$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft File: iXa1-0jy5BEdeNWjzVovyhlhOXo.mft (raw, json) Hash identifier: Jchr591yexLyDdUkf9dFrXVt6s6r4nKX9eSsH6YUMl0= Subject key identifier: A5:40:D0:EE:12:6F:46:CA:8D:BB:51:82:3F:58:2F:C0:BA:00:32:B1 Authority key identifier: 89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A Certificate issuer: /CN=A9128C7F/serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A Certificate serial: 0259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft Manifest number: 024C Signing time: Sun 19 Oct 2025 04:01:43 +0000 Manifest this update: Sun 19 Oct 2025 04:01:42 +0000 Manifest next update: Sun 26 Oct 2025 04:01:42 +0000 Files and hashes: 1: iXa1-0jy5BEdeNWjzVovyhlhOXo.crl (hash: cCgJMfL8dT3H5t2/Wmdtbwn2he1WXuX84fyl5e38Dis=) 2: 99D6D8089BF111ED8043AD1FC4F9AE02.roa (hash: RN89+S1mBA7UPdGt6AqckCvGseRU/f6VRbIgO417GXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C7F, serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A Validity Not Before: Oct 19 04:01:42 2025 GMT Not After : Oct 26 04:01:42 2025 GMT Subject: CN=68f462a6-ef20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:62:13:39:f0:d6:39:cd:96:dd:2d:5b:7f:c5: 2e:ab:ec:5d:da:16:d2:16:66:dd:86:d9:e3:c0:1f: c2:f8:d9:9a:34:d4:5f:d6:14:88:ff:f6:3c:2a:d6: 75:73:d8:7a:92:f7:84:15:45:c2:ad:7f:0d:88:14: 2d:2d:9f:a9:91:2a:c5:6b:d3:c7:83:31:51:ad:67: eb:fb:45:7c:99:3f:86:43:a6:64:55:84:97:82:55: 83:0e:ba:b0:8a:c4:bc:5e:90:ce:53:4d:6c:58:57: aa:39:61:a9:d5:bb:35:1f:f9:80:a2:10:75:c3:17: db:3d:b1:ed:a2:e9:66:0f:7c:28:88:ec:aa:18:bb: c9:0d:89:c3:66:e8:53:a4:a5:ba:37:79:e4:f1:32: 5d:aa:55:0a:aa:5a:a8:7a:b3:bd:7e:be:10:71:6f: 80:07:38:98:c7:23:01:5f:51:58:5d:c4:f2:bf:15: 78:a0:9a:69:73:ac:68:8b:b3:c1:3d:f9:01:02:3f: 5b:a4:61:ff:5a:14:0f:89:57:b7:22:7d:1b:f4:63: 0a:d6:2a:40:5f:08:eb:5e:11:27:02:2c:bc:bb:75: 33:75:69:bf:5a:b5:d9:73:6a:4c:aa:a8:e8:63:aa: d2:8a:b2:22:7b:f5:9b:d8:ae:2e:03:6a:9c:c7:80: 1d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:40:D0:EE:12:6F:46:CA:8D:BB:51:82:3F:58:2F:C0:BA:00:32:B1 X509v3 Authority Key Identifier: keyid:89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:db:a3:f1:c2:40:17:8d:36:b8:2e:7e:a3:b1:a0:1d:ad:48: 5c:3a:38:a1:39:e7:5d:98:ae:fa:6b:78:b1:d7:17:bb:f3:60: 72:75:05:79:2b:f2:02:5c:5b:b4:b6:08:b5:33:fa:38:69:d2: 13:3a:57:94:d6:d2:7a:eb:1b:fb:a9:9c:16:82:5d:e7:e3:7f: 5a:ca:02:a9:45:82:23:3b:4e:30:c7:b3:4d:f0:c2:d7:3c:81: 53:72:31:9d:bf:69:f7:55:13:b3:b4:82:0f:02:e5:f9:87:0f: 7f:13:00:3a:53:90:eb:91:34:59:bd:2c:20:e2:88:c0:ac:7d: 0d:a2:25:1c:0b:c7:66:e8:8b:9d:a9:db:84:38:a0:e3:5e:26: 1a:88:e2:60:22:e3:bf:6f:4b:44:84:44:ad:60:43:dc:db:f4: 53:a7:b6:4c:31:1e:40:4b:d9:0c:27:d5:50:41:fb:52:59:e2: 5d:5e:63:78:ae:14:04:c8:80:1b:22:dc:0b:82:63:e7:f1:b7: cd:0d:47:51:f8:ae:33:16:18:af:25:4c:8a:b1:e8:d3:f6:38: 56:99:18:a5:6e:a9:8c:d8:c9:3e:78:b7:61:4e:68:74:10:7b: 24:8f:84:40:29:c3:06:ac:76:40:8b:1d:0a:4b:19:72:5f:20: 71:30:29:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDN0YxMTAvBgNVBAUTKDg5NzZCNUZCNDhGMkU0MTExRDc4RDVBM0NENUEyRkNB MTk2MTM5N0EwHhcNMjUxMDE5MDQwMTQyWhcNMjUxMDI2MDQwMTQyWjAYMRYwFAYD VQQDEw02OGY0NjJhNi1lZjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3WITOfDWOc2W3S1bf8Uuq+xd2hbSFmbdhtnjwB/C+NmaNNRf1hSI//Y8KtZ1 c9h6kveEFUXCrX8NiBQtLZ+pkSrFa9PHgzFRrWfr+0V8mT+GQ6ZkVYSXglWDDrqw isS8XpDOU01sWFeqOWGp1bs1H/mAohB1wxfbPbHtoulmD3woiOyqGLvJDYnDZuhT pKW6N3nk8TJdqlUKqlqoerO9fr4QcW+ABziYxyMBX1FYXcTyvxV4oJppc6xoi7PB PfkBAj9bpGH/WhQPiVe3In0b9GMK1ipAXwjrXhEnAiy8u3UzdWm/WrXZc2pMqqjo Y6rSirIie/Wb2K4uA2qcx4AdlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVA0O4S b0bKjbtRgj9YL8C6ADKxMB8GA1UdIwQYMBaAFIl2tftI8uQRHXjVo81aL8oZYTl6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM3Ri8zQjdCREFCRTNG QzcxMUVEQUM5QjIyMURDNEY5QUUwMi9pWGExLTBqeTVCRWRlTldqelZvdnlobGhP WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYYTEtMGp5NUJFZGVOV2p6Vm92eWhsaE9Yby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM3Ri8zQjdCREFCRTNGQzcxMUVEQUM5QjIyMURDNEY5QUUwMi9pWGExLTBqeTVC RWRlTldqelZvdnlobGhPWG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR26PxwkAXjTa4Ln6jsaAdrUhcOjihOeddmK76a3ix1xe782BydQV5 K/ICXFu0tgi1M/o4adITOleU1tJ66xv7qZwWgl3n439aygKpRYIjO04wx7NN8MLX PIFTcjGdv2n3VROztIIPAuX5hw9/EwA6U5DrkTRZvSwg4ojArH0NoiUcC8dm6Iud qduEOKDjXiYaiOJgIuO/b0tEhEStYEPc2/RTp7ZMMR5AS9kMJ9VQQftSWeJdXmN4 rhQEyIAbItwLgmPn8bfNDUdR+K4zFhivJUyKsejT9jhWmRilbqmM2Mk+eLdhTmh0 EHskj4RAKcMGrHZAix0KSxlyXyBxMCmJ -----END CERTIFICATE-----Generated at Mon Oct 20 08:57:56 2025 by rpki-client