$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft File: InYg_8vfrJXUbmodsxewi6VihIA.mft (raw, json) Hash identifier: i/OlWbzZtorFw0NFAYUWhftm/B/dzzujAjbRvczfNK0= Subject key identifier: D5:06:75:57:17:BF:C7:83:05:00:CF:14:E2:6F:8E:41:EE:30:09:BF Authority key identifier: 22:76:20:FF:CB:DF:AC:95:D4:6E:6A:1D:B3:17:B0:8B:A5:62:84:80 Certificate issuer: /CN=A91D4781/serialNumber=227620FFCBDFAC95D46E6A1DB317B08BA5628480 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/InYg_8vfrJXUbmodsxewi6VihIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft Manifest number: 10 Signing time: Wed 05 Nov 2025 08:08:51 +0000 Manifest this update: Wed 05 Nov 2025 08:08:51 +0000 Manifest next update: Wed 12 Nov 2025 08:08:51 +0000 Files and hashes: 1: InYg_8vfrJXUbmodsxewi6VihIA.crl (hash: Rs813mFFSxqvXBs6KLtkj7D2GQsPbJQoDDsI36ZfhVA=) 2: 9F7CD49AA55A11F0A8F84D83C4F9AE02.roa (hash: pbHyabcv277elA+5L6jLrPBHXOT6ujxTAobCaGjI5cg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.crl rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/InYg_8vfrJXUbmodsxewi6VihIA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4781, serialNumber=227620FFCBDFAC95D46E6A1DB317B08BA5628480 Validity Not Before: Nov 5 08:08:51 2025 GMT Not After : Nov 12 08:08:51 2025 GMT Subject: CN=690b0613-e32a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2b:23:c2:b0:1e:e2:9c:98:b5:f9:8b:ae:26: 10:0f:de:60:a3:f3:c3:8e:93:9b:d7:ad:b7:a1:74: f9:01:44:9b:0f:f0:25:54:5d:90:cf:d9:d6:0a:a0: 8c:8a:d9:f5:4c:ad:f3:ac:43:8e:2a:0a:80:85:11: fc:a6:e3:0d:7f:ef:9d:df:8b:99:72:bc:2e:b9:2d: 4f:25:03:6b:d7:e1:9a:d8:81:0c:2d:75:9a:7a:89: f3:93:93:c6:be:7b:40:e1:01:e6:8c:55:14:61:17: f9:77:cd:46:96:31:29:c9:61:b2:2e:38:6d:fe:9f: d6:fc:2a:88:41:39:18:e9:e3:aa:38:a0:c0:2c:67: 81:c1:c5:59:78:59:77:b8:24:3c:11:95:12:13:84: 35:a2:18:8a:97:63:ee:2b:59:e2:83:82:db:e4:bd: b6:13:f0:b0:26:66:dd:ae:5a:10:a5:6f:f4:01:66: 75:89:4c:e8:36:a7:af:e7:b2:52:0a:4d:8e:31:e4: 9e:fe:23:f6:96:c1:33:f9:dd:8a:dc:cb:9e:54:ab: 6a:05:84:9a:94:4d:fc:0b:ba:32:c0:c7:d4:8c:ce: a8:3f:14:14:8b:dd:2e:21:d1:36:db:08:ca:63:80: 3f:40:6f:0f:2c:84:14:f4:e2:e5:2a:fa:1e:2a:2a: 1c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:06:75:57:17:BF:C7:83:05:00:CF:14:E2:6F:8E:41:EE:30:09:BF X509v3 Authority Key Identifier: keyid:22:76:20:FF:CB:DF:AC:95:D4:6E:6A:1D:B3:17:B0:8B:A5:62:84:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/InYg_8vfrJXUbmodsxewi6VihIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:01:c6:2f:db:d5:ac:87:4f:d8:7e:a4:54:a1:5f:ee:5d:89: 