$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft File: iro-R9UcXSye80Plr0EQHkPFiog.mft (raw, json) Hash identifier: HOKypjFey0igajcQGQm57hUi2665ZBbqnWa0mDP6/Tc= Subject key identifier: 6C:D7:F4:C4:50:EF:77:B2:AD:86:9C:DC:A5:8A:25:3A:3D:36:3A:4F Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 Certificate issuer: /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Certificate serial: 0C41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft Manifest number: 0C36 Signing time: Sat 18 Oct 2025 19:27:56 +0000 Manifest this update: Sat 18 Oct 2025 19:27:56 +0000 Manifest next update: Sat 25 Oct 2025 19:27:56 +0000 Files and hashes: 1: iro-R9UcXSye80Plr0EQHkPFiog.crl (hash: HXVNmH304ajIMa+HiCASnMo6O0e1aDXrr0OHW2xcKXw=) 2: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (hash: ZFOmsL5bJSLH6PZ2YkIqaVTwufEfPYg2DbDADn/8Z+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3137 (0xc41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE984, serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Validity Not Before: Oct 18 19:27:56 2025 GMT Not After : Oct 25 19:27:56 2025 GMT Subject: CN=68f3ea3c-7186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ce:cc:8a:90:a8:97:ef:e9:36:b7:31:ca:2c: 6c:7e:d2:c3:66:32:9e:44:10:3b:38:f8:47:e3:af: 4c:85:00:bb:46:c2:10:2e:9c:ce:02:23:15:5a:63: 8c:fe:48:be:82:59:fa:7f:86:8e:28:f5:a5:1f:9d: ed:64:7e:c8:19:c9:10:fd:fd:71:46:e9:f9:b4:c3: ee:4d:78:4b:02:f7:ef:ab:90:ae:0c:40:74:ab:6e: 9f:31:6b:f0:55:16:cd:88:6f:16:a8:7e:fd:53:d4: 54:aa:d3:7b:df:72:b5:b7:10:e3:2f:b9:8f:25:07: 0c:b6:28:9a:dc:9d:0f:35:0e:6c:30:33:ea:c8:36: f1:ac:8c:9a:57:4c:5b:30:b3:c6:e5:53:42:e8:f9: cd:28:b8:93:0c:b4:c4:4a:8b:a9:43:65:6a:21:5e: a1:4f:de:e7:f3:0f:92:ea:46:9b:8a:92:3f:ab:e7: 75:43:6d:6d:11:a2:77:a7:5c:a2:15:5e:2a:5c:91: 4f:60:24:74:11:a1:8c:54:e4:50:da:c4:d4:c5:29: 96:b4:07:39:da:1b:db:bc:cd:bc:f9:50:99:11:10: 4b:c8:b9:e5:1c:09:4b:0e:56:64:9a:1b:cf:67:9c: 08:60:5e:24:1f:25:b7:61:df:c3:d3:ed:27:a1:d5: 97:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D7:F4:C4:50:EF:77:B2:AD:86:9C:DC:A5:8A:25:3A:3D:36:3A:4F X509v3 Authority Key Identifier: keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:20:49:89:8d:98:f7:a3:59:b7:ce:25:f2:e8:02:70:de:78: 8a:a2:ee:b8:38:68:c3:a0:49:60:fa:36:93:1c:91:7c:36:dc: 45:9c:1e:78:37:fa:7c:bc:e3:2b:8a:58:27:1e:cf:7a:85:5c: b4:c5:72:93:d8:c8:80:ea:85:37:4e:cb:7a:74:88:04:cd:f4: aa:af:31:52:66:99:86:12:9e:a7:c6:f9:c0:66:6c:2f:d2:6e: 29:42:d5:92:6d:f3:aa:d9:fb:35:17:5d:8b:73:c8:9c:48:6f: 95:6e:b2:c7:df:f2:7b:9d:8f:f4:b8:02:65:ed:96:4a:43:8c: 60:b6:b1:36:25:27:91:04:74:c2:31:6d:0f:91:37:7f:c9:6d: 8f:55:b1:2b:e6:98:81:1a:d3:84:45:38:0b:3f:12:8d:f3:3d: 9f:08:18:e7:25:31:4e:64:f2:f5:0e:86:c0:7a:d4:c6:ba:62: dc:2f:2d:fd:cd:cf:58:98:59:38:cd:71:94:6c:59:a3:f4:ef: 9d:80:ad:f8:89:37:22:0c:a0:f0:a1:08:61:e5:bd:da:5b:31: db:a0:90:a2:dd:c1:e2:cc:07:b9:39:6b:8d:58:79:29:82:46: 21:11:80:13:55:f7:70:13:22:09:ae:20:11:d2:37:f3:0d:11: c9:15:36:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5ODQxMTAvBgNVBAUTKDhBQkEzRTQ3RDUxQzVEMkM5RUYzNDNFNUFGNDExMDFF NDNDNThBODgwHhcNMjUxMDE4MTkyNzU2WhcNMjUxMDI1MTkyNzU2WjAYMRYwFAYD VQQDEw02OGYzZWEzYy03MTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvs7MipCol+/pNrcxyixsftLDZjKeRBA7OPhH469MhQC7RsIQLpzOAiMVWmOM /ki+gln6f4aOKPWlH53tZH7IGckQ/f1xRun5tMPuTXhLAvfvq5CuDEB0q26fMWvw VRbNiG8WqH79U9RUqtN733K1txDjL7mPJQcMtiia3J0PNQ5sMDPqyDbxrIyaV0xb MLPG5VNC6PnNKLiTDLTESoupQ2VqIV6hT97n8w+S6kabipI/q+d1Q21tEaJ3p1yi FV4qXJFPYCR0EaGMVORQ2sTUxSmWtAc52hvbvM28+VCZERBLyLnlHAlLDlZkmhvP Z5wIYF4kHyW3Yd/D0+0nodWXCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzX9MRQ 73eyrYac3KWKJTo9NjpPMB8GA1UdIwQYMBaAFIq6PkfVHF0snvND5a9BEB5DxYqI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTk4NC8yODc0NUU0QzE1 RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hTeWU4MFBscjBFUUhrUEZp b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lyby1SOVVjWFN5ZTgwUGxyMEVRSGtQRmlvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTk4NC8yODc0NUU0QzE1RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hT eWU4MFBscjBFUUhrUEZpb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8IEmJjZj3o1m3ziXy6AJw3niKou64OGjDoElg+jaTHJF8NtxFnB54 N/p8vOMrilgnHs96hVy0xXKT2MiA6oU3Tst6dIgEzfSqrzFSZpmGEp6nxvnAZmwv 0m4pQtWSbfOq2fs1F12Lc8icSG+VbrLH3/J7nY/0uAJl7ZZKQ4xgtrE2JSeRBHTC MW0PkTd/yW2PVbEr5piBGtOERTgLPxKN8z2fCBjnJTFOZPL1DobAetTGumLcLy39 zc9YmFk4zXGUbFmj9O+dgK34iTciDKDwoQhh5b3aWzHboJCi3cHizAe5OWuNWHkp gkYhEYATVfdwEyIJriAR0jfzDRHJFTYr -----END CERTIFICATE-----Generated at Mon Oct 20 11:35:35 2025 by rpki-client