$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft File: IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft (raw, json) Hash identifier: 2drNf5en9ufuA3CGsE5FomIn0itPI2yfmpv0xNw5BHs= Subject key identifier: 86:D6:DC:7E:BD:36:1D:87:72:D9:F1:1A:E5:8B:B4:19:42:0F:65:A2 Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 Certificate issuer: /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft Manifest number: 0952 Signing time: Tue 04 Nov 2025 20:58:38 +0000 Manifest this update: Tue 04 Nov 2025 20:58:37 +0000 Manifest next update: Tue 11 Nov 2025 20:58:37 +0000 Files and hashes: 1: IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl (hash: YNt+gCvyMZUJ9pLWcCqLc+V9rS4S5hqmUlkRRf8AWMY=) 2: 79057E1CEB1011EEB9CE4F19C4F9AE02.roa (hash: hLWcPUyVJnyv7l6njaVAxEoaSy2MA1Ss+BiiJSefS0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4, serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Validity Not Before: Nov 4 20:58:37 2025 GMT Not After : Nov 11 20:58:37 2025 GMT Subject: CN=690a68fd-046f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:42:67:3a:e7:dc:f3:fd:7e:d5:d0:c7:f3:3c: 18:fa:e1:8c:31:7b:97:5e:20:70:f2:b1:ea:81:a2: b2:aa:a7:31:32:c8:70:6b:86:e2:4a:7c:11:35:d4: 3b:99:5a:61:e7:f8:2a:47:3d:2c:df:7e:11:8c:21: 81:ec:e4:5d:62:d6:02:f2:c6:55:ae:22:fe:06:e2: 15:53:07:ab:f9:35:9b:ba:b0:78:0c:f4:52:14:e5: 97:2a:07:a4:93:6b:89:d9:57:88:23:2c:fb:c8:8c: 9c:1c:ff:49:3b:e1:e3:36:cd:13:74:30:3b:ff:2e: bd:6a:7a:d0:7b:6e:ad:8f:3b:07:e0:b5:79:0e:e8: ac:3e:18:bd:61:c1:2a:a7:b7:49:ce:dd:e8:56:a2: df:2a:d1:44:4b:f3:77:f6:51:de:82:1a:d3:3c:1f: fe:70:85:5d:3d:c3:2a:1c:17:f2:71:dc:1a:37:78: 37:66:c0:96:d3:b8:37:26:20:06:45:88:44:01:a1: 3d:c2:32:85:c8:b5:19:90:57:84:b7:20:65:d4:fe: 79:c3:4e:dd:d1:ff:23:e5:ff:07:a1:7b:17:ea:09: 40:aa:a7:89:d5:23:53:3b:3e:3f:ad:62:b2:ea:cf: 39:d6:f8:d5:a8:74:b5:f5:2f:44:9e:fe:4a:d8:56: 97:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D6:DC:7E:BD:36:1D:87:72:D9:F1:1A:E5:8B:B4:19:42:0F:65:A2 X509v3 Authority Key Identifier: keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:52:fc:6e:2b:bb:d0:3b:4a:7d:c3:83:26:65:71:48:57:f8: ea:bb:6e:7c:15:bd:c4:5a:0e:0d:b3:b9:26:95:f5:6c:d1:38: 01:20:f5:b5:a4:42:86:7d:6c:65:c2:8d:30:af:ce:77:e3:8d: 39:c1:31:b7:34:2b:b5:f4:91:b8:55:75:b7:3f:ec:ae:c7:e7: b4:48:f7:e0:d3:ea:85:c2:2a:13:82:65:84:47:b1:4c:2a:a6: 01:91:dd:73:29:8a:98:4d:8f:5e:4a:79:32:e8:ea:ad:f8:48: 68:8b:91:38:e6:c7:b6:6b:10:f1:ad:03:20:7a:d2:23:80:ad: 52:31:88:a9:fe:22:83:93:75:a1:36:8b:6f:eb:27:94:de:ec: 15:93:51:1a:0a:36:16:b5:ab:e8:8b:9a:86:3a:69:df:36:ec: 88:15:6c:1e:b8:d5:e1:55:e4:41:aa:f9:bc:04:0c:b8:42:b6: d7:ef:5e:7e:ba:85:e1:62:98:40:af:7b:64:24:4b:a0:c9:e1: 90:d1:88:15:4e:a5:1a:38:74:42:54:42:65:6c:f4:49:c5:8f: 32:6f:64:5a:d8:01:55:25:b3:a8:f1:bc:ea:91:a1:dc:6d:d6: dc:e2:5a:57:16:0d:4d:83:33:29:94:f0:ee:99:a2:41:e4:74: f0:47:37:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDIyQjRBOUFBQTk4MkFCQ0IzOUY5Nzg5ODZCQ0I2Nzcw QjYwMkMxQTQwHhcNMjUxMTA0MjA1ODM3WhcNMjUxMTExMjA1ODM3WjAYMRYwFAYD VQQDEw02OTBhNjhmZC0wNDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0JnOufc8/1+1dDH8zwY+uGMMXuXXiBw8rHqgaKyqqcxMshwa4biSnwRNdQ7 mVph5/gqRz0s334RjCGB7ORdYtYC8sZVriL+BuIVUwer+TWburB4DPRSFOWXKgek k2uJ2VeIIyz7yIycHP9JO+HjNs0TdDA7/y69anrQe26tjzsH4LV5DuisPhi9YcEq p7dJzt3oVqLfKtFES/N39lHeghrTPB/+cIVdPcMqHBfycdwaN3g3ZsCW07g3JiAG RYhEAaE9wjKFyLUZkFeEtyBl1P55w07d0f8j5f8HoXsX6glAqqeJ1SNTOz4/rWKy 6s851vjVqHS19S9Env5K2FaXCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbW3H69 Nh2HctnxGuWLtBlCD2WiMB8GA1UdIwQYMBaAFCK0qaqpgqvLOfl4mGvLZ3C2AsGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4czUtWGlZYTh0bmNMWUN3 YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyU3BxcW1DcThzNS1YaVlhOHRuY0xZQ3dhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4 czUtWGlZYTh0bmNMWUN3YVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWUvxuK7vQO0p9w4MmZXFIV/jqu258Fb3EWg4Ns7kmlfVs0TgBIPW1 pEKGfWxlwo0wr8534405wTG3NCu19JG4VXW3P+yux+e0SPfg0+qFwioTgmWER7FM KqYBkd1zKYqYTY9eSnky6Oqt+Ehoi5E45se2axDxrQMgetIjgK1SMYip/iKDk3Wh Notv6yeU3uwVk1EaCjYWtavoi5qGOmnfNuyIFWweuNXhVeRBqvm8BAy4QrbX715+ uoXhYphAr3tkJEugyeGQ0YgVTqUaOHRCVEJlbPRJxY8yb2Ra2AFVJbOo8bzqkaHc bdbc4lpXFg1NgzMplPDumaJB5HTwRzf8 -----END CERTIFICATE-----Generated at Wed Nov 5 00:21:00 2025 by rpki-client