$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft File: IO0KqyB1C4snqG35iadUv1cm3X4.mft (raw, json) Hash identifier: Z4s3JojssPjRXBmCESbcBTozBcit5jTxtf/A6r/IbtQ= Subject key identifier: 89:C7:49:B6:0D:58:9F:08:40:57:A6:D8:68:54:44:AC:93:63:3F:CF Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E Certificate issuer: /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft Manifest number: 05EB Signing time: Wed 05 Nov 2025 00:30:50 +0000 Manifest this update: Wed 05 Nov 2025 00:30:49 +0000 Manifest next update: Wed 12 Nov 2025 00:30:49 +0000 Files and hashes: 1: IO0KqyB1C4snqG35iadUv1cm3X4.crl (hash: WVAA/+wxDg1G7jnHW214lMQSgFgTQG71O5pMYoUvqGE=) 2: 9DFE04787F8411F0AAC1963BC4F9AE02.roa (hash: CtN+xxhUO3bDEdjbEM7vq/EcPqW7lv1VXztGCW7n23A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAB64, serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E Validity Not Before: Nov 5 00:30:49 2025 GMT Not After : Nov 12 00:30:49 2025 GMT Subject: CN=690a9ab9-d021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:21:fa:73:e4:ca:75:7c:94:6d:b7:fe:8a:b2: f1:e7:bc:d4:67:b8:1a:2b:97:de:32:14:4d:1f:c5: dc:b2:64:87:0a:b1:11:bb:43:ea:00:82:0d:9d:e8: 5a:e6:25:53:69:29:87:8e:01:b7:aa:49:90:15:a1: f5:e1:15:96:6c:56:0d:98:78:7e:91:a6:cf:86:34: 66:b3:ca:98:8f:60:a7:68:65:eb:f8:9b:09:6a:e2: d0:cc:f7:53:b9:f0:dd:1b:fc:17:20:3b:fb:bb:54: 8b:4b:de:03:5f:ac:66:f6:22:d2:05:0f:8e:e5:9d: ee:4b:e5:fb:68:dd:17:a9:12:96:b8:09:59:30:85: 12:5c:4f:5c:8b:e7:aa:61:2e:b5:de:27:cc:84:a6: 31:75:27:08:c2:e4:dd:9d:fb:91:42:3e:01:0c:bf: 53:d2:f3:c4:c9:ff:f2:39:db:63:d5:0d:cd:5c:f3: 01:5e:96:d0:99:3f:5f:d4:26:92:89:65:c7:78:de: 74:a6:2e:95:3c:19:79:19:8a:9a:8b:a6:dc:cc:45: d0:2c:88:6e:9e:be:5e:9e:e9:ef:4a:0d:11:fa:68: 58:1b:10:ff:8f:bd:63:cd:de:4b:87:5c:5c:60:de: fa:c7:62:b3:b3:5e:ba:bf:93:ae:df:77:b3:ff:d8: 38:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C7:49:B6:0D:58:9F:08:40:57:A6:D8:68:54:44:AC:93:63:3F:CF X509v3 Authority Key Identifier: keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:ef:a8:0c:61:69:e5:8a:70:5f:ce:c0:3e:8b:91:30:f9:0e: dd:bf:eb:a9:bc:15:6b:ed:4c:f7:6d:fe:cf:d9:b2:85:46:99: f3:d0:8f:ba:d4:ac:5a:0e:6d:c9:02:47:7c:aa:36:fe:e9:7a: cd:cb:44:6c:33:45:89:63:d8:81:73:45:64:9f:fe:0e:af:36: 30:06:5b:86:31:1f:83:7a:7d:aa:78:5e:7e:d5:6e:3e:bf:53: e6:fc:10:f5:fa:ed:a8:21:2e:0a:e6:d6:24:a7:7f:41:81:bc: fd:fd:1d:11:0e:82:78:f4:ee:43:9b:20:ec:e8:43:eb:f6:e1: 37:e8:a6:fc:10:e0:bc:8a:67:06:de:c2:23:38:0f:78:48:87: f0:5c:43:6d:d7:8d:e5:9c:d7:7e:8b:a6:3f:f1:c7:19:11:ba: bf:03:85:d2:62:79:8f:3f:ca:48:5b:6a:69:68:06:f4:54:e1: f6:16:8f:4c:89:de:b9:ce:64:c7:47:08:8d:97:8c:e6:ee:be: c2:cb:ed:8f:ba:24:eb:2a:6a:a5:df:47:c5:cf:f7:38:8a:50: cd:35:4e:12:3f:e8:28:ec:fc:07:6a:d7:50:64:48:a6:b0:ef: 13:60:d7:ae:46:d6:e8:3c:78:e0:f5:27:85:73:90:fb:b9:12: e4:bc:db:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCNjQxMTAvBgNVBAUTKDIwRUQwQUFCMjA3NTBCOEIyN0E4NkRGOTg5QTc1NEJG NTcyNkREN0UwHhcNMjUxMTA1MDAzMDQ5WhcNMjUxMTEyMDAzMDQ5WjAYMRYwFAYD VQQDEw02OTBhOWFiOS1kMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7iH6c+TKdXyUbbf+irLx57zUZ7gaK5feMhRNH8XcsmSHCrERu0PqAIINneha 5iVTaSmHjgG3qkmQFaH14RWWbFYNmHh+kabPhjRms8qYj2CnaGXr+JsJauLQzPdT ufDdG/wXIDv7u1SLS94DX6xm9iLSBQ+O5Z3uS+X7aN0XqRKWuAlZMIUSXE9ci+eq YS613ifMhKYxdScIwuTdnfuRQj4BDL9T0vPEyf/yOdtj1Q3NXPMBXpbQmT9f1CaS iWXHeN50pi6VPBl5GYqai6bczEXQLIhunr5enunvSg0R+mhYGxD/j71jzd5Lh1xc YN76x2Kzs166v5Ou33ez/9g47QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInHSbYN WJ8IQFem2GhURKyTYz/PMB8GA1UdIwQYMBaAFCDtCqsgdQuLJ6ht+YmnVL9XJt1+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi9JTzBLcXlCMUM0c25xRzM1aWFkVXYxY20z WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lPMEtxeUIxQzRzbnFHMzVpYWRVdjFjbTNYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUI2NC85QjQ0RUI3NDhGMjkxMUVDQjZBNjk5NkNDNEY5QUUwMi9JTzBLcXlCMUM0 c25xRzM1aWFkVXYxY20zWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB76gMYWnlinBfzsA+i5Ew+Q7dv+upvBVr7Uz3bf7P2bKFRpnz0I+6 1KxaDm3JAkd8qjb+6XrNy0RsM0WJY9iBc0Vkn/4OrzYwBluGMR+Den2qeF5+1W4+ v1Pm/BD1+u2oIS4K5tYkp39Bgbz9/R0RDoJ49O5DmyDs6EPr9uE36Kb8EOC8imcG 3sIjOA94SIfwXENt143lnNd+i6Y/8ccZEbq/A4XSYnmPP8pIW2ppaAb0VOH2Fo9M id65zmTHRwiNl4zm7r7Cy+2PuiTrKmql30fFz/c4ilDNNU4SP+go7PwHatdQZEim sO8TYNeuRtboPHjg9SeFc5D7uRLkvNtJ -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:44 2025 by rpki-client