$ rpki-client -vvf rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft File: IJOpiw2lSMwNHF-8o9clFG9ETXI.mft (raw, json) Hash identifier: 598J2RRuBzQWAp2VLnMOA9jhtCCH4pTnSCkxuucRops= Subject key identifier: 28:CF:16:78:CE:50:4D:AA:5C:02:B2:C0:DE:26:BD:F9:E4:11:E4:C7 Authority key identifier: 20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72 Certificate issuer: /CN=A9154657/serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72 Certificate serial: 3513 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft Manifest number: 34E9 Signing time: Mon 20 Oct 2025 14:20:39 +0000 Manifest this update: Mon 20 Oct 2025 14:20:38 +0000 Manifest next update: Mon 27 Oct 2025 14:20:38 +0000 Files and hashes: 1: IJOpiw2lSMwNHF-8o9clFG9ETXI.crl (hash: Cv+r0l0Nw00Xoxl9yv2GJqrDX8s8WIq9riVZ++rP+vc=) 2: EF9395EA6A1511E9808D417CC4F9AE02.roa (hash: T96snG6T3ksqfKF7mowlYs05xmmtsddFbccqyfqSTxQ=) 3: 32509B68EDAE11E595DF6C28C4F9AE02.roa (hash: aiAqLVoZ6cEM6hY/DjBukcfxFi5I+NxU4FFn5k2CPUQ=) 4: E93EEAFCB0F811E595E0F761C4F9AE02.roa (hash: XONO8AScATR8p+dgN33QWapfnhUPZs7VGzeHh0uX4pc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13587 (0x3513) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154657, serialNumber=2093A98B0DA548CC0D1C5FBCA3D725146F444D72 Validity Not Before: Oct 20 14:20:38 2025 GMT Not After : Oct 27 14:20:38 2025 GMT Subject: CN=68f64536-35d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:00:ea:51:43:77:57:05:ce:63:9f:d1:31:21: 14:a3:a0:f2:ca:5a:78:2f:29:df:79:fd:7c:0e:0e: 8f:bb:28:19:fa:48:a1:35:bd:45:b8:21:e3:52:c7: 4c:c3:02:75:c5:f8:13:3f:a3:e4:81:22:52:eb:de: d0:73:d5:47:23:1d:62:7e:e9:5a:04:32:99:76:28: f0:41:8c:37:3a:3c:b7:9a:3d:a8:6a:46:9e:35:75: 56:b8:60:87:d7:84:af:03:54:b9:4b:2a:10:33:25: 53:88:31:fd:f4:e9:1e:93:f8:13:bc:5e:51:00:34: ce:e1:0a:12:fa:1a:21:c2:95:92:30:8e:fd:8b:06: ff:fe:0b:50:1f:cb:83:7c:03:3e:50:7b:91:5d:2f: 81:8a:7b:bd:16:38:f5:a5:50:5b:3e:69:2b:68:be: d2:27:b3:27:25:f8:45:cf:e3:d0:63:39:f9:73:b3: 96:88:b0:22:e3:00:42:3c:79:47:38:6e:0f:92:e6: bc:7c:1e:9b:2f:3c:67:dc:35:5a:25:83:de:8b:55: 3a:f5:13:77:0f:61:49:36:9e:62:a6:8f:8a:3a:59: 86:37:dc:26:1e:4b:e3:e3:10:a6:4f:40:8b:fd:c9: 2d:0f:05:73:72:f8:63:3e:a9:10:11:ee:d7:48:68: cb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CF:16:78:CE:50:4D:AA:5C:02:B2:C0:DE:26:BD:F9:E4:11:E4:C7 X509v3 Authority Key Identifier: