$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json) Hash identifier: JubJEEyEAuelZwj0IWHH2vucgzN1P49I8EkzDsmXhNo= Subject key identifier: 03:5E:72:70:8D:93:8E:6C:1B:40:21:BE:EF:4D:71:AC:22:54:A0:D9 Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005 Certificate serial: 03A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft Manifest number: 0392 Signing time: Wed 05 Nov 2025 00:52:00 +0000 Manifest this update: Wed 05 Nov 2025 00:52:00 +0000 Manifest next update: Wed 12 Nov 2025 00:52:00 +0000 Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: ZO/nioqpKqx+0YpqogirvvBsaXXbgFvl77C4qh2EMQc=) 2: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: jPTVwsGJwTtYxGq4/k3kM5VWiV1n8hGmQtDrb+dxPSo=) 3: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: R9SBhXEhOf+gMa/m0vryBFjGp9sBxlfHO7G/5GujZAU=) 4: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: PlCOgT/H+ZebbdqL9OriSJeX2NeXIzVYubJJm3a+JOU=) 5: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: xG6dNUlA+c724kNwKX8NUp4Jh1K9Q2v6tE8mpl0ElKc=) 6: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: Mxx0NjOtuBLL5qPMv7dyQqyOzCktL0daliI6SvMVL7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 932 (0x3a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005 Validity Not Before: Nov 5 00:52:00 2025 GMT Not After : Nov 12 00:52:00 2025 GMT Subject: CN=690a9fb0-d883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:10:a0:37:8d:aa:01:f3:ba:1b:a5:f5:8a:fc: 39:9d:b4:26:ff:44:27:f9:9f:39:f3:7d:da:31:f8: 26:69:df:3e:d1:c7:03:22:bb:7a:f3:82:38:af:69: a4:ce:c5:63:17:cd:54:c5:79:43:21:6e:c8:3c:99: ae:2c:6e:df:ca:f8:21:26:f9:03:74:de:e1:93:dc: 5d:e1:ca:16:50:c6:be:e4:27:7a:72:07:58:64:ae: 1b:64:89:f0:a1:e3:25:2f:be:25:98:e7:1d:d5:4d: 05:2e:1d:9d:b9:c1:9c:86:2e:92:7c:c7:e2:64:16: e3:31:90:e5:9a:7c:53:22:43:77:c7:e6:f8:a9:11: a6:61:ca:b0:ed:56:52:cb:36:69:de:d3:da:2d:0a: 66:cb:db:bc:97:da:ef:8e:02:93:e0:4f:41:16:d7: af:f9:3b:73:6c:8c:55:28:d2:6a:a2:55:5f:74:22: 1a:e5:e4:25:9f:ab:f3:b1:79:91:42:9e:4b:4f:95: d2:6c:6b:22:a2:bb:2e:ee:7a:d2:c9:e8:b5:1d:5d: 26:a2:cc:eb:6d:69:87:f7:3d:e1:eb:6f:04:67:81: 58:d8:68:aa:d9:98:31:35:b9:b6:47:a0:0d:37:2b: cc:c0:82:96:3d:51:47:96:e1:cc:36:eb:fe:bb:d8: 2b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5E:72:70:8D:93:8E:6C:1B:40:21:BE:EF:4D:71:AC:22:54:A0:D9 X509v3 Authority Key Identifier: keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:65:87:10:58:fc:19:03:41:e4:e4:23:dd:24:d3:d2:61:34: 0d:ea:45:6a:f2:fe:49:89:6d:72:64:42:4e:9f:48:52:90:43: 83:39:24:73:6d:85:54:e2:a3:54:b6:35:b3:e3:18:83:41:0b: 0d:a5:a2:8d:bd:23:a4:24:83:14:bf:f6:df:41:26:04:b7:5e: 0e:de:ae:24:0d:01:88:82:09:e5:ab:b4:30:99:0b:e1:63:94: c2:8e:fa:79:d2:05:6c:96:49:c8:a0:d7:b8:42:e6:91:54:b0: 52:c6:7d:bd:bd:e0:4b:b5:f4:61:a6:63:0f:17:06:1d:04:f0: 42:aa:29:a8:ee:e1:18:3a:ec:fa:4c:e3:05:1f:8d:81:8a:02: d7:8c:88:f7:ba:df:63:38:be:a7:3a:0e:83:5a:36:80:ac:77: 44:28:0c:e4:e0:ae:4b:7d:8d:e1:87:08:eb:37:4a:fc:5d:05: 01:56:16:89:db:d8:74:a6:22:41:8b:c6:86:e9:6d:8c:03:c7: 6c:0f:d9:2d:31:fa:35:97:c8:ee:e9:05:52:a6:bd:61:82:d5: a2:e8:7a:59:25:93:92:1d:f7:69:fb:9b:0c:75:be:e5:f2:4a: 4d:9d:54:e7:e4:ba:57:33:e6:64:c4:d8:54:74:b9:7f:32:cc: 4a:70:59:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3RjYxMTAvBgNVBAUTKDhBMzkxNDYwQ0E2RjY0NEE1ODkxMURCNzM4MzQ2MTg0 RTM3OEQwMDUwHhcNMjUxMTA1MDA1MjAwWhcNMjUxMTEyMDA1MjAwWjAYMRYwFAYD VQQDEw02OTBhOWZiMC1kODgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxCgN42qAfO6G6X1ivw5nbQm/0Qn+Z85833aMfgmad8+0ccDIrt684I4r2mk zsVjF81UxXlDIW7IPJmuLG7fyvghJvkDdN7hk9xd4coWUMa+5Cd6cgdYZK4bZInw oeMlL74lmOcd1U0FLh2ducGchi6SfMfiZBbjMZDlmnxTIkN3x+b4qRGmYcqw7VZS yzZp3tPaLQpmy9u8l9rvjgKT4E9BFtev+TtzbIxVKNJqolVfdCIa5eQln6vzsXmR Qp5LT5XSbGsiorsu7nrSyei1HV0moszrbWmH9z3h628EZ4FY2Giq2ZgxNbm2R6AN NyvMwIKWPVFHluHMNuv+u9grBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANecnCN k45sG0Ahvu9NcawiVKDZMB8GA1UdIwQYMBaAFIo5FGDKb2RKWJEdtzg0YYTjeNAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjdGNi83ODI0RUJENEJG QkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpFcFlrUjIzT0RSaGhPTjQw QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqa1VZTXB2WkVwWWtSMjNPRFJoaE9ONDBBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjdGNi83ODI0RUJENEJGQkQxMUVDQjc4ODEyNURDNEY5QUUwMi9pamtVWU1wdlpF cFlrUjIzT0RSaGhPTjQwQVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2ZYcQWPwZA0Hk5CPdJNPSYTQN6kVq8v5JiW1yZEJOn0hSkEODOSRz bYVU4qNUtjWz4xiDQQsNpaKNvSOkJIMUv/bfQSYEt14O3q4kDQGIggnlq7QwmQvh Y5TCjvp50gVslknIoNe4QuaRVLBSxn29veBLtfRhpmMPFwYdBPBCqimo7uEYOuz6 TOMFH42BigLXjIj3ut9jOL6nOg6DWjaArHdEKAzk4K5LfY3hhwjrN0r8XQUBVhaJ 29h0piJBi8aG6W2MA8dsD9ktMfo1l8ju6QVSpr1hgtWi6HpZJZOSHfdp+5sMdb7l 8kpNnVTn5LpXM+ZkxNhUdLl/MsxKcFma -----END CERTIFICATE-----Generated at Wed Nov 5 21:41:23 2025 by rpki-client