$ rpki-client -vvf rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft File: i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft (raw, json) Hash identifier: qToiR3w1pwLUhEI0S28rYfHqRwzuPXl9tQk8qJEILWE= Subject key identifier: 85:11:00:21:0F:AD:60:AE:8B:11:C9:CF:72:2B:D6:DC:A8:AC:F3:9B Authority key identifier: 8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D Certificate issuer: /CN=A91D37E4/serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D Certificate serial: 07C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft Manifest number: 07B3 Signing time: Tue 04 Nov 2025 21:27:10 +0000 Manifest this update: Tue 04 Nov 2025 21:27:10 +0000 Manifest next update: Tue 11 Nov 2025 21:27:10 +0000 Files and hashes: 1: i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl (hash: QzeHXDw8bH7bCMDhsARDfRHxzwjLCFIf4Vt0sk+sFYY=) 2: D933655E23B511EBA7BDD50FC4F9AE02.roa (hash: 8WBXx40LoIwub2WeF3ccrcQG4fq4wKZ7IVrDku/6ikQ=) 3: BD764EAE1D5B11EBAB008D19C4F9AE02.roa (hash: faL6wM9GsLMo9++JSpEkUSiwl7+QPEuIOOkR0NTNngU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1984 (0x7c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D37E4, serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D Validity Not Before: Nov 4 21:27:10 2025 GMT Not After : Nov 11 21:27:10 2025 GMT Subject: CN=690a6fae-77d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:14:39:d9:94:e8:cc:47:e9:3c:5a:68:6a: bd:ef:10:72:47:36:35:fc:33:ff:b9:a4:64:2e:48: fc:f4:5a:ea:44:c4:11:e9:72:4d:0f:5b:e1:9e:f1: 5c:ed:ac:dc:7d:c0:4a:2a:13:18:3e:10:c5:8e:32: bd:6c:91:c9:c3:5a:16:b4:0d:95:2c:ff:27:74:5d: b1:7f:a5:da:5d:97:e4:4b:42:e3:81:d5:d6:ff:ef: 0b:2b:99:ca:87:94:e3:12:91:66:99:12:83:a0:f5: e2:ab:d9:41:48:cd:2d:18:99:91:96:91:bb:d2:b6: 86:fc:49:8e:6f:4c:a1:5b:10:7b:cc:75:b3:fa:b3: 05:69:90:d8:05:46:aa:8f:0c:aa:2f:a1:67:1e:0f: 14:7d:2d:17:3d:e8:cc:d9:56:02:9c:6a:ec:12:5d: 2a:06:bf:d8:e9:c0:03:7a:85:5c:6c:31:6d:09:f0: ca:10:db:25:3b:38:e2:fe:b7:74:94:23:4c:37:3b: 7d:c5:56:97:42:e4:88:ca:39:df:16:7e:49:a7:b3: 03:c9:fc:51:8d:c1:f4:60:34:68:62:ae:92:b7:fb: 69:bb:cc:fa:9a:0f:82:07:b5:bb:63:9a:48:08:32: 2b:9a:2d:8b:08:d5:1e:88:6d:cb:9b:96:d6:e0:7a: a6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:11:00:21:0F:AD:60:AE:8B:11:C9:CF:72:2B:D6:DC:A8:AC:F3:9B X509v3 Authority Key Identifier: keyid:8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:eb:30:8b:38:02:f5:ad:8b:9a:a1:db:07:11:92:0c:f0:bd: 6f:55:fd:53:7f:d7:42:d4:9b:c5:37:35:6e:37:b4:0c:af:dc: ac:84:ac:b1:48:0a:2b:7f:3a:e7:f8:97:06:e2:ec:00:f7:de: 4e:f8:29:c8:70:8c:3c:f9:1e:d8:94:e1:74:f8:8b:7b:db:ca: d8:a9:d5:db:6f:c0:24:70:71:a0:c4:c0:9a:9e:35:e5:83:fc: 67:d2:7c:de:72:47:fb:09:16:21:69:74:02:8d:f2:4c:81:90: fb:65:a1:7a:81:26:3b:29:4f:70:20:b4:55:f7:0a:f2:11:10: 8c:db:cb:11:9f:ab:80:d7:e6:c8:86:e6:2d:df:36:c1:4b:13: 2a:af:60:e2:41:76:21:d4:66:44:e3:75:22:2f:e0:b9:02:77: 0b:b2:6d:64:cd:61:c8:03:2a:b9:15:42:82:26:e2:6d:1d:0b: 2f:dc:09:3f:53:f2:f8:36:40:6d:f8:f7:dc:9a:7e:36:40:be: 51:93:3d:b3:6b:c0:44:76:a2:49:00:e3:52:d1:49:9b:c6:ec: f8:7a:95:27:b1:dc:33:36:85:a9:3e:0a:8d:1d:35:69:38:76: c4:00:34:73:5f:74:80:55:0c:05:3e:31:89:ac:ee:6c:0f:9c: 65:8b:0b:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3RTQxMTAvBgNVBAUTKDhCREE4QTFGRTA3QjQ2QzMzMDYzMDQ2QTcyNUVBQjg1 NjQyQjlDMkQwHhcNMjUxMTA0MjEyNzEwWhcNMjUxMTExMjEyNzEwWjAYMRYwFAYD VQQDEw02OTBhNmZhZS03N2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozsUOdmU6MxH6TxaaGq97xByRzY1/DP/uaRkLkj89FrqRMQR6XJND1vhnvFc 7azcfcBKKhMYPhDFjjK9bJHJw1oWtA2VLP8ndF2xf6XaXZfkS0LjgdXW/+8LK5nK h5TjEpFmmRKDoPXiq9lBSM0tGJmRlpG70raG/EmOb0yhWxB7zHWz+rMFaZDYBUaq jwyqL6FnHg8UfS0XPejM2VYCnGrsEl0qBr/Y6cADeoVcbDFtCfDKENslOzji/rd0 lCNMNzt9xVaXQuSIyjnfFn5Jp7MDyfxRjcH0YDRoYq6St/tpu8z6mg+CB7W7Y5pI CDIrmi2LCNUeiG3Lm5bW4HqmtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIURACEP rWCuixHJz3Ir1tyorPObMB8GA1UdIwQYMBaAFIvaih/ge0bDMGMEanJeq4VkK5wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzdFNC8zNkZCMTE0NDFE NUExMUVCQjc5ODhEMTdDNEY5QUUwMi9pOXFLSC1CN1JzTXdZd1JxY2w2cmhXUXJu QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k5cUtILUI3UnNNd1l3UnFjbDZyaFdRcm5DMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzdFNC8zNkZCMTE0NDFENUExMUVCQjc5ODhEMTdDNEY5QUUwMi9pOXFLSC1CN1Jz TXdZd1JxY2w2cmhXUXJuQzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ6zCLOAL1rYuaodsHEZIM8L1vVf1Tf9dC1JvFNzVuN7QMr9yshKyx SAorfzrn+JcG4uwA995O+CnIcIw8+R7YlOF0+It728rYqdXbb8AkcHGgxMCanjXl g/xn0nzeckf7CRYhaXQCjfJMgZD7ZaF6gSY7KU9wILRV9wryERCM28sRn6uA1+bI huYt3zbBSxMqr2DiQXYh1GZE43UiL+C5AncLsm1kzWHIAyq5FUKCJuJtHQsv3Ak/ U/L4NkBt+Pfcmn42QL5Rkz2za8BEdqJJAONS0Umbxuz4epUnsdwzNoWpPgqNHTVp OHbEADRzX3SAVQwFPjGJrO5sD5xliwvT -----END CERTIFICATE-----Generated at Wed Nov 5 17:56:33 2025 by rpki-client