$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft File: IcjytuAdCoLRPDUYjDyT5vUUupQ.mft (raw, json) Hash identifier: jghJSqnIT7H6RR/2IGt+2oYl+fwCnBwWiT0CK/vL008= Subject key identifier: D5:02:D4:13:11:FD:3E:87:57:14:BD:8C:49:AA:82:02:44:1A:8A:14 Authority key identifier: 21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94 Certificate issuer: /CN=A91A9C62/serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft Manifest number: 35 Signing time: Mon 03 Nov 2025 07:35:48 +0000 Manifest this update: Mon 03 Nov 2025 07:35:47 +0000 Manifest next update: Mon 10 Nov 2025 07:35:47 +0000 Files and hashes: 1: IcjytuAdCoLRPDUYjDyT5vUUupQ.crl (hash: nVBgLRNt501ODqRDTVFKsy28IJVP6ZiHYYihuHP+W7k=) 2: 08EAF5106C2111F0B46AAC57C4F9AE02.roa (hash: WDMb5z1Oep3KObXAq9yk+eELcjcBrGqtQZEb/aGlqi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9C62, serialNumber=21C8F2B6E01D0A82D13C35188C3C93E6F514BA94 Validity Not Before: Nov 3 07:35:47 2025 GMT Not After : Nov 10 07:35:47 2025 GMT Subject: CN=69085b53-f773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a0:09:1c:86:f8:af:f0:a0:16:3a:4c:85:c8: c0:78:9c:94:c3:03:72:6e:b7:d5:f8:d0:cc:97:b9: 4b:c2:9b:91:2a:1e:1e:7b:4c:bc:b9:24:14:a8:92: 4d:5d:d4:f0:46:99:6d:b1:54:9e:3d:17:81:40:f7: a6:39:d3:b4:19:75:92:34:d3:8f:31:e1:96:08:12: 0e:2a:18:05:a2:a0:fc:3a:4a:98:60:d9:61:c7:d3: 1a:fb:8e:9a:81:17:28:95:4f:9d:37:81:54:b7:b3: 6a:e1:37:b9:a5:a8:2d:05:07:f1:cc:d3:a0:eb:e2: ac:fb:84:e7:27:8c:57:ae:87:47:22:57:f3:61:73: 20:c0:2b:41:fa:61:08:ab:48:f1:42:61:41:3c:df: 09:02:91:06:a6:23:84:5c:18:c7:09:cc:ad:a9:bb: 03:1e:a3:b3:3c:2c:0b:15:78:26:48:b1:8d:5b:18: fe:fd:c3:2b:9c:bf:c8:b5:68:49:86:3e:66:ed:98: fa:4c:fd:c6:b3:55:c1:05:b1:d6:28:e6:34:dc:34: 09:cd:15:95:98:a7:f0:d9:96:94:ea:9c:df:f3:41: c9:2f:43:6e:7e:d7:cd:d3:3e:e1:07:e0:5b:1d:14: 2f:c9:dc:9f:6f:5f:2d:a9:01:18:61:93:15:8b:2a: d4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:02:D4:13:11:FD:3E:87:57:14:BD:8C:49:AA:82:02:44:1A:8A:14 X509v3 Authority Key Identifier: keyid:21:C8:F2:B6:E0:1D:0A:82:D1:3C:35:18:8C:3C:93:E6:F5:14:BA:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IcjytuAdCoLRPDUYjDyT5vUUupQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9C62/0AEAACD66B6611F0B7F8EB40C4F9AE02/IcjytuAdCoLRPDUYjDyT5vUUupQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:d9:5f:1b:ee:cc:36:db:3e:70:44:62:6f:01:0d:7b:15:ff: