$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft File: I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft (raw, json) Hash identifier: z8xNSIrq/COPtiTOvJGzQRmhTPP8JtoWFtl0Q96WNcs= Subject key identifier: 3A:41:A6:60:60:13:AA:C0:E8:18:86:DD:8C:45:B1:11:4C:DA:8C:97 Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Certificate serial: 194B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft Manifest number: 193F Signing time: Tue 04 Nov 2025 16:31:21 +0000 Manifest this update: Tue 04 Nov 2025 16:31:20 +0000 Manifest next update: Tue 11 Nov 2025 16:31:20 +0000 Files and hashes: 1: I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl (hash: ZudQyZDnVYYH4pxvBA8glCueXcGff+77XA3oRzLZzd8=) 2: D421D958881611E78B9B0850C4F9AE02.roa (hash: jwMU1HqTvqxMmK/7tE3BOcmdI4jJyKnBQ4irQO6dgGw=) 3: D57C98A88C0311EFAA53FF12C4F9AE02.roa (hash: x3Si4KMD2wvo6rCmh6bPANGnveohQUAF1yIi2AXTiDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6475 (0x194b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Validity Not Before: Nov 4 16:31:20 2025 GMT Not After : Nov 11 16:31:20 2025 GMT Subject: CN=690a2a59-a811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:04:57:e5:26:be:eb:d3:0e:65:97:09:0f:d8: 27:b9:90:ca:50:bc:46:ad:22:00:5a:48:84:a3:59: 23:9d:f8:fd:1a:57:24:26:9b:3f:44:73:3f:61:81: e3:93:18:5a:50:22:0f:53:ed:09:81:3d:9a:e8:c4: 0a:1b:f2:24:ad:5d:fc:fe:13:fe:4a:64:93:04:52: 58:5b:5f:29:17:ca:77:ed:5d:6b:7e:32:ff:d9:2c: ff:a3:24:87:89:7f:56:86:1d:9b:9e:85:aa:30:ab: fd:58:d2:fc:15:dd:12:a0:e4:6c:ec:80:ba:f7:c2: d6:97:70:70:dc:e2:7f:ec:28:57:17:b3:df:0d:41: 88:3a:2a:fe:ef:b8:a0:51:34:4c:31:8a:7d:1c:b2: 1f:ce:0c:77:d2:1b:9f:2c:c2:5b:80:7b:7d:f4:d3: 00:fb:6f:fb:de:d2:6c:1d:ad:5c:f1:98:4f:df:9b: 6a:4f:b3:99:97:b1:0c:e6:81:84:2f:dc:4e:1b:3e: df:f6:55:66:21:4e:bb:5b:1c:4d:33:63:34:1e:0b: a4:26:43:01:44:10:a4:d8:a9:04:f2:5b:6b:41:45: 09:85:75:09:be:c3:81:77:7c:ca:a4:5b:d6:69:d4: 84:50:e7:7b:a2:0c:c8:25:ee:74:9a:42:0b:72:1f: 23:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:41:A6:60:60:13:AA:C0:E8:18:86:DD:8C:45:B1:11:4C:DA:8C:97 X509v3 Authority Key Identifier: keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:5d:92:08:d9:58:c2:8e:b7:02:7d:fe:2c:dd:57:08:5c:b7: 3a:95:43:5e:ad:bd:67:4c:a1:b2:a9:98:c7:fb:2f:f7:81:ef: 4c:83:96:57:2f:d7:80:5e:08:61:f3:5a:33:b1:12:5c:e2:26: 7e:49:ca:c7:d7:30:bf:9e:8c:ee:25:bd:99:bf:80:c2:c3:26: 7f:78:99:70:30:32:64:31:b7:56:30:75:ca:9b:1d:f9:b0:f8: ed:7a:b2:6b:e6:1e:e2:83:9a:66:64:eb:ae:9e:94:40:9c:25: ee:40:c7:46:71:79:57:7a:38:fa:25:1b:c9:73:14:2b:bc:53: 36:41:3c:41:bb:7b:70:d5:43:1b:45:d0:77:57:30:3c:45:2e: 9a:e3:26:6e:af:d4:42:84:6d:3f:cb:a3:8a:e8:33:e2:28:33: 40:af:34:46:06:9a:db:5c:a7:a8:e8:42:c3:d8:2d:d5:f5:aa: 13:4a:43:e8:6d:bd:c1:34:67:62:7a:4a:62:06:20:c4:8a:ab: 7e:b2:f3:35:14:a3:7c:29:f5:34:08:27:c2:56:7a:d2:d5:10: 57:02:61:ce:09:36:01:66:42:38:37:80:6b:9c:d4:79:f0:5b: 47:2f:5b:6f:0f:41:50:15:9d:7c:0e:13:36:3e:c7:d4:13:2a: ee:e2:dd:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MkExMTAvBgNVBAUTKDIzQjk2MDM3QUI4QUQyMzdFNjMyNkY3RUQwRjgxRTMx OEU4QTE0QUIwHhcNMjUxMTA0MTYzMTIwWhcNMjUxMTExMTYzMTIwWjAYMRYwFAYD VQQDEw02OTBhMmE1OS1hODExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gRX5Sa+69MOZZcJD9gnuZDKULxGrSIAWkiEo1kjnfj9GlckJps/RHM/YYHj kxhaUCIPU+0JgT2a6MQKG/IkrV38/hP+SmSTBFJYW18pF8p37V1rfjL/2Sz/oySH iX9Whh2bnoWqMKv9WNL8Fd0SoORs7IC698LWl3Bw3OJ/7ChXF7PfDUGIOir+77ig UTRMMYp9HLIfzgx30hufLMJbgHt99NMA+2/73tJsHa1c8ZhP35tqT7OZl7EM5oGE L9xOGz7f9lVmIU67WxxNM2M0HgukJkMBRBCk2KkE8ltrQUUJhXUJvsOBd3zKpFvW adSEUOd7ogzIJe50mkILch8jNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpBpmBg E6rA6BiG3YxFsRFM2oyXMB8GA1UdIwQYMBaAFCO5YDeritI35jJvftD4HjGOihSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkyQS9GODEwRTlBNDg4 MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBqZm1NbTktMFBnZU1ZNktG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3bGdONnVLMGpmbU1tOS0wUGdlTVk2S0ZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODkyQS9GODEwRTlBNDg4MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBq Zm1NbTktMFBnZU1ZNktGS3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjXZII2VjCjrcCff4s3VcIXLc6lUNerb1nTKGyqZjH+y/3ge9Mg5ZX L9eAXghh81ozsRJc4iZ+ScrH1zC/nozuJb2Zv4DCwyZ/eJlwMDJkMbdWMHXKmx35 sPjterJr5h7ig5pmZOuunpRAnCXuQMdGcXlXejj6JRvJcxQrvFM2QTxBu3tw1UMb RdB3VzA8RS6a4yZur9RChG0/y6OK6DPiKDNArzRGBprbXKeo6ELD2C3V9aoTSkPo bb3BNGdiekpiBiDEiqt+svM1FKN8KfU0CCfCVnrS1RBXAmHOCTYBZkI4N4BrnNR5 8FtHL1tvD0FQFZ18DhM2PsfUEyru4t1R -----END CERTIFICATE-----Generated at Wed Nov 5 04:49:37 2025 by rpki-client