$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft File: iZOTjIV1ACgOj15T3As-kweu1Kc.mft (raw, json) Hash identifier: wyfa7izxFAVCUlxFZqlz5gb5hqJNhVzGQYGSIfobNV4= Subject key identifier: 6C:27:52:9B:1C:A9:56:16:B8:B7:67:F7:24:F1:CC:30:4D:81:2E:2A Authority key identifier: 89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 Certificate issuer: /CN=A91BD3E1/serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft Manifest number: 87 Signing time: Wed 05 Nov 2025 06:50:53 +0000 Manifest this update: Wed 05 Nov 2025 06:50:52 +0000 Manifest next update: Wed 12 Nov 2025 06:50:52 +0000 Files and hashes: 1: iZOTjIV1ACgOj15T3As-kweu1Kc.crl (hash: 3dQDSX73D4h3q1bWlsPUB18CoQsbBSm+F2DBu3Z+/Pw=) 2: 459FAF10EF4811EF8F4B9284C4F9AE02.roa (hash: t4VsjBzDPnCNqQJ4/+l/e7o+o8AvICh72VVWJ8BMmY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3E1, serialNumber=8993938C857500280E8F5E53DC0B3E9307AED4A7 Validity Not Before: Nov 5 06:50:52 2025 GMT Not After : Nov 12 06:50:52 2025 GMT Subject: CN=690af3cc-2363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:04:14:4e:54:ae:26:3a:19:16:65:d1:77: 80:7b:96:21:1e:3f:50:1b:cb:98:20:1c:ff:19:f0: 24:08:83:1d:21:ed:f0:77:c9:3b:b1:cb:96:ce:ef: 55:ef:f6:33:d6:37:34:62:f8:e6:26:3b:d1:46:d8: 61:a3:c6:d1:94:1b:0b:84:ea:a4:0c:9d:30:f8:01: 68:40:8f:52:28:f6:68:d0:67:37:97:e1:c6:6a:3a: 7a:76:dc:47:fd:32:c6:0c:73:8f:bb:8e:3d:51:90: 7e:28:fe:7a:a2:ad:dc:18:11:62:8c:48:60:e4:fe: 1a:f6:0b:cc:54:86:a1:7b:91:91:47:8a:5e:d8:eb: 11:be:c5:b6:9c:61:5c:c6:d3:a1:13:96:8f:05:b0: 60:db:49:0d:17:8a:df:07:37:14:46:71:88:17:dc: 04:ab:c5:f8:9e:d8:e2:45:aa:eb:b5:37:0b:ed:2c: 24:ea:9e:d2:c9:4f:fb:6e:0d:b1:43:3d:98:17:62: b8:68:16:4b:9b:8f:64:a0:3b:f3:c2:0e:75:83:75: d4:87:00:ba:ba:02:ab:ea:bb:d8:88:c1:c9:59:89: 5f:52:e3:90:ff:e2:4f:1f:d3:3b:5e:91:cb:38:66: 37:09:cc:21:96:97:24:46:6c:cc:63:b1:64:6f:49: ff:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:27:52:9B:1C:A9:56:16:B8:B7:67:F7:24:F1:CC:30:4D:81:2E:2A X509v3 Authority Key Identifier: keyid:89:93:93:8C:85:75:00:28:0E:8F:5E:53:DC:0B:3E:93:07:AE:D4:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iZOTjIV1ACgOj15T3As-kweu1Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3E1/7CF07BC6EF4711EFAF4C4968C4F9AE02/iZOTjIV1ACgOj15T3As-kweu1Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:76:4b:f3:98:c0:d6:2b:33:dc:1d:a3:44:bc:6d:28:e9:16: 