42:6a:5c:d2:e8:be:b6:05:25:aa:54:bb:82:bb:5b:5a:8d:ad: a0:b0:30:65:3b:a7:a4:d3:3c:55:95:2b:51:1a:9b:d0:45:b1: b4:ad:65:1f:b8:6d:9d:e0:65:00:c6:7b:56:07:8e:b4:60:0a: 89:0f:7c:09:21:c4:32:2e:3a:01:64:b9:3f:c9:aa:d9:a4:97: 9f:cb:b5:6d:31:30:d9:9d:b9:08:73:55:bf:ce:4d:9f:e3:1a: 05:bf:aa:0b:a5:aa:45:bc:fb:a0:c3:b6:fb:42:30:2c:fe:0e: 04:b4:b9:2e:a3:54:77:80:75:51:f4:c0:c7:3e:f7:e4:52:23: dc:a4:3a:7c:48:96:43:18:b0:07:1c:60:51:5a:ad:3f:ca:30: c6:f8:2e:ec:f1:99:60:d6:05:90:48:b3:86:99:04:b6:88:5c: ec:79:2d:fe:c7:93:09:ed:3f:d2:b0:06:fb:8e:8a:9d:e5:04: 11:63:11:7d:a1:eb:6e:1d:34:34:ce:cb:51:91:72:a3:42:7b: 0e:b4:7f:79:93:3b:9c:0f:e4:0d:0e:f0:f5:3a:81:b8:ac:27: b2:eb:dc:9d:6e:26:da:40:30:6a:82:7c:8d:81:9c:1c:cc:5f: 14:2d:37:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDc4MTExMC8GA1UEBRMoMjI3NjIwRkZDQkRGQUM5NUQ0NkU2QTFEQjMxN0IwOEJB NTYyODQ4MDAeFw0yNTExMDUwODA4NTFaFw0yNTExMTIwODA4NTFaMBgxFjAUBgNV BAMTDTY5MGIwNjEzLWUzMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkKyPCsB7inJi1+YuuJhAP3mCj88OOk5vXrbehdPkBRJsP8CVUXZDP2dYKoIyK 2fVMrfOsQ44qCoCFEfym4w1/753fi5lyvC65LU8lA2vX4ZrYgQwtdZp6ifOTk8a+ e0DhAeaMVRRhF/l3zUaWMSnJYbIuOG3+n9b8KohBORjp46o4oMAsZ4HBxVl4WXe4 JDwRlRIThDWiGIqXY+4rWeKDgtvkvbYT8LAmZt2uWhClb/QBZnWJTOg2p6/nslIK TY4x5J7+I/aWwTP53Yrcy55Uq2oFhJqUTfwLujLAx9SMzqg/FBSL3S4h0TbbCMpj gD9Abw8shBT04uUq+h4qKhw3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1QZ1Vxe/ x4MFAM8U4m+OQe4wCb8wHwYDVR0jBBgwFoAUInYg/8vfrJXUbmodsxewi6VihIAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0NzgxL0Q5MDA0MkNFQTQ4 RDExRjBBRDk3RjAxNkM0RjlBRTAyL0luWWdfOHZmckpYVWJtb2RzeGV3aTZWaWhJ QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSW5ZZ184dmZySlhVYm1vZHN4ZXdpNlZpaElBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 NzgxL0Q5MDA0MkNFQTQ4RDExRjBBRDk3RjAxNkM0RjlBRTAyL0luWWdfOHZmckpY VWJtb2RzeGV3aTZWaWhJQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADwBxi/b1ayHT9h+pFShX+5diUJqXNLovrYFJapUu4K7W1qNraCwMGU7 p6TTPFWVK1Eam9BFsbStZR+4bZ3gZQDGe1YHjrRgCokPfAkhxDIuOgFkuT/Jqtmk l5/LtW0xMNmduQhzVb/OTZ/jGgW/qgulqkW8+6DDtvtCMCz+DgS0uS6jVHeAdVH0 wMc+9+RSI9ykOnxIlkMYsAccYFFarT/KMMb4LuzxmWDWBZBIs4aZBLaIXOx5Lf7H kwntP9KwBvuOip3lBBFjEX2h624dNDTOy1GRcqNCew60f3mTO5wP5A0O8PU6gbis J7Lr3J1uJtpAMGqCfI2BnBzMXxQtN4g= -----END CERTIFICATE-----Generated at Wed Nov 5 19:05:17 2025 by rpki-client