$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft File: IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft (raw, json) Hash identifier: qrslTmHuaztXbinGtlkkwqoU6b9gAvCEnD7mP2D3JEQ= Subject key identifier: 67:EC:EF:7A:F0:55:6A:DB:1A:72:DB:EA:A7:A8:5E:C0:69:7F:B8:B5 Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Certificate serial: 08AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft Manifest number: 0871 Signing time: Sun 02 Nov 2025 20:42:35 +0000 Manifest this update: Sun 02 Nov 2025 20:42:35 +0000 Manifest next update: Sun 09 Nov 2025 20:42:35 +0000 Files and hashes: 1: IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl (hash: YJtsB2z9fQFlwJzJVtH3jI2SF+Wn8ghkUnyC9Ak9aGY=) 2: EF40C4AC404611EFA2014651C4F9AE02.roa (hash: RS+KqDnuBA3KXl6QfXiySnp4B7GTc2r4VfCYjRG5dSM=) 3: 4A06FF10FF2711EAB7D5F235C4F9AE02.roa (hash: 4dlrQ4m4GuqrlwQC8/clahOIGGqO7yOvH8v7wChtYp8=) 4: C8C64A4AED4D11EA895BC037C4F9AE02.roa (hash: DYR7hTrI+N8bTdN4wmisSUlD2zvzUkj32q6n8M3PxAo=) 5: 35D16082404911EFBC4C610EC4F9AE02.roa (hash: jpc6lBRritONGgyplkUaQHNQHS5taTwFmNFIPI83gfg=) 6: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (hash: ifnttSikDir1yImvAFVipioa7skYYnhRDTcV+wTBhrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2219 (0x8ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B Validity Not Before: Nov 2 20:42:35 2025 GMT Not After : Nov 9 20:42:35 2025 GMT Subject: CN=6907c23b-360d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:70:a6:a9:df:97:fa:ff:3b:7e:8e:1b:62:91: 55:8f:8e:88:89:9d:d3:fd:7f:ce:a0:8e:57:9d:e3: ed:4b:95:7f:66:e7:fa:e3:49:86:8f:96:4e:3f:81: 6c:9f:f9:20:72:04:6e:4d:0e:99:8c:ef:a5:45:a6: ef:d1:f0:30:f2:9c:ce:35:b4:67:65:8b:3e:a3:8e: 17:22:23:df:41:fc:0e:7a:50:b1:05:5c:fe:bc:f6: f7:c5:bc:39:40:a4:00:1e:26:c2:e2:7d:5a:5f:a6: b2:80:bb:57:1a:53:2c:34:49:21:08:dd:b3:53:df: c8:75:17:28:a3:73:8d:de:36:e2:bf:4a:10:33:33: 94:ce:bd:c3:d2:68:db:b9:f5:2c:d4:61:ad:65:57: 26:53:c6:b1:2e:21:70:d2:3b:5a:26:47:ae:23:0a: 03:93:de:0d:11:06:8f:bb:da:39:c7:5f:36:85:65: dd:5c:82:d1:93:51:f3:14:cb:b8:51:42:1d:54:22: 72:d6:5c:65:d6:7d:e3:12:ee:4d:6c:c8:e7:da:ff: 26:0c:9a:ea:6e:3c:69:78:c4:76:b9:a2:76:cf:f8: f3:69:ae:22:04:2f:e3:64:75:9c:1f:77:53:5b:bd: 9e:ed:df:40:93:b7:7c:35:93:90:c5:d6:2b:0d:98: 86:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:EC:EF:7A:F0:55:6A:DB:1A:72:DB:EA:A7:A8:5E:C0:69:7F:B8:B5 X509v3 Authority Key Identifier: keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:5c:c1:f0:3e:e0:30:18:ac:15:7a:7b:84:a7:dc:06:ef:fa: 6e:e2:f3:3b:82:88:ed:6b:a2:2f:b1:40:7e:14:71:ab:74:64: 5b:d7:d4:e3:f6:6a:c0:a0:1e:22:b1:7f:b7:30:74:e6:d6:40: 0d:bc:74:5f:ba:b4:b4:a3:b9:1b:04:86:3c:89:65:60:02:62: d2:9a:87:e8:cb:99:64:12:6c:3e:dc:62:f6:4e:23:43:3d:4f: 31:13:26:3e:0d:02:de:64:12:30:02:00:29:20:cd:b4:a4:ff: 80:c1:b4:7c:e5:0d:42:3c:31:a0:25:27:cb:20:5a:58:fa:f3: c9:f0:dc:e5:00:64:35:ed:4d:c6:40:74:8d:3c:9b:89:e4:8e: d5:8e:80:78:62:84:8c:e5:11:a0:ae:2f:0a:c9:2e:28:7e:0d: 90:69:e5:9a:3e:a2:6b:7f:f1:ad:f4:75:11:9b:3c:48:11:a8: c1:17:ef:05:0a:2b:f2:62:63:31:6e:12:ba:7c:e0:54:09:00: 76:09:1c:ab:67:f1:b2:1b:c5:79:27:d9:44:05:48:6a:6e:7d: d7:8a:6f:a6:04:a0:8b:79:31:c1:94:3a:05:c4:78:53:69:cf: 9a:92:83:d8:0a:1a:fd:5b:6b:ac:20:fb:6b:5f:c7:fc:0b:a2: 9c:0f:6a:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2RDkxMTAvBgNVBAUTKDIxOUVBNjNDNkFDOTY2RERCMjg1ODg2QkQ3MTFDNzhB MTRERjUxMkIwHhcNMjUxMTAyMjA0MjM1WhcNMjUxMTA5MjA0MjM1WjAYMRYwFAYD VQQDEw02OTA3YzIzYi0zNjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3Cmqd+X+v87fo4bYpFVj46IiZ3T/X/OoI5XnePtS5V/Zuf640mGj5ZOP4Fs n/kgcgRuTQ6ZjO+lRabv0fAw8pzONbRnZYs+o44XIiPfQfwOelCxBVz+vPb3xbw5 QKQAHibC4n1aX6aygLtXGlMsNEkhCN2zU9/IdRcoo3ON3jbiv0oQMzOUzr3D0mjb ufUs1GGtZVcmU8axLiFw0jtaJkeuIwoDk94NEQaPu9o5x182hWXdXILRk1HzFMu4 UUIdVCJy1lxl1n3jEu5NbMjn2v8mDJrqbjxpeMR2uaJ2z/jzaa4iBC/jZHWcH3dT W72e7d9Ak7d8NZOQxdYrDZiGIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfs73rw VWrbGnLb6qeoXsBpf7i1MB8GA1UdIwQYMBaAFCGepjxqyWbdsoWIa9cRx4oU31Er MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZEOS84MERGREVDMEU1 REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0MnloWWhyMXhISGloVGZV U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0laNm1QR3JKWnQyeWhZaHIxeEhIaWhUZlVTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTZEOS84MERGREVDMEU1REQxMUVBQjI0NjhENjVDNEY5QUUwMi9JWjZtUEdySlp0 MnloWWhyMXhISGloVGZVU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkXMHwPuAwGKwVenuEp9wG7/pu4vM7gojta6IvsUB+FHGrdGRb19Tj 9mrAoB4isX+3MHTm1kANvHRfurS0o7kbBIY8iWVgAmLSmofoy5lkEmw+3GL2TiND PU8xEyY+DQLeZBIwAgApIM20pP+AwbR85Q1CPDGgJSfLIFpY+vPJ8NzlAGQ17U3G QHSNPJuJ5I7VjoB4YoSM5RGgri8KyS4ofg2QaeWaPqJrf/Gt9HURmzxIEajBF+8F CivyYmMxbhK6fOBUCQB2CRyrZ/GyG8V5J9lEBUhqbn3Xim+mBKCLeTHBlDoFxHhT ac+akoPYChr9W2usIPtrX8f8C6KcD2rt -----END CERTIFICATE-----Generated at Tue Nov 4 20:20:50 2025 by rpki-client