$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft File: IsfsPNntTFDolKEbzXDQMQzV-Fk.mft (raw, json) Hash identifier: ryS1JstT0TmoC5ljMRYuu80IMcTECmD+SguNLIJQieY= Subject key identifier: F4:36:77:08:55:45:38:81:CF:B3:65:89:90:BC:14:1E:C2:34:30:3B Authority key identifier: 22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 Certificate issuer: /CN=A91EC225/serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft Manifest number: A6 Signing time: Tue 04 Nov 2025 17:42:51 +0000 Manifest this update: Tue 04 Nov 2025 17:42:50 +0000 Manifest next update: Tue 11 Nov 2025 17:42:50 +0000 Files and hashes: 1: IsfsPNntTFDolKEbzXDQMQzV-Fk.crl (hash: KHuKNFRwNWaH4/RTaBKFVZsLKOVUFMK6GJaM7IpBgos=) 2: 25D2B94CDECD11EFA79E4065C4F9AE02.roa (hash: AoCtdlkJJmrM0z3AC3jCQKm47jbQAWLBDnBBfT5EtYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Validity Not Before: Nov 4 17:42:50 2025 GMT Not After : Nov 11 17:42:50 2025 GMT Subject: CN=690a3b1b-ef88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c8:d3:65:44:82:70:fc:92:6b:ff:f0:d5:20: 23:96:14:ed:84:ac:44:ef:72:11:1f:16:ce:1d:f3: f2:e6:15:7d:53:ed:82:e5:02:fb:33:f0:ed:76:95: ac:0d:7e:7d:cd:fd:60:30:43:71:23:74:e2:c7:d5: 11:3f:a2:f2:a7:0d:95:4d:d3:2d:98:cc:32:69:0f: 99:2a:f9:c0:7a:a8:72:bc:fe:93:f4:78:8e:e9:f9: 81:0f:69:24:09:a4:ec:ec:55:7f:10:08:15:e7:69: ed:c0:68:2d:2e:45:6f:04:9b:93:81:0f:5d:fe:f0: 17:81:fc:5b:85:e5:07:0e:32:4f:07:3d:5a:d2:11: c5:ab:61:9a:46:ba:01:0f:d3:ab:65:7a:81:a0:a8: 18:60:14:17:c4:85:ca:5d:6d:9a:7d:12:51:2d:c7: 59:a0:ae:54:3d:0b:86:7e:36:36:ea:a1:87:be:16: d2:3f:86:72:04:5d:13:c5:47:78:e4:ff:51:3b:d5: 86:a8:b5:8d:8b:83:6e:42:cd:4a:c9:29:4a:32:04: 39:55:39:32:9f:4f:8e:72:2d:bd:7e:7f:fd:e5:75: 6e:d9:f6:4b:41:de:65:e2:e6:ad:b6:f1:e0:41:9b: 93:82:ee:43:a6:17:96:1e:41:63:b9:41:66:7a:6f: cd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:36:77:08:55:45:38:81:CF:B3:65:89:90:BC:14:1E:C2:34:30:3B X509v3 Authority Key Identifier: keyid:22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:1f:24:7c:2f:a3:4f:7e:54:c5:e7:4c:43:3a:c7:07:0f:98: 71:77:66:9c:f6:3e:34:97:db:5b:d2:3e:65:9f:a1:80:38:ea: 82:3d:6a:b4:46:1a:a7:d2:30:a9:fe:a2:da:f6:89:16:64:4f: a6:e2:53:b7:ad:ca:99:60:22:e5:fa:8d:22:05:f9:d5:ef:52: 9d:4b:ec:90:1f:a0:c2:40:86:72:89:83:76:56:38:a7:9d:62: 18:f0:94:f6:1e:20:80:89:7f:e1:28:60:e5:b9:85:3e:1c:ae: c5:3c:ad:5b:95:38:7b:56:90:be:88:ec:61:20:58:98:05:d1: e1:4e:f5:92:30:e8:7e:0a:b9:7f:1d:cb:9f:6d:dc:6f:a6:94: e0:09:8d:55:d1:c3:ee:35:e8:c2:36:5b:6f:b4:7c:d7:db:5e: 07:e7:dd:19:19:6f:05:23:a5:f1:99:ac:28:c0:67:d6:d6:99: 95:48:2b:25:6e:ff:0d:e8:49:2d:4d:81:2e:00:12:fa:fb:3e: 4f:a8:70:56:04:c8:29:6e:4e:01:e3:92:af:c8:93:a3:56:45: 1a:b2:74:6e:05:98:09:82:b5:2e:e5:3a:4b:a0:42:74:d8:97: 1c:fe:8a:b7:70:1b:8b:cf:e7:af:5a:e1:54:24:0d:23:87:56: f5:d2:f2:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMyMjUxMTAvBgNVBAUTKDIyQzdFQzNDRDlFRDRDNTBFODk0QTExQkNENzBEMDMx MENENUY4NTkwHhcNMjUxMTA0MTc0MjUwWhcNMjUxMTExMTc0MjUwWjAYMRYwFAYD VQQDEw02OTBhM2IxYi1lZjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8jTZUSCcPySa//w1SAjlhTthKxE73IRHxbOHfPy5hV9U+2C5QL7M/DtdpWs DX59zf1gMENxI3Tix9URP6Lypw2VTdMtmMwyaQ+ZKvnAeqhyvP6T9HiO6fmBD2kk CaTs7FV/EAgV52ntwGgtLkVvBJuTgQ9d/vAXgfxbheUHDjJPBz1a0hHFq2GaRroB D9OrZXqBoKgYYBQXxIXKXW2afRJRLcdZoK5UPQuGfjY26qGHvhbSP4ZyBF0TxUd4 5P9RO9WGqLWNi4NuQs1KySlKMgQ5VTkyn0+Oci29fn/95XVu2fZLQd5l4uattvHg QZuTgu5DpheWHkFjuUFmem/NawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQ2dwhV RTiBz7NliZC8FB7CNDA7MB8GA1UdIwQYMBaAFCLH7DzZ7UxQ6JShG81w0DEM1fhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzIyNS9DOTQ0N0ZGMEJF RjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRGRG9sS0VielhEUU1RelYt RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lzZnNQTm50VEZEb2xLRWJ6WERRTVF6Vi1Gay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzIyNS9DOTQ0N0ZGMEJFRjkxMUVGQkNGNjg5NDRDNEY5QUUwMi9Jc2ZzUE5udFRG RG9sS0VielhEUU1RelYtRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtHyR8L6NPflTF50xDOscHD5hxd2ac9j40l9tb0j5ln6GAOOqCPWq0 Rhqn0jCp/qLa9okWZE+m4lO3rcqZYCLl+o0iBfnV71KdS+yQH6DCQIZyiYN2Vjin nWIY8JT2HiCAiX/hKGDluYU+HK7FPK1blTh7VpC+iOxhIFiYBdHhTvWSMOh+Crl/ HcufbdxvppTgCY1V0cPuNejCNltvtHzX214H590ZGW8FI6XxmawowGfW1pmVSCsl bv8N6EktTYEuABL6+z5PqHBWBMgpbk4B45KvyJOjVkUasnRuBZgJgrUu5TpLoEJ0 2Jcc/oq3cBuLz+evWuFUJA0jh1b10vIO -----END CERTIFICATE-----Generated at Wed Nov 5 04:49:40 2025 by rpki-client