95:0b:74:80:5d:4d:54:91:11:d1:b3:4b:63:82:73:92:d1:89: 98:7f:5b:65:9c:4e:70:e4:fa:4b:fe:61:a5:6a:0c:81:c3:c3: 8a:bc:e2:ef:d0:75:8c:96:31:61:8f:ac:00:31:30:7b:78:f3: 9c:c4:fd:03:e8:07:d0:db:c4:f0:54:97:0a:39:8f:1e:2b:90: 30:29:47:27:85:3d:ad:c1:3f:0d:6d:44:f1:67:71:52:99:84: f9:43:c9:b7:0f:1d:fc:a2:ab:b0:15:bc:ed:23:ab:3f:78:cd: 11:7b:08:c5:22:73:71:2a:7b:25:05:54:5f:8a:18:b6:71:c8: 44:e5:ac:b2:91:05:1d:95:d1:57:41:92:c0:46:e1:2e:91:1c: dd:b3:f3:25:a3:83:43:6d:42:03:f3:1b:01:1b:63:b7:58:e9: ba:93:f3:44:29:52:36:c8:04:63:9c:ba:86:10:f1:60:07:13: 7f:e0:fa:01:ac:95:58:78:d3:cb:bb:be:bd:c7:17:84:cb:cb: 87:d1:c9:16:a3:d6:04:48:87:8d:09:a4:53:7f:b2:c6:04:b4: d0:4a:13:2f:39:bb:fc:81:ef:92:e9:ce:d5:1e:88:45:f0:36: 80:5d:28:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQzRTExMTAvBgNVBAUTKDg5OTM5MzhDODU3NTAwMjgwRThGNUU1M0RDMEIzRTkz MDdBRUQ0QTcwHhcNMjUxMTA1MDY1MDUyWhcNMjUxMTEyMDY1MDUyWjAYMRYwFAYD VQQDEw02OTBhZjNjYy0yMzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyoEFE5UriY6GRZl0XeAe5YhHj9QG8uYIBz/GfAkCIMdIe3wd8k7scuWzu9V 7/Yz1jc0YvjmJjvRRthho8bRlBsLhOqkDJ0w+AFoQI9SKPZo0Gc3l+HGajp6dtxH /TLGDHOPu449UZB+KP56oq3cGBFijEhg5P4a9gvMVIahe5GRR4pe2OsRvsW2nGFc xtOhE5aPBbBg20kNF4rfBzcURnGIF9wEq8X4ntjiRarrtTcL7Swk6p7SyU/7bg2x Qz2YF2K4aBZLm49koDvzwg51g3XUhwC6ugKr6rvYiMHJWYlfUuOQ/+JPH9M7XpHL OGY3CcwhlpckRmzMY7Fkb0n/MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwnUpsc qVYWuLdn9yTxzDBNgS4qMB8GA1UdIwQYMBaAFImTk4yFdQAoDo9eU9wLPpMHrtSn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDNFMS83Q0YwN0JDNkVG NDcxMUVGQUY0QzQ5NjhDNEY5QUUwMi9pWk9UaklWMUFDZ09qMTVUM0FzLWt3ZXUx S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2laT1RqSVYxQUNnT2oxNVQzQXMta3dldTFLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDNFMS83Q0YwN0JDNkVGNDcxMUVGQUY0QzQ5NjhDNEY5QUUwMi9pWk9UaklWMUFD Z09qMTVUM0FzLWt3ZXUxS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMdkvzmMDWKzPcHaNEvG0o6RaVC3SAXU1UkRHRs0tjgnOS0YmYf1tl nE5w5PpL/mGlagyBw8OKvOLv0HWMljFhj6wAMTB7ePOcxP0D6AfQ28TwVJcKOY8e K5AwKUcnhT2twT8NbUTxZ3FSmYT5Q8m3Dx38oquwFbztI6s/eM0RewjFInNxKnsl BVRfihi2cchE5ayykQUdldFXQZLARuEukRzds/Mlo4NDbUID8xsBG2O3WOm6k/NE KVI2yARjnLqGEPFgBxN/4PoBrJVYeNPLu769xxeEy8uH0ckWo9YESIeNCaRTf7LG BLTQShMvObv8ge+S6c7VHohF8DaAXSgE -----END CERTIFICATE-----Generated at Wed Nov 5 19:46:57 2025 by rpki-client