$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft File: IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft (raw, json) Hash identifier: f1EjZS5mX2jpzsWvRpOQlyoVVZz8T2YiCi79rKWw4Tk= Subject key identifier: 7C:B5:29:98:17:1D:A3:3C:1A:3F:B9:8A:5C:D0:BD:EF:05:40:EF:ED Authority key identifier: 21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9 Certificate issuer: /CN=A91C53FD/serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9 Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft Manifest number: 0121 Signing time: Wed 05 Nov 2025 04:53:15 +0000 Manifest this update: Wed 05 Nov 2025 04:53:15 +0000 Manifest next update: Wed 12 Nov 2025 04:53:15 +0000 Files and hashes: 1: IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl (hash: /7RT17hoT9uMX1MDokpBUUG+2I7XYfbmA/8mNo8HYvY=) 2: B15E8BECFF3211EEA8607454C4F9AE02.roa (hash: rdcsVeSD/0uRXsupB+gdsyd8ZZ4QY82jQKGKV8TuBBs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C53FD, serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9 Validity Not Before: Nov 5 04:53:15 2025 GMT Not After : Nov 12 04:53:15 2025 GMT Subject: CN=690ad83b-36ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ff:ec:59:21:58:cb:3f:57:c7:8b:54:b0:1c: e4:97:1b:a8:c4:81:49:9f:b9:74:b3:76:0a:82:68: 10:ec:d1:7c:2d:1a:96:88:13:c1:a9:86:04:df:ba: 42:ce:fd:3a:c3:cf:c2:ad:31:de:a5:33:d6:f5:ea: 14:86:98:9e:69:90:1e:78:b8:d4:a2:0a:0a:07:8c: 59:fe:55:8c:08:f8:85:ad:07:54:eb:fc:f0:a8:b4: a3:36:25:61:17:3d:74:2b:8b:aa:da:0f:29:c9:23: 6a:ca:06:fb:7c:01:55:e3:e6:e7:c9:f8:3c:20:1f: dd:c0:bd:d4:bb:7c:61:86:0d:0f:82:26:d1:1d:55: 98:92:4d:c2:3d:fe:c7:5c:7b:bf:e1:92:69:06:88: f4:8b:03:c4:0f:b6:cb:b8:48:e5:e4:9f:47:26:d8: a6:44:ce:73:1d:77:9c:ca:e9:36:1c:59:04:4c:73: fa:3c:0a:af:79:bf:fb:b5:d7:da:4e:49:c2:a1:32: 91:46:99:fe:3e:39:b5:8c:0c:35:75:d6:33:fb:ea: eb:10:87:1c:ab:ae:ae:af:36:10:66:7b:b4:60:00: 1a:aa:33:5f:7e:13:90:0e:2e:8a:30:3f:8d:f4:fb: 5c:93:19:01:49:32:a9:fb:9f:fa:a2:da:91:87:df: 26:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B5:29:98:17:1D:A3:3C:1A:3F:B9:8A:5C:D0:BD:EF:05:40:EF:ED X509v3 Authority Key Identifier: keyid:21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:29:05:76:6d:4b:2e:91:c2:6c:08:57:b4:59:94:b1:4f:56: 54:16:da:36:fd:f5:68:d1:cd:3a:ea:82:7c:03:16:dd:6b:b1: fa:63:3b:42:ab:45:56:fa:1a:55:42:87:ad:11:1d:90:d3:40: 5c:1b:0f:9c:7b:7f:bb:d6:0e:ea:5b:f1:3b:a0:88:ff:06:ff: ba:68:5c:3d:0e:0e:9d:23:9d:c6:9c:a5:3a:98:76:c7:70:3d: 22:a6:09:8e:71:fd:c5:44:8c:ae:aa:42:3c:8e:26:d5:36:9c: a4:cf:ee:ec:f0:7b:78:84:dd:ab:6c:03:81:40:ae:41:10:92: 6d:80:c1:a6:33:f7:7e:e5:41:96:1a:6f:c8:55:b8:0e:ed:cc: 4f:22:13:8e:5b:eb:dd:be:e5:b0:6c:0e:ce:45:c9:b8:b3:a9: 65:c3:1b:4d:60:ee:06:d8:07:e7:a8:42:d6:91:e1:f6:19:4f: 42:cc:a6:c2:93:4b:55:65:b8:de:f2:28:2f:76:8e:16:4d:6f: f4:a9:2b:40:49:68:2a:0d:3a:85:d4:03:97:07:88:8c:e4:b7: 9f:31:10:88:ab:ce:bd:36:44:5f:fc:7a:eb:33:7d:fe:13:d7: 05:db:f2:93:aa:e9:36:01:2c:19:b7:06:dc:67:37:9d:dc:00: 05:15:11:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUzRkQxMTAvBgNVBAUTKDIxOTM0MTk4RTgzMzEwNjFEMjc1QjhDRkM3OTQ1OEQz MkZBQkQ2QzkwHhcNMjUxMTA1MDQ1MzE1WhcNMjUxMTEyMDQ1MzE1WjAYMRYwFAYD VQQDEw02OTBhZDgzYi0zNmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxv/sWSFYyz9Xx4tUsBzklxuoxIFJn7l0s3YKgmgQ7NF8LRqWiBPBqYYE37pC zv06w8/CrTHepTPW9eoUhpieaZAeeLjUogoKB4xZ/lWMCPiFrQdU6/zwqLSjNiVh Fz10K4uq2g8pySNqygb7fAFV4+bnyfg8IB/dwL3Uu3xhhg0PgibRHVWYkk3CPf7H XHu/4ZJpBoj0iwPED7bLuEjl5J9HJtimRM5zHXecyuk2HFkETHP6PAqveb/7tdfa TknCoTKRRpn+Pjm1jAw1ddYz++rrEIccq66urzYQZnu0YAAaqjNffhOQDi6KMD+N 9PtckxkBSTKp+5/6otqRh98mfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHy1KZgX HaM8Gj+5ilzQve8FQO/tMB8GA1UdIwQYMBaAFCGTQZjoMxBh0nW4z8eUWNMvq9bJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTNGRC82ODhFNTdFRUZG MzIxMUVFQTU1RDhFNTNDNEY5QUUwMi9JWk5CbU9nekVHSFNkYmpQeDVSWTB5LXIx c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laTkJtT2d6RUdIU2RialB4NVJZMHktcjFzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTNGRC82ODhFNTdFRUZGMzIxMUVFQTU1RDhFNTNDNEY5QUUwMi9JWk5CbU9nekVH SFNkYmpQeDVSWTB5LXIxc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6KQV2bUsukcJsCFe0WZSxT1ZUFto2/fVo0c066oJ8Axbda7H6YztC q0VW+hpVQoetER2Q00BcGw+ce3+71g7qW/E7oIj/Bv+6aFw9Dg6dI53GnKU6mHbH cD0ipgmOcf3FRIyuqkI8jibVNpykz+7s8Ht4hN2rbAOBQK5BEJJtgMGmM/d+5UGW Gm/IVbgO7cxPIhOOW+vdvuWwbA7ORcm4s6llwxtNYO4G2AfnqELWkeH2GU9CzKbC k0tVZbje8igvdo4WTW/0qStASWgqDTqF1AOXB4iM5LefMRCIq869NkRf/HrrM33+ E9cF2/KTquk2ASwZtwbcZzed3AAFFRFc -----END CERTIFICATE-----Generated at Wed Nov 5 13:34:22 2025 by rpki-client