$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft File: iigtHI-Qww1lnm2MC5vkIhwlMZw.mft (raw, json) Hash identifier: +gQYTQ6VGbdEZrq2xIr+l59VSkfloOeoj+w4yT6oZWQ= Subject key identifier: 14:50:78:AD:89:F2:EC:8B:36:23:9A:27:61:31:43:46:E8:15:E6:6C Authority key identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C Certificate issuer: /CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft Manifest number: 011B Signing time: Sun 19 Oct 2025 07:40:42 +0000 Manifest this update: Sun 19 Oct 2025 07:40:42 +0000 Manifest next update: Sun 26 Oct 2025 07:40:42 +0000 Files and hashes: 1: iigtHI-Qww1lnm2MC5vkIhwlMZw.crl (hash: 9Me6Nov78OBs3OYLAhGjAtSDm29TIQ3HyUnbdhVpD7g=) 2: 0EF12B4805E611EF9685F580C4F9AE02.roa (hash: 0tr4K36tCLfkZ4nhSjqeW9dVetaArPPfGAxuclpW9yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDA7, serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C Validity Not Before: Oct 19 07:40:42 2025 GMT Not After : Oct 26 07:40:42 2025 GMT Subject: CN=68f495fa-85bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a9:a0:da:73:23:65:33:cb:6e:a1:1b:79:18: 56:fc:7f:44:e0:19:73:92:2f:80:30:19:4d:2e:3c: 2e:47:2e:f9:d1:13:89:c2:b7:f5:09:c9:f9:fc:7f: c9:86:35:fc:2c:b8:c4:6b:94:93:8f:0c:66:10:d7: 4e:c6:28:86:b5:90:66:ab:c4:ae:8f:34:c1:8e:26: 2f:4c:27:16:7c:ca:f3:e6:1b:9b:26:94:9f:5f:b9: de:c9:db:f0:bd:a1:d2:05:ed:9d:3e:b8:e3:c4:0b: 1b:a4:ae:36:36:af:e9:2a:75:d2:a1:4b:96:cb:3f: 0a:23:3e:27:43:b3:cc:30:dc:5e:c0:ab:24:f3:80: 6a:97:90:ac:66:cd:1e:d4:b2:39:17:8d:e9:7d:09: 93:05:f3:69:cb:90:8b:5c:a0:8e:33:cb:39:ef:ab: 62:37:b2:6b:c6:4b:c9:1e:16:c4:6e:f0:e7:3e:1f: 1e:e4:54:0c:93:8a:e9:76:9d:a6:6c:b7:6e:06:13: f0:b5:95:d2:5f:cc:44:48:5b:96:78:23:ed:8a:34: a8:bf:6a:57:2b:85:ed:49:88:bf:8f:34:42:6f:4d: 60:b6:00:e4:bf:10:a1:7b:4c:7a:e4:d9:c7:27:1a: 74:4f:95:42:70:04:34:93:c6:27:92:58:3d:5f:e6: 24:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:50:78:AD:89:F2:EC:8B:36:23:9A:27:61:31:43:46:E8:15:E6:6C X509v3 Authority Key Identifier: keyid:8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:b7:3a:29:7e:d8:35:21:dc:61:e5:2e:be:07:7a:95:c6:51: 83:d0:c7:7f:32:56:66:b9:9e:f9:c5:5f:f5:00:73:45:39:f5: 65:30:aa:2a:aa:73:d0:32:8c:e3:3d:c8:bc:b3:36:cd:88:d8: 57:b9:31:a7:f3:6c:aa:9d:ea:58:49:ca:b8:e8:11:a0:98:98: 49:2e:4e:6d:c7:bd:5d:53:9f:e3:79:9b:ec:60:c0:3a:0d:a0: 31:d7:8f:14:9b:41:e0:f1:3a:72:17:a7:fa:39:c4:0f:c1:8b: 52:1e:2a:8f:96:30:8f:5b:a2:6c:04:fc:ff:b7:0d:55:77:09: 7d:06:b6:2c:8e:d7:ca:7e:30:b9:f5:c6:aa:26:81:bb:49:3a: 97:e3:1c:2d:72:c6:ff:3f:5a:c5:bd:d6:4a:94:b7:30:c0:2b: ce:7d:b3:74:a3:88:36:fa:a1:6d:97:36:e1:b8:06:ee:5b:43: 3a:d8:f9:bc:33:bb:3c:b8:8b:c9:30:51:e2:e8:32:85:70:c3: ed:02:18:91:8a:27:91:78:f5:a3:c6:60:63:f4:cc:3c:32:09: f0:d7:65:b9:4a:10:02:37:21:61:27:5f:29:ed:93:4c:ad:62: 64:8c:1a:ec:0e:a8:eb:a6:20:25:f0:5c:29:be:c0:f7:ba:eb: 6b:07:39:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQTcxMTAvBgNVBAUTKDhBMjgyRDFDOEY5MEMzMEQ2NTlFNkQ4QzBCOUJFNDIy MUMyNTMxOUMwHhcNMjUxMDE5MDc0MDQyWhcNMjUxMDI2MDc0MDQyWjAYMRYwFAYD VQQDEw02OGY0OTVmYS04NWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqmg2nMjZTPLbqEbeRhW/H9E4Blzki+AMBlNLjwuRy750ROJwrf1Ccn5/H/J hjX8LLjEa5STjwxmENdOxiiGtZBmq8SujzTBjiYvTCcWfMrz5hubJpSfX7neydvw vaHSBe2dPrjjxAsbpK42Nq/pKnXSoUuWyz8KIz4nQ7PMMNxewKsk84Bql5CsZs0e 1LI5F43pfQmTBfNpy5CLXKCOM8s576tiN7JrxkvJHhbEbvDnPh8e5FQMk4rpdp2m bLduBhPwtZXSX8xESFuWeCPtijSov2pXK4XtSYi/jzRCb01gtgDkvxChe0x65NnH Jxp0T5VCcAQ0k8Ynklg9X+YkbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRQeK2J 8uyLNiOaJ2ExQ0boFeZsMB8GA1UdIwQYMBaAFIooLRyPkMMNZZ5tjAub5CIcJTGc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRBNy80NUJDRkMzMEZE MjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9paWd0SEktUXd3MWxubTJNQzV2a0lod2xN WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lpZ3RISS1Rd3cxbG5tMk1DNXZrSWh3bE1ady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRBNy80NUJDRkMzMEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9paWd0SEktUXd3 MWxubTJNQzV2a0lod2xNWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWtzopftg1Idxh5S6+B3qVxlGD0Md/MlZmuZ75xV/1AHNFOfVlMKoq qnPQMozjPci8szbNiNhXuTGn82yqnepYScq46BGgmJhJLk5tx71dU5/jeZvsYMA6 DaAx148Um0Hg8TpyF6f6OcQPwYtSHiqPljCPW6JsBPz/tw1Vdwl9BrYsjtfKfjC5 9caqJoG7STqX4xwtcsb/P1rFvdZKlLcwwCvOfbN0o4g2+qFtlzbhuAbuW0M62Pm8 M7s8uIvJMFHi6DKFcMPtAhiRiieRePWjxmBj9Mw8Mgnw12W5ShACNyFhJ18p7ZNM rWJkjBrsDqjrpiAl8FwpvsD3uutrBzl3 -----END CERTIFICATE-----Generated at Mon Oct 20 21:26:17 2025 by rpki-client