$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft File: aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json) Hash identifier: pAxpR9I5QNWA39YWN9vFTEzZvDHMJb3IXcRGEK2ysEo= Subject key identifier: 3A:25:BC:BA:D3:72:01:4A:8A:BA:F8:16:1C:27:3F:66:E2:4B:CF:0E Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC Certificate issuer: /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft Manifest number: 01FB Signing time: Wed 05 Nov 2025 03:08:47 +0000 Manifest this update: Wed 05 Nov 2025 03:08:46 +0000 Manifest next update: Wed 12 Nov 2025 03:08:46 +0000 Files and hashes: 1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: CoLsN2lTgNqL2BI0GiqXtCDcUI/oZV0XgXJKOgVuLtc=) 2: AF2D50BE562B11F0A2095579C4F9AE02.roa (hash: 8RemKyfJQtXvAOB/Ei52MDI9KMaFn3vaXMJC+OL2BTo=) 3: 2F03F3FCB3AF11F0B9165B5BC4F9AE02.roa (hash: /H0+uJjrBUM5k1a0PlilTjkv6OXrTMlJFAf/4vjgSHc=) 4: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: jgvNZRe9TtRr8CjiSGyPeDv21uzfhNhZZ8tu5qtOBO0=) 5: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: 6GO7eV9ptg4bEhjgmfPj3OiDNEEWB+tcYPU19G/hzs4=) 6: F16963D8B3AE11F0A879E65AC4F9AE02.roa (hash: 1iYx6AnDG5k3WAo1cEbcn3Zch3QKy9Aj+tVhGhOpm2M=) 7: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: xJf9OjyZ9tl22O94Y+hCu+z+3Ka7jvHkbMt39lHsOuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC Validity Not Before: Nov 5 03:08:46 2025 GMT Not After : Nov 12 03:08:46 2025 GMT Subject: CN=690abfbe-121b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bb:64:77:f8:03:cc:a3:ac:40:f9:2c:fd:4e: 58:75:68:3d:24:0f:51:f4:54:0c:80:24:83:74:7a: 99:93:98:68:a8:2a:ea:55:fb:68:34:cf:f5:31:99: 0c:51:ad:36:af:1a:a0:7c:05:f7:9a:0d:4d:61:62: 99:b4:0e:6a:c3:b9:81:88:da:63:78:92:70:3c:82: b0:5f:d0:61:ab:1f:3e:d9:bc:8f:58:ec:94:b9:cf: 3f:b6:6e:bf:06:79:66:52:d0:83:74:96:c7:ae:d3: e2:f8:6f:7d:11:6f:1b:ae:7e:42:ee:16:d0:c2:cc: b8:fe:26:2f:39:54:56:79:53:b5:e2:ef:6f:8c:ed: f4:62:3a:cf:c2:17:a1:82:09:2e:7d:ee:07:a8:5f: d4:93:7d:9d:5f:f1:a2:aa:48:56:26:16:75:02:7c: a9:84:8f:c4:ad:5b:6d:36:25:fa:a1:2d:c2:05:49: 36:cc:ef:f4:a2:91:ad:7b:51:03:5b:88:1c:a2:9a: f5:7e:d2:4e:c5:f9:15:a9:5e:bf:bd:27:cb:df:78: f1:22:74:36:0f:a2:94:78:d6:05:90:1b:f7:93:1e: 82:d0:b3:79:e9:0c:9a:bf:c3:26:f3:60:d2:62:9a: 1b:0f:4f:a0:dc:40:b2:c4:7c:47:7d:49:45:9b:bc: 76:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:25:BC:BA:D3:72:01:4A:8A:BA:F8:16:1C:27:3F:66:E2:4B:CF:0E X509v3 Authority Key Identifier: keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:da:2d:e9:f5:8d:0c:a2:18:c6:05:8d:9c:ac:3f:a4:51:2c: f2:c3:cc:64:57:df:03:ab:fc:78:e3:2f:4f:e8:26:25:4a:71: d6:7a:a4:24:f5:31:4d:e7:2d:75:ca:a0:3c:3d:e0:8e:4f:27: 63:4e:bf:4d:a4:79:d7:48:30:13:ed:c1:45:a3:16:6b:ba:36: 80:15:7f:d4:6f:38:55:75:97:66:65:ba:b6:f8:7a:9f:39:77: 0e:d5:ff:7d:8c:3a:ad:1f:51:be:ce:77:5a:a8:14:1b:2e:13: 55:b9:ab:36:62:73:17:c9:63:8b:3e:d6:be:6e:aa:2d:5b:7f: 62:0e:9c:b6:66:98:cf:5c:7f:fb:95:f9:c8:4e:87:41:9d:30: 16:b5:01:eb:49:09:a7:16:ce:eb:2c:e3:47:c8:28:a6:60:a9: b1:ba:f7:84:a5:44:37:b9:bf:54:f0:ef:9f:68:c6:9e:55:91: e2:1a:c0:c1:3c:c2:60:34:df:39:5b:26:93:1a:9a:b1:d3:66: 2a:b9:70:e1:1a:a5:a4:3b:9d:cd:a5:9e:66:c0:8d:37:13:f8: ed:61:4a:35:a8:3b:77:0f:43:a4:cb:00:b9:ae:f1:a4:81:b0: a6:e3:d8:2f:a4:3c:6a:ca:fe:fc:45:25:58:4e:c0:70:b7:6f: 6f:a8:08:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg3RkQxMTAvBgNVBAUTKDY4ODUyQUI3RjI3MTRGQ0Y1NEQ3NUYwQUFFMzA2OEFE QzM4QjM1Q0MwHhcNMjUxMTA1MDMwODQ2WhcNMjUxMTEyMDMwODQ2WjAYMRYwFAYD VQQDEw02OTBhYmZiZS0xMjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7tkd/gDzKOsQPks/U5YdWg9JA9R9FQMgCSDdHqZk5hoqCrqVftoNM/1MZkM Ua02rxqgfAX3mg1NYWKZtA5qw7mBiNpjeJJwPIKwX9Bhqx8+2byPWOyUuc8/tm6/ BnlmUtCDdJbHrtPi+G99EW8brn5C7hbQwsy4/iYvOVRWeVO14u9vjO30YjrPwheh ggkufe4HqF/Uk32dX/GiqkhWJhZ1AnyphI/ErVttNiX6oS3CBUk2zO/0opGte1ED W4gcopr1ftJOxfkVqV6/vSfL33jxInQ2D6KUeNYFkBv3kx6C0LN56Qyav8Mm82DS YpobD0+g3ECyxHxHfUlFm7x2CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDolvLrT cgFKirr4FhwnP2biS88OMB8GA1UdIwQYMBaAFGiFKrfycU/PVNdfCq4waK3DizXM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdGRC81NUVENkExNjEw QTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4OVUxMThLcmpCb3JjT0xO Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJVXF0X0p4VDg5VTExOEtyakJvcmNPTE5jdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODdGRC81NUVENkExNjEwQTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4 OVUxMThLcmpCb3JjT0xOY3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB2i3p9Y0MohjGBY2crD+kUSzyw8xkV98Dq/x44y9P6CYlSnHWeqQk 9TFN5y11yqA8PeCOTydjTr9NpHnXSDAT7cFFoxZrujaAFX/UbzhVdZdmZbq2+Hqf OXcO1f99jDqtH1G+zndaqBQbLhNVuas2YnMXyWOLPta+bqotW39iDpy2ZpjPXH/7 lfnITodBnTAWtQHrSQmnFs7rLONHyCimYKmxuveEpUQ3ub9U8O+faMaeVZHiGsDB PMJgNN85WyaTGpqx02YquXDhGqWkO53NpZ5mwI03E/jtYUo1qDt3D0OkywC5rvGk gbCm49gvpDxqyv78RSVYTsBwt29vqAg5 -----END CERTIFICATE-----Generated at Wed Nov 5 11:56:10 2025 by rpki-client