$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft File: IO0KqyB1C4snqG35iadUv1cm3X4.mft (raw, json) Hash identifier: x/8RvmkJSl1V3uXn/iYHjQ3+hB106/qv3S7z5Db9Umg= Subject key identifier: 3C:3E:53:19:4A:06:BC:44:E2:5D:05:71:FC:02:D4:2B:A0:BA:CF:CA Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E Certificate issuer: /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft Manifest number: 05BD Signing time: Fri 19 Sep 2025 00:53:18 +0000 Manifest this update: Fri 19 Sep 2025 00:53:18 +0000 Manifest next update: Fri 26 Sep 2025 00:53:18 +0000 Files and hashes: 1: IO0KqyB1C4snqG35iadUv1cm3X4.crl (hash: SNSlM18mj8WwdQvkvCUXCqNd8FmypEodndq9ibx4qb4=) 2: 9DFE04787F8411F0AAC1963BC4F9AE02.roa (hash: CtN+xxhUO3bDEdjbEM7vq/EcPqW7lv1VXztGCW7n23A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAB64, serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E Validity Not Before: Sep 19 00:53:18 2025 GMT Not After : Sep 26 00:53:18 2025 GMT Subject: CN=68cca97e-4475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0f:36:5f:7c:cc:5b:26:56:92:c4:fe:a3:cc: d4:e3:c6:34:c4:0e:d7:92:49:ca:cb:f9:af:d2:c4: 39:a2:1c:e8:b3:28:e4:76:00:76:fc:18:ee:31:a0: bb:f0:6f:48:dd:44:56:bb:bf:48:be:27:2a:07:b2: 2a:3d:06:83:33:1f:a7:bd:4c:a6:73:c8:e8:09:49: c8:3c:94:fd:5e:1f:c6:08:22:83:88:91:bf:2a:ba: 6b:ad:e3:f0:e5:19:23:47:15:53:32:5e:90:15:df: 7b:dc:b4:91:84:10:bd:cf:ea:d2:d4:0a:15:c3:93: 22:97:0d:fe:5e:2e:90:55:c5:93:2c:26:4a:0c:d9: 27:7a:84:65:6f:ca:6b:08:69:59:06:85:d2:fe:77: 6e:57:8d:6c:9d:2e:e2:91:b2:c4:c3:cb:ee:c8:70: 56:d5:ea:32:bf:ec:e8:e9:b2:0e:d8:2c:cd:d8:50: a7:46:30:6a:a2:69:2a:1b:52:01:a8:ee:b5:81:35: 9a:0e:40:46:58:1b:c6:fc:62:dd:38:f4:be:76:e3: c7:61:4a:73:52:e2:ad:75:36:a4:15:05:bd:99:f8: 70:10:f9:5b:2f:3b:c1:bd:fd:21:be:de:91:a6:68: de:6f:0d:9b:a6:2e:a7:70:6c:4b:c5:5a:7b:e4:80: 26:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3E:53:19:4A:06:BC:44:E2:5D:05:71:FC:02:D4:2B:A0:BA:CF:CA X509v3 Authority Key Identifier: keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:2b:f6:57:03:2f:52:b6:4f:2c:b0:36:d1:f2:be:b5:0a:f8: 49:42:33:5a:2d:1e:c1:65:09:ca:3b:d6:28:59:b9:b9:f2:d5: 1c:43:ad:39:14:7c:7c:e6:7a:04:31:ad:68:9f:71:e1:56:31: 05:53:ab:7a:38:48:fa:c9:95:eb:6e:3b:6a:0d:fa:1c:81:a0: af:50:9d:1b:5c:03:7e:bd:f7:d8:d2:de:08:0e:a7:e5:6c:4e: 25:1c:60:61:f5:93:ef:4a:74:a1:37:fb:dd:a2:d1:e5:6f:b0: 49:e2:50:9e:08:4f:5f:cc:22:93:cf:69:89:a3:c8:34:b9:3e: 2c:60:6a:9b:a5:90:e1:aa:d4:3c:10:6b:31:48:27:fe:12:8d: c4:e3:e3:06:63:62:45:5c:0c:18:f6:d5:df:67:c0:84:b9:4c: b3:81:b1:0e:4e:14:15:d5:59:e2:d8:a5:34:97:ba:b7:22:5c: de:db:28:b8:99:c4:10:50:df:d6:38:40:84:f3:ac:3b:39:68: 26:be:51:d5:86:71:81:47:7e:20:ba:de:32:4b:70:7c:c1:d9: 8c:51:4e:17:61:73:54:f5:c0:09:6b:d2:b3:81:79:08:8c:49: 7e:c5:f6:9b:1b:43:97:aa:00:39:9a:b0:15:26:1d:98:49:4a: d5:7c:b5:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCNjQxMTAvBgNVBAUTKDIwRUQwQUFCMjA3NTBCOEIyN0E4NkRGOTg5QTc1NEJG NTcyNkREN0UwHhcNMjUwOTE5MDA1MzE4WhcNMjUwOTI2MDA1MzE4WjAYMRYwFAYD VQQDEw02OGNjYTk3ZS00NDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyA82X3zMWyZWksT+o8zU48Y0xA7XkknKy/mv0sQ5ohzosyjkdgB2/BjuMaC7 8G9I3URWu79IvicqB7IqPQaDMx+nvUymc8joCUnIPJT9Xh/GCCKDiJG/KrprrePw 5RkjRxVTMl6QFd973LSRhBC9z+rS1AoVw5Milw3+Xi6QVcWTLCZKDNkneoRlb8pr CGlZBoXS/nduV41snS7ikbLEw8vuyHBW1eoyv+zo6bIO2CzN2FCnRjBqomkqG1IB qO61gTWaDkBGWBvG/GLdOPS+duPHYUpzUuKtdTakFQW9mfhwEPlbLzvBvf0hvt6R pmjebw2bpi6ncGxLxVp75IAmxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDw+UxlK BrxE4l0FcfwC1Cugus/KMB8GA1UdIwQYMBaAFCDtCqsgdQuLJ6ht+YmnVL9XJt1+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi9JTzBLcXlCMUM0c25xRzM1aWFkVXYxY20z WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lPMEtxeUIxQzRzbnFHMzVpYWRVdjFjbTNYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi9JTzBLcXlCMUM0 c25xRzM1aWFkVXYxY20zWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvK/ZXAy9Stk8ssDbR8r61CvhJQjNaLR7BZQnKO9YoWbm58tUcQ605 FHx85noEMa1on3HhVjEFU6t6OEj6yZXrbjtqDfocgaCvUJ0bXAN+vffY0t4IDqfl bE4lHGBh9ZPvSnShN/vdotHlb7BJ4lCeCE9fzCKTz2mJo8g0uT4sYGqbpZDhqtQ8 EGsxSCf+Eo3E4+MGY2JFXAwY9tXfZ8CEuUyzgbEOThQV1Vni2KU0l7q3Ilze2yi4 mcQQUN/WOECE86w7OWgmvlHVhnGBR34gut4yS3B8wdmMUU4XYXNU9cAJa9KzgXkI jEl+xfabG0OXqgA5mrAVJh2YSUrVfLXs -----END CERTIFICATE-----Generated at Fri Sep 19 02:14:49 2025 by rpki-client