$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft File: IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft (raw, json) Hash identifier: XBuIALp8qqTTVZgsl6GRDkDughTlMDTyqg79T7Pf0iE= Subject key identifier: 60:83:92:B7:03:F9:F4:09:D0:9E:C0:7A:15:15:3A:EC:6A:CB:50:7E Authority key identifier: 23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F Certificate issuer: /CN=A91FE26E/serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Certificate serial: 1D28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft Manifest number: 1D13 Signing time: Sun 26 Oct 2025 16:18:35 +0000 Manifest this update: Sun 26 Oct 2025 16:18:34 +0000 Manifest next update: Sun 02 Nov 2025 16:18:34 +0000 Files and hashes: 1: IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl (hash: QVEVYAwj60tW9hdQRJZi4XZ7gOwD4J8uRSQ3KSNCY4w=) 2: 40EAC2C0685111F0A688505EC4F9AE02.roa (hash: 2aGejYYAILu+vq+h9Ds1ItJ4A2WEADfQRUwQnuAzQp4=) 3: 402AE4B4685111F0A688505EC4F9AE02.roa (hash: dyKQZQJFWOlaLCos4pICmePW3GQtvzVk28wWqQnX6xA=) 4: E8FF9A526FDE11E9AF945067C4F9AE02.roa (hash: RrfRQiaJQ/K/F0pEWCxhmnA6Eh04yX02RfUKJUyZudE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 16:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7464 (0x1d28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE26E, serialNumber=233C0D3B2A75C41AB82E5BEB70DBE2E7342D661F Validity Not Before: Oct 26 16:18:34 2025 GMT Not After : Nov 2 16:18:34 2025 GMT Subject: CN=68fe49da-3c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:ef:af:de:af:e2:a6:b9:8e:ba:e0:74:8e: a7:0d:b5:b2:1d:64:f1:c6:17:31:69:b4:d2:ab:05: 4d:ad:0a:f5:42:51:b3:78:2d:b0:ca:9c:3b:c6:79: fe:3a:fc:66:f9:17:dd:aa:b1:e8:52:b2:a5:77:71: ad:61:c8:fd:90:47:9d:39:92:e3:5e:6e:71:60:84: b3:06:5a:ac:7e:a7:1f:7b:2c:d2:77:f5:92:c0:f0: 7c:40:68:fd:45:13:7d:3c:30:59:9c:6f:8a:12:ec: d6:ac:2b:75:d8:7a:b2:6e:af:2f:8d:ed:c5:b4:d9: 5d:2a:86:e8:1e:39:26:97:2c:6a:05:b6:81:a5:c1: f6:1d:e0:a8:30:1c:26:d5:e3:dd:f4:a9:fd:9f:0a: f1:5d:14:28:66:09:f0:3b:01:a9:9f:76:3e:94:35: de:64:fe:89:0e:8f:09:b6:df:cc:9a:ef:a7:27:e2: f4:3a:1d:23:15:44:fa:f2:9c:91:08:f3:d9:f3:9e: e6:f5:d8:78:83:09:87:f6:6e:4d:e9:07:3c:0e:fc: bc:d0:45:cc:b7:53:1b:e7:1e:44:c5:c5:11:8a:82: 4e:f9:10:d7:a4:73:5c:dd:eb:94:9e:c9:58:b9:63: 73:31:9c:f0:76:30:c8:f6:e5:20:d3:84:d5:4b:dc: ac:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:83:92:B7:03:F9:F4:09:D0:9E:C0:7A:15:15:3A:EC:6A:CB:50:7E X509v3 Authority Key Identifier: keyid:23:3C:0D:3B:2A:75:C4:1A:B8:2E:5B:EB:70:DB:E2:E7:34:2D:66:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IzwNOyp1xBq4LlvrcNvi5zQtZh8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE26E/87B5CD50C85D11E687056927C4F9AE02/IzwNOyp1xBq4LlvrcNvi5zQtZh8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:46:42:c7:41:98:e3:53:a7:e5:d9:17:de:14:3f:60:a4:9e: 12:a3:71:96:08:66:93:fa:39:e4:66:ec:5f:cf:37:96:a8:58: 36:ce:5a:b5:31:35:36:1a:ca:56:1c:1b:3d:98:20:22:f3:d3: 6c:ff:8f:98:89:c9:a0:a4:ab:ff:88:0a:a0:6d:9c:12:95:35: 94:e4:b2:c8:ef:51:55:27:9f:95:00:ec:4e:f0:a0:b4:07:93: 19:6a:56:59:83:41:18:45:e6:b4:61:f1:dc:93:58:1f:93:d5: 28:1e:9b:b7:42:4b:ea:8a:ef:c4:95:07:b9:56:92:dc:e7:63: 70:28:27:1b:01:8a:1d:9f:17:27:c3:e7:f4:7f:ae:99:91:fd: 5f:8b:72:23:90:27:33:8f:0f:38:9e:d7:50:be:b1:fb:4a:3c: 22:be:ca:cc:e6:b2:5b:e4:f9:f5:5a:5b:d7:17:80:63:8f:60: 5c:0c:1f:b4:03:a9:99:e6:88:bc:63:ee:98:58:00:88:4d:56: 6d:00:4f:7b:cb:e0:d3:4f:bd:a0:b2:f1:f5:ba:f5:03:5e:8c: fd:eb:67:1e:a6:e3:ba:01:a4:c2:f8:5a:71:7d:27:3d:8c:5f: 16:60:25:e5:b4:3c:85:49:85:09:fc:f3:20:bf:8b:f9:bf:0a: 53:ff:65:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkUyNkUxMTAvBgNVBAUTKDIzM0MwRDNCMkE3NUM0MUFCODJFNUJFQjcwREJFMkU3 MzQyRDY2MUYwHhcNMjUxMDI2MTYxODM0WhcNMjUxMTAyMTYxODM0WjAYMRYwFAYD VQQDEw02OGZlNDlkYS0zYzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssnvr96v4qa5jrrgdI6nDbWyHWTxxhcxabTSqwVNrQr1QlGzeC2wypw7xnn+ Ovxm+RfdqrHoUrKld3GtYcj9kEedOZLjXm5xYISzBlqsfqcfeyzSd/WSwPB8QGj9 RRN9PDBZnG+KEuzWrCt12Hqybq8vje3FtNldKoboHjkmlyxqBbaBpcH2HeCoMBwm 1ePd9Kn9nwrxXRQoZgnwOwGpn3Y+lDXeZP6JDo8Jtt/Mmu+nJ+L0Oh0jFUT68pyR CPPZ857m9dh4gwmH9m5N6Qc8Dvy80EXMt1Mb5x5ExcURioJO+RDXpHNc3euUnslY uWNzMZzwdjDI9uUg04TVS9ysJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCDkrcD +fQJ0J7AehUVOuxqy1B+MB8GA1UdIwQYMBaAFCM8DTsqdcQauC5b63Db4uc0LWYf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI2RS84N0I1Q0Q1MEM4 NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhCcTRMbHZyY052aTV6UXRa aDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l6d05PeXAxeEJxNExsdnJjTnZpNXpRdFpoOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTI2RS84N0I1Q0Q1MEM4NUQxMUU2ODcwNTY5MjdDNEY5QUUwMi9JendOT3lwMXhC cTRMbHZyY052aTV6UXRaaDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVRkLHQZjjU6fl2RfeFD9gpJ4So3GWCGaT+jnkZuxfzzeWqFg2zlq1 MTU2GspWHBs9mCAi89Ns/4+YicmgpKv/iAqgbZwSlTWU5LLI71FVJ5+VAOxO8KC0 B5MZalZZg0EYRea0YfHck1gfk9UoHpu3Qkvqiu/ElQe5VpLc52NwKCcbAYodnxcn w+f0f66Zkf1fi3IjkCczjw84ntdQvrH7SjwivsrM5rJb5Pn1WlvXF4Bjj2BcDB+0 A6mZ5oi8Y+6YWACITVZtAE97y+DTT72gsvH1uvUDXoz962cepuO6AaTC+FpxfSc9 jF8WYCXltDyFSYUJ/PMgv4v5vwpT/2V8 -----END CERTIFICATE-----Generated at Tue Oct 28 06:49:04 2025 by rpki-client