$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft File: iH554lttHTfvHzG8WgIy-OdlFUU.mft (raw, json) Hash identifier: lS8xYe7qm1woKXbgLl7yZ0ZPd8yibQPlQN2NbUinWOA= Subject key identifier: F3:48:E9:81:29:C7:70:0F:C8:75:74:71:AD:27:87:43:02:D5:8A:86 Authority key identifier: 88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45 Certificate issuer: /CN=A91D9F5A/serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft Manifest number: 080C Signing time: Tue 04 Nov 2025 21:17:55 +0000 Manifest this update: Tue 04 Nov 2025 21:17:54 +0000 Manifest next update: Tue 11 Nov 2025 21:17:54 +0000 Files and hashes: 1: iH554lttHTfvHzG8WgIy-OdlFUU.crl (hash: WP0C9UUoMA85oCR6I1rVOed65x5T8/j/iwsXHhMgm3k=) 2: CF6A89D86B3D11F0A0837D7FC4F9AE02.roa (hash: O05NjBwYNNvXC8JoMWk3EyZg7iktCjusVDBEEW7nGKc=) 3: CEFEDAB26B3D11F0A0837D7FC4F9AE02.roa (hash: cqaNGUAp+AM9Nk5TWMcE/5SRJKY4Makpxzc5uTKkH7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F5A, serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545 Validity Not Before: Nov 4 21:17:54 2025 GMT Not After : Nov 11 21:17:54 2025 GMT Subject: CN=690a6d82-37d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2b:5b:e6:dd:95:74:d4:05:f9:b8:2f:ae:bb: 3c:e4:7e:3e:11:50:5a:91:9f:52:7a:29:6d:3a:25: a9:23:92:48:96:70:06:fb:79:b8:f5:06:02:85:3c: 79:07:63:7f:fb:83:27:9a:02:69:89:bf:2c:c3:68: a6:1a:39:ff:49:d5:56:85:52:cc:21:8f:21:47:47: 6f:d6:d7:ae:0d:74:4d:b3:0a:5d:59:cd:f2:06:3d: 72:e5:fe:81:1e:7e:4c:ed:91:2f:24:34:08:ca:5d: de:5e:87:46:ab:c4:fd:24:bd:e5:bd:f3:f1:c7:98: 3d:18:57:2f:63:46:89:79:d1:cc:30:d0:23:0c:9d: ce:8d:90:d0:73:03:37:e9:c4:5b:8b:df:52:3e:5a: 31:47:6f:32:d6:38:8a:60:2e:66:ab:03:47:87:c6: 82:a1:a9:ab:62:33:44:57:52:7e:8a:61:20:09:3c: 97:f2:62:1b:57:39:1b:51:08:18:91:8e:79:ae:fe: 59:86:31:0c:85:d9:fb:28:0c:57:b2:f8:ce:3e:b3: b4:a3:3d:54:ce:76:00:9b:e4:18:5b:05:77:f7:4d: a3:42:67:96:33:47:e0:76:78:d8:fe:8e:69:a4:f6: 68:17:8c:df:2a:c3:45:11:17:4d:99:09:6c:1b:fd: 6a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:48:E9:81:29:C7:70:0F:C8:75:74:71:AD:27:87:43:02:D5:8A:86 X509v3 Authority Key Identifier: keyid:88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c0:3a:e9:1e:af:f8:b5:0f:20:77:b6:9f:6a:2f:f0:56:db: 6b:79:c0:ea:60:76:dc:4a:d5:4c:4e:53:09:3c:d3:67:24:46: 