$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft File: ixqAZb6Iqmwbo_7bVOCH59KttN4.mft (raw, json) Hash identifier: 3t6oQ6fX7OmGQDHCaMyXkG2uMbpA80jKqVlcYaQGYok= Subject key identifier: 2C:E3:B0:7D:E9:0E:FE:50:BC:42:41:77:3D:90:C8:DF:CE:44:42:16 Authority key identifier: 8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE Certificate issuer: /CN=A91DC068/serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft Manifest number: 013C Signing time: Wed 05 Nov 2025 04:35:46 +0000 Manifest this update: Wed 05 Nov 2025 04:35:45 +0000 Manifest next update: Wed 12 Nov 2025 04:35:45 +0000 Files and hashes: 1: ixqAZb6Iqmwbo_7bVOCH59KttN4.crl (hash: zX7NWQbBbOJ6lehIpclon9fwTsBQmaR7yi6w1S9OgeI=) 2: 4DDA8A18D5DD11EEA5B1C711C4F9AE02.roa (hash: FHRlsB48eK0jdLR0VwZXrRd3F+Rj548sH8y8zKsy5+s=) 3: 4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa (hash: PAO2tzUE6VhuIQPWRUUuXZiVK/zRgbkDyCoIJqVq33M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC068, serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE Validity Not Before: Nov 5 04:35:45 2025 GMT Not After : Nov 12 04:35:45 2025 GMT Subject: CN=690ad422-33f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e5:cb:64:14:b3:28:d5:a2:2c:5e:3b:d4:c7: 12:a6:84:53:f8:fd:fa:cc:43:2f:6c:d3:95:7a:c2: 19:4e:03:89:49:2a:40:78:19:8d:1d:d8:4a:23:f6: 3a:21:ef:4b:b8:90:38:d0:3c:ee:53:ae:ae:06:0b: 02:95:ba:c9:3a:f3:bf:3a:bb:ef:3a:ab:47:ca:5a: ea:4f:10:a5:9b:0b:29:2d:cc:e2:5c:cc:c8:06:c1: 3b:f2:08:15:57:e2:2c:fe:4c:da:c1:a5:fe:ef:c6: 69:28:ef:b3:5d:a4:69:89:da:aa:25:02:11:1a:3c: 6b:31:e0:a4:30:51:af:e6:34:c6:81:f7:52:a6:39: de:72:93:61:07:0b:d0:4d:35:4e:57:9f:a1:78:61: 38:81:8e:ff:bc:4a:99:c5:5a:71:ae:e3:c2:ca:95: 2c:71:d5:48:4b:3a:b3:13:a6:e2:15:8d:ec:ea:4a: 12:2c:b4:53:72:0b:d1:f5:bd:fe:7b:c2:14:48:a4: f9:33:c8:6a:36:2b:67:52:26:80:f9:3e:86:d7:33: 4e:90:60:7a:a8:09:88:8b:14:2f:1e:02:c2:d8:9e: 88:9e:76:ac:50:19:ed:d6:61:38:52:b6:7a:ce:93: c6:ef:a8:ab:52:9c:0d:e2:67:5f:89:24:48:36:d1: 86:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E3:B0:7D:E9:0E:FE:50:BC:42:41:77:3D:90:C8:DF:CE:44:42:16 X509v3 Authority Key Identifier: keyid:8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:04:68:9c:55:a7:b3:77:5b:c3:57:cb:f7:10:20:42:d2:13: 47:c5:81:0c:2f:59:e5:2a:9f:5b:36:42:ae:a2:38:a4:52:5a: a7:ef:69:48:92:d5:75:ea:2c:ad:70:ac:b7:e1:7c:5c:94:4e: 8a:41:ed:fe:a2:4f:36:ac:79:90:f3:b4:2b:e3:b7:1d:0e:92: b1:91:0c:12:07:80:33:d8:51:b0:bb:8e:95:cf:97:0a:01:d0: d6:3d:75:81:ec:33:29:73:c5:26:52:af:ce:87:02:2f:b5:89: 16:c3:f5:9c:58:cf:91:05:a4:d1:5a:3f:6f:b0:a0:71:5d:8f: 69:35:a1:ae:2d:64:95:b8:60:59:5f:f9:35:98:ec:e2:8f:e4: 0f:ea:e9:f1:b9:5b:0b:5b:56:05:c5:82:04:60:8f:0a:ed:57: 95:c7:41:15:10:75:73:18:52:44:9b:7a:04:66:ab:3b:ec:b6: 08:f1:0a:93:5c:c7:a5:cc:42:e9:0f:68:0c:32:1d:60:e5:30: 45:74:44:84:6c:63:f4:cd:a0:1e:6c:f3:0b:03:c0:d8:2e:38: 4f:71:7f:3b:5e:f9:38:6a:c2:e8:f6:6d:56:24:69:32:5f:ac: a5:52:95:41:7f:19:65:f1:e0:7b:ca:f4:84:a1:60:be:60:72: 27:9c:2f:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwNjgxMTAvBgNVBAUTKDhCMUE4MDY1QkU4OEFBNkMxQkEzRkVEQjU0RTA4N0U3 RDJBREI0REUwHhcNMjUxMTA1MDQzNTQ1WhcNMjUxMTEyMDQzNTQ1WjAYMRYwFAYD VQQDEw02OTBhZDQyMi0zM2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+XLZBSzKNWiLF471McSpoRT+P36zEMvbNOVesIZTgOJSSpAeBmNHdhKI/Y6 Ie9LuJA40DzuU66uBgsClbrJOvO/OrvvOqtHylrqTxClmwspLcziXMzIBsE78ggV V+Is/kzawaX+78ZpKO+zXaRpidqqJQIRGjxrMeCkMFGv5jTGgfdSpjnecpNhBwvQ TTVOV5+heGE4gY7/vEqZxVpxruPCypUscdVISzqzE6biFY3s6koSLLRTcgvR9b3+ e8IUSKT5M8hqNitnUiaA+T6G1zNOkGB6qAmIixQvHgLC2J6InnasUBnt1mE4UrZ6 zpPG76irUpwN4mdfiSRINtGGDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzjsH3p Dv5QvEJBdz2QyN/OREIWMB8GA1UdIwQYMBaAFIsagGW+iKpsG6P+21Tgh+fSrbTe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzA2OC9ENzdCOUQ2NkQ1 QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFtd2JvXzdiVk9DSDU5S3R0 TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l4cUFaYjZJcW13Ym9fN2JWT0NINTlLdHRONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzA2OC9ENzdCOUQ2NkQ1QzQxMUVFODlDMTk3MERDNEY5QUUwMi9peHFBWmI2SXFt d2JvXzdiVk9DSDU5S3R0TjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCBGicVaezd1vDV8v3ECBC0hNHxYEML1nlKp9bNkKuojikUlqn72lI ktV16iytcKy34XxclE6KQe3+ok82rHmQ87Qr47cdDpKxkQwSB4Az2FGwu46Vz5cK AdDWPXWB7DMpc8UmUq/OhwIvtYkWw/WcWM+RBaTRWj9vsKBxXY9pNaGuLWSVuGBZ X/k1mOzij+QP6unxuVsLW1YFxYIEYI8K7VeVx0EVEHVzGFJEm3oEZqs77LYI8QqT XMelzELpD2gMMh1g5TBFdESEbGP0zaAebPMLA8DYLjhPcX87Xvk4asLo9m1WJGky X6ylUpVBfxll8eB7yvSEoWC+YHInnC8C -----END CERTIFICATE-----Generated at Wed Nov 5 23:47:39 2025 by rpki-client