$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft File: iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft (raw, json) Hash identifier: 73QwxKSAQSkhb8p+xhKB27sJDkWdFFxe3kv6XsZ7Vic= Subject key identifier: 4F:7D:59:F8:1D:07:5A:CC:2C:6E:72:3D:BF:EB:13:84:33:76:8F:B3 Authority key identifier: 89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 Certificate issuer: /CN=A91D8185/serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft Manifest number: 25 Signing time: Wed 05 Nov 2025 07:55:50 +0000 Manifest this update: Wed 05 Nov 2025 07:55:50 +0000 Manifest next update: Wed 12 Nov 2025 07:55:50 +0000 Files and hashes: 1: iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl (hash: wFe1zDmwavig5TgCjsawQUUbOG+4/2xHn+XbKJIFgHw=) 2: CC2C3CB684AC11F0B7B8977DC4F9AE02.roa (hash: Iyg31gxgmZNKpKPcyuwxT2WShJvbdC1BGcvDKYneqcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8185, serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Validity Not Before: Nov 5 07:55:50 2025 GMT Not After : Nov 12 07:55:50 2025 GMT Subject: CN=690b0306-2445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8f:b8:6e:c2:83:15:82:88:cc:6c:dd:24:98: 62:74:52:bb:c0:9b:b5:09:91:01:71:c0:33:64:28: d7:01:f1:4b:0d:21:ec:d1:47:d8:b4:b1:12:4b:93: 64:2f:85:de:9c:b5:4b:34:0e:91:be:43:fe:ce:ec: 43:59:63:bd:59:18:cd:07:b6:8f:dc:dd:3f:8c:f8: 9a:e9:34:0e:d3:97:8a:42:df:c4:d4:82:c4:03:8a: 15:6b:65:bc:c8:4f:2c:1d:8b:e3:2d:cc:0c:c4:e7: 36:21:bc:bf:52:70:0c:68:95:e0:29:d4:f3:1f:d5: 5c:34:27:d1:58:e1:c2:a3:15:9b:49:1c:a6:e7:59: 43:9c:1f:db:9c:aa:b7:4e:db:68:4e:5c:a9:8a:08: d7:1f:bb:35:87:fe:9a:29:c2:92:25:54:eb:87:0d: 8e:87:14:0f:82:55:a3:be:20:b0:19:32:b4:29:76: 56:bf:a2:35:85:f7:21:81:8a:14:b1:a1:d1:6f:25: 07:b8:a9:d6:cb:59:9c:df:46:d1:bc:90:c1:a7:c0: cc:44:c4:56:08:4f:7f:1e:68:e4:fb:cf:b0:1d:d4: 2c:f9:79:98:03:de:c5:b0:91:e0:54:eb:7c:cd:8f: 7f:a5:97:8c:58:77:88:06:74:43:47:1e:d8:42:c1: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7D:59:F8:1D:07:5A:CC:2C:6E:72:3D:BF:EB:13:84:33:76:8F:B3 X509v3 Authority Key Identifier: keyid:89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:a3:4e:34:53:4f:a3:b1:45:30:6e:ae:7c:ae:f7:7f:eb:ad: 74:f0:14:d9:ce:fa:df:7d:d8:1b:4a:5e:61:9c:0d:a0:ae:57: 8d:d7:b0:87:31:d0:ac:45:de:ad:0c:52:ed:46:cc:99:b9:c3: a8:ae:f9:1e:0c:fa:74:64:08:02:75:fb:f9:ac:2e:4a:98:78: 13:81:d9:88:b6:1e:59:e4:01:14:0e:d3:59:6a:a9:df:20:8a: 6a:62:f1:06:ef:2b:c5:e4:5f:41:8c:cd:62:ef:7b:0e:fb:32: 5e:2f:7a:96:13:cc:4f:36:ec:5d:f3:e1:6b:c6:ab:85:d2:b3: 29:b4:f6:54:40:9a:ca:df:ac:3e:9f:70:26:15:44:df:77:15: a1:50:f9:18:35:f7:01:89:d8:7a:4f:d0:91:99:0a:99:a5:b3: 1d:8e:f4:27:b5:54:90:5e:a5:49:a2:b4:fe:fa:44:1c:5c:10: 52:7a:e6:4e:ea:6f:45:15:e4:b0:36:e1:fe:46:35:8f:64:24: 74:17:ec:62:b8:8b:5a:88:48:19:b8:dd:8a:31:66:e5:46:07: 04:21:69:b0:02:17:f2:bc:f3:01:96:ce:59:3c:48:76:55:2e: 8c:23:a5:89:53:22:0c:b2:e2:54:43:d0:25:f4:3d:33:f7:ab: 6c:11:71:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODE4NTExMC8GA1UEBRMoODk3ODRENkQ5MzhCMDVDQzNCN0I2NjZFNUU3QUVFOTIy M0RFNEQ3MDAeFw0yNTExMDUwNzU1NTBaFw0yNTExMTIwNzU1NTBaMBgxFjAUBgNV BAMTDTY5MGIwMzA2LTI0NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtj7huwoMVgojMbN0kmGJ0UrvAm7UJkQFxwDNkKNcB8UsNIezRR9i0sRJLk2Qv hd6ctUs0DpG+Q/7O7ENZY71ZGM0Hto/c3T+M+JrpNA7Tl4pC38TUgsQDihVrZbzI Tywdi+MtzAzE5zYhvL9ScAxoleAp1PMf1Vw0J9FY4cKjFZtJHKbnWUOcH9ucqrdO 22hOXKmKCNcfuzWH/popwpIlVOuHDY6HFA+CVaO+ILAZMrQpdla/ojWF9yGBihSx odFvJQe4qdbLWZzfRtG8kMGnwMxExFYIT38eaOT7z7Ad1Cz5eZgD3sWwkeBU63zN j3+ll4xYd4gGdENHHthCwQShAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUT31Z+B0H WswsbnI9v+sThDN2j7MwHwYDVR0jBBgwFoAUiXhNbZOLBcw7e2ZuXnrukiPeTXAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MTg1Lzg1MDExNTMyODRB QzExRjA4RDNBQjk3OUM0RjlBRTAyL2lYaE5iWk9MQmN3N2UyWnVYbnJ1a2lQZVRY QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVhoTmJaT0xCY3c3ZTJadVhucnVraVBlVFhBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MTg1Lzg1MDExNTMyODRBQzExRjA4RDNBQjk3OUM0RjlBRTAyL2lYaE5iWk9MQmN3 N2UyWnVYbnJ1a2lQZVRYQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJOjTjRTT6OxRTBurnyu93/rrXTwFNnO+t992BtKXmGcDaCuV43XsIcx 0KxF3q0MUu1GzJm5w6iu+R4M+nRkCAJ1+/msLkqYeBOB2Yi2HlnkARQO01lqqd8g impi8QbvK8XkX0GMzWLvew77Ml4vepYTzE827F3z4WvGq4XSsym09lRAmsrfrD6f cCYVRN93FaFQ+Rg19wGJ2HpP0JGZCpmlsx2O9Ce1VJBepUmitP76RBxcEFJ65k7q b0UV5LA24f5GNY9kJHQX7GK4i1qISBm43YoxZuVGBwQhabACF/K88wGWzlk8SHZV LowjpYlTIgyy4lRD0CX0PTP3q2wRcTs= -----END CERTIFICATE-----Generated at Thu Nov 6 04:39:03 2025 by rpki-client