$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft File: Ikchh2oR4tOkuYshvIT3jmT-yEY.mft (raw, json) Hash identifier: TyFDSL4OSUh+n8X5q4K2A0k/K405GoDqlQ+0JnmqrMs= Subject key identifier: 7E:D2:23:00:73:1E:00:3C:42:49:29:2F:34:62:D9:BC:3B:2A:C5:2A Authority key identifier: 22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46 Certificate issuer: /CN=A91CEE6D/serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft Manifest number: 0F Signing time: Fri 17 Oct 2025 11:48:23 +0000 Manifest this update: Fri 17 Oct 2025 11:48:22 +0000 Manifest next update: Fri 24 Oct 2025 11:48:22 +0000 Files and hashes: 1: Ikchh2oR4tOkuYshvIT3jmT-yEY.crl (hash: 8KnFXsGqVbCXJu5Y7TQdzKwrV5uxiO7vzp+kARblsUo=) 2: 09F2A296A02E11F08BC71221C4F9AE02.roa (hash: 6x2cZtG1O8RYzD8OGoXsH+NShNfzIbk96k46lysq5xU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:48:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE6D, serialNumber=224721876A11E2D3A4B98B21BC84F78E64FEC846 Validity Not Before: Oct 17 11:48:22 2025 GMT Not After : Oct 24 11:48:22 2025 GMT Subject: CN=68f22d07-e55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e9:6c:b7:0f:bd:ac:f6:8d:15:75:ff:3c:40: 10:a8:9b:4c:6c:e9:08:fd:d9:69:db:be:ab:22:b3: 96:2b:83:b3:d9:69:68:38:92:41:a6:3c:31:f0:c8: 53:a2:8b:68:02:e3:a9:a7:4f:03:69:60:c7:e6:e8: ef:a6:33:11:01:ac:2e:57:e5:25:36:ff:0c:d0:15: 2b:1a:01:54:87:34:3b:e9:76:0a:db:9a:0c:43:c5: a6:6c:65:30:f2:96:42:d9:13:5d:3c:4f:a0:88:35: 35:a9:cd:39:a9:17:d7:69:3a:e2:b0:a4:fd:a3:54: 8e:47:8c:b6:9e:cc:6e:03:82:ca:e8:e3:2c:7b:5a: f0:e8:3a:2e:0c:90:5d:3d:c7:8b:32:85:1a:ed:0f: 9f:ce:95:f9:56:91:0b:be:19:d4:15:5a:d9:54:01: 31:a3:b9:81:c2:88:12:6c:6b:58:78:97:b5:ca:1c: aa:d0:7a:30:d4:e6:d6:9e:d3:de:3e:3e:63:e6:c9: ce:c4:dc:53:79:fc:ca:72:06:d9:09:6b:1f:ee:c5: 6f:92:cd:85:70:55:83:b3:28:2a:ab:e7:36:f5:dc: 23:6e:52:4c:c7:5a:2b:ed:bb:0f:b0:6a:b3:9a:c8: c2:b9:eb:a0:fc:bc:26:42:db:aa:42:18:1f:bd:98: 3c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D2:23:00:73:1E:00:3C:42:49:29:2F:34:62:D9:BC:3B:2A:C5:2A X509v3 Authority Key Identifier: keyid:22:47:21:87:6A:11:E2:D3:A4:B9:8B:21:BC:84:F7:8E:64:FE:C8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ikchh2oR4tOkuYshvIT3jmT-yEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE6D/51110AFE976511F0923A670CC4F9AE02/Ikchh2oR4tOkuYshvIT3jmT-yEY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:63:78:58:40:9b:f8:75:d9:7e:d3:3c:ec:66:87:bc:ee:2f: 