$ rpki-client -vvf rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft File: iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft (raw, json) Hash identifier: MctrIAvETQ9K9B0jolVFiTixIAYeCk5TDYt2u7LPCyI= Subject key identifier: AA:95:62:29:83:32:2B:59:E3:EB:66:97:AC:12:C5:FD:B9:31:67:EC Authority key identifier: 89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE Certificate issuer: /CN=A91F40E0/serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft Manifest number: 25 Signing time: Thu 23 Oct 2025 09:58:35 +0000 Manifest this update: Thu 23 Oct 2025 09:58:35 +0000 Manifest next update: Thu 30 Oct 2025 09:58:35 +0000 Files and hashes: 1: iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl (hash: HLs95TX91ri7gBk6ToPtpkGGZH6gbmmxxmgiRTIEPDg=) 2: 399480C4ACD011F08828DD7BC4F9AE02.roa (hash: yI8N6F4qsuPIqNv8+UqyC5GcVGdjbU6jQ0lT/VBamLY=) 3: 7C22B5E6ACD011F0921D9C7CC4F9AE02.roa (hash: q8Z6X3DeoMVrth4Q8UYf9kXqa/5qh/fwxwMPWXC7Eug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 09:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F40E0, serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE Validity Not Before: Oct 23 09:58:35 2025 GMT Not After : Oct 30 09:58:35 2025 GMT Subject: CN=68f9fc4b-1fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:04:bc:8a:b2:ea:c2:41:cd:8f:f9:b3:fa:e4: ac:c5:76:1b:d7:05:19:5c:02:86:d2:eb:76:0f:f4: f7:2f:30:63:f5:63:67:84:1e:48:72:31:64:16:9b: bc:ca:9f:23:3a:f5:66:cf:d6:82:88:2e:a3:99:38: 3e:d9:02:65:78:2f:64:ec:d1:ea:15:ef:32:46:62: e2:c2:2d:d1:6c:6d:47:8f:55:76:27:f6:5a:ba:ac: fd:d3:f8:ef:2e:f1:01:84:98:73:d8:38:f9:eb:d4: 32:c5:02:e3:6f:09:5d:46:29:cf:d9:e7:ae:07:66: 64:6c:f9:b4:41:83:a4:48:bd:e5:30:c5:c7:59:29: 64:05:97:a0:4b:53:4f:77:c5:d9:08:74:c8:9c:97: 64:47:b4:a2:35:5d:22:15:d2:af:c8:04:3e:0b:42: dc:70:f4:e3:fe:7d:07:80:75:18:75:b0:a1:98:d7: fa:24:2f:9b:8c:ce:da:56:61:8a:a3:6e:eb:fe:3a: 55:2f:c7:2a:4f:c2:4d:70:fc:e6:30:a1:b8:86:9d: 1e:c6:5a:a8:ec:82:c6:87:cb:06:9a:91:6a:66:de: 68:eb:91:89:6b:49:fd:3d:81:d7:e6:41:c3:16:21: a6:3a:59:3d:ee:6b:35:5c:a4:03:f4:ba:66:30:46: ee:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:95:62:29:83:32:2B:59:E3:EB:66:97:AC:12:C5:FD:B9:31:67:EC X509v3 Authority Key Identifier: keyid:89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:07:57:0a:6d:de:96:7a:29:5a:40:6b:52:27:82:83:4d:84: 