$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft File: IbLqdC_w7568zvOZh5Dj9bCNa2M.mft (raw, json) Hash identifier: 7jFdV9ulo1gFcSh8JRvlfhGNXElhpXF9p3WRaERJGOc= Subject key identifier: 43:F3:36:90:4D:71:F0:95:10:D0:58:38:75:D4:2D:A1:96:C7:29:C0 Authority key identifier: 21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 Certificate issuer: /CN=A91B6172/serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Certificate serial: 0233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft Manifest number: 0225 Signing time: Mon 03 Nov 2025 02:03:01 +0000 Manifest this update: Mon 03 Nov 2025 02:03:00 +0000 Manifest next update: Mon 10 Nov 2025 02:03:00 +0000 Files and hashes: 1: IbLqdC_w7568zvOZh5Dj9bCNa2M.crl (hash: Cs+r2e1/LQFESBht+ZkOArj8nCuyQFHsmv8ignUJWWU=) 2: ABDDEF28722F11EDA987AB75C4F9AE02.roa (hash: vCKD+CzoArcalyziR+d7Ov1DlN61zdE8Qt99sD5HF3I=) 3: AC80FFE2722F11EDA987AB75C4F9AE02.roa (hash: Ecx2uEYsiUTMI1pp2hzwrKj0DYLLvVQ4KuzNnfcJWcM=) 4: 08A71970723811EDB0BD0312C4F9AE02.roa (hash: Z3Pgsl7gnEpPUpQRogkAmZeZ95NlxutDljfa11ERFDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 563 (0x233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6172, serialNumber=21B2EA742FF0EF9EBCCEF3998790E3F5B08D6B63 Validity Not Before: Nov 3 02:03:00 2025 GMT Not After : Nov 10 02:03:00 2025 GMT Subject: CN=69080d54-163c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:58:51:5f:8c:19:04:12:cb:ca:74:3c:60:2c: 12:4f:3f:50:20:33:39:43:76:c6:f9:54:50:63:95: 25:1d:79:0a:e1:34:6a:64:c1:48:40:62:20:64:5f: 14:c8:eb:98:5e:a8:14:27:6a:45:0b:5f:da:cc:70: f6:af:7f:19:c3:0a:90:27:29:8a:2f:ae:3a:23:41: 98:db:c7:c7:e9:a6:6c:5f:e7:f3:06:de:37:3b:ee: 81:ae:c9:ca:f1:96:58:b7:6c:ca:1b:c2:7d:17:1a: 03:30:fb:b5:26:de:73:65:79:62:c2:01:de:10:64: 2e:c2:db:63:29:79:36:70:53:7f:f2:8f:f0:19:31: fc:a4:c7:ba:5f:71:88:84:e4:17:77:d0:c2:a5:eb: 30:82:c2:93:b3:fb:fd:90:ad:05:a2:cd:34:50:d8: f8:7a:14:11:9e:ef:cd:bb:09:02:25:52:a4:44:8a: 2d:6e:2e:03:9e:20:55:c4:c1:8a:ac:8d:66:62:34: e7:8e:df:55:85:0c:37:a5:74:56:83:15:ce:2d:c7: da:90:e5:4d:2c:aa:5b:90:da:20:c2:3a:2d:d3:d0: 21:54:ab:d0:f9:88:77:19:c2:58:ad:6e:ba:b5:58: 85:bb:8b:20:b2:36:89:f8:a7:29:43:e3:e8:ab:51: b1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F3:36:90:4D:71:F0:95:10:D0:58:38:75:D4:2D:A1:96:C7:29:C0 X509v3 Authority Key Identifier: keyid:21:B2:EA:74:2F:F0:EF:9E:BC:CE:F3:99:87:90:E3:F5:B0:8D:6B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IbLqdC_w7568zvOZh5Dj9bCNa2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6172/BA54C134722B11ED97D73C5AC4F9AE02/IbLqdC_w7568zvOZh5Dj9bCNa2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:22:4b:1f:fc:52:91:df:d0:fc:8e:9b:6f:a3:84:76:da:aa: de:4e:b3:0c:db:d8:65:f4:70:79:4f:68:a8:c4:37:23:87:2e: 59:fb:55:8f:43:0b:76:f5:f0:04:46:75:be:22:27:90:e3:ae: bb:ae:e2:bc:fe:f5:0f:73:87:91:a5:53:14:a8:b4:a4:d4:63: 73:ba:ca:7b:e7:43:26:b0:d4:f0:a2:72:67:dd:56:7d:80:df: f1:cb:60:01:2c:75:30:74:19:e9:c3:df:a8:d4:ce:25:5a:bc: ab:9e:4c:0c:24:48:cb:b0:e3:b5:bf:97:55:0c:30:bb:67:6e: 46:08:1f:9b:0d:f8:55:b0:8b:f7:3d:4c:a6:80:f1:b1:be:a4: a5:eb:56:13:73:cd:59:2a:99:74:c8:66:22:df:61:15:80:a6: 23:0e:ec:38:76:85:a4:4c:d7:82:00:1f:52:f3:65:83:e1:38: 39:ff:ea:5f:a2:c4:2f:85:00:bd:b7:65:97:3d:ac:b2:6b:92: cf:bd:eb:2a:d1:21:e2:70:46:c7:4e:78:33:02:02:2b:d9:cd: bf:c5:33:71:98:2d:33:8e:39:24:d3:af:e8:7e:6a:d1:56:c2: c1:37:83:40:7f:a1:b9:80:b5:57:00:5e:87:31:ab:7f:89:0a: 05:b0:a9:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYxNzIxMTAvBgNVBAUTKDIxQjJFQTc0MkZGMEVGOUVCQ0NFRjM5OTg3OTBFM0Y1 QjA4RDZCNjMwHhcNMjUxMTAzMDIwMzAwWhcNMjUxMTEwMDIwMzAwWjAYMRYwFAYD VQQDEw02OTA4MGQ1NC0xNjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FhRX4wZBBLLynQ8YCwSTz9QIDM5Q3bG+VRQY5UlHXkK4TRqZMFIQGIgZF8U yOuYXqgUJ2pFC1/azHD2r38ZwwqQJymKL646I0GY28fH6aZsX+fzBt43O+6BrsnK 8ZZYt2zKG8J9FxoDMPu1Jt5zZXliwgHeEGQuwttjKXk2cFN/8o/wGTH8pMe6X3GI hOQXd9DCpeswgsKTs/v9kK0Fos00UNj4ehQRnu/NuwkCJVKkRIotbi4DniBVxMGK rI1mYjTnjt9VhQw3pXRWgxXOLcfakOVNLKpbkNogwjot09AhVKvQ+Yh3GcJYrW66 tViFu4sgsjaJ+KcpQ+Poq1GxKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPzNpBN cfCVENBYOHXULaGWxynAMB8GA1UdIwQYMBaAFCGy6nQv8O+evM7zmYeQ4/WwjWtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjE3Mi9CQTU0QzEzNDcy MkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1Njh6dk9aaDVEajliQ05h Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liTHFkQ193NzU2OHp2T1poNURqOWJDTmEyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjE3Mi9CQTU0QzEzNDcyMkIxMUVEOTdENzNDNUFDNEY5QUUwMi9JYkxxZENfdzc1 Njh6dk9aaDVEajliQ05hMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHIksf/FKR39D8jptvo4R22qreTrMM29hl9HB5T2ioxDcjhy5Z+1WP Qwt29fAERnW+IieQ4667ruK8/vUPc4eRpVMUqLSk1GNzusp750MmsNTwonJn3VZ9 gN/xy2ABLHUwdBnpw9+o1M4lWryrnkwMJEjLsOO1v5dVDDC7Z25GCB+bDfhVsIv3 PUymgPGxvqSl61YTc81ZKpl0yGYi32EVgKYjDuw4doWkTNeCAB9S82WD4Tg5/+pf osQvhQC9t2WXPayya5LPvesq0SHicEbHTngzAgIr2c2/xTNxmC0zjjkk06/ofmrR VsLBN4NAf6G5gLVXAF6HMat/iQoFsKlq -----END CERTIFICATE-----Generated at Tue Nov 4 21:17:38 2025 by rpki-client