$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft File: iigtHI-Qww1lnm2MC5vkIhwlMZw.mft (raw, json) Hash identifier: 2QNfNz+ctS07Nti/w+ivovyrHLQGea+M+GLyO1Bzqhc= Subject key identifier: E5:7B:0A:80:D2:E9:0B:4E:4C:47:57:B6:66:0C:90:3E:2A:F9:17:FF Authority key identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C Certificate issuer: /CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft Manifest number: 0122 Signing time: Mon 03 Nov 2025 04:43:30 +0000 Manifest this update: Mon 03 Nov 2025 04:43:30 +0000 Manifest next update: Mon 10 Nov 2025 04:43:30 +0000 Files and hashes: 1: iigtHI-Qww1lnm2MC5vkIhwlMZw.crl (hash: 7aNmuYOIiyDa/qW5WKITF2D/V+1XRxtRwaOfYHhwXaY=) 2: 0EF12B4805E611EF9685F580C4F9AE02.roa (hash: 0tr4K36tCLfkZ4nhSjqeW9dVetaArPPfGAxuclpW9yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDA7, serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C Validity Not Before: Nov 3 04:43:30 2025 GMT Not After : Nov 10 04:43:30 2025 GMT Subject: CN=690832f2-2eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5b:24:e2:f5:5f:de:73:98:1e:0b:68:c2:02: 01:86:97:a5:52:4d:5a:d4:ee:fe:66:ce:91:ed:df: 75:1a:1c:bb:50:28:9d:60:82:20:13:e2:40:a7:4a: d4:27:05:29:13:fc:07:ed:fc:47:45:d6:62:39:29: 8b:9f:52:8f:3c:fc:e2:e2:a2:28:96:01:33:c1:d9: d4:5b:83:61:b6:18:3b:ae:b5:fb:35:9d:0e:d4:4b: f0:69:ac:27:56:aa:f0:df:fd:27:1d:80:db:c1:25: aa:3e:a9:18:8f:60:f3:2f:93:cd:8c:2c:28:c7:a5: fb:d7:25:36:61:18:d5:95:31:c8:c1:75:77:16:0a: 9b:27:3e:50:a9:fd:cc:39:5f:2a:af:d3:04:63:00: f1:2c:14:97:25:69:9c:c7:fc:d4:1e:85:35:89:06: fc:46:e0:32:b8:c9:eb:c6:7d:4e:bf:46:2b:0c:97: db:a0:bf:89:24:97:30:fb:d9:61:a2:aa:fa:fc:a3: f0:76:23:40:e3:e4:f7:06:5f:45:76:7f:36:d5:1c: ad:4d:d9:be:07:31:42:fa:10:d5:ec:ea:c3:b0:02: 8c:de:a2:bb:be:1c:b7:39:7e:2f:44:12:6f:a5:09: e0:5b:c2:de:db:9e:07:8b:8a:00:4c:66:b1:b4:36: 31:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7B:0A:80:D2:E9:0B:4E:4C:47:57:B6:66:0C:90:3E:2A:F9:17:FF X509v3 Authority Key Identifier: keyid:8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:75:28:46:1b:20:b3:9f:16:7b:e4:72:fc:7f:62:99:d2:32: 40:60:90:f4:90:63:06:91:db:19:75:e6:71:b1:34:a7:f4:3c: a3:ad:41:b7:b9:70:dd:e6:c9:0d:97:c2:73:42:8c:7e:ee:1e: d1:e2:ad:ad:b2:2f:7b:4f:1a:1b:fe:d2:24:24:90:4c:3d:67: 24:3d:3b:9f:7a:6f:5f:a2:a4:c5:06:60:4b:14:c9:d0:e8:1d: 40:19:1e:9a:a5:8d:0e:bc:dd:87:ec:f2:39:ff:b4:80:cb:2c: 79:b9:19:51:a7:88:b6:53:95:27:fb:16:a7:20:0f:fa:fc:c8: 4f:cc:28:d6:e7:31:fe:80:12:4a:15:cd:7e:80:20:1d:a2:4c: f6:3c:cb:44:a2:ee:49:ea:50:a7:7e:e6:86:ba:37:fe:8f:9b: 7d:be:9c:24:8f:ef:fa:63:4f:53:25:49:ec:57:1c:eb:3f:84: d5:e4:42:b4:ee:59:fa:91:db:42:5b:15:c3:c4:5d:84:c8:a2: bb:3a:4e:c5:6a:4d:d8:39:e6:06:0b:92:30:6c:05:64:08:29: bc:5f:45:c2:cc:36:05:f2:17:01:6c:50:87:d5:e8:c8:7d:1e: 88:f7:17:80:5e:37:83:10:b7:ee:3f:ca:a0:b3:82:ad:30:27: b3:27:b1:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQTcxMTAvBgNVBAUTKDhBMjgyRDFDOEY5MEMzMEQ2NTlFNkQ4QzBCOUJFNDIy MUMyNTMxOUMwHhcNMjUxMTAzMDQ0MzMwWhcNMjUxMTEwMDQ0MzMwWjAYMRYwFAYD VQQDEw02OTA4MzJmMi0yZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFsk4vVf3nOYHgtowgIBhpelUk1a1O7+Zs6R7d91Ghy7UCidYIIgE+JAp0rU JwUpE/wH7fxHRdZiOSmLn1KPPPzi4qIolgEzwdnUW4Nhthg7rrX7NZ0O1Evwaawn Vqrw3/0nHYDbwSWqPqkYj2DzL5PNjCwox6X71yU2YRjVlTHIwXV3FgqbJz5Qqf3M OV8qr9MEYwDxLBSXJWmcx/zUHoU1iQb8RuAyuMnrxn1Ov0YrDJfboL+JJJcw+9lh oqr6/KPwdiNA4+T3Bl9Fdn821RytTdm+BzFC+hDV7OrDsAKM3qK7vhy3OX4vRBJv pQngW8Le254Hi4oATGaxtDYx3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOV7CoDS 6QtOTEdXtmYMkD4q+Rf/MB8GA1UdIwQYMBaAFIooLRyPkMMNZZ5tjAub5CIcJTGc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRBNy80NUJDRkMzMEZE MjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9paWd0SEktUXd3MWxubTJNQzV2a0lod2xN WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lpZ3RISS1Rd3cxbG5tMk1DNXZrSWh3bE1ady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRBNy80NUJDRkMzMEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9paWd0SEktUXd3 MWxubTJNQzV2a0lod2xNWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANdShGGyCznxZ75HL8f2KZ0jJAYJD0kGMGkdsZdeZxsTSn9DyjrUG3 uXDd5skNl8JzQox+7h7R4q2tsi97Txob/tIkJJBMPWckPTufem9foqTFBmBLFMnQ 6B1AGR6apY0OvN2H7PI5/7SAyyx5uRlRp4i2U5Un+xanIA/6/MhPzCjW5zH+gBJK Fc1+gCAdokz2PMtEou5J6lCnfuaGujf+j5t9vpwkj+/6Y09TJUnsVxzrP4TV5EK0 7ln6kdtCWxXDxF2EyKK7Ok7Fak3YOeYGC5IwbAVkCCm8X0XCzDYF8hcBbFCH1ejI fR6I9xeAXjeDELfuP8qgs4KtMCezJ7GA -----END CERTIFICATE-----Generated at Tue Nov 4 21:39:26 2025 by rpki-client