$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft File: MIoPBCNx10Tky2KrUekE9wys03o.mft (raw, json) Hash identifier: ATa1YHbv07G9Wb7/B5Z3X+i5UtB/L2uZZC1yKUM5WnE= Subject key identifier: C6:A1:97:7D:48:03:1C:29:2D:37:A6:34:F6:5A:34:DB:88:84:98:DB Authority key identifier: 30:8A:0F:04:23:71:D7:44:E4:CB:62:AB:51:E9:04:F7:0C:AC:D3:7A Certificate issuer: /CN=A91B2252/serialNumber=308A0F042371D744E4CB62AB51E904F70CACD37A Certificate serial: 0826 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft Manifest number: 081B Signing time: Tue 04 Nov 2025 20:58:20 +0000 Manifest this update: Tue 04 Nov 2025 20:58:19 +0000 Manifest next update: Tue 11 Nov 2025 20:58:19 +0000 Files and hashes: 1: MIoPBCNx10Tky2KrUekE9wys03o.crl (hash: GzCJEoqquW23SFBKlA/jELt6zTE02DfgrpXV3f4ivpQ=) 2: 727EECD2678811EF99602F53C4F9AE02.roa (hash: IPe594JnZ2N3gd3dB/i0h0vHj/VgJ8oN3r//4wdEFp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.crl rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:58:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2086 (0x826) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2252, serialNumber=308A0F042371D744E4CB62AB51E904F70CACD37A Validity Not Before: Nov 4 20:58:19 2025 GMT Not After : Nov 11 20:58:19 2025 GMT Subject: CN=690a68ec-e25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6e:22:c3:4a:41:f1:30:68:c1:45:4d:da:e3: 97:5d:08:95:68:46:a3:31:29:b5:fa:2f:9c:f4:76: 01:53:24:0b:42:99:58:0a:33:91:28:52:0c:f2:61: 62:6d:fd:70:66:e7:3a:77:ca:49:ed:00:0f:87:81: 2e:33:d9:12:53:c1:8a:fa:18:94:12:9d:75:c6:1e: 13:73:3c:a2:21:23:9e:a7:28:3d:dd:4b:26:1e:47: 32:0b:ee:80:ab:f3:84:4c:5f:fc:3e:2c:c6:e2:a3: 94:3d:c9:7c:91:f8:a8:13:7e:71:16:54:3a:6e:71: 3f:75:4d:5f:b3:2d:c5:fa:1c:73:a2:07:5b:4c:18: 66:29:d7:d8:e2:0d:53:c3:54:a4:2e:70:49:be:00: 91:3f:10:32:f4:73:8f:7a:11:5e:1d:10:0f:19:da: d6:8c:f5:0e:58:33:f6:57:b6:52:a6:34:16:8e:b4: e4:6a:40:2c:02:9a:7e:ed:c8:2d:02:91:f4:5b:92: 38:21:8b:0e:b8:0d:62:02:29:16:3e:7c:8f:b5:77: 2a:48:c7:e4:d0:ab:35:88:94:7d:6c:e0:3d:cb:b6: 55:6d:b0:01:86:0b:68:10:b5:fe:8f:ab:d5:e4:93: 3d:7e:b8:63:e2:fc:7e:0f:e4:3d:01:37:8f:4b:70: b2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A1:97:7D:48:03:1C:29:2D:37:A6:34:F6:5A:34:DB:88:84:98:DB X509v3 Authority Key Identifier: keyid:30:8A:0F:04:23:71:D7:44:E4:CB:62:AB:51:E9:04:F7:0C:AC:D3:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:0f:8f:8f:b3:ca:f5:96:df:d9:88:7c:34:d3:ab:06:15:18: 