$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json) Hash identifier: hRLG0WqxwpIcq+Ds8nDrp1RgK8Mu8GdsRot3msJuncQ= Subject key identifier: FA:91:4D:F0:F6:CF:E9:52:E6:8F:7B:BF:31:A4:F3:46:4B:64:4E:EB Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Certificate serial: 194A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft Manifest number: 193E Signing time: Sun 02 Nov 2025 16:26:02 +0000 Manifest this update: Sun 02 Nov 2025 16:26:02 +0000 Manifest next update: Sun 09 Nov 2025 16:26:02 +0000 Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: RDubvI5e6pvcCyTvN6rDLGyS7VWkzWUp4VTcR9P2Gto=) 2: D421D958881611E78B9B0850C4F9AE02.roa (hash: jwMU1HqTvqxMmK/7tE3BOcmdI4jJyKnBQ4irQO6dgGw=) 3: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: x3Si4KMD2wvo6rCmh6bPANGnveohQUAF1yIi2AXTiDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6474 (0x194a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Validity Not Before: Nov 2 16:26:02 2025 GMT Not After : Nov 9 16:26:02 2025 GMT Subject: CN=6907861a-a41c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:72:14:94:b6:1f:c4:f7:81:a2:8b:ba:bc:c9: 10:cf:40:52:cb:be:3f:03:77:49:2e:3f:f5:94:7d: 73:a4:72:5c:09:b7:6e:c6:91:63:38:67:99:22:71: 05:48:aa:63:5f:c4:ae:8f:30:cc:6c:b7:3f:6b:e6: 0a:6c:43:e4:c4:1f:8b:b6:b4:d8:cc:6f:e1:e0:58: f9:8b:b5:c9:b4:09:19:41:1e:b7:19:f1:85:67:43: 4f:3d:2d:69:2b:e0:16:7c:af:c6:4a:f4:ab:31:4f: 24:76:bc:fa:c5:46:29:31:29:ba:32:6e:a3:53:b8: 7c:3b:b7:5b:8e:82:b0:6f:ce:ef:c3:b4:02:08:94: d3:84:29:2e:a8:a7:46:ed:31:9d:be:5d:91:dc:49: a2:9b:2c:cb:39:41:5e:c1:91:97:7c:46:16:ee:65: 5c:94:26:23:89:69:8d:7c:9d:a4:83:f4:74:89:0e: ce:b9:e9:b0:86:ff:73:2a:ce:a6:cd:87:4f:aa:d6: 73:2d:7d:96:e1:b0:c5:81:c6:67:9d:26:79:95:81: c0:43:5b:aa:0e:d9:c4:66:35:d9:5e:2e:fb:a2:69: f4:08:b9:e2:6d:ab:f7:ae:7d:3f:d0:ba:f2:08:55: 79:03:d7:dd:d9:a0:c4:f4:22:a2:30:31:13:b1:fc: 56:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:91:4D:F0:F6:CF:E9:52:E6:8F:7B:BF:31:A4:F3:46:4B:64:4E:EB X509v3 Authority Key Identifier: keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0f:ad:7b:96:66:cc:5b:11:ed:e5:a5:4d:01:40:6a:75:93: ce:d8:e7:f2:d8:69:01:85:b1:d3:ca:a5:9c:17:df:9c:e9:49: b5:3d:58:f6:3a:60:07:5d:05:62:b7:e9:78:d1:8f:99:a3:d2: 37:a3:ca:f9:fe:da:cd:9e:db:57:45:bf:80:ec:e4:65:35:ff: cc:de:94:46:5e:03:4b:25:77:9a:a4:3d:2f:7a:0b:c8:0f:d3: 56:01:02:81:37:66:29:1d:7e:ab:89:3b:a0:c2:f6:5c:dd:28: 01:a6:1e:48:0f:6c:85:5c:9f:05:9b:32:d3:b6:fa:2e:f4:68: 4b:57:ff:03:3f:0f:bc:ac:f9:10:b3:80:d2:49:85:ab:fe:f0: 88:75:5b:3f:1b:7c:f7:40:f9:e2:85:c9:54:b9:ff:88:b8:df: b9:ca:f1:50:7b:8d:93:ef:26:5a:ae:f6:c2:b5:26:c1:0b:9d: 25:56:bc:63:7f:81:50:c1:ae:7c:b6:6a:27:a5:2d:ee:d2:39: 51:ed:59:e7:67:a3:d3:33:0e:51:42:a1:89:2b:60:b8:57:24: c8:80:e7:94:41:d1:16:1d:f7:44:77:9e:bc:7f:ff:56:93:0c: 67:bd:dc:fe:38:f9:e5:ba:45:f0:5d:45:e3:72:7f:22:5a:2d: 29:17:b8:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MkExMTAvBgNVBAUTKDIzQjk2MDM3QUI4QUQyMzdFNjMyNkY3RUQwRjgxRTMx OEU4QTE0QUIwHhcNMjUxMTAyMTYyNjAyWhcNMjUxMTA5MTYyNjAyWjAYMRYwFAYD VQQDEw02OTA3ODYxYS1hNDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXIUlLYfxPeBoou6vMkQz0BSy74/A3dJLj/1lH1zpHJcCbduxpFjOGeZInEF SKpjX8SujzDMbLc/a+YKbEPkxB+LtrTYzG/h4Fj5i7XJtAkZQR63GfGFZ0NPPS1p K+AWfK/GSvSrMU8kdrz6xUYpMSm6Mm6jU7h8O7dbjoKwb87vw7QCCJTThCkuqKdG 7TGdvl2R3EmimyzLOUFewZGXfEYW7mVclCYjiWmNfJ2kg/R0iQ7Ouemwhv9zKs6m zYdPqtZzLX2W4bDFgcZnnSZ5lYHAQ1uqDtnEZjXZXi77omn0CLnibav3rn0/0Lry CFV5A9fd2aDE9CKiMDETsfxWdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqRTfD2 z+lS5o97vzGk80ZLZE7rMB8GA1UdIwQYMBaAFCO5YDeritI35jJvftD4HjGOihSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkyQS9GODEwRTlBNDg4 MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBqZm1NbTktMFBnZU1ZNktG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3bGdONnVLMGpmbU1tOS0wUGdlTVk2S0ZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkyQS9GODEwRTlBNDg4MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBq Zm1NbTktMFBnZU1ZNktGS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdD617lmbMWxHt5aVNAUBqdZPO2Ofy2GkBhbHTyqWcF9+c6Um1PVj2 OmAHXQVit+l40Y+Zo9I3o8r5/trNnttXRb+A7ORlNf/M3pRGXgNLJXeapD0vegvI D9NWAQKBN2YpHX6riTugwvZc3SgBph5ID2yFXJ8FmzLTtvou9GhLV/8DPw+8rPkQ s4DSSYWr/vCIdVs/G3z3QPnihclUuf+IuN+5yvFQe42T7yZarvbCtSbBC50lVrxj f4FQwa58tmonpS3u0jlR7VnnZ6PTMw5RQqGJK2C4VyTIgOeUQdEWHfdEd568f/9W kwxnvdz+OPnlukXwXUXjcn8iWi0pF7go -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:09 2025 by rpki-client