$ rpki-client -vvf rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft File: IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft (raw, json) Hash identifier: Ok0G9sL9H2CuCTzGc74pPTjAMZZeWs6nth208R0hAmc= Subject key identifier: CF:ED:EC:5D:CF:09:1A:5A:83:23:BB:A0:25:89:18:41:1E:EC:0E:89 Authority key identifier: 20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17 Certificate issuer: /CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317 Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft Manifest number: 01FE Signing time: Sun 19 Oct 2025 04:49:55 +0000 Manifest this update: Sun 19 Oct 2025 04:49:54 +0000 Manifest next update: Sun 26 Oct 2025 04:49:54 +0000 Files and hashes: 1: IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl (hash: eol139VYv6LvDhXJymyDrvQKhTNS4/HxKMSGKMqiPZA=) 2: CE9A4D70D6EA11ED8F0C322EC4F9AE02.roa (hash: d/kODO73Q/KifMio6xDH+g4+aS9A4hPWbQYW6hwYowo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912905D, serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317 Validity Not Before: Oct 19 04:49:54 2025 GMT Not After : Oct 26 04:49:54 2025 GMT Subject: CN=68f46df2-05a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cf:f8:26:bb:14:69:98:69:b4:50:30:95:02: d8:a2:99:0f:d2:36:03:8b:72:ff:b3:6e:22:26:9e: a8:2a:4f:ef:a5:10:8f:5a:5d:86:83:d6:e8:71:fa: 21:03:39:f7:a2:33:57:c2:53:34:d3:57:c3:58:f8: 9c:37:a7:2a:0f:03:63:ec:17:07:ab:7f:33:33:2b: 8e:90:77:fa:76:ea:48:0b:64:be:dc:21:f7:a3:07: 65:b0:1f:cf:7a:54:bb:f2:e0:3a:57:c9:0d:63:ad: 0f:60:03:ed:f1:0a:21:07:4f:1b:26:d5:86:42:b9: 6d:d6:f0:ad:d8:d8:78:19:2d:4d:80:39:85:e9:85: 8d:72:8f:37:d4:47:bf:6c:c3:ff:4f:ba:84:a1:ba: 39:a8:cb:fa:69:e9:86:9d:35:98:90:ea:0a:5a:9d: 2f:89:72:45:fe:70:76:6e:b9:f6:8b:18:1f:66:36: f5:fe:25:11:c4:bc:de:5a:64:45:87:a1:8a:81:e0: 78:df:7f:09:c0:db:bf:f1:ee:61:04:e1:b1:6e:d2: 0f:2d:ae:a9:0a:dc:da:35:07:6e:9b:ea:80:f5:ec: 70:90:a8:2b:6b:a2:c0:bd:1f:5a:3d:4b:7c:ee:fb: 38:37:b2:55:3f:81:fa:35:4d:22:96:ba:0d:ee:82: 28:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:ED:EC:5D:CF:09:1A:5A:83:23:BB:A0:25:89:18:41:1E:EC:0E:89 X509v3 Authority Key Identifier: keyid:20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:dd:1f:9d:74:14:45:ea:1e:4e:7b:95:ed:53:25:87:55:70: c1:43:8d:8a:fb:77:bb:cc:3d:8c:3d:78:c7:43:d8:fc:3c:6a: d7:6d:9b:d2:8a:40:bb:d1:9f:68:8d:e2:ee:3d:f7:05:6d:36: a0:51:1d:c4:3f:d8:52:50:dd:c2:56:73:99:aa:f7:0e:9e:47: 50:ae:d1:82:8f:d6:57:64:46:9d:18:1b:56:a5:36:10:6e:66: 8b:83:2d:c8:5e:9e:bf:ab:ae:6e:cd:f1:61:81:64:ee:8c:52: 80:eb:de:85:a0:d0:7b:c9:83:93:fe:0d:d8:14:49:63:2a:9b: 07:99:ad:43:e6:17:2a:81:16:2b:e8:32:5a:90:71:0a:2b:0a: d6:3b:0f:eb:f3:2f:23:f7:59:a6:31:a4:6e:a2:4e:d6:39:dc: 66:12:f7:bd:c4:b5:bf:5e:bd:c2:1e:25:e5:55:46:76:f8:ad: 04:cd:a2:bd:62:74:b4:45:d7:29:00:d1:ab:2d:8d:d4:bf:6f: 9e:25:eb:47:e0:66:84:e9:cc:68:81:56:50:78:20:bf:49:03: bb:13:45:e7:b2:9e:5e:d8:0f:78:18:d1:9a:84:57:72:32:2b: 3d:04:e6:71:05:ba:33:90:8a:56:f4:fb:19:48:9f:20:75:6d: 0a:2c:55:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkwNUQxMTAvBgNVBAUTKDIwNDFBNTQ4MjE2RkYwMTQ4OTRCNzlDQzlGRDc3MzEx QkM3Q0EzMTcwHhcNMjUxMDE5MDQ0OTU0WhcNMjUxMDI2MDQ0OTU0WjAYMRYwFAYD VQQDEw02OGY0NmRmMi0wNWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAns/4JrsUaZhptFAwlQLYopkP0jYDi3L/s24iJp6oKk/vpRCPWl2Gg9bocfoh Azn3ojNXwlM001fDWPicN6cqDwNj7BcHq38zMyuOkHf6dupIC2S+3CH3owdlsB/P elS78uA6V8kNY60PYAPt8QohB08bJtWGQrlt1vCt2Nh4GS1NgDmF6YWNco831Ee/ bMP/T7qEobo5qMv6aemGnTWYkOoKWp0viXJF/nB2brn2ixgfZjb1/iURxLzeWmRF h6GKgeB4338JwNu/8e5hBOGxbtIPLa6pCtzaNQdum+qA9exwkKgra6LAvR9aPUt8 7vs4N7JVP4H6NU0ilroN7oIoTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/t7F3P CRpagyO7oCWJGEEe7A6JMB8GA1UdIwQYMBaAFCBBpUghb/AUiUt5zJ/XcxG8fKMX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTA1RC8zNEJGOTkwOEFD M0QxMUVEQkQ0RDEzNUVDNEY5QUUwMi9JRUdsU0NGdjhCU0pTM25NbjlkekVieDhv eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lFR2xTQ0Z2OEJTSlMzbk1uOWR6RWJ4OG94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTA1RC8zNEJGOTkwOEFDM0QxMUVEQkQ0RDEzNUVDNEY5QUUwMi9JRUdsU0NGdjhC U0pTM25NbjlkekVieDhveGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW3R+ddBRF6h5Oe5XtUyWHVXDBQ42K+3e7zD2MPXjHQ9j8PGrXbZvS ikC70Z9ojeLuPfcFbTagUR3EP9hSUN3CVnOZqvcOnkdQrtGCj9ZXZEadGBtWpTYQ bmaLgy3IXp6/q65uzfFhgWTujFKA696FoNB7yYOT/g3YFEljKpsHma1D5hcqgRYr 6DJakHEKKwrWOw/r8y8j91mmMaRuok7WOdxmEve9xLW/Xr3CHiXlVUZ2+K0EzaK9 YnS0RdcpANGrLY3Uv2+eJetH4GaE6cxogVZQeCC/SQO7E0Xnsp5e2A94GNGahFdy Mis9BOZxBbozkIpW9PsZSJ8gdW0KLFWe -----END CERTIFICATE-----Generated at Mon Oct 20 15:25:39 2025 by rpki-client