$ rpki-client -vvf rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft File: iJMypOJcIeib-kP6AC0tHwrX55c.mft (raw, json) Hash identifier: e3qVZBsWSH5QUFZbZHZkEaJLhWN1ieBobTujzGPcfuE= Subject key identifier: 1E:51:7A:F7:C8:C1:85:7B:AE:CD:2A:1E:B8:26:00:7C:E8:3A:01:BC Authority key identifier: 88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 Certificate issuer: /CN=A911BCF8/serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Certificate serial: 0CC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft Manifest number: 0CB1 Signing time: Sat 18 Oct 2025 18:56:49 +0000 Manifest this update: Sat 18 Oct 2025 18:56:48 +0000 Manifest next update: Sat 25 Oct 2025 18:56:48 +0000 Files and hashes: 1: iJMypOJcIeib-kP6AC0tHwrX55c.crl (hash: lVO69lCaAU65xcQ283+rQdj96e5cGs1CuqBJSUT2wZc=) 2: AFA9D654D9F711EEA1409D5DC4F9AE02.roa (hash: O6ZOPVwxFkNjeJWmRWdaGnVAImdC2WliszZw8u4xZjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3265 (0xcc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BCF8, serialNumber=889332A4E25C21E89BFA43FA002D2D1F0AD7E797 Validity Not Before: Oct 18 18:56:48 2025 GMT Not After : Oct 25 18:56:48 2025 GMT Subject: CN=68f3e2f1-7481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4f:92:29:98:21:7b:d0:90:6c:59:db:3b:35: 3f:80:b6:77:c5:44:04:a4:9d:01:2b:db:3d:83:49: 83:6b:de:7f:ff:7d:0c:25:0a:2f:32:51:1b:c6:e2: 7b:33:18:82:b6:21:f9:d5:13:f8:81:90:22:c2:4f: 40:ea:76:dd:a2:77:2f:3c:f7:99:53:c6:79:1a:a7: 56:71:10:18:ff:8f:41:3e:d1:4a:df:ed:5b:ef:a5: d9:41:be:27:65:90:a9:0b:76:54:f4:14:f4:2d:77: c8:b7:19:3b:b2:3a:cf:a1:41:82:60:f3:71:95:57: 41:fd:cd:ff:51:a9:5e:4f:09:21:cb:8a:14:36:78: ba:e0:f6:95:94:ed:46:c1:9c:f4:6e:75:dd:fc:d9: 1f:fd:73:49:83:e2:c2:f4:e0:65:f1:a9:2e:18:54: 5a:aa:e0:07:11:6a:a8:40:6d:5e:12:26:64:8a:bd: 01:ff:f2:b8:dd:e7:e1:68:39:68:c6:ed:13:2a:90: 66:39:7b:19:95:52:23:ee:57:5a:01:f3:51:4f:52: d8:fd:28:c2:2f:c8:5e:c7:dc:21:89:b1:23:b2:d2: 22:72:ce:7d:f4:81:35:21:e3:5a:0b:45:60:ad:6c: 4a:03:9e:15:5e:c3:87:e5:ea:eb:fb:09:f6:ed:04: 35:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:51:7A:F7:C8:C1:85:7B:AE:CD:2A:1E:B8:26:00:7C:E8:3A:01:BC X509v3 Authority Key Identifier: keyid:88:93:32:A4:E2:5C:21:E8:9B:FA:43:FA:00:2D:2D:1F:0A:D7:E7:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iJMypOJcIeib-kP6AC0tHwrX55c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BCF8/B7078F80005411EA9ABDF51FC4F9AE02/iJMypOJcIeib-kP6AC0tHwrX55c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:dd:b8:52:8d:1b:85:d8:a0:2d:21:df:81:bd:16:31:36:33: 