$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft File: ihuLzV7XzXIsUwBJjkqTZdBGo04.mft (raw, json) Hash identifier: CPebpRzSmBbpPNWIbQAxdOQSuAPXCfZ+lJ1p5p7Shbc= Subject key identifier: B7:07:5E:0A:C5:A8:19:40:64:C6:CB:08:DD:92:0A:B7:08:AD:1C:98 Authority key identifier: 8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E Certificate issuer: /CN=A91E01C6/serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E Certificate serial: 08A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft Manifest number: 089D Signing time: Tue 04 Nov 2025 20:38:15 +0000 Manifest this update: Tue 04 Nov 2025 20:38:14 +0000 Manifest next update: Tue 11 Nov 2025 20:38:14 +0000 Files and hashes: 1: ihuLzV7XzXIsUwBJjkqTZdBGo04.crl (hash: kiP2fit+xvdQmq3PiWaBkvi6wzxLHcr58zgJHHh6kSQ=) 2: CDC4A66EB5D311F097B6F31AC4F9AE02.roa (hash: 0U2UzSeX+8X8p0vtFdtnhJYB/u+V+ECpwF6fLjeJjJM=) 3: 22C5D8D6B5D411F08AD0FB40C4F9AE02.roa (hash: pKtqMGKpIrqHakiwAGLWGm0afCAyap0SV9Av201+Rdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2217 (0x8a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01C6, serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E Validity Not Before: Nov 4 20:38:14 2025 GMT Not After : Nov 11 20:38:14 2025 GMT Subject: CN=690a6436-daa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ea:5d:02:20:77:d3:44:38:c7:15:dc:0d:d3: 48:19:62:e5:b5:2d:c8:0a:2f:fa:eb:c0:4c:d9:db: 92:b1:f6:63:64:5b:c3:f6:3e:4f:d6:23:32:90:9f: 58:a0:aa:b9:80:47:2b:da:9f:92:e5:32:1c:46:8c: f1:3f:1f:6c:44:bb:32:b1:ec:5e:d4:68:3c:8e:2b: a5:ef:42:7b:48:f2:69:a8:1f:e3:ea:4b:51:5d:53: e8:fb:40:d7:0a:2e:f4:60:c1:9f:70:14:66:ca:46: d6:f7:9e:39:ac:3a:52:91:8e:d9:5b:6a:05:3b:db: 81:51:c0:4a:03:a6:16:39:5d:14:3f:b1:27:84:15: 0f:35:eb:cd:38:6b:fa:f2:ac:1c:38:17:47:cb:56: 77:49:48:13:43:f3:8a:b8:54:f7:92:f8:07:41:10: 6c:80:1c:13:b7:8d:a6:be:59:8c:9b:59:fa:71:ef: c9:5c:27:1c:53:73:09:e0:e0:10:20:0a:0f:70:d7: 2c:cb:62:f3:66:94:4c:9b:5d:0b:7c:19:99:dd:fc: 27:a3:77:b3:c2:c6:d5:89:1a:5e:fb:2a:7b:aa:f7: db:63:aa:60:c7:c1:da:af:c8:f9:67:df:ef:8c:f8: 56:71:27:7a:fa:59:42:99:b0:13:b4:35:a3:73:95: ea:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:07:5E:0A:C5:A8:19:40:64:C6:CB:08:DD:92:0A:B7:08:AD:1C:98 X509v3 Authority Key Identifier: keyid:8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:f5:9a:0a:27:21:d9:e4:4b:b8:04:a3:bf:1d:3e:46:7c:f7: 