$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft File: IiyUNfXVTN9jafhecaodhG7MXz4.mft (raw, json) Hash identifier: eF1fqKDwYwcR3hxpR/om0thOXfIiHTeeW5YwMqilwRA= Subject key identifier: F5:A3:17:D0:F8:8D:12:DA:D3:9F:D0:EA:9C:C2:D6:63:40:D5:CF:73 Authority key identifier: 22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E Certificate issuer: /CN=A9142E4E/serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Certificate serial: 0C99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft Manifest number: 0C90 Signing time: Tue 04 Nov 2025 18:27:25 +0000 Manifest this update: Tue 04 Nov 2025 18:27:24 +0000 Manifest next update: Tue 11 Nov 2025 18:27:24 +0000 Files and hashes: 1: IiyUNfXVTN9jafhecaodhG7MXz4.crl (hash: kQMqZ8iD6PiaD2S10CdZiY4rc5ua/RqeqBY0rkTvlCk=) 2: 778B8788063711EA981E916CC4F9AE02.roa (hash: ZF76+TdQMAvJkkO6rvtsiHzBwUDEVkLOtw/tW67c6tM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3225 (0xc99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142E4E, serialNumber=222C9435F5D54CDF6369F85E71AA1D846ECC5F3E Validity Not Before: Nov 4 18:27:24 2025 GMT Not After : Nov 11 18:27:24 2025 GMT Subject: CN=690a458d-44ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7a:90:c7:d7:f1:66:71:90:23:91:9d:c2:e4: f8:9c:3c:b7:91:a8:9e:12:f2:5b:cd:07:b8:5c:c0: 0c:6d:54:bd:15:0c:ed:35:84:0d:fc:4c:a2:1a:49: 9b:78:08:36:93:3e:c3:23:79:1e:ad:fe:8e:fc:5f: b8:87:82:df:ae:75:59:3d:ae:47:f4:f4:c2:75:75: c0:f9:f8:ef:ae:48:d8:41:9c:a5:90:6d:c8:06:c8: c1:b6:5b:f2:81:1e:54:d5:8c:2a:1f:54:15:f6:6b: 24:77:c9:ee:7a:7e:99:e0:0f:e4:f4:77:e8:6a:6b: 6a:04:bf:c2:0b:45:60:e1:aa:53:8a:c1:56:1c:93: 99:e2:48:82:27:42:e5:57:81:8a:32:6a:1f:fa:9d: 33:94:e2:62:d8:7b:3b:11:f5:f1:b4:31:3e:06:4d: 9c:a8:c5:fd:a6:96:db:df:da:48:de:e5:6c:7d:76: 2b:6e:37:29:ec:a0:b4:90:88:41:40:8a:ca:49:b3: 74:36:54:17:c8:7e:f1:9e:c7:4e:4d:fe:d8:71:b8: b3:5d:c6:bf:0c:fa:8b:8c:e5:90:43:fa:19:d6:83: dc:d1:db:90:49:d8:f6:6c:58:65:dd:99:0c:97:a6: e1:01:c8:5b:52:93:20:cb:44:19:61:9d:92:ac:9c: 4d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A3:17:D0:F8:8D:12:DA:D3:9F:D0:EA:9C:C2:D6:63:40:D5:CF:73 X509v3 Authority Key Identifier: keyid:22:2C:94:35:F5:D5:4C:DF:63:69:F8:5E:71:AA:1D:84:6E:CC:5F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiyUNfXVTN9jafhecaodhG7MXz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E4E/C173CDE8063611EAB249B96BC4F9AE02/IiyUNfXVTN9jafhecaodhG7MXz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:bd:bd:f9:d8:e8:5d:db:b4:9f:93:d8:90:62:00:14:47:49: 