5a:21:50:3f:ea:f1:e1:09:f3:85:16:ce:64:99:6b:db:b3:df: 69:24:5d:84:26:83:7d:d6:57:c2:32:4e:70:2b:e2:75:89:21: 35:d6:e0:6a:00:cb:01:d1:e6:e2:43:74:19:27:3d:33:16:a3: 52:19:06:cb:1c:15:a9:36:a9:33:87:c8:e5:9b:cb:a2:69:19: 4d:2d:cf:49:f3:90:5e:f6:c2:d1:9f:01:c1:53:5c:5d:d8:50: a1:8a:c0:6f:ec:0c:96:6e:fe:8c:36:88:ad:d2:34:83:cd:26: ca:8a:af:ba:85:f0:a1:2f:88:92:78:f9:30:12:20:2b:51:14: 5e:b9:9b:ed:75:e9:75:6f:6b:d2:f7:5b:4c:06:d6:88:49:af: 23:cc:71:1a:39:13:c9:86:18:aa:55:87:69:9c:65:ed:9c:7e: bb:33:0b:26:0a:9e:97:cf:d4:4c:14:9d:c6:61:dd:7b:7d:bb: 60:72:e9:f2:03:ee:25:75:78:0b:96:59:5a:29:3c:91:b2:56: 7b:3b:a0:95:23:02:d4:87:98:9a:77:ad:89:5e:85:63:ef:47: 06:4f:a6:09:09:8e:29:f7:db:fc:b4:3f:3c:c1:32:7c:3d:cf: 00:83:aa:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIyNTIxMTAvBgNVBAUTKDMwOEEwRjA0MjM3MUQ3NDRFNENCNjJBQjUxRTkwNEY3 MENBQ0QzN0EwHhcNMjUxMTA0MjA1ODE5WhcNMjUxMTExMjA1ODE5WjAYMRYwFAYD VQQDEw02OTBhNjhlYy1lMjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqm4iw0pB8TBowUVN2uOXXQiVaEajMSm1+i+c9HYBUyQLQplYCjORKFIM8mFi bf1wZuc6d8pJ7QAPh4EuM9kSU8GK+hiUEp11xh4TczyiISOepyg93UsmHkcyC+6A q/OETF/8PizG4qOUPcl8kfioE35xFlQ6bnE/dU1fsy3F+hxzogdbTBhmKdfY4g1T w1SkLnBJvgCRPxAy9HOPehFeHRAPGdrWjPUOWDP2V7ZSpjQWjrTkakAsApp+7cgt ApH0W5I4IYsOuA1iAikWPnyPtXcqSMfk0Ks1iJR9bOA9y7ZVbbABhgtoELX+j6vV 5JM9frhj4vx+D+Q9ATePS3CyZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMahl31I AxwpLTemNPZaNNuIhJjbMB8GA1UdIwQYMBaAFDCKDwQjcddE5Mtiq1HpBPcMrNN6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjI1Mi9DNThGOEI3QUY2 M0ExMUVBQjcwQTM2MUZDNEY5QUUwMi9NSW9QQkNOeDEwVGt5MktyVWVrRTl3eXMw M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Jb1BCQ054MTBUa3kyS3JVZWtFOXd5czAzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjI1Mi9DNThGOEI3QUY2M0ExMUVBQjcwQTM2MUZDNEY5QUUwMi9NSW9QQkNOeDEw VGt5MktyVWVrRTl3eXMwM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnD4+Ps8r1lt/ZiHw006sGFRhaIVA/6vHhCfOFFs5kmWvbs99pJF2E JoN91lfCMk5wK+J1iSE11uBqAMsB0ebiQ3QZJz0zFqNSGQbLHBWpNqkzh8jlm8ui aRlNLc9J85Be9sLRnwHBU1xd2FChisBv7AyWbv6MNoit0jSDzSbKiq+6hfChL4iS ePkwEiArURReuZvtdel1b2vS91tMBtaISa8jzHEaORPJhhiqVYdpnGXtnH67Mwsm Cp6Xz9RMFJ3GYd17fbtgcunyA+4ldXgLlllaKTyRslZ7O6CVIwLUh5iad62JXoVj 70cGT6YJCY4p99v8tD88wTJ8Pc8Ag6pW -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:12 2025 by rpki-client