$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json) Hash identifier: 5DCw6VGXVidIo32eEXs60b0jRDtW/TH7RICfMsS/6nY= Subject key identifier: 74:D3:0A:49:C5:DA:96:39:4A:94:20:58:18:C2:88:B8:6D:E5:32:1E Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 08A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft Manifest number: 086B Signing time: Wed 22 Oct 2025 21:39:59 +0000 Manifest this update: Wed 22 Oct 2025 21:39:58 +0000 Manifest next update: Wed 29 Oct 2025 21:39:58 +0000 Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: 1G0x//k+eJhydzMQi+/cThGSgmcIMnfaM43kxuDPl/M=) 2: EF40C4AC404611EFA2014651C4F9AE02.roa (hash: RS+KqDnuBA3KXl6QfXiySnp4B7GTc2r4VfCYjRG5dSM=) 3: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: 4dlrQ4m4GuqrlwQC8/clahOIGGqO7yOvH8v7wChtYp8=) 4: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: DYR7hTrI+N8bTdN4wmisSUlD2zvzUkj32q6n8M3PxAo=) 5: 35D16082404911EFBC4C610EC4F9AE02.roa (hash: jpc6lBRritONGgyplkUaQHNQHS5taTwFmNFIPI83gfg=) 6: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: ifnttSikDir1yImvAFVipioa7skYYnhRDTcV+wTBhrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 21:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2213 (0x8a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Oct 22 21:39:58 2025 GMT Not After : Oct 29 21:39:58 2025 GMT Subject: CN=68f94f2e-3247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a3:19:4a:df:73:92:4e:5e:d4:49:77:db:aa: 10:b9:2a:08:ce:7d:d0:d6:ba:93:78:86:93:18:4d: 12:e2:a5:3d:94:16:9f:4d:cc:f6:f1:ba:2b:eb:f5: da:95:64:96:80:35:b6:81:cb:54:93:1a:9d:40:bc: a3:cc:bf:95:93:65:92:72:37:3a:97:2d:2a:39:0e: a2:27:d0:6a:f9:60:c9:7d:2a:d5:ee:8b:2c:f6:2d: 35:31:0b:c8:59:2c:6b:f5:26:f6:5f:bd:69:3f:36: 30:d1:8d:e2:7d:6d:3d:bd:e1:57:0f:a6:a8:66:8a: 88:4c:7b:47:ae:17:9c:5f:8e:d4:3b:4f:f9:62:3d: cb:aa:30:95:38:2e:b1:a4:e4:0a:b3:fa:0c:8f:1c: 86:75:3c:3a:3e:c4:81:75:1e:ae:f9:ed:91:d1:d3: d2:1e:8d:ad:1c:4b:40:31:a8:80:dd:54:3e:43:51: d5:89:e3:b3:76:55:a0:4c:1b:37:a5:27:e2:2b:69: 6f:95:b1:65:8e:e0:09:67:21:d0:bd:f7:bc:fa:7c: 17:12:22:5c:c2:4e:87:b8:01:a8:fc:d8:7b:cc:51: a7:98:3c:1b:d9:85:e6:ca:19:20:9c:e5:21:5d:c8: 61:2e:eb:34:c0:f6:10:0a:79:7a:4f:d1:0e:53:48: db:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D3:0A:49:C5:DA:96:39:4A:94:20:58:18:C2:88:B8:6D:E5:32:1E X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:5e:36:a2:d6:58:2f:49:08:68:41:69:92:44:1c:a1:74:3e: 0b:cd:a6:a1:83:93:7d:b5:14:7e:1a:1a:c4:ca:f7:fa:f4:38: a5:fd:8c:0c:34:53:3d:d9:45:38:ec:6a:87:9a:f9:5b:fc:d1: 07:62:c0:8f:35:09:01:92:fb:c1:6a:7b:e8:b1:1c:75:56:85: 34:1c:95:2f:ad:52:98:d3:69:36:84:e7:74:df:70:91:a3:5c: d6:21:b6:bd:fc:83:23:75:67:af:94:00:a0:5f:8b:ff:b4:99: 0c:bb:fe:e9:50:8d:47:22:96:39:29:80:ee:f7:ac:b0:a0:1b: cb:d7:a6:8e:62:bb:db:cd:b9:b2:ad:36:23:46:5f:c9:4e:23: 21:ed:56:b8:33:52:a9:20:34:83:1e:11:0f:bc:d0:95:52:d8: b1:0b:36:d6:15:98:47:7d:a0:b8:25:0b:21:7d:b6:6b:21:cb: 32:bd:47:fe:f9:09:11:ed:37:ff:4b:1e:70:be:67:de:a0:c5: be:77:a8:20:c9:73:8f:5e:a0:3c:dc:2e:af:43:26:9c:51:08: dc:65:28:44:9a:ef:98:17:c3:96:f0:66:ca:1e:d5:65:86:bd: fa:48:78:b6:17:d2:99:db:c3:af:4c:ea:30:bd:ff:93:50:af: f6:df:d4:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjUxMDIyMjEzOTU4WhcNMjUxMDI5MjEzOTU4WjAYMRYwFAYD VQQDEw02OGY5NGYyZS0zMjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9qMZSt9zkk5e1El326oQuSoIzn3Q1rqTeIaTGE0S4qU9lBafTcz28bor6/Xa lWSWgDW2gctUkxqdQLyjzL+Vk2WScjc6ly0qOQ6iJ9Bq+WDJfSrV7oss9i01MQvI WSxr9Sb2X71pPzYw0Y3ifW09veFXD6aoZoqITHtHrhecX47UO0/5Yj3LqjCVOC6x pOQKs/oMjxyGdTw6PsSBdR6u+e2R0dPSHo2tHEtAMaiA3VQ+Q1HVieOzdlWgTBs3 pSfiK2lvlbFljuAJZyHQvfe8+nwXEiJcwk6HuAGo/Nh7zFGnmDwb2YXmyhkgnOUh XchhLus0wPYQCnl6T9EOU0jbeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTTCknF 2pY5SpQgWBjCiLht5TIeMB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTZEOS84MERGREVDMEU1REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0 MnloWWhyMXhISGloVGZVU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwXjai1lgvSQhoQWmSRByhdD4Lzaahg5N9tRR+GhrEyvf69Dil/YwM NFM92UU47GqHmvlb/NEHYsCPNQkBkvvBanvosRx1VoU0HJUvrVKY02k2hOd033CR o1zWIba9/IMjdWevlACgX4v/tJkMu/7pUI1HIpY5KYDu96ywoBvL16aOYrvbzbmy rTYjRl/JTiMh7Va4M1KpIDSDHhEPvNCVUtixCzbWFZhHfaC4JQshfbZrIcsyvUf+ +QkR7Tf/Sx5wvmfeoMW+d6ggyXOPXqA83C6vQyacUQjcZShEmu+YF8OW8GbKHtVl hr36SHi2F9KZ28OvTOowvf+TUK/239SH -----END CERTIFICATE-----Generated at Fri Oct 24 08:24:28 2025 by rpki-client