$ rpki-client -vvf rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft File: imIbx3o91BcMuRA_-HiLyQkAgtE.mft (raw, json) Hash identifier: A49hZIQgBY5ekqo1Vy+ccPIwiy794rxsR+CkvsCKxNc= Subject key identifier: 55:56:C0:72:3A:77:31:E7:76:40:30:02:D0:76:32:EE:8F:FC:B7:BC Authority key identifier: 8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1 Certificate issuer: /CN=A91C24C5/serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft Manifest number: 0170 Signing time: Mon 03 Nov 2025 03:50:20 +0000 Manifest this update: Mon 03 Nov 2025 03:50:20 +0000 Manifest next update: Mon 10 Nov 2025 03:50:20 +0000 Files and hashes: 1: imIbx3o91BcMuRA_-HiLyQkAgtE.crl (hash: GNZ4UG5kQ5CcGoV62KjoRnruJJ/GMT5jn8iJll5l2Os=) 2: 872F5E22835A11EE9FFEC146C4F9AE02.roa (hash: MIl/OMgyucN0EutmGHMH29cPoxdMejUcwQsKGNX20nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C24C5, serialNumber=8A621BC77A3DD4170CB9103FF8788BC9090082D1 Validity Not Before: Nov 3 03:50:20 2025 GMT Not After : Nov 10 03:50:20 2025 GMT Subject: CN=6908267c-f020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5c:02:ce:85:8c:6d:9b:7f:cc:b3:02:a2:20: 3b:61:d3:4f:31:d0:c0:95:e1:a9:8d:ce:d5:a0:fc: 21:32:68:44:28:f5:ae:bb:b1:56:5f:a0:cd:cb:59: fe:44:33:36:3f:98:16:75:79:d3:c0:31:db:80:d2: 76:6a:a6:c6:18:c0:70:45:51:a7:f7:73:5c:24:67: de:d8:2b:85:b3:d1:35:a3:18:0c:34:a5:7d:89:8b: a6:18:e9:4f:ce:6a:9b:96:26:68:2a:50:48:d8:04: 0f:b8:e9:62:e1:80:9a:af:5a:35:21:4d:22:ba:c9: 9c:56:16:94:48:f1:1a:99:1a:24:52:07:ea:e5:10: f1:d8:9f:94:ef:44:26:e1:3c:28:a3:2f:ec:cd:76: 6c:81:6e:6f:af:d9:8e:fb:18:26:34:32:dc:47:53: 1e:ea:45:ef:48:0c:27:bb:1d:81:8a:33:35:86:d0: 26:fe:b2:b3:90:19:fd:4f:27:c9:fa:50:c0:0b:cf: c6:25:90:55:9e:8f:b7:e4:14:9c:e1:8f:51:c8:7e: 0e:ef:5e:d3:f0:9c:ea:e5:7b:b7:1a:2c:18:9b:c2: d5:28:52:48:4f:14:3a:fe:e7:7e:e1:0d:7f:a6:b6: 49:41:6c:24:22:da:c7:ff:8b:05:ef:04:2f:96:c0: 29:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:56:C0:72:3A:77:31:E7:76:40:30:02:D0:76:32:EE:8F:FC:B7:BC X509v3 Authority Key Identifier: keyid:8A:62:1B:C7:7A:3D:D4:17:0C:B9:10:3F:F8:78:8B:C9:09:00:82:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imIbx3o91BcMuRA_-HiLyQkAgtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C24C5/D1E2D968835911EEB25CF144C4F9AE02/imIbx3o91BcMuRA_-HiLyQkAgtE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:91:de:20:90:ed:ac:bb:95:b6:a1:68:de:b1:6e:55:7b:7d: