$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft File: IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft (raw, json) Hash identifier: fGkyXa4j6dcoKgMSBfTl4YpGmBzTmfMJ3xwbxSNFAvk= Subject key identifier: 74:1B:F8:C7:16:2D:23:61:FC:CB:B5:7B:B5:5E:6B:03:D6:5F:D5:18 Authority key identifier: 21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 Certificate issuer: /CN=A91A91D2/serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Certificate serial: 09CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft Manifest number: 09C0 Signing time: Sat 18 Oct 2025 21:03:00 +0000 Manifest this update: Sat 18 Oct 2025 21:03:00 +0000 Manifest next update: Sat 25 Oct 2025 21:03:00 +0000 Files and hashes: 1: IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl (hash: 1PuIWWw+YKE7UwI6EyrQ4jcqSqkLWf6p6ZNlQkL13Mc=) 2: 371ADD3E9C9811EDA6AEF053C4F9AE02.roa (hash: 8JSwEQed2eJqn9OytcIj9IctVhOahjE7HP6K7LQO8mE=) 3: FE6C73289C9A11ED8123147BC4F9AE02.roa (hash: rFSplheoWDm+5MPYS0jTevwHFfJ593Fp0RQ1ghGpvEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2511 (0x9cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91D2, serialNumber=21FC815FCB1CEAD770BD6C903694745F71CA7195 Validity Not Before: Oct 18 21:03:00 2025 GMT Not After : Oct 25 21:03:00 2025 GMT Subject: CN=68f40084-d0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4a:f5:f8:b3:c4:f6:8a:c5:06:53:4d:35:f3: 90:1c:62:32:ac:d4:71:32:5a:73:91:bd:da:8a:8a: 8f:76:8c:df:5e:ed:cb:6e:29:61:83:5f:9e:15:0a: 8c:3d:82:2a:b0:d6:a4:85:9d:68:55:91:f2:4e:eb: 65:e2:e2:d3:7f:c1:00:81:2b:95:ad:06:e9:cc:c0: 9b:11:28:30:70:fb:31:31:60:f3:16:ec:30:4a:a8: 96:c8:b7:6b:74:2e:3b:4e:17:d5:0e:ba:1f:06:93: 5f:bd:a9:ed:2a:fb:c6:8e:ca:81:01:6b:ce:ba:76: 39:8f:cc:01:b3:68:e1:18:ba:1c:08:47:ec:78:70: 31:81:0b:e2:7b:2e:2a:90:13:ce:e6:cf:4f:43:61: c8:97:70:7d:58:64:4a:15:29:c7:c5:2b:d5:6f:2a: d1:d3:2a:77:09:57:81:1f:1c:37:6f:5d:25:a3:f0: 12:f2:ec:53:48:82:06:07:0d:b2:bb:1e:fc:62:db: 16:b8:89:d4:03:95:63:de:5a:6a:a4:96:36:38:18: 06:c8:4f:1c:cc:49:03:f8:f4:d2:c2:66:8b:1c:c8: 7a:7e:25:8a:1a:99:98:3a:59:75:de:46:ab:d2:40: 47:57:12:27:e4:4d:f9:00:2e:89:ab:70:9f:c9:27: ac:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1B:F8:C7:16:2D:23:61:FC:CB:B5:7B:B5:5E:6B:03:D6:5F:D5:18 X509v3 Authority Key Identifier: keyid:21:FC:81:5F:CB:1C:EA:D7:70:BD:6C:90:36:94:74:5F:71:CA:71:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfyBX8sc6tdwvWyQNpR0X3HKcZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91D2/8C14E94491D111EAA533A978C4F9AE02/IfyBX8sc6tdwvWyQNpR0X3HKcZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:cd:2c:4d:af:8f:b8:45:df:a2:9b:19:c8:96:1e:4f:bd:a3: 