$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft File: I3t9TKhKJtX8SVjUgZHzahS8ei8.mft (raw, json) Hash identifier: mgUXehAwZf1333Ng396llHL+nNc9b+A8ekj8piI/GtQ= Subject key identifier: CF:F1:5D:5B:D1:45:3C:15:49:40:71:AE:98:7C:7E:4D:CB:76:AF:77 Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft Manifest number: 0234 Signing time: Wed 05 Nov 2025 02:11:19 +0000 Manifest this update: Wed 05 Nov 2025 02:11:18 +0000 Manifest next update: Wed 12 Nov 2025 02:11:18 +0000 Files and hashes: 1: I3t9TKhKJtX8SVjUgZHzahS8ei8.crl (hash: MyBkPRfe/v8I0+NhNtXm6gA2tlHi1LeK2OSJTx7ENnE=) 2: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (hash: Qc3ACPBC+H3iasNyw+1g5xftexl02S0P/76vcceWhqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: Nov 5 02:11:18 2025 GMT Not After : Nov 12 02:11:18 2025 GMT Subject: CN=690ab246-3ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1c:12:53:95:46:0d:3c:16:65:b1:62:8e:12: b1:dc:78:b6:b5:52:e5:26:61:92:ae:ba:ca:3d:8f: 97:bc:ff:e5:77:12:a2:7b:f3:e9:7d:6c:e1:62:12: c3:f1:f9:5a:f1:28:96:c1:07:69:22:b9:1a:6a:e7: ae:5b:fe:59:14:c7:2c:c2:2c:ab:fb:e3:8a:29:e7: 9b:f8:bd:b0:4e:50:b4:53:79:31:4b:cb:60:e3:c9: ce:4a:7d:5f:8a:79:c7:22:7a:ab:af:28:55:5f:89: 80:69:da:99:74:dc:52:cf:7e:e8:f1:fc:e0:43:6a: db:34:8d:f9:22:ab:16:0e:bc:4d:71:ed:a6:81:a5: 49:2d:6a:be:f7:92:a8:54:d2:88:ea:b9:5d:82:a2: e7:49:38:d3:6a:c4:d8:65:aa:cc:48:69:94:85:64: 76:98:52:0d:3b:b4:c4:e0:7c:cf:6a:4b:cd:2e:83: 01:b1:2f:42:1d:f2:da:4b:26:05:8f:06:a1:26:06: 86:60:4c:84:43:fa:53:7c:9b:85:ae:ef:6a:24:af: 0f:da:f3:53:6c:72:db:0a:87:a9:58:f0:f4:e2:88: 59:48:17:5c:05:77:ff:9d:c0:1a:fb:ff:cc:f1:68: 61:42:1d:e5:f6:7c:c9:3d:64:01:9b:63:ac:9f:a4: 4f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F1:5D:5B:D1:45:3C:15:49:40:71:AE:98:7C:7E:4D:CB:76:AF:77 X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:00:d1:5e:ea:9e:33:ff:8e:d4:a3:d9:ed:17:5f:51:d5:4e: 38:a8:48:e4:25:25:36:29:7a:65:61:49:02:b0:68:f4:f0:1e: 40:1b:73:f1:2d:e3:a6:21:b0:36:5a:4b:87:32:9e:22:e7:ef: d7:97:05:fa:66:71:89:26:f7:be:74:2c:5b:4d:79:9b:70:ac: cf:36:17:82:8f:c8:00:c3:7d:b5:fa:7f:3a:b4:10:97:a3:fe: 41:11:11:91:65:05:96:5f:43:a6:b2:41:69:ac:23:a1:68:d2: 16:59:bc:c5:b4:09:bc:19:9c:2d:f8:5b:de:5b:6b:d4:c3:97: 32:59:80:d4:f3:68:cf:46:34:e7:aa:dd:ca:4f:96:db:3c:d9: 41:c1:10:55:bd:3a:6f:f8:11:6b:12:ae:a9:f0:8d:bc:03:59: 3a:8f:6f:42:5e:00:51:76:62:03:c5:8f:22:1c:00:33:9e:7c: 05:ee:72:ab:07:76:57:8f:74:fa:f8:fe:e6:73:5a:9d:67:7d: b7:f7:95:05:2e:57:a4:cb:15:9c:3d:41:45:da:6b:8e:35:11: e2:56:8f:03:e6:27:37:8d:b4:4d:cf:0b:7b:96:8f:d4:5a:5a: 77:f7:b5:6a:b4:40:1f:3b:d7:b9:49:d5:42:b5:ba:cf:3d:11: 74:32:69:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjUxMTA1MDIxMTE4WhcNMjUxMTEyMDIxMTE4WjAYMRYwFAYD VQQDEw02OTBhYjI0Ni0zYWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6xwSU5VGDTwWZbFijhKx3Hi2tVLlJmGSrrrKPY+XvP/ldxKie/PpfWzhYhLD 8fla8SiWwQdpIrkaaueuW/5ZFMcswiyr++OKKeeb+L2wTlC0U3kxS8tg48nOSn1f innHInqrryhVX4mAadqZdNxSz37o8fzgQ2rbNI35IqsWDrxNce2mgaVJLWq+95Ko VNKI6rldgqLnSTjTasTYZarMSGmUhWR2mFINO7TE4HzPakvNLoMBsS9CHfLaSyYF jwahJgaGYEyEQ/pTfJuFru9qJK8P2vNTbHLbCoepWPD04ohZSBdcBXf/ncAa+//M 8WhhQh3l9nzJPWQBm2Osn6RPWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/xXVvR RTwVSUBxrph8fk3Ldq93MB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjZGOC81NjJDM0NCNDcyNEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0 WDhTVmpVZ1pIemFoUzhlaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2ANFe6p4z/47Uo9ntF19R1U44qEjkJSU2KXplYUkCsGj08B5AG3Px LeOmIbA2WkuHMp4i5+/XlwX6ZnGJJve+dCxbTXmbcKzPNheCj8gAw321+n86tBCX o/5BERGRZQWWX0OmskFprCOhaNIWWbzFtAm8GZwt+FveW2vUw5cyWYDU82jPRjTn qt3KT5bbPNlBwRBVvTpv+BFrEq6p8I28A1k6j29CXgBRdmIDxY8iHAAznnwF7nKr B3ZXj3T6+P7mc1qdZ32395UFLlekyxWcPUFF2muONRHiVo8D5ic3jbRNzwt7lo/U Wlp397VqtEAfO9e5SdVCtbrPPRF0Mmlz -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:03 2025 by rpki-client