70:15:5d:e9:c2:26:0b:ec:4c:8c:f3:da:7f:10:35:df:21:21: 8b:bc:cb:38:81:f1:6c:14:b8:71:7a:be:ef:5e:34:6b:98:ad: 82:dd:0b:93:89:f1:31:d1:10:4b:ef:72:ff:7f:d8:a2:53:68: 5d:fd:07:92:dc:07:1d:aa:13:b8:86:06:57:38:04:25:cc:9b: 60:0a:9b:a1:ba:d6:24:dd:9c:43:31:3a:13:b6:f3:5b:da:fb: d4:73:2a:d0:fc:aa:ec:6a:f2:09:9d:8c:9a:1d:73:16:ac:e5: 85:36:ab:8e:15:df:75:d9:6e:06:b4:af:09:82:4c:60:f4:b1: 7d:64:33:2a:0d:01:d2:df:34:c9:8f:78:cd:46:98:04:0a:94: 0d:65:a2:b8:30:ee:cc:6f:43:88:c8:bb:7d:97:95:a6:8b:f0: d9:76:4b:3c:41:de:6f:ff:3a:20:31:07:0b:9a:e5:8c:a7:ab: db:98:78:63:df:75:93:4f:92:8d:48:56:3d:af:6a:3c:7f:c6: 43:4c:e2:9e:9d:af:5c:51:1e:69:2c:6f:7f:3e:6f:7c:c1:d5: dd:d1:3b:1f:ef:72:cf:a1:2c:7a:dc:d4:63:6a:fd:75:df:06: 3c:eb:e2:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJFNEUxMTAvBgNVBAUTKDIyMkM5NDM1RjVENTRDREY2MzY5Rjg1RTcxQUExRDg0 NkVDQzVGM0UwHhcNMjUxMTA0MTgyNzI0WhcNMjUxMTExMTgyNzI0WjAYMRYwFAYD VQQDEw02OTBhNDU4ZC00NGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13qQx9fxZnGQI5GdwuT4nDy3kaieEvJbzQe4XMAMbVS9FQztNYQN/EyiGkmb eAg2kz7DI3kerf6O/F+4h4LfrnVZPa5H9PTCdXXA+fjvrkjYQZylkG3IBsjBtlvy gR5U1YwqH1QV9mskd8nuen6Z4A/k9HfoamtqBL/CC0Vg4apTisFWHJOZ4kiCJ0Ll V4GKMmof+p0zlOJi2Hs7EfXxtDE+Bk2cqMX9ppbb39pI3uVsfXYrbjcp7KC0kIhB QIrKSbN0NlQXyH7xnsdOTf7YcbizXca/DPqLjOWQQ/oZ1oPc0duQSdj2bFhl3ZkM l6bhAchbUpMgy0QZYZ2SrJxNRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPWjF9D4 jRLa05/Q6pzC1mNA1c9zMB8GA1UdIwQYMBaAFCIslDX11UzfY2n4XnGqHYRuzF8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkU0RS9DMTczQ0RFODA2 MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlROOWphZmhlY2FvZGhHN01Y ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpeVVOZlhWVE45amFmaGVjYW9kaEc3TVh6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkU0RS9DMTczQ0RFODA2MzYxMUVBQjI0OUI5NkJDNEY5QUUwMi9JaXlVTmZYVlRO OWphZmhlY2FvZGhHN01YejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvvb352Ohd27Sfk9iQYgAUR0lwFV3pwiYL7EyM89p/EDXfISGLvMs4 gfFsFLhxer7vXjRrmK2C3QuTifEx0RBL73L/f9iiU2hd/QeS3AcdqhO4hgZXOAQl zJtgCpuhutYk3ZxDMToTtvNb2vvUcyrQ/KrsavIJnYyaHXMWrOWFNquOFd912W4G tK8Jgkxg9LF9ZDMqDQHS3zTJj3jNRpgECpQNZaK4MO7Mb0OIyLt9l5Wmi/DZdks8 Qd5v/zogMQcLmuWMp6vbmHhj33WTT5KNSFY9r2o8f8ZDTOKena9cUR5pLG9/Pm98 wdXd0Tsf73LPoSx63NRjav113wY86+Lx -----END CERTIFICATE-----Generated at Wed Nov 5 00:24:30 2025 by rpki-client