$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft File: Iln4cJbkCts8hBgOKLVsPogi9lE.mft (raw, json) Hash identifier: YKpZBtmZ4HQ8nEcCfUmskkRIrUAex0VmQ0lBFOAava4= Subject key identifier: 89:29:70:79:10:D3:22:D6:93:E6:07:7F:46:04:4C:F9:38:9D:7F:A0 Authority key identifier: 22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51 Certificate issuer: /CN=A91E9B89/serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft Manifest number: DD Signing time: Wed 05 Nov 2025 05:44:55 +0000 Manifest this update: Wed 05 Nov 2025 05:44:54 +0000 Manifest next update: Wed 12 Nov 2025 05:44:54 +0000 Files and hashes: 1: Iln4cJbkCts8hBgOKLVsPogi9lE.crl (hash: Fdox8D2c70c4zqPXP2RHFVRafN86eYz31M3R1+Y2Fw0=) 2: CCFF219C6C1811EFA5619D0FC4F9AE02.roa (hash: 1z2L3hbnupa67ptFJmJyr3scDytw356F08ze+2XPBpo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B89, serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651 Validity Not Before: Nov 5 05:44:54 2025 GMT Not After : Nov 12 05:44:54 2025 GMT Subject: CN=690ae456-3675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:40:bb:db:bf:26:6c:e3:b9:d5:55:b0:e1:ae: ad:18:3a:49:c5:6f:0d:66:b8:5f:22:78:dd:c5:ee: bd:1a:7e:d3:b2:72:88:90:c0:a0:55:5f:00:dc:48: 7f:fb:7f:9c:48:d4:7f:bf:36:12:2a:23:4a:34:10: 29:5d:ca:02:92:36:99:91:4c:28:1d:01:68:77:9d: 7d:7a:78:08:7f:e3:7d:66:81:c5:f8:96:29:63:f9: 24:29:da:8f:86:30:68:ad:c8:7e:ba:45:b5:9d:96: da:76:b2:e4:9b:1e:c6:4b:e8:63:32:fa:59:15:81: 9e:46:93:1f:fe:4f:65:2a:9a:f6:3d:1a:d4:03:2a: 70:13:48:36:18:86:ea:6d:99:42:0d:08:7d:1c:e6: ef:87:d0:af:3c:fa:9a:23:10:76:f2:f1:58:3a:32: 2a:45:d7:b4:9e:2b:54:c1:df:fd:dd:94:42:82:2b: 43:12:9a:40:39:3d:7e:32:49:78:08:de:28:37:86: 73:90:b1:7e:93:28:a2:bc:b9:37:e6:ef:92:e9:3a: ce:d5:63:4f:ce:14:ff:7a:67:a9:86:84:d8:43:ed: 8b:6a:14:0f:99:b3:c9:25:b9:87:e1:17:47:27:23: 56:f0:09:f8:86:ad:8c:1e:77:a8:0e:12:55:25:38: f2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:29:70:79:10:D3:22:D6:93:E6:07:7F:46:04:4C:F9:38:9D:7F:A0 X509v3 Authority Key Identifier: keyid:22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:04:aa:4a:fe:46:08:19:1c:ac:2e:8d:1b:bc:79:83:0f:db: 20:d9:8d:01:ef:54:81:2f:e6:55:4f:25:33:2c:7c:76:a0:3d: c8:e0:6c:b0:46:d8:68:3f:eb:39:f3:26:2d:05:03:24:49:2e: 13:b7:a5:31:3d:d2:b8:72:3d:0b:29:db:ef:b7:e9:4f:1d:f9: 30:5d:34:f6:93:de:09:d1:31:e8:c0:6c:aa:5e:20:0f:22:ec: 90:eb:84:12:a1:f6:6e:03:ca:f2:f0:a1:06:ec:98:3a:24:a4: 2d:c6:b8:84:1f:ac:c4:eb:9a:b6:b2:9d:b6:de:59:3b:ef:32: 85:52:f0:88:37:94:07:f1:d7:6c:83:cb:9f:84:3a:40:0b:32: 3c:a5:61:74:36:da:5f:37:43:fd:b5:8d:a7:02:1f:2b:7f:9b: 8a:9b:ac:f1:ff:68:ae:80:7d:6f:7b:21:b0:3b:d7:1e:f1:0d: 8d:68:3b:28:8c:40:ed:16:51:21:66:5f:31:da:99:fc:ff:e4: 54:ce:ee:65:92:7a:10:55:91:0e:0e:18:ac:47:6f:cd:bb:2a: ed:20:87:3f:83:1e:ec:59:96:0e:ca:33:e5:22:b5:9c:d4:78: fb:c6:67:63:17:6a:0a:ea:4f:0c:4e:09:1b:a4:d7:52:27:80: d2:62:42:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlCODkxMTAvBgNVBAUTKDIyNTlGODcwOTZFNDBBREIzQzg0MTgwRTI4QjU2QzNF ODgyMkY2NTEwHhcNMjUxMTA1MDU0NDU0WhcNMjUxMTEyMDU0NDU0WjAYMRYwFAYD VQQDEw02OTBhZTQ1Ni0zNjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0C7278mbOO51VWw4a6tGDpJxW8NZrhfInjdxe69Gn7TsnKIkMCgVV8A3Eh/ +3+cSNR/vzYSKiNKNBApXcoCkjaZkUwoHQFod519engIf+N9ZoHF+JYpY/kkKdqP hjBorch+ukW1nZbadrLkmx7GS+hjMvpZFYGeRpMf/k9lKpr2PRrUAypwE0g2GIbq bZlCDQh9HObvh9CvPPqaIxB28vFYOjIqRde0nitUwd/93ZRCgitDEppAOT1+Mkl4 CN4oN4ZzkLF+kyiivLk35u+S6TrO1WNPzhT/emephoTYQ+2LahQPmbPJJbmH4RdH JyNW8An4hq2MHneoDhJVJTjySQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkpcHkQ 0yLWk+YHf0YETPk4nX+gMB8GA1UdIwQYMBaAFCJZ+HCW5ArbPIQYDii1bD6IIvZR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUI4OS8zQTlDOEE1NjZD MTgxMUVGQUI2QjY5MENDNEY5QUUwMi9JbG40Y0pia0N0czhoQmdPS0xWc1BvZ2k5 bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lsbjRjSmJrQ3RzOGhCZ09LTFZzUG9naTlsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUI4OS8zQTlDOEE1NjZDMTgxMUVGQUI2QjY5MENDNEY5QUUwMi9JbG40Y0pia0N0 czhoQmdPS0xWc1BvZ2k5bEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdBKpK/kYIGRysLo0bvHmDD9sg2Y0B71SBL+ZVTyUzLHx2oD3I4Gyw RthoP+s58yYtBQMkSS4Tt6UxPdK4cj0LKdvvt+lPHfkwXTT2k94J0THowGyqXiAP IuyQ64QSofZuA8ry8KEG7Jg6JKQtxriEH6zE65q2sp223lk77zKFUvCIN5QH8dds g8ufhDpACzI8pWF0NtpfN0P9tY2nAh8rf5uKm6zx/2iugH1veyGwO9ce8Q2NaDso jEDtFlEhZl8x2pn8/+RUzu5lknoQVZEODhisR2/NuyrtIIc/gx7sWZYOyjPlIrWc 1Hj7xmdjF2oK6k8MTgkbpNdSJ4DSYkI4 -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:37 2025 by rpki-client