$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft File: IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft (raw, json) Hash identifier: ystSCeQIaRqB6uvSFo7iBQHOhWu7dNVr6ZnzDbZdSvk= Subject key identifier: 13:F8:C8:16:8F:70:09:D5:A2:0D:13:FF:7D:4E:61:05:AB:04:CD:8B Authority key identifier: 21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 Certificate issuer: /CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Certificate serial: 0541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft Manifest number: 053A Signing time: Sun 02 Nov 2025 23:28:09 +0000 Manifest this update: Sun 02 Nov 2025 23:28:09 +0000 Manifest next update: Sun 09 Nov 2025 23:28:09 +0000 Files and hashes: 1: IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl (hash: lvlURr89R1Pq94jxbJyJj2oj1+pfQ0xUVCQxna21li0=) 2: 6084E4F217E811EC8A22700DC4F9AE02.roa (hash: WpqCjTjP9KCfjNLt14+mScZN2fCuV4hnCNhQMCWaA5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1345 (0x541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8B44, serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Validity Not Before: Nov 2 23:28:09 2025 GMT Not After : Nov 9 23:28:09 2025 GMT Subject: CN=6907e909-dd63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b0:bf:52:de:84:55:05:82:f9:19:26:92:27: 8a:1e:9b:c2:76:bb:57:f3:c1:08:d5:68:37:28:64: b8:ef:16:a1:d5:46:69:01:0a:18:6a:50:16:81:59: 81:f8:9f:78:ee:81:d2:a2:1e:30:72:5b:37:5e:fd: 08:8c:8c:66:69:c3:58:7a:f1:53:65:b6:e1:87:75: 51:e5:ba:b7:c5:46:ba:7b:cf:6b:e9:af:56:4f:a8: 05:4b:1f:bf:e3:01:f2:16:fb:db:15:77:19:b1:42: 16:79:d6:e0:3d:da:d0:2b:d0:22:00:b8:9a:d5:9e: 24:92:ba:06:76:11:20:25:bf:84:14:98:b9:0b:43: 22:96:43:dc:64:7a:4d:88:a4:17:23:f8:cc:21:bb: 11:e3:d0:de:73:0a:60:95:a6:18:c4:26:a9:04:1e: 89:2d:a1:6d:44:56:87:82:25:09:15:a1:ac:4d:3f: b1:62:58:d7:4e:c7:e5:75:f7:32:1d:d2:bc:c1:cd: 83:78:07:fb:fe:f8:7a:65:54:0e:ad:5b:21:be:6b: f0:c8:b9:08:0e:13:df:58:ed:9c:2e:4d:0b:0f:9b: c0:c1:2d:32:63:77:46:eb:c0:69:c8:4e:1d:66:ee: 4e:35:d8:36:20:25:ed:7a:10:e4:21:a4:d1:ae:c6: bf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F8:C8:16:8F:70:09:D5:A2:0D:13:FF:7D:4E:61:05:AB:04:CD:8B X509v3 Authority Key Identifier: keyid:21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:f0:93:06:6d:1a:ca:6f:b0:03:5d:a9:6e:0e:bc:6e:24:d4: 5c:0a:e8:a8:5d:68:f1:ae:4a:ab:a3:ab:e8:70:fc:cb:e3:ec: 36:1e:9c:75:57:99:77:a5:5c:f0:5e:fb:de:61:2f:86:1a:5e: 8d:40:68:a6:5b:ee:2f:77:6a:f1:e2:5f:da:9c:ad:6c:d7:19: 73:cb:eb:ba:19:58:28:e6:de:d3:42:a2:d4:d3:bb:b9:c8:d1: 7f:7b:f3:b0:7f:da:41:39:a9:7c:8c:31:a4:48:95:9b:6c:de: 09:11:38:86:33:41:5d:1a:42:0a:f2:30:d3:5d:35:b4:d0:bb: 3d:8b:56:6a:0f:f7:51:26:86:48:0f:cb:2b:7b:19:b2:57:20: ce:31:eb:e2:44:9f:a6:44:38:49:7a:b9:4b:c4:16:11:36:ed: d1:bf:d2:5b:bd:f9:4b:4a:a1:4b:68:d8:68:fd:4c:fd:37:89: 8d:f2:3a:4d:94:2a:ae:ae:81:78:6d:c3:ce:07:7d:d3:05:ca: 79:9a:d2:dd:e0:75:e8:5f:e7:c0:79:68:89:64:b0:28:48:29: 30:f2:96:33:a4:2d:8c:f0:23:f2:7e:7b:9f:d5:33:0b:4e:11: 87:58:6a:04:05:69:c6:50:10:8a:f9:bc:2e:0d:a7:73:45:dc: 67:d7:63:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCNDQxMTAvBgNVBAUTKDIxRjcxM0M4MDhCQ0QxNEJGQ0JDQ0ZENDYyNzNDMjBF RDA3QjQxMDcwHhcNMjUxMTAyMjMyODA5WhcNMjUxMTA5MjMyODA5WjAYMRYwFAYD VQQDEw02OTA3ZTkwOS1kZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bC/Ut6EVQWC+RkmkieKHpvCdrtX88EI1Wg3KGS47xah1UZpAQoYalAWgVmB +J947oHSoh4wcls3Xv0IjIxmacNYevFTZbbhh3VR5bq3xUa6e89r6a9WT6gFSx+/ 4wHyFvvbFXcZsUIWedbgPdrQK9AiALia1Z4kkroGdhEgJb+EFJi5C0MilkPcZHpN iKQXI/jMIbsR49DecwpglaYYxCapBB6JLaFtRFaHgiUJFaGsTT+xYljXTsfldfcy HdK8wc2DeAf7/vh6ZVQOrVshvmvwyLkIDhPfWO2cLk0LD5vAwS0yY3dG68BpyE4d Zu5ONdg2ICXtehDkIaTRrsa/uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBP4yBaP cAnVog0T/31OYQWrBM2LMB8GA1UdIwQYMBaAFCH3E8gIvNFL/LzP1GJzwg7Qe0EH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEI0NC9GM0IxNjRBQzE3 RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBVdjh2TV9VWW5QQ0R0QjdR UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmY1R5QWk4MFV2OHZNX1VZblBDRHRCN1FRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEI0NC9GM0IxNjRBQzE3RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBV djh2TV9VWW5QQ0R0QjdRUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ8JMGbRrKb7ADXaluDrxuJNRcCuioXWjxrkqro6vocPzL4+w2Hpx1 V5l3pVzwXvveYS+GGl6NQGimW+4vd2rx4l/anK1s1xlzy+u6GVgo5t7TQqLU07u5 yNF/e/Owf9pBOal8jDGkSJWbbN4JETiGM0FdGkIK8jDTXTW00Ls9i1ZqD/dRJoZI D8srexmyVyDOMeviRJ+mRDhJerlLxBYRNu3Rv9JbvflLSqFLaNho/Uz9N4mN8jpN lCquroF4bcPOB33TBcp5mtLd4HXoX+fAeWiJZLAoSCkw8pYzpC2M8CPyfnuf1TML ThGHWGoEBWnGUBCK+bwuDadzRdxn12NW -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:19 2025 by rpki-client