$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft File: ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft (raw, json) Hash identifier: e/D8YD8vw56GcIOzeLE+1Dksq6k8o8joFS2f5ohfoiw= Subject key identifier: 2D:11:A2:AF:A5:D1:7A:A1:AD:D6:6A:67:AC:E6:CC:32:94:33:DA:59 Authority key identifier: 8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 Certificate issuer: /CN=A91AC4FA/serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Certificate serial: 0237 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft Manifest number: 022B Signing time: Mon 03 Nov 2025 02:00:10 +0000 Manifest this update: Mon 03 Nov 2025 02:00:09 +0000 Manifest next update: Mon 10 Nov 2025 02:00:09 +0000 Files and hashes: 1: ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl (hash: PuIDUNqH+XAR7+yc58lON+dIwNSliMzaVjgG18qAuG0=) 2: 0B1C46B26C8E11EDA1402673C4F9AE02.roa (hash: eBrKZQqIUQgxJsjLbBp6BZmWWZAOHf0P0YyuhSY1Lts=) 3: 2A40C41C6EC511ED9672CB40C4F9AE02.roa (hash: 2ABgaw5i7gtrVWQKQRB2kERFT6VG3t9JHA5FdKRAAjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4FA, serialNumber=8AF7D8B864FD90452FFD6DE93B51456C79EFB3C7 Validity Not Before: Nov 3 02:00:09 2025 GMT Not After : Nov 10 02:00:09 2025 GMT Subject: CN=69080ca9-daf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1a:45:a5:8e:1b:72:cb:d4:20:c2:00:b9:87: be:cc:e9:1a:1d:c6:97:5b:fa:f9:9e:9a:ee:60:00: 1a:c1:55:df:7e:81:0b:0a:da:c8:a4:15:74:77:90: 81:55:33:50:c9:82:56:f8:ef:c0:c0:86:31:89:4e: e6:f8:95:1c:3b:d4:1e:5d:72:44:d6:e2:1f:7c:be: a5:a3:2f:c4:31:99:10:3d:02:59:81:6c:ad:09:49: df:3f:29:31:00:d1:a2:45:ae:2f:9d:09:74:af:25: 93:cf:4a:8d:e3:db:5c:d7:4e:3f:36:b1:f9:10:72: be:50:51:f4:35:dd:ff:c2:11:ec:d4:99:b6:b3:6d: 19:c0:b5:a2:1b:be:45:57:fd:a8:b7:ac:c6:28:4b: 3a:58:a2:aa:67:0b:b5:3b:10:e7:9a:9a:d8:86:00: f7:41:af:5c:b5:50:34:ec:b9:69:6a:d1:7f:cb:c0: e2:a3:fa:44:8e:63:29:a5:e4:dc:9f:7d:e3:5d:eb: 0f:95:ad:dd:95:35:21:97:ec:ad:82:b6:ff:4a:84: 6a:37:4b:06:ea:69:20:0e:d0:04:b9:9b:e8:64:2c: 82:48:80:1f:d2:02:45:e5:5d:12:ec:76:ef:7a:53: 92:60:45:4f:f0:60:41:11:b6:9d:bd:f4:0d:45:f1: 0d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:11:A2:AF:A5:D1:7A:A1:AD:D6:6A:67:AC:E6:CC:32:94:33:DA:59 X509v3 Authority Key Identifier: keyid:8A:F7:D8:B8:64:FD:90:45:2F:FD:6D:E9:3B:51:45:6C:79:EF:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ivfYuGT9kEUv_W3pO1FFbHnvs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4FA/37CB87986C8B11ED87AFF571C4F9AE02/ivfYuGT9kEUv_W3pO1FFbHnvs8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f3:b8:bd:8d:9b:21:61:fc:8d:f0:0a:a4:52:91:30:42:a5:1c: