$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft File: I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json) Hash identifier: D42gLZm998B4HR83ua+KE5d1u2DIOpkCf/isIq/yGko= Subject key identifier: C6:99:A4:18:35:80:DA:A4:78:97:B0:82:AF:70:16:03:FC:9B:90:E0 Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft Manifest number: 0233 Signing time: Mon 03 Nov 2025 02:03:22 +0000 Manifest this update: Mon 03 Nov 2025 02:03:22 +0000 Manifest next update: Mon 10 Nov 2025 02:03:22 +0000 Files and hashes: 1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: 2A3ye+pMz2tFBpOEoO5xuZEqNDcOT4tYXf2rK3fBLgU=) 2: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (hash: Qc3ACPBC+H3iasNyw+1g5xftexl02S0P/76vcceWhqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: Nov 3 02:03:22 2025 GMT Not After : Nov 10 02:03:22 2025 GMT Subject: CN=69080d6a-b655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:46:e3:30:68:19:85:04:18:00:ba:4b:5a: 91:f3:a1:33:cf:91:ab:08:11:00:e7:80:3f:2b:28: 4b:09:50:9a:e2:1a:6e:b9:5d:e6:95:8e:4c:b0:b5: c9:a1:4f:c2:b7:d3:46:7e:e5:4f:36:c2:ac:66:c2: 7f:fc:f8:26:0a:40:82:66:26:fe:f7:64:d0:d4:17: 30:4f:f6:8e:ec:0f:9c:f0:a2:49:1e:46:3a:a1:22: 89:f5:52:2d:6f:ed:88:f9:af:d9:59:75:10:b2:f6: 9a:05:3c:f6:3b:61:46:59:40:93:b1:ea:13:31:01: db:24:a6:ba:55:e0:b0:ee:42:21:c8:3e:4d:3c:7d: a4:37:54:57:62:44:98:70:60:25:96:91:94:ea:87: 90:a5:0e:fa:7a:9d:31:39:11:1a:9c:51:09:47:42: 4c:c2:64:10:16:69:ee:ca:e1:e7:ac:f8:ca:6e:88: 93:03:eb:3b:e7:db:82:2e:f7:89:67:3b:64:8c:45: 60:a7:a7:f0:25:e0:f9:67:83:eb:a6:a0:09:e4:82: 5d:8c:9c:b9:a5:47:1b:4a:66:60:d1:ff:ca:a9:a6: 8e:a2:8a:dc:65:eb:cb:a9:77:8e:e0:9a:00:41:a3: 4c:e1:36:cc:42:59:83:9b:f1:4c:2b:bc:08:54:37: 84:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:99:A4:18:35:80:DA:A4:78:97:B0:82:AF:70:16:03:FC:9B:90:E0 X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:39:18:4d:99:cb:cf:62:34:23:55:5e:32:f7:3d:e1:4b:11: b6:19:35:0e:00:23:b2:0f:93:8f:70:b2:1e:88:46:18:62:b4: 8e:b1:ba:c6:d1:34:8f:f5:f8:c3:f1:b0:43:c9:f8:79:ad:09: c8:39:58:5f:78:fd:03:5e:25:0a:62:7c:0b:d5:c1:0c:e9:a6: a1:e4:94:aa:01:11:29:a8:c4:3c:9f:6a:cc:07:04:5a:17:47: 4d:3b:51:08:90:99:c4:3b:9b:79:8e:93:b8:0c:2c:fc:5d:5f: c6:84:ee:9c:c1:c5:27:bf:52:08:31:39:98:70:0d:72:67:15: af:bc:c9:7a:ad:66:43:76:90:5a:d4:9a:c0:7a:47:cc:82:bc: d5:61:e0:b9:6a:f8:de:77:4c:d5:81:8b:e4:29:0b:8c:0d:f5: f0:cf:ab:33:47:26:55:5c:95:ae:c0:86:01:7e:4b:d2:f3:11: 9f:f8:ef:3c:90:6c:96:c8:5d:34:8b:11:9c:fa:a2:59:fb:67: 9e:78:d4:a1:2a:15:53:c7:65:89:ef:af:1a:20:e3:ff:14:8b: 53:e1:36:71:a1:6b:15:65:09:89:ef:4f:3e:d7:ef:62:48:74: d0:23:40:72:41:88:6e:e1:4b:92:20:7a:3f:6e:29:0d:22:53: 0d:b4:82:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjUxMTAzMDIwMzIyWhcNMjUxMTEwMDIwMzIyWjAYMRYwFAYD VQQDEw02OTA4MGQ2YS1iNjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgxG4zBoGYUEGAC6S1qR86Ezz5GrCBEA54A/KyhLCVCa4hpuuV3mlY5MsLXJ oU/Ct9NGfuVPNsKsZsJ//PgmCkCCZib+92TQ1BcwT/aO7A+c8KJJHkY6oSKJ9VIt b+2I+a/ZWXUQsvaaBTz2O2FGWUCTseoTMQHbJKa6VeCw7kIhyD5NPH2kN1RXYkSY cGAllpGU6oeQpQ76ep0xOREanFEJR0JMwmQQFmnuyuHnrPjKboiTA+s759uCLveJ ZztkjEVgp6fwJeD5Z4PrpqAJ5IJdjJy5pUcbSmZg0f/KqaaOoorcZevLqXeO4JoA QaNM4TbMQlmDm/FMK7wIVDeEkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaZpBg1 gNqkeJewgq9wFgP8m5DgMB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGOC81NjJDM0NCNDcyNEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0 WDhTVmpVZ1pIemFoUzhlaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUORhNmcvPYjQjVV4y9z3hSxG2GTUOACOyD5OPcLIeiEYYYrSOsbrG 0TSP9fjD8bBDyfh5rQnIOVhfeP0DXiUKYnwL1cEM6aah5JSqAREpqMQ8n2rMBwRa F0dNO1EIkJnEO5t5jpO4DCz8XV/GhO6cwcUnv1IIMTmYcA1yZxWvvMl6rWZDdpBa 1JrAekfMgrzVYeC5avjed0zVgYvkKQuMDfXwz6szRyZVXJWuwIYBfkvS8xGf+O88 kGyWyF00ixGc+qJZ+2eeeNShKhVTx2WJ768aIOP/FItT4TZxoWsVZQmJ708+1+9i SHTQI0ByQYhu4UuSIHo/bikNIlMNtIJz -----END CERTIFICATE-----Generated at Tue Nov 4 08:31:19 2025 by rpki-client