1b:0d:d7:26:db:30:6c:8e:75:60:05:46:aa:9e:b1:3e:ab:29: 1b:a1:06:29:a4:26:85:c0:89:46:e4:e5:c0:4a:4a:c9:fb:e3: 04:ae:dd:9a:b3:1d:6d:07:4b:1d:e5:96:a9:c9:a6:cf:ec:35: f5:86:68:fe:22:2a:79:c7:71:68:fd:54:51:f5:18:5f:46:0e: 26:09:a2:b7:4d:65:c5:62:12:e7:17:96:e2:d7:b5:8e:9e:15: a2:f4:d1:30:06:bc:22:5f:8a:8d:36:d7:f6:f9:8d:7a:ca:2f: 13:b3:fc:34:22:dd:07:17:98:02:41:12:21:02:8c:51:5d:ac: cc:49:2c:c2:d1:f2:42:41:07:c8:c7:7d:4b:59:87:13:a7:ad: 88:1e:40:80:39:bb:9a:84:d3:5b:e4:b5:e0:ef:bb:1a:b9:99: 52:97:dc:b2:86:1e:2e:7b:89:5f:60:0e:59:93:15:7d:bb:b5: e3:d0:b8:da:18:cf:80:82:ca:1f:0d:18:df:06:52:17:c3:2c: 3b:a2:ce:3c:49:fb:f7:88:44:63:c8:92:72:b4:0e:f6:23:b8: 93:62:78:71:43:7e:bc:bf:52:81:8c:a1:cf:d8:c4:db:76:3c: f0:a6:6a:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQzYxMTAvBgNVBAUTKDhBMUI4QkNENUVEN0NENzIyQzUzMDA0OThFNEE5MzY1 RDA0NkEzNEUwHhcNMjUxMTA0MjAzODE0WhcNMjUxMTExMjAzODE0WjAYMRYwFAYD VQQDEw02OTBhNjQzNi1kYWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyupdAiB300Q4xxXcDdNIGWLltS3ICi/668BM2duSsfZjZFvD9j5P1iMykJ9Y oKq5gEcr2p+S5TIcRozxPx9sRLsysexe1Gg8jiul70J7SPJpqB/j6ktRXVPo+0DX Ci70YMGfcBRmykbW9545rDpSkY7ZW2oFO9uBUcBKA6YWOV0UP7EnhBUPNevNOGv6 8qwcOBdHy1Z3SUgTQ/OKuFT3kvgHQRBsgBwTt42mvlmMm1n6ce/JXCccU3MJ4OAQ IAoPcNcsy2LzZpRMm10LfBmZ3fwno3ezwsbViRpe+yp7qvfbY6pgx8Har8j5Z9/v jPhWcSd6+llCmbATtDWjc5XqqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcHXgrF qBlAZMbLCN2SCrcIrRyYMB8GA1UdIwQYMBaAFIobi81e181yLFMASY5Kk2XQRqNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFDNi80OTFDOENFNkND OTExMUVBOEE1OUVGNDZDNEY5QUUwMi9paHVMelY3WHpYSXNVd0JKamtxVFpkQkdv MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lodUx6VjdYelhJc1V3Qkpqa3FUWmRCR28wNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFDNi80OTFDOENFNkNDOTExMUVBOEE1OUVGNDZDNEY5QUUwMi9paHVMelY3WHpY SXNVd0JKamtxVFpkQkdvMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg9ZoKJyHZ5Eu4BKO/HT5GfPcbDdcm2zBsjnVgBUaqnrE+qykboQYp pCaFwIlG5OXASkrJ++MErt2asx1tB0sd5ZapyabP7DX1hmj+Iip5x3Fo/VRR9Rhf Rg4mCaK3TWXFYhLnF5bi17WOnhWi9NEwBrwiX4qNNtf2+Y16yi8Ts/w0It0HF5gC QRIhAoxRXazMSSzC0fJCQQfIx31LWYcTp62IHkCAObuahNNb5LXg77sauZlSl9yy hh4ue4lfYA5ZkxV9u7Xj0LjaGM+AgsofDRjfBlIXwyw7os48Sfv3iERjyJJytA72 I7iTYnhxQ368v1KBjKHP2MTbdjzwpmqU -----END CERTIFICATE-----Generated at Wed Nov 5 10:30:32 2025 by rpki-client