9f:91:59:11:05:d5:ef:b6:5f:32:dd:57:4d:b6:74:99:7b:bc: 84:d4:e4:78:ec:97:ab:ac:8a:f1:b6:b7:78:cf:63:32:9c:e2: 07:3a:03:ad:d2:10:62:a6:b9:cb:34:18:aa:7d:f6:82:26:d6: ea:34:7c:86:fb:8b:e7:f3:e1:ad:0a:d7:4d:ac:85:dd:db:34: 11:44:52:ab:35:58:77:9f:25:2f:ef:88:4a:e0:df:d7:7d:36: af:5b:1e:9a:76:d6:37:1d:8d:96:e5:7b:5e:e5:f6:39:81:6f: e1:1c:40:2a:3b:57:31:9e:41:fa:0f:9d:f5:1f:d2:7e:5c:78: 43:ac:63:87:8c:0d:f1:88:fd:09:d0:87:d5:bf:1b:b0:c7:67: 89:15:73:3d:12:1a:c0:c8:06:81:40:bd:fb:17:c3:91:2e:a6: 73:34:3b:4b:15:6f:4a:cd:11:b0:80:06:5c:c2:4c:23:38:9b: f3:7b:55:3a:96:6a:f2:2b:62:6c:be:b1:4a:dc:2b:2a:b9:c2: bd:87:af:fc:d7:19:64:48:e6:ff:8a:a2:d3:0c:ed:66:6d:d8: 6e:c4:fa:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OUY1QTExMC8GA1UEBRMoODg3RTc5RTI1QjZEMUQzN0VGMUYzMUJDNUEwMjMyRjhF NzY1MTU0NTAeFw0yNTExMDQyMTE3NTRaFw0yNTExMTEyMTE3NTRaMBgxFjAUBgNV BAMTDTY5MGE2ZDgyLTM3ZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfK1vm3ZV01AX5uC+uuzzkfj4RUFqRn1J6KW06JakjkkiWcAb7ebj1BgKFPHkH Y3/7gyeaAmmJvyzDaKYaOf9J1VaFUswhjyFHR2/W164NdE2zCl1ZzfIGPXLl/oEe fkztkS8kNAjKXd5eh0arxP0kveW98/HHmD0YVy9jRol50cww0CMMnc6NkNBzAzfp xFuL31I+WjFHbzLWOIpgLmarA0eHxoKhqatiM0RXUn6KYSAJPJfyYhtXORtRCBiR jnmu/lmGMQyF2fsoDFey+M4+s7SjPVTOdgCb5BhbBXf3TaNCZ5YzR+B2eNj+jmmk 9mgXjN8qw0URF02ZCWwb/WqlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU80jpgSnH cA/IdXRxrSeHQwLVioYwHwYDVR0jBBgwFoAUiH554lttHTfvHzG8WgIy+OdlFUUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5RjVBLzA4OThCMjNBMTFC QTExRUJCQzFBNTg0Q0M0RjlBRTAyL2lINTU0bHR0SFRmdkh6RzhXZ0l5LU9kbEZV VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUg1NTRsdHRIVGZ2SHpHOFdnSXktT2RsRlVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 RjVBLzA4OThCMjNBMTFCQTExRUJCQzFBNTg0Q0M0RjlBRTAyL2lINTU0bHR0SFRm dkh6RzhXZ0l5LU9kbEZVVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD7AOuker/i1DyB3tp9qL/BW22t5wOpgdtxK1UxOUwk802ckRp+RWREF 1e+2XzLdV022dJl7vITU5Hjsl6usivG2t3jPYzKc4gc6A63SEGKmucs0GKp99oIm 1uo0fIb7i+fz4a0K102shd3bNBFEUqs1WHefJS/viErg39d9Nq9bHpp21jcdjZbl e17l9jmBb+EcQCo7VzGeQfoPnfUf0n5ceEOsY4eMDfGI/QnQh9W/G7DHZ4kVcz0S GsDIBoFAvfsXw5EupnM0O0sVb0rNEbCABlzCTCM4m/N7VTqWavIrYmy+sUrcKyq5 wr2Hr/zXGWRI5v+KotMM7WZt2G7E+oA= -----END CERTIFICATE-----Generated at Tue Nov 4 23:14:29 2025 by rpki-client