$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft File: _IC0m1BzMv1MnJLdXiei38qAZNo.mft (raw, json) Hash identifier: KtF6CszWzwo7HppMqVtJI4PEI8s9bEk8qqjM7Lkxdi8= Subject key identifier: B9:42:C8:56:E2:2E:4C:C9:95:65:8F:61:50:B3:DF:54:E0:58:24:F7 Authority key identifier: FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA Certificate issuer: /CN=A91E13D0/serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA Certificate serial: 0573 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft Manifest number: 056C Signing time: Sun 02 Nov 2025 23:20:29 +0000 Manifest this update: Sun 02 Nov 2025 23:20:28 +0000 Manifest next update: Sun 09 Nov 2025 23:20:28 +0000 Files and hashes: 1: _IC0m1BzMv1MnJLdXiei38qAZNo.crl (hash: xcLlaIvmYgY6BkpQclGRWP61ie3aHgUJG1OSuTVenzY=) 2: E86C4B1E04AE11EC92C8D079C4F9AE02.roa (hash: lavhkAfv8hYziRuA8AuHoJeOdZGCo7Jbpk55GeOTHz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1395 (0x573) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E13D0, serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA Validity Not Before: Nov 2 23:20:28 2025 GMT Not After : Nov 9 23:20:28 2025 GMT Subject: CN=6907e73d-8cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:80:ab:25:86:70:0a:94:91:e6:2d:1b:cb:ed: fe:d0:d9:73:56:1b:5f:04:c7:b8:e7:50:80:4e:2d: 9f:42:86:d3:95:0d:04:08:d5:0d:9f:89:8f:97:0b: f0:23:46:b9:a0:1f:31:8e:17:de:66:dc:7e:b4:06: 06:e5:21:f7:dc:2e:65:48:d8:fc:95:74:c4:63:e0: 74:cd:75:ba:30:09:d8:2e:6e:4a:eb:36:a7:3b:b4: 90:f4:d1:b4:59:4e:7c:a5:f3:f1:a7:f5:f4:23:f9: c2:f0:09:92:49:bc:8e:4c:92:11:0b:4a:58:2b:c4: cd:40:e1:36:45:5c:d6:0f:a9:1b:bd:56:dd:f6:6a: bb:ed:c8:c0:b8:b7:81:5a:18:76:b0:40:82:46:de: e1:12:94:64:ed:49:c9:9a:36:5d:0b:42:24:d1:23: 55:a6:23:3f:e9:0d:fc:f1:1b:69:9c:c5:9e:a7:d7: 09:26:b3:c3:6b:e6:82:cf:66:98:dc:b2:86:47:14: ff:4b:63:dd:51:fc:0b:53:a8:c3:e5:18:98:60:d2: 0f:da:78:c5:a1:a3:86:06:9a:f3:f6:6d:06:35:47: ac:41:41:d5:e4:cf:aa:a8:91:d2:35:09:5b:93:fb: 5c:15:05:ff:ee:ae:32:77:b4:4e:07:39:04:5c:3c: 89:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:42:C8:56:E2:2E:4C:C9:95:65:8F:61:50:B3:DF:54:E0:58:24:F7 X509v3 Authority Key Identifier: keyid:FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:0e:f2:b0:50:47:ed:29:88:6c:b2:de:28:84:fa:68:28:42: 6d:b8:25:b3:83:f7:c4:bd:2d:cf:36:35:e7:af:9e:a3:fb:7e: 9e:09:c4:97:32:22:04:a0:b9:e5:9b:fa:87:29:35:cf:55:75: 75:13:7d:6f:64:f7:a9:dc:a7:09:b7:e7:f7:5f:88:a6:c9:72: 63:f6:30:52:18:13:2f:79:da:20:ac:7b:96:ed:59:4a:0b:3b: a7:08:eb:c9:3e:f7:af:d1:c8:e4:c6:01:c9:e2:63:6f:d8:e3: 2e:eb:94:18:3c:9c:25:2f:11:f6:cc:c0:51:52:f4:7a:62:f5: ec:55:96:1f:a5:f5:1e:79:ee:7c:1c:2d:23:e5:53:30:44:29: d8:17:ea:d3:98:9c:cd:a4:36:cf:3c:5f:0a:09:c3:c5:ba:3f: 6a:63:90:eb:ba:7d:be:c9:8c:07:e6:d3:36:f1:b3:bb:b3:0f: b9:b9:79:69:dc:1c:e4:d3:d5:8c:5f:cf:c4:e3:5c:83:aa:f9: 0d:50:5f:f3:a2:5c:a1:45:ef:b9:cd:ec:f3:46:34:5a:56:29: c3:55:9b:5c:cc:5a:a6:6c:52:63:78:f1:d1:cb:4c:03:02:00: 98:90:df:36:69:99:40:20:2d:6c:a8:19:f0:22:49:9a:81:9c: 3d:c2:7b:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTEzRDAxMTAvBgNVBAUTKEZDODBCNDlCNTA3MzMyRkQ0QzlDOTJERDVFMjdBMkRG Q0E4MDY0REEwHhcNMjUxMTAyMjMyMDI4WhcNMjUxMTA5MjMyMDI4WjAYMRYwFAYD VQQDEw02OTA3ZTczZC04Y2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ICrJYZwCpSR5i0by+3+0NlzVhtfBMe451CATi2fQobTlQ0ECNUNn4mPlwvw I0a5oB8xjhfeZtx+tAYG5SH33C5lSNj8lXTEY+B0zXW6MAnYLm5K6zanO7SQ9NG0 WU58pfPxp/X0I/nC8AmSSbyOTJIRC0pYK8TNQOE2RVzWD6kbvVbd9mq77cjAuLeB Whh2sECCRt7hEpRk7UnJmjZdC0Ik0SNVpiM/6Q388RtpnMWep9cJJrPDa+aCz2aY 3LKGRxT/S2PdUfwLU6jD5RiYYNIP2njFoaOGBprz9m0GNUesQUHV5M+qqJHSNQlb k/tcFQX/7q4yd7ROBzkEXDyJKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlCyFbi LkzJlWWPYVCz31TgWCT3MB8GA1UdIwQYMBaAFPyAtJtQczL9TJyS3V4not/KgGTa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTNEMC9EN0E0QkI1NjA0 QUMxMUVDQkVCNTBDNzlDNEY5QUUwMi9fSUMwbTFCek12MU1uSkxkWGllaTM4cUFa Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JQzBtMUJ6TXYxTW5KTGRYaWVpMzhxQVpOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTNEMC9EN0E0QkI1NjA0QUMxMUVDQkVCNTBDNzlDNEY5QUUwMi9fSUMwbTFCek12 MU1uSkxkWGllaTM4cUFaTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYDvKwUEftKYhsst4ohPpoKEJtuCWzg/fEvS3PNjXnr56j+36eCcSX MiIEoLnlm/qHKTXPVXV1E31vZPep3KcJt+f3X4imyXJj9jBSGBMvedogrHuW7VlK CzunCOvJPvev0cjkxgHJ4mNv2OMu65QYPJwlLxH2zMBRUvR6YvXsVZYfpfUeee58 HC0j5VMwRCnYF+rTmJzNpDbPPF8KCcPFuj9qY5Drun2+yYwH5tM28bO7sw+5uXlp 3Bzk09WMX8/E41yDqvkNUF/zolyhRe+5zezzRjRaVinDVZtczFqmbFJjePHRy0wD AgCYkN82aZlAIC1sqBnwIkmagZw9wnvH -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:17 2025 by rpki-client