$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json) Hash identifier: ZNmlUCZ6qGseCUnNBTFTDoZB+Oirw+JQQZQIhJXbZZ4= Subject key identifier: DC:56:51:E7:EE:4C:6D:E9:50:55:5C:69:89:01:8F:7E:B2:A6:C7:0A Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Certificate serial: 07A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft Manifest number: 071E Signing time: Sun 02 Nov 2025 22:17:51 +0000 Manifest this update: Sun 02 Nov 2025 22:17:50 +0000 Manifest next update: Sun 09 Nov 2025 22:17:50 +0000 Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: MCpE3mBF1ZUyByj4b0uYJ/l2pver8AMQemIXnaaQboM=) 2: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: j0xrsPerWvAmq5TrfXCCAXxhmW7uoVGvVR9TrXHmI/c=) 3: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: iacyWEeXTvXTILxRcADZ+9lCVjiDHQnMplIMRt/73Xk=) 4: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: bcPbqQLGQnoAzNP2Fmg0TCnc4h72RS0Eli/gU7/zCsQ=) 5: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: Z/eyVAkA9R8S1+9PHNU8ppbtyyeeA+WhA6oeOKeAzo8=) 6: 317095E0A28911ECBC355360C4F9AE02.roa (hash: Pa0iKARYCWRSksppmbtkHK6D27x19i+sB6izIsd+594=) 7: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: q95wxrZ9LN/HMmU4q1987KOKTt7X/HBomrSB/BVWhIg=) 8: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: I8a2tYdChMy0m+hYeHyoEloBcDOZ+JhPIXTugtfIp8g=) 9: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: VF1EKdtqMB8DRuSBnFKjSSnE5AI9LEnGrDvhJPYGcJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1960 (0x7a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Validity Not Before: Nov 2 22:17:50 2025 GMT Not After : Nov 9 22:17:50 2025 GMT Subject: CN=6907d88e-48f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:17:d2:71:ee:d3:6e:fc:31:fc:3b:1c:c5:9b: 09:6d:d0:ea:7e:15:f5:62:0c:82:7b:30:85:e8:57: cc:29:c9:63:04:2a:fd:36:1a:6c:db:85:1d:6f:a4: b9:10:0b:5b:f6:7d:1a:e5:75:af:41:d9:b1:1a:17: 7c:e3:d0:9b:ea:4a:99:42:96:17:9e:f0:a1:8c:0d: e5:cb:77:c0:5f:d0:91:bd:2c:d6:a2:f6:40:b4:63: 9f:07:b0:ad:ce:7d:0a:be:42:87:79:ff:5f:8d:71: f1:04:6d:f5:d8:19:cb:55:e2:dd:ad:0e:ca:87:dd: 03:61:3e:94:fa:7c:44:14:bd:9a:8d:9b:5f:a8:6e: c7:bd:6d:0d:2c:5f:e1:98:8e:a8:25:fa:d4:52:50: 36:fb:5b:36:12:79:66:09:e0:79:b5:00:51:b9:31: 70:dd:c5:79:a1:5d:09:21:70:4d:4b:c1:47:2e:b8: b6:b3:71:69:34:38:19:a5:ca:8e:f8:9c:22:96:91: f2:6e:e5:0f:34:65:23:4d:c5:2d:a6:f4:b9:3c:f4: e0:59:00:b1:66:89:31:fa:f9:aa:56:59:3a:8a:0b: 7d:3a:8b:a1:ff:bc:4e:38:41:19:aa:be:68:a8:e6: fe:80:0f:e3:4a:7e:55:24:d2:f1:37:c3:4b:18:7c: 8f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:56:51:E7:EE:4C:6D:E9:50:55:5C:69:89:01:8F:7E:B2:A6:C7:0A X509v3 Authority Key Identifier: keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:5b:89:c5:63:d2:49:55:44:69:df:f6:e5:ae:48:df:16:ba: 34:f2:2d:a1:25:ec:33:b4:7c:ce:d1:6b:be:8a:45:9b:85:55: 0b:26:f0:7e:9f:a3:b2:a0:70:07:3c:e8:81:74:cd:63:63:1a: 32:0b:c2:e6:d2:c1:78:59:b1:0c:9d:20:6e:c7:8c:63:ce:26: c7:a9:bc:02:c3:84:1a:fa:72:fb:85:ef:89:f2:f0:b8:1b:53: 9a:4d:2d:51:ab:95:f7:e4:eb:4b:9e:c8:3e:2b:cb:e0:a9:ee: 80:3d:c0:49:d6:3c:e6:13:f8:97:34:5c:92:71:bd:e5:54:e4: b8:84:d7:a7:56:5f:51:0d:ab:b6:fb:da:f4:be:3c:99:c9:30: 50:77:8d:d4:fa:b2:c8:cc:68:36:ac:28:22:0c:7f:c7:3a:59: ad:52:04:3a:1e:06:65:b3:bd:e0:a0:00:6b:3c:0f:25:63:01: 06:ae:20:d7:eb:d3:9d:5e:5d:fa:e5:ba:ad:e2:fd:ee:b9:f3: bd:43:a1:db:6c:6a:ea:bc:e3:0c:c4:e6:27:8b:58:71:79:4a: c4:a1:a1:0f:af:2a:ed:31:21:f1:0c:b4:91:7b:a6:2b:11:dd: 4c:cd:49:1e:20:0d:fe:70:8b:0e:ef:16:61:60:1f:bd:10:80: 1e:9d:45:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC MEU0OENGQTgwHhcNMjUxMTAyMjIxNzUwWhcNMjUxMTA5MjIxNzUwWjAYMRYwFAYD VQQDEw02OTA3ZDg4ZS00OGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthfSce7Tbvwx/DscxZsJbdDqfhX1YgyCezCF6FfMKcljBCr9Nhps24Udb6S5 EAtb9n0a5XWvQdmxGhd849Cb6kqZQpYXnvChjA3ly3fAX9CRvSzWovZAtGOfB7Ct zn0KvkKHef9fjXHxBG312BnLVeLdrQ7Kh90DYT6U+nxEFL2ajZtfqG7HvW0NLF/h mI6oJfrUUlA2+1s2EnlmCeB5tQBRuTFw3cV5oV0JIXBNS8FHLri2s3FpNDgZpcqO +JwilpHybuUPNGUjTcUtpvS5PPTgWQCxZokx+vmqVlk6igt9Oouh/7xOOEEZqr5o qOb+gA/jSn5VJNLxN8NLGHyPpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxWUefu TG3pUFVcaYkBj36ypscKMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5 M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMxQi9EMEVDQ0Q0ODg5M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0 ejBhTFgwbHFrYXV3NUl6NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlW4nFY9JJVURp3/blrkjfFro08i2hJewztHzO0Wu+ikWbhVULJvB+ n6OyoHAHPOiBdM1jYxoyC8Lm0sF4WbEMnSBux4xjzibHqbwCw4Qa+nL7he+J8vC4 G1OaTS1Rq5X35OtLnsg+K8vgqe6APcBJ1jzmE/iXNFyScb3lVOS4hNenVl9RDau2 +9r0vjyZyTBQd43U+rLIzGg2rCgiDH/HOlmtUgQ6HgZls73goABrPA8lYwEGriDX 69OdXl365bqt4v3uufO9Q6HbbGrqvOMMxOYni1hxeUrEoaEPryrtMSHxDLSRe6Yr Ed1MzUkeIA3+cIsO7xZhYB+9EIAenUUx -----END CERTIFICATE-----Generated at Tue Nov 4 20:06:53 2025 by rpki-client