d7:29: 57:59:38:dc:76:bb:76:fc:42:dd:bd:c3:bf:f4:10: 6d:5c:20:2e:d1:fd:d9:31:bb:26:04:34:14:b0:d3: f6:15:ec:ac:b8:9c:d1:ee:cb:d1:2d:93:df:48:64: 55:92:4c:05:0c:40:27:f6:ae:1f:3b:d2:6a:cb:c8: 6c:96:c5:e0:ea:71:23:b4:c5:f8:00:cf:84:ae:5b: 7b:9a:ca:b7:13:9f:4d:ea:45:a4:96:b0:6f:65:cb: e5:3e:ab:ff:3a:a7:76:b9:ba:86:3a:65:70:e6:2c: 49:8c:81:aa:d7:a7:d2:a9:14:de:67:b4:c2:e9:f2: 08:1d:c8:52:f1:a6:1f:37:64:68:d6:74:a3:db:26: 77:ed:0e:93:cb:fc:81:9a:5b:78:1d:7f:ea:a4:c0: 5c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D0:83:00:90:3B:B7:CF:F7:92:C9:0A:08:F4:22:5B:65:56:6C:5E X509v3 Authority Key Identifier: keyid:8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:42:a2:0d:e5:7f:7b:2a:67:7c:53:21:99:8f:13:6e:f1:89: 5e:bd:40:a9:88:ce:3b:3b:51:bb:6a:df:ce:10:8d:92:26:ab: 89:6b:84:45:37:0e:ed:32:fe:08:c5:a6:32:e1:34:aa:08:b2: b9:98:9e:9d:7b:be:98:3b:3b:bd:22:0d:37:a3:4e:79:af:c6: a0:da:a6:53:f5:18:0a:11:6e:13:dc:85:f0:38:21:d3:eb:6a: ed:32:94:b9:28:f5:96:f8:4a:ed:ed:22:d6:6d:60:b8:0a:2f: 0f:65:ab:1e:82:68:58:06:d5:f9:b9:7e:ef:f2:b8:34:77:f1: a8:5f:6d:9a:4d:f6:e7:6d:f0:54:93:4c:53:79:b4:c4:c8:23: 7c:32:4d:25:e9:f1:86:a7:38:31:e7:c6:1b:52:60:08:24:0b: e2:38:1a:d3:65:39:9d:3d:7c:b2:36:37:f7:4b:65:e9:83:ba: d9:55:83:df:49:85:81:4f:c6:de:01:5e:8d:ef:e0:eb:6e:9c: 11:e5:bb:9e:12:1b:87:22:d3:26:bb:6b:31:ce:cb:7b:b1:c3: 92:fc:7d:a6:52:d4:8e:37:cb:5a:d9:07:7b:17:df:08:3f:d5: 13:cd:6b:e1:cc:13:68:d9:4d:1c:07:55:96:00:d4:d3:66:98: f5:cb:84:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFREYxMTAvBgNVBAUTKDhCNjQxOTY4NjkxMTdCOTlCODc5QjREQ0JBRjA0Mjkw QkMxNjgxMEMwHhcNMjUxMTAzMDQyNDQwWhcNMjUxMTEwMDQyNDQwWjAYMRYwFAYD VQQDEw02OTA4MmU4OS01YjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bsNk7+ZWFaJlqudhrMdx2qrRU0bnHN6dBF1bK1Uu7KKuWazXEI/5+1EZEQ1 mB2Sm9SIw8uqeylXkDVy3fwp/9lSDhe9zHsHzwW5dp1ine3Uxi248y06g/aVxUW3 z1AHWaRPv4mO1ylXWTjcdrt2/ELdvcO/9BBtXCAu0f3ZMbsmBDQUsNP2FeysuJzR 7svRLZPfSGRVkkwFDEAn9q4fO9Jqy8hslsXg6nEjtMX4AM+Erlt7msq3E59N6kWk lrBvZcvlPqv/Oqd2ubqGOmVw5ixJjIGq16fSqRTeZ7TC6fIIHchS8aYfN2Ro1nSj 2yZ37Q6Ty/yBmlt4HX/qpMBceQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjQgwCQ O7fP95LJCgj0IltlVmxeMB8GA1UdIwQYMBaAFItkGWhpEXuZuHm03LrwQpC8FoEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEVERi8zREUzOUU4MkNG QUQxMUVFQUNGQTQyNjhDNEY5QUUwMi9pMlFaYUdrUmU1bTRlYlRjdXZCQ2tMd1dn UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyUVphR2tSZTVtNGViVGN1dkJDa0x3V2dRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEVERi8zREUzOUU4MkNGQUQxMUVFQUNGQTQyNjhDNEY5QUUwMi9pMlFaYUdrUmU1 bTRlYlRjdXZCQ2tMd1dnUXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcQqIN5X97Kmd8UyGZjxNu8YlevUCpiM47O1G7at/OEI2SJquJa4RF Nw7tMv4IxaYy4TSqCLK5mJ6de76YOzu9Ig03o055r8ag2qZT9RgKEW4T3IXwOCHT 62rtMpS5KPWW+Ert7SLWbWC4Ci8PZasegmhYBtX5uX7v8rg0d/GoX22aTfbnbfBU k0xTebTEyCN8Mk0l6fGGpzgx58YbUmAIJAviOBrTZTmdPXyyNjf3S2Xpg7rZVYPf SYWBT8beAV6N7+DrbpwR5bueEhuHItMmu2sxzst7scOS/H2mUtSON8ta2Qd7F98I P9UTzWvhzBNo2U0cB1WWANTTZpj1y4T6 -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:18 2025 by rpki-client