$ rpki-client -vvf rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft File: i1fdFr2X-1v8IdnMqeK4bVUC4og.mft (raw, json) Hash identifier: RVZO5Tdd645RgUEeDV65yMv2W0s+WvtvLuNH+LFhIbE= Subject key identifier: 10:CF:68:D0:4B:6D:91:99:E4:3B:2C:93:36:20:F9:9E:5C:75:72:E6 Authority key identifier: 8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88 Certificate issuer: /CN=A91B929F/serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288 Certificate serial: 05E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft Manifest number: 05DB Signing time: Sun 02 Nov 2025 22:58:55 +0000 Manifest this update: Sun 02 Nov 2025 22:58:55 +0000 Manifest next update: Sun 09 Nov 2025 22:58:55 +0000 Files and hashes: 1: i1fdFr2X-1v8IdnMqeK4bVUC4og.crl (hash: Z5jRRw4Ij59Dr13NkrVaztvUKxmJse+wUZ1Ndb1h4HQ=) 2: 2EA68D96D65211EB8DAD1886C4F9AE02.roa (hash: 6nBsIW1FtTa2lY5be/el75WgarvUxw35P+urmn+K7Hk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1504 (0x5e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B929F, serialNumber=8B57DD16BD97FB5BFC21D9CCA9E2B86D5502E288 Validity Not Before: Nov 2 22:58:55 2025 GMT Not After : Nov 9 22:58:55 2025 GMT Subject: CN=6907e22f-19d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:05:3e:a3:bd:7d:02:68:17:16:b2:cc:1e:26: f9:99:5d:6a:4e:3b:3c:1c:06:e6:5e:59:7d:1c:fe: 65:df:96:9c:94:d5:c5:9b:ba:1f:6e:fd:f2:28:1c: 0d:91:06:95:35:4c:62:d6:6e:7b:bc:e1:a7:25:c4: 4e:59:c3:2f:c2:e9:65:49:3f:1b:48:95:95:f8:f3: 11:ca:48:57:b4:9c:4e:52:be:e1:cd:24:96:54:1a: 90:fc:3e:ce:84:eb:f3:35:52:75:78:99:49:95:c1: df:4a:c8:ce:ed:54:9e:62:d9:f6:e2:ed:fd:43:10: 4c:bb:f3:e7:72:95:69:4d:f3:c8:cf:6b:86:d1:cc: 79:e2:0b:a5:79:2a:4d:72:6c:f9:e2:b8:4a:9c:0e: ca:40:e1:52:e3:27:80:2f:2f:4a:30:b5:e2:d2:c6: 7b:cd:58:59:8b:43:0a:56:58:a0:3a:5c:58:79:75: a1:ed:e5:ed:d0:b0:83:0c:1e:74:2f:53:d2:5f:ab: e5:27:f8:21:40:36:30:72:21:c2:07:8a:61:3d:d3: 11:12:c0:6e:27:aa:bd:29:be:ec:97:5e:fa:12:16: 29:94:0d:0d:e1:78:81:97:69:91:89:eb:5e:17:a0: 17:3d:37:1c:e4:37:16:d5:42:d3:f6:7c:6e:4f:94: c2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CF:68:D0:4B:6D:91:99:E4:3B:2C:93:36:20:F9:9E:5C:75:72:E6 X509v3 Authority Key Identifier: keyid:8B:57:DD:16:BD:97:FB:5B:FC:21:D9:CC:A9:E2:B8:6D:55:02:E2:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i1fdFr2X-1v8IdnMqeK4bVUC4og.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B929F/3BE549CED64E11EB94D4F27DC4F9AE02/i1fdFr2X-1v8IdnMqeK4bVUC4og.