$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft File: IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json) Hash identifier: FWeo6kn6dWiVBo6AJGg7E5RMn0X+//xWGjjEujH817c= Subject key identifier: C9:F3:CA:10:01:C4:86:26:60:BB:67:C1:3D:BB:67:C3:4F:D6:67:2C Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft Manifest number: 017B Signing time: Sun 19 Oct 2025 06:23:18 +0000 Manifest this update: Sun 19 Oct 2025 06:23:17 +0000 Manifest next update: Sun 26 Oct 2025 06:23:17 +0000 Files and hashes: 1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: 0dNpxUmNuev955fmvB43KYnIeyDAOlblqT2vWCmuEKM=) 2: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: /Y8xFoBMkV8uPy89Axb0Y8yaa9CAWLFHVU01k7AfOCU=) 3: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: olVXu+2blIiQ/nPaKs9oAvL7LtQPo2noHIFDjFZB8b8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BABFD, serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Validity Not Before: Oct 19 06:23:17 2025 GMT Not After : Oct 26 06:23:17 2025 GMT Subject: CN=68f483d5-4f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d0:2b:13:4e:49:7c:94:36:12:ed:35:8e:c0: f9:73:fb:e4:64:d3:47:b0:7c:83:00:b5:26:7d:41: 88:55:0a:7d:db:80:1d:c8:4f:5b:91:4e:8e:8f:43: 31:4a:43:8a:0c:bc:31:73:d5:73:6a:a2:dc:83:f7: a5:07:b3:27:d9:19:e5:18:1b:8f:75:2a:6e:0b:76: 00:1c:33:e8:31:0a:e3:bb:8c:33:bf:22:cc:de:52: 58:2f:13:7f:37:b8:9d:72:f6:0b:50:59:bc:9a:4e: 25:ee:46:50:66:42:12:e2:d2:0c:eb:eb:fa:72:0e: 75:a5:d4:a3:35:28:4c:fc:b1:cd:59:f7:3d:65:1a: 69:1f:40:4e:22:99:29:c3:a3:a6:7c:7f:26:dc:b8: bf:14:65:e5:a2:7f:8f:73:fb:ea:8b:ae:f3:7f:31: 18:f4:e0:ba:7f:c8:2f:4b:8e:83:3f:b8:16:e4:ff: 12:8e:3d:e7:06:2c:2c:e5:3b:b5:71:8f:a5:85:4f: 13:f5:b4:8e:6f:ce:09:ab:26:a5:66:55:d0:56:7f: 5c:4c:60:48:c9:62:2b:cb:20:3b:5d:7b:7f:ea:b5: 03:81:26:9f:25:e6:f5:8a:47:50:03:96:d1:57:ee: ed:fb:31:b6:43:e8:bb:65:1f:e5:2d:d4:06:24:a8: a5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F3:CA:10:01:C4:86:26:60:BB:67:C1:3D:BB:67:C3:4F:D6:67:2C X509v3 Authority Key Identifier: keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:7b:29:7d:c5:df:b9:c1:dd:0b:b3:23:39:da:f4:d3:e8:94: 21:3a:bc:2c:15:19:fc:36:3a:7a:71:79:9c:37:9f:8a:bf:70: f3:be:72:5d:82:cd:22:da:85:84:3e:9d:87:e5:9f:63:7c:8a: 0d:4f:2f:ad:81:d2:48:e1:7d:99:51:e6:f5:8f:89:54:1d:60: bf:25:18:7d:86:ea:07:90:86:c8:c9:e1:c2:3f:79:7e:3e:7c: 91:43:9b:e5:f9:51:d6:71:1f:0c:4b:85:54:78:a6:16:98:2f: 34:b7:13:69:04:8d:df:df:10:52:65:52:b5:0e:df:bb:7c:49: 3f:74:10:21:d1:5a:80:2d:ac:f6:4e:96:25:53:55:a8:79:e6: b9:52:26:13:48:d7:0d:76:be:03:2c:6d:78:99:e8:56:ff:ee: a6:6a:ee:17:81:6a:48:ca:b9:ed:fc:92:10:b1:fb:15:56:1f: 99:5d:30:5d:e6:8b:f5:0e:96:f5:fb:87:15:a8:ae:d6:27:b5: 4f:e6:9c:19:8a:9d:09:0e:48:c7:14:1a:2a:91:88:ae:89:f3: f3:0c:12:c6:6a:a3:d3:6a:1a:a1:7a:12:69:bc:df:d0:3f:f0: db:c1:ce:b6:a5:47:a9:98:1c:20:0f:a1:ad:b5:08:34:0b:ea: 0e:3f:4e:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFCRkQxMTAvBgNVBAUTKDIxN0RBMjkwOEM3NTQ3NURCRENEQUE3MEUzNkI5QjQw RDQ5MTJFREQwHhcNMjUxMDE5MDYyMzE3WhcNMjUxMDI2MDYyMzE3WjAYMRYwFAYD VQQDEw02OGY0ODNkNS00ZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk9ArE05JfJQ2Eu01jsD5c/vkZNNHsHyDALUmfUGIVQp924AdyE9bkU6Oj0Mx SkOKDLwxc9VzaqLcg/elB7Mn2RnlGBuPdSpuC3YAHDPoMQrju4wzvyLM3lJYLxN/ N7idcvYLUFm8mk4l7kZQZkIS4tIM6+v6cg51pdSjNShM/LHNWfc9ZRppH0BOIpkp w6OmfH8m3Li/FGXlon+Pc/vqi67zfzEY9OC6f8gvS46DP7gW5P8Sjj3nBiws5Tu1 cY+lhU8T9bSOb84JqyalZlXQVn9cTGBIyWIryyA7XXt/6rUDgSafJeb1ikdQA5bR V+7t+zG2Q+i7ZR/lLdQGJKilKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnzyhAB xIYmYLtnwT27Z8NP1mcsMB8GA1UdIwQYMBaAFCF9opCMdUddvc2qcONrm0DUkS7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUJGRC84OTVBNDk1MDZE ODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIxMjl6YXB3NDJ1YlFOU1JM dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYMmlrSXgxUjEyOXphcHc0MnViUU5TUkx0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUJGRC84OTVBNDk1MDZEODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIx Mjl6YXB3NDJ1YlFOU1JMdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxeyl9xd+5wd0LsyM52vTT6JQhOrwsFRn8Njp6cXmcN5+Kv3DzvnJd gs0i2oWEPp2H5Z9jfIoNTy+tgdJI4X2ZUeb1j4lUHWC/JRh9huoHkIbIyeHCP3l+ PnyRQ5vl+VHWcR8MS4VUeKYWmC80txNpBI3f3xBSZVK1Dt+7fEk/dBAh0VqALaz2 TpYlU1Woeea5UiYTSNcNdr4DLG14mehW/+6mau4XgWpIyrnt/JIQsfsVVh+ZXTBd 5ov1Dpb1+4cVqK7WJ7VP5pwZip0JDkjHFBoqkYiuifPzDBLGaqPTahqhehJpvN/Q P/Dbwc62pUepmBwgD6GttQg0C+oOP05Y -----END CERTIFICATE-----Generated at Mon Oct 20 08:24:10 2025 by rpki-client