$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft File: IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft (raw, json) Hash identifier: wlScYKC2ZiX02yMjFSSY+RkVgNCdVKTARDk+PyLVU0U= Subject key identifier: CE:16:15:D2:66:D1:1A:B9:D8:CC:33:39:CB:B3:93:49:03:DA:EB:B2 Authority key identifier: 21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 Certificate issuer: /CN=A91E8B44/serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Certificate serial: 053A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft Manifest number: 0533 Signing time: Sun 19 Oct 2025 01:15:26 +0000 Manifest this update: Sun 19 Oct 2025 01:15:26 +0000 Manifest next update: Sun 26 Oct 2025 01:15:26 +0000 Files and hashes: 1: IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl (hash: 5pVu3z5OzVim0VDoHb9rWtsrGc25bDWN6/RWNe7kiZY=) 2: 6084E4F217E811EC8A22700DC4F9AE02.roa (hash: WpqCjTjP9KCfjNLt14+mScZN2fCuV4hnCNhQMCWaA5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1338 (0x53a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8B44, serialNumber=21F713C808BCD14BFCBCCFD46273C20ED07B4107 Validity Not Before: Oct 19 01:15:26 2025 GMT Not After : Oct 26 01:15:26 2025 GMT Subject: CN=68f43bae-d029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7c:29:d6:3e:23:c9:7c:a1:c3:00:5a:c2:5c: ad:5f:e6:97:85:df:62:cf:ee:45:33:51:c3:09:47: a6:b0:c0:08:c5:b1:6e:f6:3e:f5:dd:ad:3d:9b:59: 88:e8:4c:eb:ae:66:8c:4c:74:13:28:cc:0b:3f:02: eb:b2:c3:74:0a:5f:c8:e6:f1:3f:e0:10:e1:7b:db: 84:29:b6:4d:d5:02:46:78:71:13:25:d6:2c:a1:6e: 32:fb:89:03:c5:ae:28:4f:b0:bc:68:12:25:8b:e8: 9e:02:ab:f1:f4:f5:92:b1:b8:d2:85:06:a0:25:9a: db:74:8f:09:dc:a8:2e:72:cf:33:96:d8:20:dc:9e: f8:15:f5:44:a3:93:4a:cf:c9:5d:b4:42:1a:0e:1a: f6:7d:ac:26:25:95:cb:09:65:27:42:25:21:12:fe: ad:f2:a8:0e:29:1e:80:c6:78:62:8c:24:1d:8f:85: a3:fe:ed:77:c7:a4:ec:6f:e5:31:87:ba:06:e0:aa: 48:ac:72:35:d4:9c:f5:c9:77:91:de:8b:e5:d9:8b: e7:36:83:0e:d1:a1:96:10:a6:de:50:64:2f:94:f1: 7c:10:99:10:ff:11:9e:73:04:9d:aa:a3:57:32:42: 1e:37:07:01:2f:0a:2b:36:f0:73:4e:89:f1:28:85: 65:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:16:15:D2:66:D1:1A:B9:D8:CC:33:39:CB:B3:93:49:03:DA:EB:B2 X509v3 Authority Key Identifier: keyid:21:F7:13:C8:08:BC:D1:4B:FC:BC:CF:D4:62:73:C2:0E:D0:7B:41:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfcTyAi80Uv8vM_UYnPCDtB7QQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8B44/F3B164AC17E411EC9B884685C4F9AE02/IfcTyAi80Uv8vM_UYnPCDtB7QQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:d8:e3:4b:6e:3c:e7:3f:e6:40:ef:52:3b:67:41:8d:02:95: 