$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft File: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft (raw, json) Hash identifier: d47//4BY3tHQ2fPXMRPWrCZYjendxKkYaqsdBeXcuyQ= Subject key identifier: DE:9B:5D:93:06:CF:A5:B9:38:AB:36:A4:66:3C:94:8E:4B:79:28:9E Authority key identifier: 22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A Certificate issuer: /CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft Manifest number: 010C Signing time: Wed 05 Nov 2025 05:09:21 +0000 Manifest this update: Wed 05 Nov 2025 05:09:21 +0000 Manifest next update: Wed 12 Nov 2025 05:09:21 +0000 Files and hashes: 1: Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl (hash: DblWGJJoUj/g5tyjzjUctYHc1Zf5TfhVsrK2iTZJrJU=) 2: 097951DC271E11EFA1884C2EC4F9AE02.roa (hash: Ha/cGz3EuqzsAq4mNf1LJHzYtP6EU2XABOfv8TEGk30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC, serialNumber=224E668F405601CADC3391383FCA96DF9468D95A Validity Not Before: Nov 5 05:09:21 2025 GMT Not After : Nov 12 05:09:21 2025 GMT Subject: CN=690adc01-c375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:63:5d:8b:36:37:ef:0a:a1:b4:e2:38:df:fe: a9:6a:65:12:86:0e:92:d2:2c:4e:d0:a1:ab:86:2f: 22:d6:69:d1:11:01:dd:0a:1b:63:71:93:d1:30:91: 4d:17:49:ed:c1:a9:58:91:20:fe:22:39:42:25:ec: 82:46:6a:ab:37:bb:bc:81:98:fa:2c:24:12:f6:e0: 4e:b3:03:79:9d:86:93:16:e7:ca:20:9c:e1:33:49: cc:fb:bf:6a:29:b0:bd:ba:62:f5:e0:e2:8a:ae:49: c7:8a:30:d2:55:f5:85:37:61:c5:34:40:84:c6:39: f1:97:82:54:e6:84:34:c2:72:50:7a:7e:92:19:22: dc:20:24:cd:38:ec:e0:1f:13:e6:0f:4f:21:fb:4f: 46:76:85:ae:30:9c:69:b3:52:dc:9b:25:72:98:ce: 59:f2:5e:be:d9:7d:39:d0:08:49:36:28:1a:8c:c6: 4c:2e:09:37:98:9b:08:bf:3d:53:37:5c:4a:8b:00: b9:af:33:39:25:6d:ec:f2:6f:30:af:7e:b0:4e:a9: a9:69:3b:c6:a5:56:c8:a1:c6:72:96:40:c3:95:61: 17:2a:f6:04:b3:29:86:c7:34:4d:01:e9:a1:2c:08: ec:ec:55:6b:b6:da:d7:36:20:44:68:53:d5:71:36: 55:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9B:5D:93:06:CF:A5:B9:38:AB:36:A4:66:3C:94:8E:4B:79:28:9E X509v3 Authority Key Identifier: keyid:22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:14:b4:65:b8:df:96:80:00:1e:7e:66:97:84:4a:cd:78:89: cd:27:77:4a:05:73:45:d9:76:20:74:ca:29:a9:1e:99:8f:23: c3:eb:1d:75:cb:da:32:e1:e2:ff:7c:48:2c:d7:2b:6c:dd:28: 2b:ed:30:fc:99:11:87:c5:be:85:a7:25:5c:e0:40:86:17:5f: b4:a3:31:ab:b5:2a:c3:58:fd:cb:bc:ea:26:d3:0d:9f:93:2e: 0e:91:38:c7:e1:9a:17:bf:ce:ec:46:29:45:05:71:14:53:21: ae:35:b3:c4:ce:1c:5c:01:fd:93:47:4d:d6:cc:b5:75:df:cb: d9:75:72:c1:03:65:76:ce:3f:13:8e:f9:e3:ab:cf:fe:72:3f: 43:9e:dd:31:96:87:43:6f:3f:12:64:30:6c:90:68:86:35:5d: 2b:e9:8a:30:11:50:e4:19:44:08:46:54:48:84:74:10:81:bb: 47:d8:5a:69:44:34:aa:f8:90:ff:74:f1:81:24:93:16:77:b4: 1c:4d:91:cd:d6:19:fc:2b:78:17:8d:d9:4e:8e:e4:ef:46:a0: 3a:ec:e4:4a:05:3a:02:ce:c3:89:1b:a4:f6:b8:26:44:27:4e: 8e:b5:b3:1d:2d:03:b0:43:2d:1d:41:ac:9f:bf:b3:e8:3e:20: c5:94:5d:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDIyNEU2NjhGNDA1NjAxQ0FEQzMzOTEzODNGQ0E5NkRG OTQ2OEQ5NUEwHhcNMjUxMTA1MDUwOTIxWhcNMjUxMTEyMDUwOTIxWjAYMRYwFAYD VQQDEw02OTBhZGMwMS1jMzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mNdizY37wqhtOI43/6pamUShg6S0ixO0KGrhi8i1mnREQHdChtjcZPRMJFN F0ntwalYkSD+IjlCJeyCRmqrN7u8gZj6LCQS9uBOswN5nYaTFufKIJzhM0nM+79q KbC9umL14OKKrknHijDSVfWFN2HFNECExjnxl4JU5oQ0wnJQen6SGSLcICTNOOzg HxPmD08h+09GdoWuMJxps1LcmyVymM5Z8l6+2X050AhJNigajMZMLgk3mJsIvz1T N1xKiwC5rzM5JW3s8m8wr36wTqmpaTvGpVbIocZylkDDlWEXKvYEsymGxzRNAemh LAjs7FVrttrXNiBEaFPVcTZVmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6bXZMG z6W5OKs2pGY8lI5LeSieMB8GA1UdIwQYMBaAFCJOZo9AVgHK3DOROD/Klt+UaNla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy85OUM3NDg4ODI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0FjcmNNNUU0UDhxVzM1Um8y Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lrNW1qMEJXQWNyY001RTRQOHFXMzVSbzJWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNEQy85OUM3NDg4ODI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0Fj cmNNNUU0UDhxVzM1Um8yVm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqFLRluN+WgAAefmaXhErNeInNJ3dKBXNF2XYgdMopqR6ZjyPD6x11 y9oy4eL/fEgs1yts3Sgr7TD8mRGHxb6FpyVc4ECGF1+0ozGrtSrDWP3LvOom0w2f ky4OkTjH4ZoXv87sRilFBXEUUyGuNbPEzhxcAf2TR03WzLV138vZdXLBA2V2zj8T jvnjq8/+cj9Dnt0xlodDbz8SZDBskGiGNV0r6YowEVDkGUQIRlRIhHQQgbtH2Fpp RDSq+JD/dPGBJJMWd7QcTZHN1hn8K3gXjdlOjuTvRqA67ORKBToCzsOJG6T2uCZE J06OtbMdLQOwQy0dQayfv7PoPiDFlF3U -----END CERTIFICATE-----Generated at Wed Nov 5 06:43:31 2025 by rpki-client