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:30:48:c0:2d:5e:66:89:de:b5:5b:5f:06:f7:f6:31:d8:12: 30:a3:5c:9c:c9:eb:6d:a9:c3:56:75:90:34:9a:2e:ab:ab:35: 14:b9:5f:bd:5c:62:6a:2e:7f:73:88:83:17:ad:a0:fd:4a:8f: dd:d6:20:e7:5b:39:94:e5:c6:5c:7a:89:b5:d5:24:35:da:4e: fc:f3:27:ea:ac:d5:67:30:f6:5f:7e:71:35:20:e0:fb:71:38: 75:88:49:87:65:44:fd:a1:35:dc:11:6c:dd:12:b1:88:c1:e6: 33:e8:15:e5:be:a7:e1:da:e8:42:46:af:a7:3e:aa:35:38:72: 33:4f:19:e1:43:85:b0:04:64:9c:6c:13:15:79:cb:5e:fa:39: bc:cd:56:b0:c3:9a:6c:68:95:4f:88:e4:5b:6d:28:a5:6a:c5: a8:77:f5:7f:b8:02:be:64:0a:b2:a8:5c:df:a7:71:e3:c4:94: 72:fc:e7:8e:2b:8a:20:1a:35:02:93:ac:8b:2c:50:69:c2:e5: 01:13:ca:2e:59:60:7a:30:dc:e4:e9:ae:39:f9:5e:e3:0c:b5: 30:39:b4:c1:bb:6d:3b:4a:4a:a4:28:d2:bb:24:1c:ee:75:a4: a4:1e:0b:8e:e8:56:83:e7:a2:fa:65:ad:72:67:33:b3:5c:12: 89:d3:37:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkyOUYxMTAvBgNVBAUTKDhCNTdERDE2QkQ5N0ZCNUJGQzIxRDlDQ0E5RTJCODZE NTUwMkUyODgwHhcNMjUxMTAyMjI1ODU1WhcNMjUxMTA5MjI1ODU1WjAYMRYwFAYD VQQDEw02OTA3ZTIyZi0xOWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQU+o719AmgXFrLMHib5mV1qTjs8HAbmXll9HP5l35aclNXFm7ofbv3yKBwN kQaVNUxi1m57vOGnJcROWcMvwullST8bSJWV+PMRykhXtJxOUr7hzSSWVBqQ/D7O hOvzNVJ1eJlJlcHfSsjO7VSeYtn24u39QxBMu/PncpVpTfPIz2uG0cx54guleSpN cmz54rhKnA7KQOFS4yeALy9KMLXi0sZ7zVhZi0MKVligOlxYeXWh7eXt0LCDDB50 L1PSX6vlJ/ghQDYwciHCB4phPdMREsBuJ6q9Kb7sl176EhYplA0N4XiBl2mRiete F6AXPTcc5DcW1ULT9nxuT5TChQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDPaNBL bZGZ5DsskzYg+Z5cdXLmMB8GA1UdIwQYMBaAFItX3Ra9l/tb/CHZzKniuG1VAuKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI5Ri8zQkU1NDlDRUQ2 NEUxMUVCOTRENEYyN0RDNEY5QUUwMi9pMWZkRnIyWC0xdjhJZG5NcWVLNGJWVUM0 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kxZmRGcjJYLTF2OElkbk1xZUs0YlZVQzRvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTI5Ri8zQkU1NDlDRUQ2NEUxMUVCOTRENEYyN0RDNEY5QUUwMi9pMWZkRnIyWC0x djhJZG5NcWVLNGJWVUM0b2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzMEjALV5mid61W18G9/Yx2BIwo1ycyettqcNWdZA0mi6rqzUUuV+9 XGJqLn9ziIMXraD9So/d1iDnWzmU5cZceom11SQ12k788yfqrNVnMPZffnE1IOD7 cTh1iEmHZUT9oTXcEWzdErGIweYz6BXlvqfh2uhCRq+nPqo1OHIzTxnhQ4WwBGSc bBMVecte+jm8zVaww5psaJVPiORbbSilasWod/V/uAK+ZAqyqFzfp3HjxJRy/OeO K4ogGjUCk6yLLFBpwuUBE8ouWWB6MNzk6a45+V7jDLUwObTBu207SkqkKNK7JBzu daSkHguO6FaD56L6Za1yZzOzXBKJ0zdJ -----END CERTIFICATE-----Generated at Wed Nov 5 00:29:06 2025 by rpki-client