keyid:20:93:A9:8B:0D:A5:48:CC:0D:1C:5F:BC:A3:D7:25:14:6F:44:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IJOpiw2lSMwNHF-8o9clFG9ETXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154657/715F33341D7111E2A2DB44B608B02CD2/IJOpiw2lSMwNHF-8o9clFG9ETXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:78:54:17:db:07:b8:6a:0e:f7:da:f3:d8:ff:57:a4:7f:b9: 7e:42:d5:72:65:b1:03:f2:a6:b9:59:30:94:ce:7d:27:34:d3: fb:ef:84:38:8a:5a:b9:09:17:37:94:2e:b6:ad:3b:2d:ea:2a: bd:b6:49:a7:d6:2b:1c:be:a0:aa:6b:39:3d:af:12:24:ad:9c: 7f:05:1a:01:9e:0d:05:86:fc:cf:53:81:88:3a:6a:9e:a9:da: 53:77:18:4c:9c:1f:c1:f9:03:4a:c8:78:96:db:9a:02:15:61: d1:63:dd:0d:a7:ef:00:58:a5:29:0f:31:84:55:e2:36:c9:be: 89:3e:08:16:52:e6:1d:7e:f2:42:9b:5c:8c:1c:5e:cf:fb:8b: 85:18:67:25:9e:79:de:be:9c:4b:aa:e9:0a:47:c2:92:43:24: 41:02:4d:b3:b1:8d:12:5e:1b:f6:56:dd:e0:33:1c:05:3a:bd: ac:e3:40:31:43:31:aa:17:de:80:e0:bd:cb:28:f9:65:b8:9a: a3:fa:30:ec:bc:af:06:7c:c4:54:48:83:ac:5e:de:e4:07:fd: b7:e7:8f:84:cb:8c:aa:ed:d5:6b:4e:f5:96:67:77:d2:87:a8: 42:f6:68:af:5a:67:c9:c6:d6:b3:a3:36:51:3a:47:b2:3d:e1: da:a4:73:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ2NTcxMTAvBgNVBAUTKDIwOTNBOThCMERBNTQ4Q0MwRDFDNUZCQ0EzRDcyNTE0 NkY0NDRENzIwHhcNMjUxMDIwMTQyMDM4WhcNMjUxMDI3MTQyMDM4WjAYMRYwFAYD VQQDEw02OGY2NDUzNi0zNWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gDqUUN3VwXOY5/RMSEUo6Dyylp4Lynfef18Dg6PuygZ+kihNb1FuCHjUsdM wwJ1xfgTP6PkgSJS697Qc9VHIx1ifulaBDKZdijwQYw3Ojy3mj2oakaeNXVWuGCH 14SvA1S5SyoQMyVTiDH99Okek/gTvF5RADTO4QoS+hohwpWSMI79iwb//gtQH8uD fAM+UHuRXS+Binu9Fjj1pVBbPmkraL7SJ7MnJfhFz+PQYzn5c7OWiLAi4wBCPHlH OG4Pkua8fB6bLzxn3DVaJYPei1U69RN3D2FJNp5ipo+KOlmGN9wmHkvj4xCmT0CL /cktDwVzcvhjPqkQEe7XSGjLUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjPFnjO UE2qXAKywN4mvfnkEeTHMB8GA1UdIwQYMBaAFCCTqYsNpUjMDRxfvKPXJRRvRE1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDY1Ny83MTVGMzMzNDFE NzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNNd05IRi04bzljbEZHOUVU WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lKT3BpdzJsU013TkhGLThvOWNsRkc5RVRYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDY1Ny83MTVGMzMzNDFENzExMUUyQTJEQjQ0QjYwOEIwMkNEMi9JSk9waXcybFNN d05IRi04bzljbEZHOUVUWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBweFQX2we4ag732vPY/1ekf7l+QtVyZbED8qa5WTCUzn0nNNP774Q4 ilq5CRc3lC62rTst6iq9tkmn1iscvqCqazk9rxIkrZx/BRoBng0FhvzPU4GIOmqe qdpTdxhMnB/B+QNKyHiW25oCFWHRY90Np+8AWKUpDzGEVeI2yb6JPggWUuYdfvJC m1yMHF7P+4uFGGclnnnevpxLqukKR8KSQyRBAk2zsY0SXhv2Vt3gMxwFOr2s40Ax QzGqF96A4L3LKPlluJqj+jDsvK8GfMRUSIOsXt7kB/2354+Ey4yq7dVrTvWWZ3fS h6hC9mivWmfJxtazozZROkeyPeHapHN3 -----END CERTIFICATE-----Generated at Mon Oct 20 19:26:40 2025 by rpki-client