$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json) Hash identifier: 8R6hzApDQTHX+Y0o3JaFU/aTxI+nCdYwtb18CfgOtG8= Subject key identifier: 89:EF:D2:6B:4E:F5:57:20:A8:A4:05:37:4E:5B:B2:68:1B:04:BE:25 Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Certificate serial: 039E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft Manifest number: 038C Signing time: Sat 25 Oct 2025 03:53:35 +0000 Manifest this update: Sat 25 Oct 2025 03:53:34 +0000 Manifest next update: Sat 01 Nov 2025 03:53:34 +0000 Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: 6/oWAAYaQTVZkXR9IrQlk335KGr3ZflMeyLtYkpyj1U=) 2: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: jPTVwsGJwTtYxGq4/k3kM5VWiV1n8hGmQtDrb+dxPSo=) 3: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: R9SBhXEhOf+gMa/m0vryBFjGp9sBxlfHO7G/5GujZAU=) 4: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: PlCOgT/H+ZebbdqL9OriSJeX2NeXIzVYubJJm3a+JOU=) 5: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: xG6dNUlA+c724kNwKX8NUp4Jh1K9Q2v6tE8mpl0ElKc=) 6: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: Mxx0NjOtuBLL5qPMv7dyQqyOzCktL0daliI6SvMVL7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 03:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 926 (0x39e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005 Validity Not Before: Oct 25 03:53:34 2025 GMT Not After : Nov 1 03:53:34 2025 GMT Subject: CN=68fc49be-f99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:db:7c:05:a4:b0:16:f4:c0:8a:da:64:d6:12: 21:65:57:0f:ed:ba:3d:08:f5:7d:49:54:7c:c6:e1: 8f:7d:c7:89:25:3a:56:28:f4:f9:86:39:b3:17:df: 95:89:62:bc:2d:3b:66:cb:9a:80:f9:cf:49:78:12: ff:65:37:7c:cb:cc:5a:16:63:c0:04:3c:97:40:28: ec:41:b2:71:d9:04:a2:52:a3:75:70:27:a3:6d:da: 8a:2e:eb:a8:1d:11:d3:2b:4b:cc:ea:7f:78:c2:39: b7:95:27:0f:4a:32:29:ac:d6:5c:8d:b6:df:2b:d0: 2e:61:62:d9:31:cc:a4:9e:2d:93:f7:ca:5f:2a:41: fd:78:ec:74:11:94:3a:26:8f:98:0b:17:f5:93:53: 7b:8a:6c:37:81:6e:d0:4f:74:07:b6:7a:93:69:d2: ce:df:f1:fc:2c:7a:ef:e3:32:13:db:5c:d2:97:c5: 60:7f:d0:19:a7:b6:f7:7f:1f:6b:1b:ca:03:4b:2b: 11:31:76:7d:fc:96:34:46:a1:66:b9:aa:4d:d3:ec: d7:7b:2f:7f:61:b2:6b:b9:09:0d:57:75:a3:2e:ef: c3:11:a3:e5:05:52:01:c4:64:55:7d:2c:24:06:c3: 4d:21:33:d8:cf:0c:1d:9d:d6:da:e3:74:c7:3d:ac: 4e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EF:D2:6B:4E:F5:57:20:A8:A4:05:37:4E:5B:B2:68:1B:04:BE:25 X509v3 Authority Key Identifier: keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:16:1d:b4:2c:8d:38:74:f1:6a:b6:d4:7b:67:fd:a7:bd:d0: df:83:64:5f:cd:8f:a4:67:13:e7:d7:01:9c:f6:a9:8b:83:73: ce:5d:07:89:1b:bf:9a:84:b4:64:91:72:5c:3f:a3:ad:db:2b: 45:73:30:07:87:f8:64:a0:81:76:92:10:21:25:59:0b:09:35: 21:54:2b:3a:5b:9e:0e:2c:82:09:35:1a:3c:ff:40:4d:db:43: 3d:79:c0:4c:f4:38:44:77:49:f9:8f:7d:37:a8:d6:9d:f5:b6: 53:11:b4:ae:40:a6:cb:c1:5a:af:62:1b:79:ab:4a:56:62:24: d4:79:b6:b1:90:ec:ad:26:2f:87:f4:8b:c9:e7:74:b1:4f:7f: fd:c5:16:e0:c2:6d:ac:9b:16:90:ae:6a:20:ba:90:c4:c1:6e: 24:10:7f:83:9a:06:68:6d:dc:51:20:38:6f:8c:c6:a9:c2:c6: 3d:38:5d:23:c1:84:61:d3:2f:b8:e5:b4:9b:3f:7e:ef:04:3a: dc:f4:ad:cf:de:55:00:72:59:3e:54:d1:5c:71:4c:72:66:52: ea:a6:3f:3a:6b:68:1a:af:6c:99:9c:1c:fc:1e:04:4f:d3:fe: 8e:3b:6e:55:e7:c0:48:ab:ea:44:f3:ef:a8:e8:8a:e8:92:2c: 6f:85:63:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0 RTM3OEQwMDUwHhcNMjUxMDI1MDM1MzM0WhcNMjUxMTAxMDM1MzM0WjAYMRYwFAYD VQQDEw02OGZjNDliZS1mOTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9t8BaSwFvTAitpk1hIhZVcP7bo9CPV9SVR8xuGPfceJJTpWKPT5hjmzF9+V iWK8LTtmy5qA+c9JeBL/ZTd8y8xaFmPABDyXQCjsQbJx2QSiUqN1cCejbdqKLuuo HRHTK0vM6n94wjm3lScPSjIprNZcjbbfK9AuYWLZMcykni2T98pfKkH9eOx0EZQ6 Jo+YCxf1k1N7imw3gW7QT3QHtnqTadLO3/H8LHrv4zIT21zSl8Vgf9AZp7b3fx9r G8oDSysRMXZ9/JY0RqFmuapN0+zXey9/YbJruQkNV3WjLu/DEaPlBVIBxGRVfSwk BsNNITPYzwwdndba43THPaxOOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInv0mtO 9VcgqKQFN05bsmgbBL4lMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjdGNi83ODI0RUJENEJGQkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpF cFlrUjIzT0RSaGhPTjQwQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPFh20LI04dPFqttR7Z/2nvdDfg2RfzY+kZxPn1wGc9qmLg3POXQeJ G7+ahLRkkXJcP6Ot2ytFczAHh/hkoIF2khAhJVkLCTUhVCs6W54OLIIJNRo8/0BN 20M9ecBM9DhEd0n5j303qNad9bZTEbSuQKbLwVqvYht5q0pWYiTUebaxkOytJi+H 9IvJ53SxT3/9xRbgwm2smxaQrmogupDEwW4kEH+DmgZobdxRIDhvjMapwsY9OF0j wYRh0y+45bSbP37vBDrc9K3P3lUAclk+VNFccUxyZlLqpj86a2gar2yZnBz8HgRP 0/6OO25V58BIq+pE8++o6IrokixvhWO6 -----END CERTIFICATE-----Generated at Sun Oct 26 20:50:23 2025 by rpki-client