$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft File: IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json) Hash identifier: N57nfck94qmbgWIBXuv1Ee5pi6wWx1HeWSL+wqgPO+4= Subject key identifier: E0:27:5F:20:56:37:C1:3D:3B:D2:6C:33:B7:E1:3B:E6:D6:6F:44:A4 Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft Manifest number: 015C Signing time: Sat 23 Aug 2025 04:11:44 +0000 Manifest this update: Sat 23 Aug 2025 04:11:43 +0000 Manifest next update: Sat 30 Aug 2025 04:11:43 +0000 Files and hashes: 1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: SSyrdH2ogCtUT2KrKZTpslNVmA2vpFdKsXTQUncxeSE=) 2: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: YEagGQfd4UV4nz53l/WybeYAt4w6+zm6QyFgV48pGBc=) 3: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: zzpFcIYATvvz+ehYyoXcGsAYVOBFYBXyZDv/oX18Mx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BABFD, serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Validity Not Before: Aug 23 04:11:43 2025 GMT Not After : Aug 30 04:11:43 2025 GMT Subject: CN=68a93f7f-350a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d3:a3:9e:2a:8f:ad:99:26:0e:0d:e5:cc:1b: 06:22:2d:be:11:fc:02:16:0e:4c:d3:db:5d:b5:94: 5e:6b:77:16:5f:93:65:91:17:dc:2f:0a:f0:0a:ea: 2c:3b:c3:ef:b1:17:d9:57:f3:49:2b:e1:dc:21:56: 6b:3f:82:43:a4:47:44:df:e0:e1:c6:7a:be:bd:ca: 26:ec:ac:ae:f7:ec:18:da:6b:04:22:9c:44:27:0a: 06:f2:60:56:27:a4:a7:94:a4:bc:05:c6:5e:f6:f0: 85:f8:df:36:35:82:41:3a:fb:ab:36:dc:71:35:59: 9b:44:4d:c7:50:5d:cd:ee:08:73:d6:5c:34:0c:4b: fd:2d:51:a0:69:9d:e8:27:8b:78:ca:93:49:cd:8c: 18:b7:4c:70:a2:77:ce:73:e7:f4:d4:e4:23:ec:17: c1:f6:8f:4a:06:08:3c:ad:29:11:c1:f2:67:f8:e3: bc:3c:78:68:07:b2:7c:2f:a9:4c:7a:bf:af:f1:49: 45:af:e7:78:21:0f:78:ab:ee:20:74:4f:80:e8:77: 22:68:ac:06:2e:b9:84:07:5b:2e:0a:ed:ba:52:30: 04:5e:59:00:2a:0d:65:72:8c:89:46:5a:51:e4:e7: a5:1f:92:2c:c7:38:2d:dc:6b:17:81:cc:0d:7f:3c: 83:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:27:5F:20:56:37:C1:3D:3B:D2:6C:33:B7:E1:3B:E6:D6:6F:44:A4 X509v3 Authority Key Identifier: keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:52:02:af:54:b8:ca:04:9e:d2:59:34:e6:bd:2f:84:6e:e4: 7d:70:57:f8:57:06:f6:36:b5:eb:fa:60:24:26:d7:a7:c3:a7: 06:47:ae:b9:85:13:16:91:3d:25:95:11:33:ad:eb:46:12:f7: 26:f7:d6:7c:e7:85:8d:5d:c9:1e:c3:51:33:c4:5e:c5:52:d9: 00:64:df:fb:03:e3:9a:3e:3f:b7:bb:f9:60:57:00:51:2f:64: 1b:aa:1f:7f:70:79:da:b1:f6:f8:22:56:08:48:54:14:25:bb: 47:a1:6c:54:ff:de:7a:5b:fe:e7:5a:96:6b:76:26:7e:d0:2f: 43:39:58:e2:77:f0:f9:53:54:c7:21:a3:23:ce:71:75:5d:01: aa:23:ce:06:ac:92:db:3b:fc:5b:40:48:7f:72:b6:41:0c:54: 49:86:0b:fa:48:b6:8b:04:0a:93:84:ed:b5:f2:98:90:5c:28: 15:39:f6:d4:91:8c:4b:f1:1c:b9:8d:90:a9:ab:e5:f4:88:4f: c7:05:25:9b:8d:19:94:d8:b7:ee:dc:d8:25:cb:73:44:dd:de: b8:64:87:5c:dc:68:07:8a:7d:0f:dc:28:66:e0:75:e4:46:26: fc:fb:2d:01:31:3b:3d:e9:5d:79:9a:4e:b2:c3:a8:11:b2:28: 8e:9c:e9:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFCRkQxMTAvBgNVBAUTKDIxN0RBMjkwOEM3NTQ3NURCRENEQUE3MEUzNkI5QjQw RDQ5MTJFREQwHhcNMjUwODIzMDQxMTQzWhcNMjUwODMwMDQxMTQzWjAYMRYwFAYD VQQDEw02OGE5M2Y3Zi0zNTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkNOjniqPrZkmDg3lzBsGIi2+EfwCFg5M09tdtZRea3cWX5NlkRfcLwrwCuos O8PvsRfZV/NJK+HcIVZrP4JDpEdE3+Dhxnq+vcom7Kyu9+wY2msEIpxEJwoG8mBW J6SnlKS8BcZe9vCF+N82NYJBOvurNtxxNVmbRE3HUF3N7ghz1lw0DEv9LVGgaZ3o J4t4ypNJzYwYt0xwonfOc+f01OQj7BfB9o9KBgg8rSkRwfJn+OO8PHhoB7J8L6lM er+v8UlFr+d4IQ94q+4gdE+A6HciaKwGLrmEB1suCu26UjAEXlkAKg1lcoyJRlpR 5OelH5Isxzgt3GsXgcwNfzyD3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOAnXyBW N8E9O9JsM7fhO+bWb0SkMB8GA1UdIwQYMBaAFCF9opCMdUddvc2qcONrm0DUkS7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUJGRC84OTVBNDk1MDZE ODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIxMjl6YXB3NDJ1YlFOU1JM dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYMmlrSXgxUjEyOXphcHc0MnViUU5TUkx0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUJGRC84OTVBNDk1MDZEODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIx Mjl6YXB3NDJ1YlFOU1JMdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjUgKvVLjKBJ7SWTTmvS+EbuR9cFf4Vwb2NrXr+mAkJtenw6cGR665 hRMWkT0llREzretGEvcm99Z854WNXckew1EzxF7FUtkAZN/7A+OaPj+3u/lgVwBR L2Qbqh9/cHnasfb4IlYISFQUJbtHoWxU/956W/7nWpZrdiZ+0C9DOVjid/D5U1TH IaMjznF1XQGqI84GrJLbO/xbQEh/crZBDFRJhgv6SLaLBAqThO218piQXCgVOfbU kYxL8Ry5jZCpq+X0iE/HBSWbjRmU2Lfu3Ngly3NE3d64ZIdc3GgHin0P3Chm4HXk Rib8+y0BMTs96V15mk6yw6gRsiiOnOlm -----END CERTIFICATE-----Generated at Sat Aug 23 12:32:20 2025 by rpki-client