$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft File: ibqQy31EKoOHxquTBzjKIA4Te60.mft (raw, json) Hash identifier: 6R93UMZPdlzwhQArACc5DnSy1IBoEaAEmNNndmPHC5c= Subject key identifier: 95:8A:AE:62:55:5B:66:4E:1A:BA:B6:81:1E:82:DB:AC:DD:2A:C5:26 Authority key identifier: 89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD Certificate issuer: /CN=A91DD25E/serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft Manifest number: 10 Signing time: Mon 03 Nov 2025 07:56:19 +0000 Manifest this update: Mon 03 Nov 2025 07:56:18 +0000 Manifest next update: Mon 10 Nov 2025 07:56:18 +0000 Files and hashes: 1: ibqQy31EKoOHxquTBzjKIA4Te60.crl (hash: RCc++dotg8EQ9y+lp8TI0U8srBZCQHBer9hWybZEgns=) 2: 9CF6A89AA27B11F09D816A4BC4F9AE02.roa (hash: 0eBxKaOD/grMOoAgLIRsVrl+pKw/EreQcuXwa4ak1TU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD25E, serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD Validity Not Before: Nov 3 07:56:18 2025 GMT Not After : Nov 10 07:56:18 2025 GMT Subject: CN=69086023-428b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:eb:1a:5f:8f:84:34:ca:5a:c4:6d:f3:0e:48: b9:7f:35:20:4c:36:8e:2d:a6:ad:d3:8b:a1:29:a6: c7:03:21:a5:fa:1a:f0:a5:4b:df:f8:f5:f6:1b:d0: 78:93:d7:a7:32:d0:2a:35:b2:af:c4:b0:31:c6:97: ce:fb:f2:4b:d9:4b:8d:56:56:70:58:76:64:cc:d0: e2:08:8c:34:19:51:f5:19:e6:cd:6e:0b:4c:72:fc: 19:ce:41:16:91:8a:f5:17:7b:7b:54:71:af:1f:10: 4b:aa:cd:4c:ca:70:c4:3f:cb:05:47:ba:5a:1c:9e: 49:cd:68:f0:5b:85:e8:7f:28:e4:f9:91:19:28:f6: 09:c1:02:e8:7d:5e:68:93:91:85:3c:36:61:00:9c: 15:58:f0:11:41:2c:ce:7f:5b:65:0f:59:38:37:80: 8f:3f:1f:5f:8b:e9:ef:f6:ad:df:9f:41:1e:37:48: b8:22:12:d0:62:d7:9a:be:b6:93:c8:90:4e:c3:ad: 54:75:c9:cb:4b:3f:59:6d:bf:08:b9:06:6a:f6:98: 65:1a:99:70:8f:76:ca:2a:7c:6f:66:88:58:21:99: 55:fe:7d:53:23:f4:b6:69:53:fb:c6:73:8f:45:67: 1a:eb:7f:55:6e:e6:92:ca:30:83:ed:02:db:13:b3: f4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8A:AE:62:55:5B:66:4E:1A:BA:B6:81:1E:82:DB:AC:DD:2A:C5:26 X509v3 Authority Key Identifier: keyid:89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:62:33:a7:74:93:f4:50:24:4b:8e:98:a8:d3:93:82:2b:5b: ba:88:84:5d:69:26:b8:7e:f5:8a:84:83:55:4a:c7:7c:7b:33: 17:62:71:b2:81:d9:d8:10:8f:3f:cb:16:10:7f:23:35:2c:f6: f4:3f:49:39:e9:42:73:79:b0:35:5b:3a:01:c8:fc:b8:f0:70: 81:ae:ca:cd:e8:74:53:8a:ce:8e:a1:e6:85:d4:e2:eb:15:f7: 2d:3b:d6:e8:0e:a0:04:c1:2d:3a:be:47:47:3e:57:93:ef:05: 67:c8:1e:06:ba:2d:46:46:c6:e0:6a:a1:39:a3:78:9d:5b:16: 15:b9:88:8f:1a:74:6f:a5:76:28:9c:31:ba:09:85:29:ec:e7: a3:95:52:5e:f5:16:f2:08:4a:3b:c8:92:1e:9b:f0:44:37:ca: 72:44:23:bc:9c:8a:65:07:e2:ec:e0:17:a3:eb:49:b9:59:c7: b5:40:8c:5f:2a:d1:15:f4:61:8d:80:91:c1:ba:7e:a6:39:6f: c6:73:21:8a:23:6c:5b:22:aa:6d:af:eb:b9:58:50:1b:30:e8: eb:3b:76:e1:94:dd:69:61:97:7c:41:9c:6a:7f:03:e7:51:89: 51:29:e1:74:ad:c5:ca:1e:2f:b0:ad:2e:30:d2:de:d6:bd:94: d8:f8:64:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDI1RTExMC8GA1UEBRMoODlCQTkwQ0I3RDQ0MkE4Mzg3QzZBQjkzMDczOENBMjAw RTEzN0JBRDAeFw0yNTExMDMwNzU2MThaFw0yNTExMTAwNzU2MThaMBgxFjAUBgNV BAMTDTY5MDg2MDIzLTQyOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDz6xpfj4Q0ylrEbfMOSLl/NSBMNo4tpq3Ti6EppscDIaX6GvClS9/49fYb0HiT 16cy0Co1sq/EsDHGl8778kvZS41WVnBYdmTM0OIIjDQZUfUZ5s1uC0xy/BnOQRaR ivUXe3tUca8fEEuqzUzKcMQ/ywVHulocnknNaPBbheh/KOT5kRko9gnBAuh9XmiT kYU8NmEAnBVY8BFBLM5/W2UPWTg3gI8/H1+L6e/2rd+fQR43SLgiEtBi15q+tpPI kE7DrVR1yctLP1ltvwi5Bmr2mGUamXCPdsoqfG9miFghmVX+fVMj9LZpU/vGc49F Zxrrf1Vu5pLKMIPtAtsTs/Q/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlYquYlVb Zk4auraBHoLbrN0qxSYwHwYDVR0jBBgwFoAUibqQy31EKoOHxquTBzjKIA4Te60w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMjVFLzM1NUJFQzg2QTI3 QjExRjA5ODBGRDA0QUM0RjlBRTAyL2licVF5MzFFS29PSHhxdVRCempLSUE0VGU2 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaWJxUXkzMUVLb09IeHF1VEJ6aktJQTRUZTYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MjVFLzM1NUJFQzg2QTI3QjExRjA5ODBGRDA0QUM0RjlBRTAyL2licVF5MzFFS29P SHhxdVRCempLSUE0VGU2MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGNiM6d0k/RQJEuOmKjTk4IrW7qIhF1pJrh+9YqEg1VKx3x7MxdicbKB 2dgQjz/LFhB/IzUs9vQ/STnpQnN5sDVbOgHI/LjwcIGuys3odFOKzo6h5oXU4usV 9y071ugOoATBLTq+R0c+V5PvBWfIHga6LUZGxuBqoTmjeJ1bFhW5iI8adG+ldiic MboJhSns56OVUl71FvIISjvIkh6b8EQ3ynJEI7ycimUH4uzgF6PrSblZx7VAjF8q 0RX0YY2AkcG6fqY5b8ZzIYojbFsiqm2v67lYUBsw6Os7duGU3Wlhl3xBnGp/A+dR iVEp4XStxcoeL7CtLjDS3ta9lNj4ZIM= -----END CERTIFICATE-----Generated at Tue Nov 4 19:13:52 2025 by rpki-client