49:8e:14:4e:75:33:1b:b3:63:43:66:1b:bb:d1:c3:a5:61:4f: cc:b3:76:7e:e3:e2:61:4b:a1:e0:32:86:4f:1b:26:20:26:55: b8:5e:ee:3f:b3:d3:ed:b9:23:5e:80:4f:8e:4c:5e:7b:00:df: 71:e9:af:5b:d1:6b:65:a2:c7:1f:46:59:2e:f9:5a:e7:f2:d1: 9d:dd:e6:15:9d:c3:c5:35:a4:e4:00:30:2d:40:3d:25:0c:11: da:b4:37:8a:3f:24:8e:07:16:93:73:1e:15:b1:77:1c:6e:46: e7:89:68:c9:6c:40:eb:3e:01:91:fa:01:31:7a:f2:80:74:42: e0:b6:05:cb:72:20:bd:f1:94:be:fe:f5:13:80:ad:84:eb:39: 2c:21:10:08:c9:c5:6c:96:0b:47:15:c2:93:c7:02:13:8f:2a: 72:23:98:7d:d9:83:bf:e9:53:34:26:9a:1a:de:a3:d0:91:cb: b3:dd:d7:e6:47:2b:fe:ed:6b:83:fe:f0:36:f3:ed:02:cd:75: cc:b2:18:e7:33:d2:06:5c:8d:98:72:f8:76:19:f2:24:12:b5: 73:3e:7c:aa:21:04:1c:84:05:cd:61:60:4b:c6:05:68:b5:86: 6e:b4:42:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJDRjgxMTAvBgNVBAUTKDg4OTMzMkE0RTI1QzIxRTg5QkZBNDNGQTAwMkQyRDFG MEFEN0U3OTcwHhcNMjUxMDE4MTg1NjQ4WhcNMjUxMDI1MTg1NjQ4WjAYMRYwFAYD VQQDEw02OGYzZTJmMS03NDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1k+SKZghe9CQbFnbOzU/gLZ3xUQEpJ0BK9s9g0mDa95//30MJQovMlEbxuJ7 MxiCtiH51RP4gZAiwk9A6nbdoncvPPeZU8Z5GqdWcRAY/49BPtFK3+1b76XZQb4n ZZCpC3ZU9BT0LXfItxk7sjrPoUGCYPNxlVdB/c3/UaleTwkhy4oUNni64PaVlO1G wZz0bnXd/Nkf/XNJg+LC9OBl8akuGFRaquAHEWqoQG1eEiZkir0B//K43efhaDlo xu0TKpBmOXsZlVIj7ldaAfNRT1LY/SjCL8hex9whibEjstIics599IE1IeNaC0Vg rWxKA54VXsOH5err+wn27QQ1FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5RevfI wYV7rs0qHrgmAHzoOgG8MB8GA1UdIwQYMBaAFIiTMqTiXCHom/pD+gAtLR8K1+eX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkNGOC9CNzA3OEY4MDAw NTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0llaWIta1A2QUMwdEh3clg1 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lKTXlwT0pjSWVpYi1rUDZBQzB0SHdyWDU1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkNGOC9CNzA3OEY4MDAwNTQxMUVBOUFCREY1MUZDNEY5QUUwMi9pSk15cE9KY0ll aWIta1A2QUMwdEh3clg1NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB73bhSjRuF2KAtId+BvRYxNjNJjhROdTMbs2NDZhu70cOlYU/Ms3Z+ 4+JhS6HgMoZPGyYgJlW4Xu4/s9PtuSNegE+OTF57AN9x6a9b0WtloscfRlku+Vrn 8tGd3eYVncPFNaTkADAtQD0lDBHatDeKPySOBxaTcx4VsXccbkbniWjJbEDrPgGR +gExevKAdELgtgXLciC98ZS+/vUTgK2E6zksIRAIycVslgtHFcKTxwITjypyI5h9 2YO/6VM0Jpoa3qPQkcuz3dfmRyv+7WuD/vA28+0CzXXMshjnM9IGXI2Ycvh2GfIk ErVzPnyqIQQchAXNYWBLxgVotYZutEIS -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:54 2025 by rpki-client