$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft File: InYg_8vfrJXUbmodsxewi6VihIA.mft (raw, json) Hash identifier: qb3VWAaUF9x9KQ3CbpFy2+gkWXUR6WF2qjTge6e5o+Q= Subject key identifier: AC:AD:E6:7D:CF:E2:F1:2A:70:25:F3:98:0A:8F:C0:5E:02:75:27:BD Authority key identifier: 22:76:20:FF:CB:DF:AC:95:D4:6E:6A:1D:B3:17:B0:8B:A5:62:84:80 Certificate issuer: /CN=A91D4781/serialNumber=227620FFCBDFAC95D46E6A1DB317B08BA5628480 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/InYg_8vfrJXUbmodsxewi6VihIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft Manifest number: 07 Signing time: Fri 17 Oct 2025 11:55:38 +0000 Manifest this update: Fri 17 Oct 2025 11:55:37 +0000 Manifest next update: Fri 24 Oct 2025 11:55:37 +0000 Files and hashes: 1: InYg_8vfrJXUbmodsxewi6VihIA.crl (hash: P3vcsjjTsny3HXr1/TCXyIW/KDQ9oyaxng2SQCvXEz4=) 2: 9F7CD49AA55A11F0A8F84D83C4F9AE02.roa (hash: pbHyabcv277elA+5L6jLrPBHXOT6ujxTAobCaGjI5cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.crl rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/InYg_8vfrJXUbmodsxewi6VihIA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4781, serialNumber=227620FFCBDFAC95D46E6A1DB317B08BA5628480 Validity Not Before: Oct 17 11:55:37 2025 GMT Not After : Oct 24 11:55:37 2025 GMT Subject: CN=68f22eba-0a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:aa:dd:a6:42:6f:1a:37:a9:ff:b9:c9:6c:3e: 04:be:6e:22:f6:34:bc:b2:98:8a:f6:9e:fe:b4:f2: cf:e4:5f:85:1f:4a:52:5f:16:c8:aa:e4:8a:88:d7: 5d:10:71:84:d6:a4:c1:a0:dd:16:de:40:ec:23:b7: 98:60:a5:14:fc:43:b6:dd:12:f1:d6:5c:03:19:18: 28:a2:bc:cc:db:b8:d4:d1:bd:79:3e:43:cd:48:30: 86:af:34:26:c5:e0:e3:7b:35:af:d7:b8:34:56:dc: 30:15:70:0e:b1:27:a0:01:25:2f:63:e4:d4:a2:4d: 80:68:0d:33:f5:17:e2:7e:d0:ad:a5:17:07:1e:64: 94:27:36:b6:7a:db:d7:be:3a:ff:44:39:0c:60:fc: 69:5a:90:f1:a4:6b:26:5d:5e:86:28:32:cc:5f:2f: 7b:dc:45:e9:70:75:40:56:ed:dc:7c:1b:0e:ee:46: 85:e4:be:4e:2c:37:52:8d:7d:e2:74:2b:5f:56:4e: 09:92:7d:0f:a1:ed:1d:5a:d7:a0:f5:48:f3:08:cd: fe:73:b0:17:34:76:17:4c:c6:b6:69:cf:23:56:d3: d5:6b:66:5f:cc:d9:14:54:98:50:d1:1f:77:76:73: e2:be:4c:de:6d:26:3f:60:58:9b:0d:22:31:ac:f1: b5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AD:E6:7D:CF:E2:F1:2A:70:25:F3:98:0A:8F:C0:5E:02:75:27:BD X509v3 Authority Key Identifier: keyid:22:76:20:FF:CB:DF:AC:95:D4:6E:6A:1D:B3:17:B0:8B:A5:62:84:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/InYg_8vfrJXUbmodsxewi6VihIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:e1:6f:74:6f:fb:7f:45:78:f1:8a:b6:9f:7a:16:88:9b:41: ef:f8:5c:fe:b1:aa:44:10:42:5a:ae:1e:72:01:aa:0f:85:1f: 46:6d:bd:a1:13:b6:10:07:63:2a:16:9e:89:80:6f:07:6b:63: 40:a9:7b:ed:9a:cb:18:1a:f5:b8:3c:a1:d0:bc:d1:54:19:72: c1:94:95:39:50:fb:2a:47:09:09:0d:4a:69:be:8a:38:1f:a3: f8:6d:75:71:56:58:e6:f5:4d:2e:d4:20:bf:1d:5b:4d:7f:08: fd:ee:40:d8:8a:20:58:9c:71:11:c1:4c:87:72:fa:98:52:54: 23:93:7f:1b:dc:27:42:cf:45:49:88:2d:f4:f6:5f:74:e0:2a: 58:89:2a:9e:a2:46:16:68:c9:00:f9:67:3f:15:61:1e:34:a0: 44:7e:8d:08:6f:69:f8:a3:ff:04:7f:e8:49:3c:13:68:15:ad: bf:35:18:c8:27:6f:12:55:2d:25:53:bb:88:6e:82:84:eb:ee: 12:eb:77:4b:a2:99:09:fa:82:17:0b:ee:a0:3e:2d:94:de:7a: 08:27:89:91:45:33:de:47:e8:e1:c8:21:2b:ac:bf:7e:2e:0c: f8:97:a3:67:86:a9:26:f8:52:28:f2:6b:9a:c7:8f:53:7d:49: 66:27:bf:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDc4MTExMC8GA1UEBRMoMjI3NjIwRkZDQkRGQUM5NUQ0NkU2QTFEQjMxN0IwOEJB NTYyODQ4MDAeFw0yNTEwMTcxMTU1MzdaFw0yNTEwMjQxMTU1MzdaMBgxFjAUBgNV BAMTDTY4ZjIyZWJhLTBhMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcqt2mQm8aN6n/uclsPgS+biL2NLyymIr2nv608s/kX4UfSlJfFsiq5IqI110Q cYTWpMGg3RbeQOwjt5hgpRT8Q7bdEvHWXAMZGCiivMzbuNTRvXk+Q81IMIavNCbF 4ON7Na/XuDRW3DAVcA6xJ6ABJS9j5NSiTYBoDTP1F+J+0K2lFwceZJQnNrZ629e+ Ov9EOQxg/GlakPGkayZdXoYoMsxfL3vcRelwdUBW7dx8Gw7uRoXkvk4sN1KNfeJ0 K19WTgmSfQ+h7R1a16D1SPMIzf5zsBc0dhdMxrZpzyNW09VrZl/M2RRUmFDRH3d2 c+K+TN5tJj9gWJsNIjGs8bU7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrK3mfc/i 8SpwJfOYCo/AXgJ1J70wHwYDVR0jBBgwFoAUInYg/8vfrJXUbmodsxewi6VihIAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0NzgxL0Q5MDA0MkNFQTQ4 RDExRjBBRDk3RjAxNkM0RjlBRTAyL0luWWdfOHZmckpYVWJtb2RzeGV3aTZWaWhJ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSW5ZZ184dmZySlhVYm1vZHN4ZXdpNlZpaElBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 NzgxL0Q5MDA0MkNFQTQ4RDExRjBBRDk3RjAxNkM0RjlBRTAyL0luWWdfOHZmckpY VWJtb2RzeGV3aTZWaWhJQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADDhb3Rv+39FePGKtp96FoibQe/4XP6xqkQQQlquHnIBqg+FH0ZtvaET thAHYyoWnomAbwdrY0Cpe+2ayxga9bg8odC80VQZcsGUlTlQ+ypHCQkNSmm+ijgf o/htdXFWWOb1TS7UIL8dW01/CP3uQNiKIFiccRHBTIdy+phSVCOTfxvcJ0LPRUmI LfT2X3TgKliJKp6iRhZoyQD5Zz8VYR40oER+jQhvafij/wR/6Ek8E2gVrb81GMgn bxJVLSVTu4hugoTr7hLrd0uimQn6ghcL7qA+LZTeeggniZFFM95H6OHIISusv34u DPiXo2eGqSb4Uijya5rHj1N9SWYnv5k= -----END CERTIFICATE-----Generated at Sat Oct 18 17:59:27 2025 by rpki-client