ab:c2:6a:73:18:9e:4b:ef:eb:2a:a2:da:3f:92:47:6b:d0:08: ef:66:14:8a:05:b1:2b:9b:32:93:fb:d9:3b:a0:36:a7:af:66: 33:c4:07:8e:ea:f4:a9:f0:e1:83:d1:a0:67:ad:4a:ff:73:bc: 6d:63:7f:7c:f1:85:50:d4:74:3e:ef:f1:f2:7a:8e:92:b6:d5: fa:78:9f:92:25:2b:31:31:ce:f6:18:ca:b4:81:fb:db:e0:4f: a9:c0:6b:c0:1f:8b:6b:d9:c7:c3:a3:34:85:c4:25:ec:95:07: a3:12:5d:9d:ff:4c:df:08:a0:04:47:8d:e8:df:51:c5:48:56: 23:da:49:a5:4b:55:85:dc:d9:44:24:bb:71:a3:52:74:92:b1: ca:7f:8a:60:af:ff:cb:c8:c3:ec:e3:d8:0b:75:00:c0:04:89: 60:6d:95:d8:0e:1c:b7:b2:c0:69:c2:80:db:65:9f:4d:a8:46: 46:78:b8:a2:f6:1a:4a:d3:42:c8:0b:72:eb:d1:3a:e4:db:a0: 15:d7:1f:a3:34:41:46:9c:1e:3f:6d:04:32:7f:6e:4f:9a:09: ce:4c:a2:01:cc:5d:a2:a4:ec:e7:38:2d:18:ee:7e:1f:00:87: 74:b1:e2:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0RkExMTAvBgNVBAUTKDhBRjdEOEI4NjRGRDkwNDUyRkZENkRFOTNCNTE0NTZD NzlFRkIzQzcwHhcNMjUxMTAzMDIwMDA5WhcNMjUxMTEwMDIwMDA5WjAYMRYwFAYD VQQDEw02OTA4MGNhOS1kYWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmhpFpY4bcsvUIMIAuYe+zOkaHcaXW/r5npruYAAawVXffoELCtrIpBV0d5CB VTNQyYJW+O/AwIYxiU7m+JUcO9QeXXJE1uIffL6loy/EMZkQPQJZgWytCUnfPykx ANGiRa4vnQl0ryWTz0qN49tc104/NrH5EHK+UFH0Nd3/whHs1Jm2s20ZwLWiG75F V/2ot6zGKEs6WKKqZwu1OxDnmprYhgD3Qa9ctVA07LlpatF/y8Dio/pEjmMppeTc n33jXesPla3dlTUhl+ytgrb/SoRqN0sG6mkgDtAEuZvoZCyCSIAf0gJF5V0S7Hbv elOSYEVP8GBBEbadvfQNRfEN7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0Roq+l 0XqhrdZqZ6zmzDKUM9pZMB8GA1UdIwQYMBaAFIr32Lhk/ZBFL/1t6TtRRWx577PH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGQS8zN0NCODc5ODZD OEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtFVXZfVzNwTzFGRmJIbnZz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l2Zll1R1Q5a0VVdl9XM3BPMUZGYkhudnM4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzRGQS8zN0NCODc5ODZDOEIxMUVEODdBRkY1NzFDNEY5QUUwMi9pdmZZdUdUOWtF VXZfVzNwTzFGRmJIbnZzOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDzuL2NmyFh/I3wCqRSkTBCpRyrwmpzGJ5L7+sqoto/kkdr0AjvZhSK BbErmzKT+9k7oDanr2YzxAeO6vSp8OGD0aBnrUr/c7xtY3988YVQ1HQ+7/Hyeo6S ttX6eJ+SJSsxMc72GMq0gfvb4E+pwGvAH4tr2cfDozSFxCXslQejEl2d/0zfCKAE R43o31HFSFYj2kmlS1WF3NlEJLtxo1J0krHKf4pgr//LyMPs49gLdQDABIlgbZXY Dhy3ssBpwoDbZZ9NqEZGeLii9hpK00LIC3Lr0Trk26AV1x+jNEFGnB4/bQQyf25P mgnOTKIBzF2ipOznOC0Y7n4fAId0seIL -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:25 2025 by rpki-client