0e:9f:84:2c:af:55:fd:82:21:26:2d:00:6a:37:d1:78:d1:c4: 2a:ac:77:7a:db:97:86:df:b1:82:5d:63:04:4c:02:80:1a:44: ab:8c:08:15:26:a1:90:15:e9:4c:e1:78:f6:e8:ec:22:e3:99: b7:d7:86:45:28:0e:74:91:72:bc:36:1c:80:b1:ef:16:3d:2d: 3d:cd:7f:9a:4b:44:d2:ea:19:60:79:3c:04:83:22:72:ac:af: ca:bd:9d:cf:6b:3c:65:01:fb:78:ce:3e:ee:c4:43:c3:35:24: 56:d8:d2:01:c4:b8:63:ab:a2:c7:fc:c1:af:61:2e:55:c7:82: 8f:88:02:f8:49:a3:68:24:2c:c0:39:ec:4d:fe:18:a7:60:da: e4:6a:ec:ce:65:02:42:26:fe:db:6c:f7:b9:33:35:7f:14:a3: 56:0e:8c:c4:5b:c2:e6:d3:e6:73:92:fb:3d:53:68:fa:c9:a0: ba:2a:3b:4b:8c:30:cc:21:7a:50:1c:52:44:8a:cf:13:0b:6d: 22:62:cb:73:92:46:3b:e4:c9:c1:58:dc:af:e2:73:1c:2a:e0: 29:ed:fd:36:35:ac:77:b7:61:f9:ef:1f:84:ae:05:a7:da:ba: 44:03:b9:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxRDIxMTAvBgNVBAUTKDIxRkM4MTVGQ0IxQ0VBRDc3MEJENkM5MDM2OTQ3NDVG NzFDQTcxOTUwHhcNMjUxMDE4MjEwMzAwWhcNMjUxMDI1MjEwMzAwWjAYMRYwFAYD VQQDEw02OGY0MDA4NC1kMGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Ur1+LPE9orFBlNNNfOQHGIyrNRxMlpzkb3aioqPdozfXu3Lbilhg1+eFQqM PYIqsNakhZ1oVZHyTutl4uLTf8EAgSuVrQbpzMCbESgwcPsxMWDzFuwwSqiWyLdr dC47ThfVDrofBpNfvantKvvGjsqBAWvOunY5j8wBs2jhGLocCEfseHAxgQviey4q kBPO5s9PQ2HIl3B9WGRKFSnHxSvVbyrR0yp3CVeBHxw3b10lo/AS8uxTSIIGBw2y ux78YtsWuInUA5Vj3lpqpJY2OBgGyE8czEkD+PTSwmaLHMh6fiWKGpmYOll13kar 0kBHVxIn5E35AC6Jq3CfySesywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHQb+McW LSNh/Mu1e7VeawPWX9UYMB8GA1UdIwQYMBaAFCH8gV/LHOrXcL1skDaUdF9xynGV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFEMi84QzE0RTk0NDkx RDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0ZHd2V3lRTnBSMFgzSEtj WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmeUJYOHNjNnRkd3ZXeVFOcFIwWDNIS2NaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFEMi84QzE0RTk0NDkxRDExMUVBQTUzM0E5NzhDNEY5QUUwMi9JZnlCWDhzYzZ0 ZHd2V3lRTnBSMFgzSEtjWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBszSxNr4+4Rd+imxnIlh5PvaMOn4Qsr1X9giEmLQBqN9F40cQqrHd6 25eG37GCXWMETAKAGkSrjAgVJqGQFelM4Xj26Owi45m314ZFKA50kXK8NhyAse8W PS09zX+aS0TS6hlgeTwEgyJyrK/KvZ3PazxlAft4zj7uxEPDNSRW2NIBxLhjq6LH /MGvYS5Vx4KPiAL4SaNoJCzAOexN/hinYNrkauzOZQJCJv7bbPe5MzV/FKNWDozE W8Lm0+Zzkvs9U2j6yaC6KjtLjDDMIXpQHFJEis8TC20iYstzkkY75MnBWNyv4nMc KuAp7f02Nax3t2H57x+ErgWn2rpEA7n2 -----END CERTIFICATE-----Generated at Mon Oct 20 16:18:01 2025 by rpki-client