$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft File: Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json) Hash identifier: sJJ9SS6wzZX9wEoec/YYDN+m6LD6qRe+c2sUbFykTZ8= Subject key identifier: EA:2B:DC:7B:1E:BC:40:A1:88:6A:2D:69:A5:0F:5F:10:4C:B2:DA:D2 Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft Manifest number: 0106 Signing time: Sun 19 Oct 2025 07:59:15 +0000 Manifest this update: Sun 19 Oct 2025 07:59:15 +0000 Manifest next update: Sun 26 Oct 2025 07:59:15 +0000 Files and hashes: 1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: /+iWOm4LitfjEGzxUMrquuMMpDJ4oaVZ7HOxqSF5fzM=) 2: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: 2Ea6pfyMHuu7UJGQSJfsHF3FX8pvDKiDVHdhUSz8QqA=) 3: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: fSTt/OP/CCIEWdda0wFEWb+9ChFos6G9oFISz4g6itU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Validity Not Before: Oct 19 07:59:15 2025 GMT Not After : Oct 26 07:59:15 2025 GMT Subject: CN=68f49a53-7859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:79:b4:73:45:73:21:29:fd:91:36:74:38:0b: bf:d8:6a:20:5f:b8:47:f2:da:1d:08:67:6a:2f:ad: 12:21:c4:4a:11:ff:13:6e:c5:81:7d:38:f7:40:68: 29:3e:e0:63:23:9f:3b:f4:3e:f5:10:d7:9b:bd:e8: 44:e8:1e:d3:ea:bb:82:38:5d:1f:f4:a1:f9:2e:69: 8d:06:5e:7c:3d:3d:71:86:0f:17:43:dd:e5:c7:e8: 74:c5:58:e9:5d:c5:d8:0a:9d:76:17:3f:5c:a8:93: a2:6e:0c:80:05:f2:c7:e1:69:57:04:ae:ab:bf:cd: 00:d5:3b:a1:cb:5d:a2:09:15:d3:0a:c0:5d:ef:e0: 8d:77:d7:ca:37:b4:a8:23:59:17:45:49:33:5f:5b: 3f:a9:fd:45:ff:77:d3:df:39:2a:2b:f5:bd:d6:3b: 9f:76:36:66:8e:eb:e7:e0:d2:43:87:ba:42:39:11: fd:13:16:25:80:52:69:ac:6e:96:4d:c2:34:a8:e2: 77:c7:6f:4b:ee:74:5c:98:b2:80:46:82:be:20:fd: 31:26:84:2d:e9:62:ae:98:38:df:6b:be:a7:f2:64: 30:e3:d3:0f:6e:d5:15:24:b7:5f:77:08:e8:00:55: 8f:17:77:e0:19:d8:76:00:87:e8:95:7d:28:39:f7: 2e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2B:DC:7B:1E:BC:40:A1:88:6A:2D:69:A5:0F:5F:10:4C:B2:DA:D2 X509v3 Authority Key Identifier: keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:2e:97:15:94:29:cd:56:24:c1:f5:e7:d3:16:af:43:33:d9: 6c:2d:12:ec:45:85:8f:05:c3:e7:f0:5f:6c:d5:5e:99:80:8e: f8:90:96:cd:bf:bf:ee:e1:7a:1e:07:f1:e1:0f:82:05:d0:dc: a7:fb:cf:ae:92:5f:61:ed:95:ce:ca:8c:53:65:20:95:c3:e8: e6:07:94:4d:45:0a:6a:68:23:ee:02:2e:4b:ed:37:4f:ae:dd: b5:25:6c:21:94:a8:54:3f:b0:eb:20:12:32:6f:4c:09:53:96: 94:a1:2b:8c:df:06:c5:5a:95:28:5e:99:1c:14:c2:79:91:85: 34:ca:25:ad:e1:b0:c5:81:39:64:0e:4b:29:73:a3:05:b6:f7: 69:92:4b:f0:61:00:85:f2:0d:05:c8:0d:08:5a:44:6d:69:64: 74:eb:43:06:d7:13:8e:97:04:f4:29:0e:c3:b3:aa:fd:57:3a: 7c:25:68:21:5f:08:26:ab:d5:f2:f2:13:5b:5c:af:88:36:25: 37:1e:f9:f9:7a:9c:31:6c:5f:a6:a7:a2:4c:ad:53:b5:3f:82: 94:67:c3:fa:c1:bc:be:97:f6:bb:d1:80:c0:ee:fe:8b:ed:6f: a8:ee:e3:7f:41:c8:ce:fc:82:57:11:3d:e7:ea:51:5e:38:18: 46:62:38:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RGREExMTAvBgNVBAUTKDIyQUZENENERDlDNEY0QzM4Mzc2MkIzRTkzRUVDRjFB RTZGRjlEMTYwHhcNMjUxMDE5MDc1OTE1WhcNMjUxMDI2MDc1OTE1WjAYMRYwFAYD VQQDEw02OGY0OWE1My03ODU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3m0c0VzISn9kTZ0OAu/2GogX7hH8todCGdqL60SIcRKEf8TbsWBfTj3QGgp PuBjI5879D71ENebvehE6B7T6ruCOF0f9KH5LmmNBl58PT1xhg8XQ93lx+h0xVjp XcXYCp12Fz9cqJOibgyABfLH4WlXBK6rv80A1Tuhy12iCRXTCsBd7+CNd9fKN7So I1kXRUkzX1s/qf1F/3fT3zkqK/W91jufdjZmjuvn4NJDh7pCORH9ExYlgFJprG6W TcI0qOJ3x29L7nRcmLKARoK+IP0xJoQt6WKumDjfa76n8mQw49MPbtUVJLdfdwjo AFWPF3fgGdh2AIfolX0oOfcuzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOor3Hse vEChiGotaaUPXxBMstrSMB8GA1UdIwQYMBaAFCKv1M3ZxPTDg3YrPpPuzxrm/50W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REZEQS9BRjJENTBFNjIz MDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlNT0RkaXMtay03UEd1Yl9u UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxX1V6ZG5FOU1PRGRpcy1rLTdQR3ViX25SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REZEQS9BRjJENTBFNjIzMDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlN T0RkaXMtay03UEd1Yl9uUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTLpcVlCnNViTB9efTFq9DM9lsLRLsRYWPBcPn8F9s1V6ZgI74kJbN v7/u4XoeB/HhD4IF0Nyn+8+ukl9h7ZXOyoxTZSCVw+jmB5RNRQpqaCPuAi5L7TdP rt21JWwhlKhUP7DrIBIyb0wJU5aUoSuM3wbFWpUoXpkcFMJ5kYU0yiWt4bDFgTlk Dkspc6MFtvdpkkvwYQCF8g0FyA0IWkRtaWR060MG1xOOlwT0KQ7Ds6r9Vzp8JWgh Xwgmq9Xy8hNbXK+INiU3Hvn5epwxbF+mp6JMrVO1P4KUZ8P6wby+l/a70YDA7v6L 7W+o7uN/QcjO/IJXET3n6lFeOBhGYjhS -----END CERTIFICATE-----Generated at Mon Oct 20 13:09:01 2025 by rpki-client