$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft File: IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft (raw, json) Hash identifier: qCMLLhxhFxmTYdYkbrgJoT4GtKMBJ/vswsRdAyS5F/0= Subject key identifier: 73:67:6E:81:17:84:92:6F:05:B7:CD:15:A5:6F:3E:A5:37:BA:CD:AF Authority key identifier: 22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 Certificate issuer: /CN=A916E9F4/serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft Manifest number: 093F Signing time: Sat 18 Oct 2025 22:08:17 +0000 Manifest this update: Sat 18 Oct 2025 22:08:16 +0000 Manifest next update: Sat 25 Oct 2025 22:08:16 +0000 Files and hashes: 1: IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl (hash: s7lhj82biXgSGqM4zn0soVJiHV9U3K7Q7JRJcy82S0s=) 2: 79057E1CEB1011EEB9CE4F19C4F9AE02.roa (hash: 8/axDs5qsmDACTYAZ5Y63PJlpZ3Ia2a5BRXxYdLZ9QE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4, serialNumber=22B4A9AAA982ABCB39F978986BCB6770B602C1A4 Validity Not Before: Oct 18 22:08:16 2025 GMT Not After : Oct 25 22:08:16 2025 GMT Subject: CN=68f40fd1-5788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:88:ac:d4:85:7f:47:b8:06:dc:5c:77:cf: 21:ff:3a:5c:bc:c6:5a:ec:57:5f:83:d2:2c:1b:7f: 0b:6a:93:0e:4d:12:d4:c3:59:ef:5a:d8:3d:1b:ac: 1f:eb:fb:2b:9e:43:6f:37:0d:11:6b:62:ea:c1:22: e9:ff:af:7d:15:5c:62:f5:21:e7:6b:9e:66:af:4a: 09:a7:46:00:32:2c:58:2a:94:e9:45:b4:08:d6:be: 56:7a:b1:7c:32:b7:1b:02:75:a4:25:5a:98:51:b0: e9:bd:eb:fc:f7:8a:5a:b7:99:cb:8f:45:11:6f:69: bc:dc:85:ef:9f:6c:7d:5f:e8:bb:fa:19:c0:50:a5: 36:f7:11:aa:be:a8:a1:d6:fb:19:ac:47:9f:fc:1a: 80:08:33:63:68:3e:63:3c:a0:7c:02:a2:db:15:f9: b6:fe:a0:18:a5:f5:c5:1b:f0:e9:09:5c:6f:e4:2a: e1:55:77:17:fb:d9:e0:dc:a1:bf:d0:79:ce:c1:b7: 40:ea:e6:49:e6:9b:68:0a:3c:39:ac:a6:06:54:e4: 20:5d:4e:6b:9b:dd:d3:09:41:2a:d5:dd:b3:b1:1f: 37:e6:f6:b9:c1:28:2e:16:8c:40:93:a4:e3:6c:b9: b8:aa:fa:a9:f5:f9:2c:6c:70:d0:cd:44:bc:0d:85: aa:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:67:6E:81:17:84:92:6F:05:B7:CD:15:A5:6F:3E:A5:37:BA:CD:AF X509v3 Authority Key Identifier: keyid:22:B4:A9:AA:A9:82:AB:CB:39:F9:78:98:6B:CB:67:70:B6:02:C1:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrSpqqmCq8s5-XiYa8tncLYCwaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/IrSpqqmCq8s5-XiYa8tncLYCwaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:fa:be:e1:55:21:dd:c7:63:f6:f8:ec:5a:94:f8:c0:fa:c5: 53:7b:05:27:5f:ae:e0:3d:48:8f:92:76:03:61:75:f9:5a:86: 8e:2f:05:14:0b:5a:d3:ac:58:f1:14:94:cd:9b:e6:1e:c5:ff: 69:d9:53:19:dd:9a:fa:e7:2d:67:53:d5:b3:97:c2:f8:ef:b9: dc:30:7c:5d:a7:38:a1:bc:f3:11:1c:c6:90:58:61:dd:0d:06: 41:80:66:9a:d7:48:e7:37:f7:01:0a:57:09:3a:02:76:05:59: ba:f9:ee:88:d3:f7:66:50:19:a5:3f:86:bd:96:3b:aa:5a:5c: 00:b7:30:fb:63:98:09:cd:37:d1:9e:8c:a1:2b:ad:c3:fc:d0: 53:90:d7:92:1c:99:14:91:91:e7:e0:1c:ae:7d:8c:31:34:23: de:2a:28:63:86:ca:d8:c7:78:e7:de:6c:1b:06:fa:38:c3:0d: 1d:7f:3b:fd:a1:a9:24:8f:31:cf:25:b9:a1:15:75:9f:a3:1e: f4:7d:fb:63:35:ab:9e:ce:6c:5c:1e:1f:c1:27:d1:d7:e9:5b: 99:78:b4:8a:5f:94:d4:aa:3c:bb:b5:fe:bc:68:ed:85:82:df: eb:0f:b0:f1:b2:fe:e1:12:f8:94:0a:21:cf:b9:62:a6:7c:6e: 45:f7:22:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDIyQjRBOUFBQTk4MkFCQ0IzOUY5Nzg5ODZCQ0I2Nzcw QjYwMkMxQTQwHhcNMjUxMDE4MjIwODE2WhcNMjUxMDI1MjIwODE2WjAYMRYwFAYD VQQDEw02OGY0MGZkMS01Nzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwE+IrNSFf0e4Btxcd88h/zpcvMZa7Fdfg9IsG38LapMOTRLUw1nvWtg9G6wf 6/srnkNvNw0Ra2LqwSLp/699FVxi9SHna55mr0oJp0YAMixYKpTpRbQI1r5WerF8 MrcbAnWkJVqYUbDpvev894pat5nLj0URb2m83IXvn2x9X+i7+hnAUKU29xGqvqih 1vsZrEef/BqACDNjaD5jPKB8AqLbFfm2/qAYpfXFG/DpCVxv5CrhVXcX+9ng3KG/ 0HnOwbdA6uZJ5ptoCjw5rKYGVOQgXU5rm93TCUEq1d2zsR835va5wSguFoxAk6Tj bLm4qvqp9fksbHDQzUS8DYWq1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNnboEX hJJvBbfNFaVvPqU3us2vMB8GA1UdIwQYMBaAFCK0qaqpgqvLOfl4mGvLZ3C2AsGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4czUtWGlZYTh0bmNMWUN3 YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyU3BxcW1DcThzNS1YaVlhOHRuY0xZQ3dhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9JclNwcXFtQ3E4 czUtWGlZYTh0bmNMWUN3YVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3+r7hVSHdx2P2+OxalPjA+sVTewUnX67gPUiPknYDYXX5WoaOLwUU C1rTrFjxFJTNm+Yexf9p2VMZ3Zr65y1nU9Wzl8L477ncMHxdpzihvPMRHMaQWGHd DQZBgGaa10jnN/cBClcJOgJ2BVm6+e6I0/dmUBmlP4a9ljuqWlwAtzD7Y5gJzTfR noyhK63D/NBTkNeSHJkUkZHn4ByufYwxNCPeKihjhsrYx3jn3mwbBvo4ww0dfzv9 oakkjzHPJbmhFXWfox70fftjNauezmxcHh/BJ9HX6VuZeLSKX5TUqjy7tf68aO2F gt/rD7Dxsv7hEviUCiHPuWKmfG5F9yJq -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:19 2025 by rpki-client