$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft File: iXCkAMzM8BCTPDMMN2Ch7F204K0.mft (raw, json) Hash identifier: qeaOmfwvdh6NMBWEpHjJIxDG/kP9s7wn8zFXb1XKBeI= Subject key identifier: 9C:B9:A3:DC:5D:8D:A1:22:8F:F9:AE:48:21:73:DE:9F:CB:C3:87:D7 Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Certificate serial: 058B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft Manifest number: 057F Signing time: Sat 25 Oct 2025 01:36:49 +0000 Manifest this update: Sat 25 Oct 2025 01:36:48 +0000 Manifest next update: Sat 01 Nov 2025 01:36:48 +0000 Files and hashes: 1: iXCkAMzM8BCTPDMMN2Ch7F204K0.crl (hash: 1ybYBryayUsQqg9hev5AGXDaJ+A0uQtfML3vf/P623o=) 2: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (hash: xQl2oR7pAbge5iF8YPhv/hbmMFqMQxGSZC11zhknFak=) 3: AD1469EC7A3911ECB5639D41C4F9AE02.roa (hash: M0rop6u3XFd48CsMz0Ik0R+4A+HjyQyG2cdgIdeoY8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 01:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1419 (0x58b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Validity Not Before: Oct 25 01:36:48 2025 GMT Not After : Nov 1 01:36:48 2025 GMT Subject: CN=68fc29b1-f8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:37:c3:15:91:a4:be:2d:71:b0:12:45:2d:3b: 9a:b1:ed:e0:b1:da:55:6c:8b:77:a9:74:6d:7c:6e: 0d:ae:c5:af:19:9b:df:f5:c2:92:7d:6b:55:2d:08: 1a:3a:76:01:a0:f2:f5:de:37:84:e2:62:95:49:49: 44:ed:ef:e4:f5:43:ba:de:35:5b:82:51:bd:b2:25: a6:b8:04:12:8a:02:64:74:1f:e1:2e:e0:17:83:90: 4a:af:9b:2e:7f:d4:4c:a2:d2:de:c6:27:81:35:c5: f1:90:e7:bd:d3:6b:57:48:38:89:9c:bc:57:55:f2: 55:52:3e:23:a9:56:e4:69:39:e6:c5:c2:1c:87:cf: 82:d0:b7:21:6a:1a:94:4f:72:90:a0:b4:dc:d3:ef: 00:76:ca:8c:5e:ed:1f:92:67:3e:c7:9f:72:ca:57: 16:80:b5:f9:b8:ed:d8:75:29:40:e3:22:cf:06:04: 45:23:58:da:be:2e:d8:c4:f2:df:48:e6:e6:ba:ec: 33:a9:8c:4e:b5:db:78:34:73:ce:c5:dd:22:bd:b6: e7:b7:f4:71:fe:97:d4:ae:6d:27:11:d2:43:2b:e4: 03:e0:c0:37:5a:3c:26:93:b1:7a:f8:6c:e8:92:ab: c9:10:f9:7d:b5:82:da:4d:f2:f6:7a:3a:05:48:c0: c1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B9:A3:DC:5D:8D:A1:22:8F:F9:AE:48:21:73:DE:9F:CB:C3:87:D7 X509v3 Authority Key Identifier: keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:d4:c1:cf:c3:49:33:74:bb:28:47:b1:06:bc:d7:34:29:c5: f1:21:9c:6b:94:62:dd:96:f3:28:7f:cf:ff:cb:b6:97:5f:08: 72:5e:cb:56:4c:3f:f2:e0:3a:d1:b3:5e:c5:1a:0a:6f:75:4e: 07:0b:78:af:74:62:0e:f1:32:c0:90:31:fa:e9:78:76:a7:6f: fb:2d:7c:70:3e:4a:1c:88:bd:ae:ba:13:c8:40:a0:d1:33:ff: 55:85:78:ee:92:c8:0e:22:ae:67:94:3f:a6:cf:f2:f4:40:e1: ed:a3:eb:fa:01:a2:67:54:ff:02:66:e4:dd:ca:a0:ef:84:af: d3:f5:d8:c6:f9:8c:91:6c:0e:ef:94:13:b9:aa:f9:fb:b2:75: bc:e7:f4:22:4f:a8:1e:a3:74:08:fd:e4:4b:79:2e:d3:17:7a: ce:e4:fa:bd:01:0f:ec:c9:7c:92:cc:a5:84:06:2a:bd:87:46: 32:94:27:86:06:cb:b1:44:c9:12:71:6b:28:43:17:2a:42:64: 12:0e:df:24:02:fc:bd:15:da:c6:ea:2d:d1:e5:ce:7a:11:27: 0f:54:1d:54:1a:36:03:05:20:42:fe:39:90:0d:fd:89:18:e2: 2d:c5:fd:4e:5a:ec:37:52:56:b7:09:bf:ce:03:c7:96:20:38: cd:0b:48:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyREMxMTAvBgNVBAUTKDg5NzBBNDAwQ0NDQ0YwMTA5MzNDMzMwQzM3NjBBMUVD NURCNEUwQUQwHhcNMjUxMDI1MDEzNjQ4WhcNMjUxMTAxMDEzNjQ4WjAYMRYwFAYD VQQDEw02OGZjMjliMS1mOGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TfDFZGkvi1xsBJFLTuase3gsdpVbIt3qXRtfG4NrsWvGZvf9cKSfWtVLQga OnYBoPL13jeE4mKVSUlE7e/k9UO63jVbglG9siWmuAQSigJkdB/hLuAXg5BKr5su f9RMotLexieBNcXxkOe902tXSDiJnLxXVfJVUj4jqVbkaTnmxcIch8+C0LchahqU T3KQoLTc0+8AdsqMXu0fkmc+x59yylcWgLX5uO3YdSlA4yLPBgRFI1javi7YxPLf SObmuuwzqYxOtdt4NHPOxd0ivbbnt/Rx/pfUrm0nEdJDK+QD4MA3Wjwmk7F6+Gzo kqvJEPl9tYLaTfL2ejoFSMDB5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJy5o9xd jaEij/muSCFz3p/Lw4fXMB8GA1UdIwQYMBaAFIlwpADMzPAQkzwzDDdgoexdtOCt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTJEQy9DNjA1NzhBMEY5 OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThCQ1RQRE1NTjJDaDdGMjA0 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQ2tBTXpNOEJDVFBETU1OMkNoN0YyMDRLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTJEQy9DNjA1NzhBMEY5OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThC Q1RQRE1NTjJDaDdGMjA0SzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU1MHPw0kzdLsoR7EGvNc0KcXxIZxrlGLdlvMof8//y7aXXwhyXstW TD/y4DrRs17FGgpvdU4HC3ivdGIO8TLAkDH66Xh2p2/7LXxwPkociL2uuhPIQKDR M/9VhXjuksgOIq5nlD+mz/L0QOHto+v6AaJnVP8CZuTdyqDvhK/T9djG+YyRbA7v lBO5qvn7snW85/QiT6geo3QI/eRLeS7TF3rO5Pq9AQ/syXySzKWEBiq9h0YylCeG BsuxRMkScWsoQxcqQmQSDt8kAvy9FdrG6i3R5c56EScPVB1UGjYDBSBC/jmQDf2J GOItxf1OWuw3Ula3Cb/OA8eWIDjNC0gk -----END CERTIFICATE-----Generated at Sat Oct 25 17:35:28 2025 by rpki-client