c3:17:7e:85:35:c7:05:f3:4c:22:73:1e:42:e4:17:a3:4a:a9: 39:40:33:22:5b:04:58:14:78:85:36:37:f6:f1:f9:cf:55:5a: 22:d5:eb:b3:24:c4:69:4c:da:80:5a:4e:6a:ed:3c:e5:0e:82: 9d:df:97:22:ce:da:8c:c4:8e:b4:64:fc:c6:85:58:30:d7:17: 6c:99:c4:64:de:f1:7b:5a:92:2c:5d:7a:07:5d:e1:58:63:30: 45:fb:91:eb:41:94:b8:ce:13:5e:a2:ba:a2:d1:f1:7f:88:78: 59:96:9c:b6:5c:c2:86:12:ea:c5:b8:31:78:61:05:8a:e1:9a: 53:9b:d7:36:ec:ba:17:20:c2:80:05:8a:2d:9f:a0:e1:df:b2: 95:b3:70:2c:86:b0:76:a9:ee:ac:9d:a8:c6:c8:bf:c3:3f:2d: 8c:e2:86:e6:ad:cc:1b:be:21:76:41:38:62:13:fd:02:f3:70: 69:63:ac:df:a4:eb:14:36:b8:39:95:96:6a:95:a5:be:2d:81: 74:ba:bc:d3:db:bd:3b:e6:85:1c:5e:9a:70:6a:23:c0:a5:e9: 86:69:66:0b:1a:f1:1f:04:f3:e4:13:75:12:53:42:2e:11:d0: 31:10:91:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI0QzUxMTAvBgNVBAUTKDhBNjIxQkM3N0EzREQ0MTcwQ0I5MTAzRkY4Nzg4QkM5 MDkwMDgyRDEwHhcNMjUxMTAzMDM1MDIwWhcNMjUxMTEwMDM1MDIwWjAYMRYwFAYD VQQDEw02OTA4MjY3Yy1mMDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1wCzoWMbZt/zLMCoiA7YdNPMdDAleGpjc7VoPwhMmhEKPWuu7FWX6DNy1n+ RDM2P5gWdXnTwDHbgNJ2aqbGGMBwRVGn93NcJGfe2CuFs9E1oxgMNKV9iYumGOlP zmqbliZoKlBI2AQPuOli4YCar1o1IU0iusmcVhaUSPEamRokUgfq5RDx2J+U70Qm 4Twooy/szXZsgW5vr9mO+xgmNDLcR1Me6kXvSAwnux2BijM1htAm/rKzkBn9TyfJ +lDAC8/GJZBVno+35BSc4Y9RyH4O717T8Jzq5Xu3GiwYm8LVKFJITxQ6/ud+4Q1/ prZJQWwkItrH/4sF7wQvlsApSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVWwHI6 dzHndkAwAtB2Mu6P/Le8MB8GA1UdIwQYMBaAFIpiG8d6PdQXDLkQP/h4i8kJAILR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjRDNS9EMUUyRDk2ODgz NTkxMUVFQjI1Q0YxNDRDNEY5QUUwMi9pbUlieDNvOTFCY011UkFfLUhpTHlRa0Fn dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ltSWJ4M285MUJjTXVSQV8tSGlMeVFrQWd0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjRDNS9EMUUyRDk2ODgzNTkxMUVFQjI1Q0YxNDRDNEY5QUUwMi9pbUlieDNvOTFC Y011UkFfLUhpTHlRa0FndEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDkd4gkO2su5W2oWjesW5Ve33DF36FNccF80wicx5C5BejSqk5QDMi WwRYFHiFNjf28fnPVVoi1euzJMRpTNqAWk5q7TzlDoKd35ciztqMxI60ZPzGhVgw 1xdsmcRk3vF7WpIsXXoHXeFYYzBF+5HrQZS4zhNeorqi0fF/iHhZlpy2XMKGEurF uDF4YQWK4ZpTm9c27LoXIMKABYotn6Dh37KVs3AshrB2qe6snajGyL/DPy2M4obm rcwbviF2QThiE/0C83BpY6zfpOsUNrg5lZZqlaW+LYF0urzT27075oUcXppwaiPA pemGaWYLGvEfBPPkE3USU0IuEdAxEJH6 -----END CERTIFICATE-----Generated at Tue Nov 4 08:11:40 2025 by rpki-client