e4:21:4a:59:53:8c:ad:8e:46:0d:71:a6:fe:81:77:d9:d3:7a: ec:60:27:0e:58:57:47:b5:ff:7f:5e:27:5e:49:1e:ad:70:31: df:6e:0e:da:34:b2:23:27:cd:b1:aa:4b:4b:92:77:b6:9b:a6: f4:41:41:ad:b3:f2:b8:d2:35:ac:69:3b:84:4e:09:29:42:01: 7a:c9:a4:dd:3d:ad:a6:87:5b:c0:8b:6e:d6:af:da:13:38:f4: c2:fb:ec:db:44:b0:e8:bd:08:c9:bf:0c:28:60:66:ca:6b:96: af:f9:85:ff:da:1f:16:10:97:fa:52:b2:9a:9b:c5:df:a0:0b: 80:72:21:d9:fb:12:fe:8d:a4:10:cd:68:81:74:9b:b2:da:5d: 94:da:66:19:28:07:05:d7:e3:81:af:c4:46:87:d6:55:1e:ac: 8f:fa:0a:e0:0c:cf:c6:4d:fb:c3:52:fa:6d:c5:69:f2:e4:20: b7:2e:01:c6:2d:9f:80:72:93:65:ba:0c:cb:ec:5b:d6:08:90: 7b:68:82:fb:12:c1:7f:bc:d1:7f:44:84:bc:22:c0:a5:17:3f: f6:8e:2c:f3:c2:cc:a7:27:85:eb:4f:ae:c1:9a:9a:ea:2a:8d: 23:79:49:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUM2MjExMC8GA1UEBRMoMjFDOEYyQjZFMDFEMEE4MkQxM0MzNTE4OEMzQzkzRTZG NTE0QkE5NDAeFw0yNTExMDMwNzM1NDdaFw0yNTExMTAwNzM1NDdaMBgxFjAUBgNV BAMTDTY5MDg1YjUzLWY3NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDioAkchviv8KAWOkyFyMB4nJTDA3Jut9X40MyXuUvCm5EqHh57TLy5JBSokk1d 1PBGmW2xVJ49F4FA96Y507QZdZI0048x4ZYIEg4qGAWioPw6Sphg2WHH0xr7jpqB FyiVT503gVS3s2rhN7mlqC0FB/HM06Dr4qz7hOcnjFeuh0ciV/NhcyDAK0H6YQir SPFCYUE83wkCkQamI4RcGMcJzK2puwMeo7M8LAsVeCZIsY1bGP79wyucv8i1aEmG PmbtmPpM/cazVcEFsdYo5jTcNAnNFZWYp/DZlpTqnN/zQckvQ25+183TPuEH4Fsd FC/J3J9vXy2pARhhkxWLKtQxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1QLUExH9 PodXFL2MSaqCAkQaihQwHwYDVR0jBBgwFoAUIcjytuAdCoLRPDUYjDyT5vUUupQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5QzYyLzBBRUFBQ0Q2NkI2 NjExRjBCN0Y4RUI0MEM0RjlBRTAyL0ljanl0dUFkQ29MUlBEVVlqRHlUNXZVVXVw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSWNqeXR1QWRDb0xSUERVWWpEeVQ1dlVVdXBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 QzYyLzBBRUFBQ0Q2NkI2NjExRjBCN0Y4RUI0MEM0RjlBRTAyL0ljanl0dUFkQ29M UlBEVVlqRHlUNXZVVXVwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACHZXxvuzDbbPnBEYm8BDXsV/+QhSllTjK2ORg1xpv6Bd9nTeuxgJw5Y V0e1/39eJ15JHq1wMd9uDto0siMnzbGqS0uSd7abpvRBQa2z8rjSNaxpO4ROCSlC AXrJpN09raaHW8CLbtav2hM49ML77NtEsOi9CMm/DChgZsprlq/5hf/aHxYQl/pS spqbxd+gC4ByIdn7Ev6NpBDNaIF0m7LaXZTaZhkoBwXX44GvxEaH1lUerI/6CuAM z8ZN+8NS+m3FafLkILcuAcYtn4Byk2W6DMvsW9YIkHtogvsSwX+80X9EhLwiwKUX P/aOLPPCzKcnhetPrsGamuoqjSN5SWg= -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:09 2025 by rpki-client