$ rpki-client -vvf rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft File: IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft (raw, json) Hash identifier: Agtc0Srr2dMaFeOTZOu1YWbzIau6et2MP3k1ynlGbmI= Subject key identifier: B0:93:A7:15:1D:B8:0F:DA:A4:0C:06:7F:6F:BB:D0:46:6A:0D:5D:BE Authority key identifier: 22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 Certificate issuer: /CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft Manifest number: 01BA Signing time: Sun 19 Oct 2025 05:31:17 +0000 Manifest this update: Sun 19 Oct 2025 05:31:17 +0000 Manifest next update: Sun 26 Oct 2025 05:31:17 +0000 Files and hashes: 1: IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl (hash: sO+mhB7UjUsfacScTBi/+0l2TKafgu72yctxKizSZHk=) 2: 73E56336069E11EE9D687712C4F9AE02.roa (hash: 2Dnxh30mhffjOkqJSVSDIOGgOimqWD/AADTc7ZuBX6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A42A4, serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Validity Not Before: Oct 19 05:31:17 2025 GMT Not After : Oct 26 05:31:17 2025 GMT Subject: CN=68f477a5-6791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:e4:0e:ba:85:3e:06:2c:a6:19:7a:05:83: 20:d4:ec:8d:13:ee:ad:bd:8f:30:e0:8c:39:22:7a: b7:8d:14:7f:a3:09:6f:dd:54:a3:8b:10:c4:f1:b9: e9:b1:05:df:67:06:17:2c:2d:9f:05:e2:66:6e:56: 02:f0:07:d5:46:fa:0d:a7:04:24:4e:a8:59:57:65: 82:32:6f:9f:81:31:9d:1b:90:3a:3b:7e:08:f6:20: 5e:58:11:11:7c:14:bd:06:3e:28:de:a3:4a:88:54: 01:1f:4f:6e:0a:94:80:70:84:35:dc:83:9c:fb:d3: 02:4e:83:7f:28:ac:14:06:43:97:ff:34:58:14:ad: 6b:24:7a:7c:4e:dd:82:fd:21:e1:77:61:83:59:42: 7d:cb:32:5b:e0:ba:6c:d4:e9:c9:dd:3b:9e:77:87: 97:4b:83:68:5e:6e:2d:25:69:ef:82:61:6e:00:ea: 26:65:0e:bc:09:df:cc:93:fe:b7:01:bf:01:0c:43: 94:7e:8d:b3:cc:06:02:f8:01:f8:d9:d5:3e:4b:46: b9:99:c5:a8:19:82:c5:75:38:f8:da:36:ba:99:4e: c7:87:10:99:7f:38:6f:81:4f:19:f9:49:65:d5:52: 0d:c1:34:b5:d0:09:2d:23:e5:b0:3c:16:60:79:2c: 7b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:93:A7:15:1D:B8:0F:DA:A4:0C:06:7F:6F:BB:D0:46:6A:0D:5D:BE X509v3 Authority Key Identifier: keyid:22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:b0:1b:ed:70:f8:0f:45:b5:45:db:dd:61:a7:f8:2c:f5:58: f4:43:54:87:64:2a:3f:d8:f6:fd:3a:26:14:d8:aa:c6:ec:ab: a6:a5:22:19:40:da:9d:b5:3d:ea:73:1d:19:88:78:f6:75:f3: 81:30:d4:e6:e7:45:eb:d1:89:a5:6b:58:92:3c:12:0b:23:f9: ad:63:b5:9c:1d:8e:46:5a:f4:86:8e:28:69:3d:e7:47:8b:74: b8:db:fe:92:66:5c:02:62:43:7a:5e:68:db:52:0f:11:c3:0d: 51:3e:e6:7c:fb:4d:95:71:18:1f:c0:cb:da:18:9b:43:71:d1: 4e:c0:d4:d5:52:4e:b2:51:77:2a:22:91:60:1f:53:02:30:86: 1e:e0:1a:e0:56:f6:4e:e9:12:b3:d1:e1:dc:0f:bf:13:b8:20: 01:bf:fc:49:c1:9d:df:1f:8e:9b:31:23:c2:b0:45:36:61:4a: d0:71:27:c7:07:57:47:0c:fc:66:33:cc:c8:91:1b:7a:2a:9f: 1a:13:b5:9c:89:b1:e8:3f:9a:e7:a8:fb:27:66:e3:dc:cb:7d: 29:45:77:14:ce:fe:cb:7a:70:5a:f2:44:f0:da:01:96:03:e6: 0f:44:f8:d4:f9:73:08:ba:1e:66:dc:65:fe:58:96:18:5b:de: 81:b7:d6:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyQTQxMTAvBgNVBAUTKDIyMjVFM0ZBMkM2RkUyRUZCNjc2NjVFNTNDRTlGRTBD REY5QzlCQTcwHhcNMjUxMDE5MDUzMTE3WhcNMjUxMDI2MDUzMTE3WjAYMRYwFAYD VQQDEw02OGY0NzdhNS02NzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdHkDrqFPgYsphl6BYMg1OyNE+6tvY8w4Iw5Inq3jRR/owlv3VSjixDE8bnp sQXfZwYXLC2fBeJmblYC8AfVRvoNpwQkTqhZV2WCMm+fgTGdG5A6O34I9iBeWBER fBS9Bj4o3qNKiFQBH09uCpSAcIQ13IOc+9MCToN/KKwUBkOX/zRYFK1rJHp8Tt2C /SHhd2GDWUJ9yzJb4Lps1OnJ3Tued4eXS4NoXm4tJWnvgmFuAOomZQ68Cd/Mk/63 Ab8BDEOUfo2zzAYC+AH42dU+S0a5mcWoGYLFdTj42ja6mU7HhxCZfzhvgU8Z+Ull 1VINwTS10AktI+WwPBZgeSx7VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCTpxUd uA/apAwGf2+70EZqDV2+MB8GA1UdIwQYMBaAFCIl4/osb+LvtnZl5Tzp/gzfnJun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDJBNC82Njg0MTYzQTA2 MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1LTJkbVhsUE9uLUROLWNt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpWGotaXh2NHUtMmRtWGxQT24tRE4tY202Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDJBNC82Njg0MTYzQTA2MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1 LTJkbVhsUE9uLUROLWNtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRsBvtcPgPRbVF291hp/gs9Vj0Q1SHZCo/2Pb9OiYU2KrG7KumpSIZ QNqdtT3qcx0ZiHj2dfOBMNTm50Xr0Ymla1iSPBILI/mtY7WcHY5GWvSGjihpPedH i3S42/6SZlwCYkN6XmjbUg8Rww1RPuZ8+02VcRgfwMvaGJtDcdFOwNTVUk6yUXcq IpFgH1MCMIYe4BrgVvZO6RKz0eHcD78TuCABv/xJwZ3fH46bMSPCsEU2YUrQcSfH B1dHDPxmM8zIkRt6Kp8aE7WcibHoP5rnqPsnZuPcy30pRXcUzv7LenBa8kTw2gGW A+YPRPjU+XMIuh5m3GX+WJYYW96Bt9ZG -----END CERTIFICATE-----Generated at Mon Oct 20 08:53:56 2025 by rpki-client