$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft File: i0b6Eepu4jUJnkhDPIJJehl7nXw.mft (raw, json) Hash identifier: WVMKyqo+rb8r6NXC+itrYxXeqVHK62R/Quo6okfyVeA= Subject key identifier: B9:5C:64:37:47:61:C7:02:37:E7:66:2B:2E:F6:32:5A:3B:98:20:56 Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C Certificate issuer: /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C Certificate serial: 0262 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft Manifest number: 0258 Signing time: Mon 03 Nov 2025 01:40:20 +0000 Manifest this update: Mon 03 Nov 2025 01:40:20 +0000 Manifest next update: Mon 10 Nov 2025 01:40:20 +0000 Files and hashes: 1: i0b6Eepu4jUJnkhDPIJJehl7nXw.crl (hash: UuCOhKemHu0cijxYs5k3HhFG2T5Vl8X+qaDcSCo0yz4=) 2: 0B3B85D63A1B11EDAE662B14C4F9AE02.roa (hash: NR8OS1L1YDEOVGgB6cb2fttAqoXgsKVRMpQfg5GvzjQ=) 3: 0BF33B7C3A1B11EDAE662B14C4F9AE02.roa (hash: U57sQE5yclVx7OH+nAtAbjTBaki6Yvzg4fauYYq6XuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 610 (0x262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB03A, serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C Validity Not Before: Nov 3 01:40:20 2025 GMT Not After : Nov 10 01:40:20 2025 GMT Subject: CN=69080804-39aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:69:a7:27:d8:c8:46:43:3f:25:02:87:aa:85: 4d:76:d2:c5:75:4a:fc:90:88:29:97:61:62:c0:9b: 24:b4:4b:51:0f:00:c9:34:65:40:09:a1:3d:e6:47: 41:93:e2:69:08:b1:20:56:84:63:c8:ea:1b:67:9b: 68:1d:77:3f:7a:b1:69:4d:c3:7c:72:fd:30:bb:07: a3:e3:a8:25:b5:8d:7a:dc:56:05:19:d7:fb:e3:b6: 39:dd:96:81:2a:7d:a3:07:5d:e6:3b:06:fb:f8:51: 6a:4e:71:99:30:7b:c9:07:1f:6b:3e:46:15:41:c8: b0:bb:97:9c:28:4f:2c:df:a7:f1:c6:67:67:95:ca: b3:a8:9d:49:cc:8e:6c:e9:21:dc:bf:85:e3:d0:45: 6e:52:a0:28:1b:59:58:b8:6d:b8:18:2e:98:2e:31: 78:86:6a:82:fd:97:c7:0a:49:62:3b:92:5c:57:b8: f9:2e:20:cb:87:bb:5e:c2:6a:bf:3e:9d:fb:7b:55: 3a:48:e4:9a:8c:71:a7:cd:4e:9f:fc:1c:99:dc:6d: 4d:2f:89:8e:91:7f:b7:32:bb:c3:dd:b6:d0:6c:c9: 0d:fc:53:de:e8:49:68:15:3f:2d:9f:02:41:56:9d: a4:de:fc:a7:e2:97:73:0f:70:42:ce:d1:ad:3a:f7: d1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:5C:64:37:47:61:C7:02:37:E7:66:2B:2E:F6:32:5A:3B:98:20:56 X509v3 Authority Key Identifier: keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:21:56:fc:b0:53:b4:55:7d:63:bf:e2:62:89:65:41:ab:74: 9d:e3:3f:82:ea:85:e7:4a:70:05:52:2e:7e:ab:4a:25:9e:1f: 00:59:9d:cf:1a:b9:d9:1a:c8:ec:8e:bb:9c:b2:90:de:63:b3: 07:9e:b9:22:b1:5b:68:f3:b8:c2:c6:84:30:6c:d7:92:c1:29: 3d:46:70:66:0d:5a:c1:40:07:41:dd:d7:d8:dd:95:a3:38:33: d7:40:4f:80:27:c3:6c:3a:91:ac:09:8b:ce:60:ee:67:94:bb: fb:7c:63:cc:3b:10:cb:55:b4:f9:b0:1e:c0:f7:a3:02:c1:af: fb:46:07:6a:9a:e9:ab:9a:97:2b:44:cc:39:4a:a7:81:fc:91: da:33:97:21:0b:42:a6:05:85:8d:ba:c0:8b:b0:79:98:e9:53: 66:f5:1d:e2:c3:58:9c:8f:af:85:03:eb:22:63:82:b3:61:92: 9e:94:cd:da:a1:66:66:da:06:5a:59:3b:4a:94:ec:1a:68:55: 0e:a1:a4:6d:3c:7b:47:49:bb:66:32:24:7d:33:aa:af:a9:ee: 36:bf:b1:19:71:ea:3d:88:63:f7:b7:b9:20:00:03:5a:c8:7c: 87:ce:e4:f7:3e:37:28:9c:70:3c:62:25:a2:36:27:eb:12:26: 46:a8:7b:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwM0ExMTAvBgNVBAUTKDhCNDZGQTExRUE2RUUyMzUwOTlFNDg0MzNDODI0OTdB MTk3QjlEN0MwHhcNMjUxMTAzMDE0MDIwWhcNMjUxMTEwMDE0MDIwWjAYMRYwFAYD VQQDEw02OTA4MDgwNC0zOWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2mnJ9jIRkM/JQKHqoVNdtLFdUr8kIgpl2FiwJsktEtRDwDJNGVACaE95kdB k+JpCLEgVoRjyOobZ5toHXc/erFpTcN8cv0wuwej46gltY163FYFGdf747Y53ZaB Kn2jB13mOwb7+FFqTnGZMHvJBx9rPkYVQciwu5ecKE8s36fxxmdnlcqzqJ1JzI5s 6SHcv4Xj0EVuUqAoG1lYuG24GC6YLjF4hmqC/ZfHCkliO5JcV7j5LiDLh7tewmq/ Pp37e1U6SOSajHGnzU6f/ByZ3G1NL4mOkX+3MrvD3bbQbMkN/FPe6EloFT8tnwJB Vp2k3vyn4pdzD3BCztGtOvfRBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlcZDdH YccCN+dmKy72Mlo7mCBWMB8GA1UdIwQYMBaAFItG+hHqbuI1CZ5IQzyCSXoZe518 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjAzQS9ERkM2OEQ2NDNB MTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRqVUpua2hEUElKSmVobDdu WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kwYjZFZXB1NGpVSm5raERQSUpKZWhsN25Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjAzQS9ERkM2OEQ2NDNBMTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRq VUpua2hEUElKSmVobDduWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACIVb8sFO0VX1jv+JiiWVBq3Sd4z+C6oXnSnAFUi5+q0olnh8AWZ3P GrnZGsjsjrucspDeY7MHnrkisVto87jCxoQwbNeSwSk9RnBmDVrBQAdB3dfY3ZWj ODPXQE+AJ8NsOpGsCYvOYO5nlLv7fGPMOxDLVbT5sB7A96MCwa/7Rgdqmumrmpcr RMw5SqeB/JHaM5chC0KmBYWNusCLsHmY6VNm9R3iw1icj6+FA+siY4KzYZKelM3a oWZm2gZaWTtKlOwaaFUOoaRtPHtHSbtmMiR9M6qvqe42v7EZceo9iGP3t7kgAANa yHyHzuT3PjconHA8YiWiNifrEiZGqHtV -----END CERTIFICATE-----Generated at Tue Nov 4 18:53:54 2025 by rpki-client