5f:c7:d0:65:11:b4:4b:04:21:d2:b9:b0:45:1b:90:f8:56:89: d4:a9:6d:d0:ff:ab:d3:62:7f:64:b3:e6:52:52:b8:e3:4b:93: 05:3f:4c:01:85:d0:0f:5d:5e:57:78:62:2c:7f:88:10:fd:57: 28:8d:c2:50:3a:f7:4b:aa:7d:2f:3a:6f:e5:17:80:dc:95:80: a2:25:92:b4:26:a7:b6:15:f6:f4:07:1c:60:8f:ab:6b:8c:59: 42:06:bb:66:d7:04:59:15:1e:d3:e6:b0:49:92:2b:e4:90:68: fe:bb:14:f5:3e:ce:4e:22:90:0a:29:a2:39:d2:d4:33:52:0d: 92:97:25:a2:7c:8e:23:a6:27:bb:8f:e4:1d:89:90:61:ff:a7: 3a:ae:36:23:9c:00:3a:76:be:0a:b2:5e:20:59:2b:ab:71:e3: b6:41:64:a3:b2:60:f1:03:fd:f8:da:cf:f6:47:8a:6c:31:c2: fe:c1:20:f7:d8:d6:e8:24:52:37:6a:e1:62:b3:d6:6c:bc:f2: 02:f3:b0:2a:a8:18:9d:86:d1:91:c7:c8:b0:70:a5:9e:82:d9: f4:26:31:16:cb:ef:23:cc:0a:96:e0:98:5d:fb:83:b6:52:06: 75:a0:25:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCNDQxMTAvBgNVBAUTKDIxRjcxM0M4MDhCQ0QxNEJGQ0JDQ0ZENDYyNzNDMjBF RDA3QjQxMDcwHhcNMjUxMDE5MDExNTI2WhcNMjUxMDI2MDExNTI2WjAYMRYwFAYD VQQDEw02OGY0M2JhZS1kMDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnwp1j4jyXyhwwBawlytX+aXhd9iz+5FM1HDCUemsMAIxbFu9j713a09m1mI 6EzrrmaMTHQTKMwLPwLrssN0Cl/I5vE/4BDhe9uEKbZN1QJGeHETJdYsoW4y+4kD xa4oT7C8aBIli+ieAqvx9PWSsbjShQagJZrbdI8J3Kgucs8zltgg3J74FfVEo5NK z8ldtEIaDhr2fawmJZXLCWUnQiUhEv6t8qgOKR6AxnhijCQdj4Wj/u13x6Tsb+Ux h7oG4KpIrHI11Jz1yXeR3ovl2YvnNoMO0aGWEKbeUGQvlPF8EJkQ/xGecwSdqqNX MkIeNwcBLworNvBzTonxKIVlZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM4WFdJm 0Rq52MwzOcuzk0kD2uuyMB8GA1UdIwQYMBaAFCH3E8gIvNFL/LzP1GJzwg7Qe0EH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEI0NC9GM0IxNjRBQzE3 RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBVdjh2TV9VWW5QQ0R0QjdR UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmY1R5QWk4MFV2OHZNX1VZblBDRHRCN1FRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEI0NC9GM0IxNjRBQzE3RTQxMUVDOUI4ODQ2ODVDNEY5QUUwMi9JZmNUeUFpODBV djh2TV9VWW5QQ0R0QjdRUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA2ONLbjznP+ZA71I7Z0GNApVfx9BlEbRLBCHSubBFG5D4VonUqW3Q /6vTYn9ks+ZSUrjjS5MFP0wBhdAPXV5XeGIsf4gQ/VcojcJQOvdLqn0vOm/lF4Dc lYCiJZK0Jqe2Ffb0Bxxgj6trjFlCBrtm1wRZFR7T5rBJkivkkGj+uxT1Ps5OIpAK KaI50tQzUg2SlyWifI4jpie7j+QdiZBh/6c6rjYjnAA6dr4Ksl4gWSurceO2QWSj smDxA/342s/2R4psMcL+wSD32NboJFI3auFis9ZsvPIC87AqqBidhtGRx8iwcKWe gtn0JjEWy+8jzAqW4Jhd+4O2UgZ1oCUL -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:15 2025 by rpki-client