87:66:ec:99:f4:ac:b4:c2:8c:41:66:40:ab:96:3b:3b:37:41: 79:76:81:c5:08:50:8d:c8:00:a9:15:33:91:c8:60:07:2f:8c: 94:6e:fd:6e:db:74:84:bf:42:3e:9f:8a:a5:ea:df:20:42:a2: 8d:14:31:f4:b8:66:50:8e:20:84:54:af:2c:de:b4:f4:34:05: 38:cc:96:98:75:1b:c7:a1:76:73:96:2e:a9:e6:2c:69:d7:49: 92:5f:ec:f2:79:35:51:cd:c1:9e:01:7a:20:26:1b:b0:1d:cb: e7:ac:4c:64:f7:e1:4d:41:07:d7:b9:5d:0a:91:06:8d:4f:8e: dc:5e:cf:5e:c0:c2:7b:37:c3:22:9d:a6:de:8a:9d:63:a7:dc: 99:8c:cb:d3:20:a4:72:68:16:4a:72:ef:b6:5c:ef:60:ba:ab: 82:08:90:82:f6:dd:6f:eb:65:db:db:2f:90:42:a0:bc:2d:a1: b9:68:d5:52:92:69:4e:d3:44:fe:2b:fd:54:8c:d4:ef:2f:80: 0e:89:18:7a:1c:c0:21:5a:d5:a5:a4:80:81:58:85:d4:20:01: d7:22:59:90:1b:0c:6d:4a:ca:fe:a8:6d:02:b8:e2:bb:f3:1d: 06:97:48:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NDBFMDExMC8GA1UEBRMoODk3MDc3QjcxRjJDNUFFRERFNkMxREQ0OTU0N0RDQzk5 NTJDREFCRTAeFw0yNTEwMjMwOTU4MzVaFw0yNTEwMzAwOTU4MzVaMBgxFjAUBgNV BAMTDTY4ZjlmYzRiLTFmYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWBLyKsurCQc2P+bP65KzFdhvXBRlcAobS63YP9PcvMGP1Y2eEHkhyMWQWm7zK nyM69WbP1oKILqOZOD7ZAmV4L2Ts0eoV7zJGYuLCLdFsbUePVXYn9lq6rP3T+O8u 8QGEmHPYOPnr1DLFAuNvCV1GKc/Z564HZmRs+bRBg6RIveUwxcdZKWQFl6BLU093 xdkIdMicl2RHtKI1XSIV0q/IBD4LQtxw9OP+fQeAdRh1sKGY1/okL5uMztpWYYqj buv+OlUvxypPwk1w/OYwobiGnR7GWqjsgsaHywaakWpm3mjrkYlrSf09gdfmQcMW IaY6WT3uazVcpAP0umYwRu7PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqpViKYMy K1nj62aXrBLF/bkxZ+wwHwYDVR0jBBgwFoAUiXB3tx8sWu3ebB3UlUfcyZUs2r4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0MEUwLzNGQkI1RTA0N0I1 MzExRjA5QjU0ODQ1RkM0RjlBRTAyL2lYQjN0eDhzV3UzZWJCM1VsVWZjeVpVczJy NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVhCM3R4OHNXdTNlYkIzVWxVZmN5WlVzMnI0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0 MEUwLzNGQkI1RTA0N0I1MzExRjA5QjU0ODQ1RkM0RjlBRTAyL2lYQjN0eDhzV3Uz ZWJCM1VsVWZjeVpVczJyNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIwHVwpt3pZ6KVpAa1IngoNNhIdm7Jn0rLTCjEFmQKuWOzs3QXl2gcUI UI3IAKkVM5HIYAcvjJRu/W7bdIS/Qj6fiqXq3yBCoo0UMfS4ZlCOIIRUryzetPQ0 BTjMlph1G8ehdnOWLqnmLGnXSZJf7PJ5NVHNwZ4BeiAmG7Ady+esTGT34U1BB9e5 XQqRBo1Pjtxez17Awns3wyKdpt6KnWOn3JmMy9MgpHJoFkpy77Zc72C6q4IIkIL2 3W/rZdvbL5BCoLwtoblo1VKSaU7TRP4r/VSM1O8vgA6JGHocwCFa1aWkgIFYhdQg AdciWZAbDG1Kyv6obQK44rvzHQaXSC0= -----END CERTIFICATE-----Generated at Fri Oct 24 19:18:29 2025 by rpki-client