40:17:6f:20:cd:5d:7a:e4:3f:eb:f6:63:7e:a7:47:f6:ea:b4: 0a:cc:a1:42:f2:15:b7:ba:59:cd:d0:e1:aa:46:3a:e0:b9:9c: cc:23:6a:b8:e8:ff:23:e7:97:38:11:42:18:a4:d4:0f:1e:ed: eb:48:a1:82:0c:62:38:b6:0d:09:5b:c6:24:f8:e5:64:25:9d: 90:2b:38:1e:3b:0f:98:b7:8a:29:05:62:76:97:bc:9e:cb:65: 4f:d5:b5:aa:28:04:17:0d:8f:37:50:98:35:3c:90:e9:07:c5: a1:16:dc:3c:6a:f4:25:38:36:6b:7b:ce:13:16:db:0f:55:c8: 6e:a5:9c:da:75:fa:5a:6a:66:c1:04:4d:89:c3:e5:66:d0:b1: 70:c7:ff:da:18:84:01:02:3d:fa:5f:28:ac:c5:c0:8e:82:a5: af:3c:93:1f:50:8e:6e:13:57:ba:9e:4d:fe:1f:24:c8:60:9a: 75:9a:00:b2:7a:21:8d:dc:dd:12:bc:9d:b0:82:41:4f:50:fb: 8e:58:99:78:41:06:1d:41:ac:9a:2e:c9:88:68:fa:8d:12:f0: 3b:7e:ac:99:57:8f:c7:f2:d2:2c:19:86:9a:82:97:6b:f7:bd: b7:f2:19:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUU2RDExMC8GA1UEBRMoMjI0NzIxODc2QTExRTJEM0E0Qjk4QjIxQkM4NEY3OEU2 NEZFQzg0NjAeFw0yNTEwMTcxMTQ4MjJaFw0yNTEwMjQxMTQ4MjJaMBgxFjAUBgNV BAMTDTY4ZjIyZDA3LWU1NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC86Wy3D72s9o0Vdf88QBCom0xs6Qj92Wnbvqsis5Yrg7PZaWg4kkGmPDHwyFOi i2gC46mnTwNpYMfm6O+mMxEBrC5X5SU2/wzQFSsaAVSHNDvpdgrbmgxDxaZsZTDy lkLZE108T6CINTWpzTmpF9dpOuKwpP2jVI5HjLaezG4Dgsro4yx7WvDoOi4MkF09 x4syhRrtD5/OlflWkQu+GdQVWtlUATGjuYHCiBJsa1h4l7XKHKrQejDU5tae094+ PmPmyc7E3FN5/MpyBtkJax/uxW+SzYVwVYOzKCqr5zb13CNuUkzHWivtuw+warOa yMK566D8vCZC26pCGB+9mDxZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUftIjAHMe ADxCSSkvNGLZvDsqxSowHwYDVR0jBBgwFoAUIkchh2oR4tOkuYshvIT3jmT+yEYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFRTZELzUxMTEwQUZFOTc2 NTExRjA5MjNBNjcwQ0M0RjlBRTAyL0lrY2hoMm9SNHRPa3VZc2h2SVQzam1ULXlF WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSWtjaGgyb1I0dE9rdVlzaHZJVDNqbVQteUVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF RTZELzUxMTEwQUZFOTc2NTExRjA5MjNBNjcwQ0M0RjlBRTAyL0lrY2hoMm9SNHRP a3VZc2h2SVQzam1ULXlFWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA9jeFhAm/h12X7TPOxmh7zuL0AXbyDNXXrkP+v2Y36nR/bqtArMoULy Fbe6Wc3Q4apGOuC5nMwjarjo/yPnlzgRQhik1A8e7etIoYIMYji2DQlbxiT45WQl nZArOB47D5i3iikFYnaXvJ7LZU/VtaooBBcNjzdQmDU8kOkHxaEW3Dxq9CU4Nmt7 zhMW2w9VyG6lnNp1+lpqZsEETYnD5WbQsXDH/9oYhAECPfpfKKzFwI6Cpa88kx9Q jm4TV7qeTf4fJMhgmnWaALJ6IY3c3RK8nbCCQU9Q+45YmXhBBh1BrJouyYho+o0S 8Dt+rJlXj8fy0iwZhpqCl2v3vbfyGUU= -----END CERTIFICATE-----Generated at Sat Oct 18 18:02:55 2025 by rpki-client