$ rpki-client -vvf rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft File: IRcCLfYdpCG55OG7hIPYXkmCv5E.mft (raw, json) Hash identifier: bIKsiJ+7jJD3ugblh3lOjdbVu0M+6ed/4mABkTHu0x4= Subject key identifier: 93:33:4E:32:9C:05:D3:B4:40:C1:97:E2:8A:33:47:D5:E4:F9:56:0D Authority key identifier: 21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 Certificate issuer: /CN=A9169382/serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Certificate serial: 0537 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft Manifest number: 052F Signing time: Tue 04 Nov 2025 23:35:40 +0000 Manifest this update: Tue 04 Nov 2025 23:35:40 +0000 Manifest next update: Tue 11 Nov 2025 23:35:40 +0000 Files and hashes: 1: IRcCLfYdpCG55OG7hIPYXkmCv5E.crl (hash: fn+FCwuYJx8ZE0X+qiy/2y5F8r+Ge+0lZBsJ7k5MMhw=) 2: E41BF8841CDC11ECBA794120C4F9AE02.roa (hash: rjtMstoekwsHa6BZ54dV6mwwRoqiKzp6w3p85Pa6dX4=) 3: B5D70D9ACE3311EFA7B9B640C4F9AE02.roa (hash: YGJLT2fYDhmz5xGHsZzCsBINR5owfOYXZwH2Xtyir7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1335 (0x537) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169382, serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Validity Not Before: Nov 4 23:35:40 2025 GMT Not After : Nov 11 23:35:40 2025 GMT Subject: CN=690a8dcc-230b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ae:58:94:72:2a:60:07:20:93:a4:56:3c:8c: 96:f7:83:2d:36:1d:4a:10:8f:d2:2f:68:e9:e1:d2: 20:6c:1b:c6:29:23:89:32:02:aa:e1:47:39:d0:8e: 18:ef:be:09:54:a9:27:69:a9:42:9f:1f:5b:f1:69: a6:63:d3:3e:47:40:a6:14:5d:6f:51:21:14:dc:78: ae:33:c8:82:b7:d8:f5:f4:c7:0c:2c:b5:dc:eb:1a: f4:b8:a3:93:3a:d4:54:48:f0:28:0a:2c:f6:ea:7f: fd:3f:d5:d5:bf:bb:38:21:a1:a6:d8:b8:b1:15:5e: f4:44:d0:92:6f:d4:f1:52:5e:cc:eb:77:c0:eb:98: 63:e7:23:b4:5e:b2:c6:13:92:18:79:a5:45:47:fe: 6f:b1:26:01:a2:d1:47:bf:b8:e3:73:3a:b0:ee:a1: f5:89:0d:d0:85:d0:10:b5:ae:cd:43:d6:eb:43:eb: db:13:e2:38:d5:f3:88:07:15:37:15:2e:e5:3c:d1: 19:53:45:ba:86:68:e7:dc:20:94:23:b1:db:a7:78: 5c:c1:9f:b3:62:c6:64:31:87:3f:af:3e:b2:50:6e: 2a:84:63:03:b0:a6:21:54:91:35:2f:33:26:7c:39: 5d:b1:9b:dd:fb:d7:6c:f3:01:67:4f:c6:4d:2d:d0: 16:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:33:4E:32:9C:05:D3:B4:40:C1:97:E2:8A:33:47:D5:E4:F9:56:0D X509v3 Authority Key Identifier: keyid:21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:77:ce:c3:b9:3e:52:6e:d7:3b:5b:d4:b4:f3:9d:16:bc:31: 49:8e:72:6f:8b:8b:75:14:2b:9a:9c:ec:c6:1d:a9:be:70:50: f2:0d:30:34:f4:45:6e:76:48:ed:f5:94:61:b8:55:bd:f4:f7: 82:a2:22:ad:26:da:86:62:c3:e4:c0:3c:0e:a1:ce:b7:25:6d: 16:36:1d:0c:4a:35:b9:db:41:7a:2b:98:f8:23:0e:fb:30:21: 91:6a:aa:82:cb:b9:65:5d:d8:e6:27:9a:31:ee:04:08:35:ef: d1:d5:7b:71:39:c8:a3:38:e0:08:82:4e:7a:e2:e4:7f:b2:0b: 6c:f0:84:e1:08:1d:49:e8:61:ca:38:47:20:d1:b0:a0:b2:46: 56:99:49:a8:69:ec:54:5b:72:50:a6:5d:f7:9f:4d:57:dc:e7: a6:a0:d3:d5:6c:77:df:6f:89:93:0f:27:50:e5:f4:18:8a:43: 07:55:52:d4:06:42:d5:12:4c:c9:12:02:bf:32:9b:09:3a:13: 31:c8:4b:86:ec:63:97:4e:a9:6a:6d:d3:07:37:01:0b:13:83: 37:0b:ca:53:b0:cb:69:3f:68:fd:b8:e1:7f:2a:73:85:76:df: bd:b1:6a:80:3b:3d:42:68:cb:6f:12:66:37:f3:82:c1:4c:59: 91:06:9a:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjkzODIxMTAvBgNVBAUTKDIxMTcwMjJERjYxREE0MjFCOUU0RTFCQjg0ODNEODVF NDk4MkJGOTEwHhcNMjUxMTA0MjMzNTQwWhcNMjUxMTExMjMzNTQwWjAYMRYwFAYD VQQDEw02OTBhOGRjYy0yMzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq65YlHIqYAcgk6RWPIyW94MtNh1KEI/SL2jp4dIgbBvGKSOJMgKq4Uc50I4Y 774JVKknaalCnx9b8WmmY9M+R0CmFF1vUSEU3HiuM8iCt9j19McMLLXc6xr0uKOT OtRUSPAoCiz26n/9P9XVv7s4IaGm2LixFV70RNCSb9TxUl7M63fA65hj5yO0XrLG E5IYeaVFR/5vsSYBotFHv7jjczqw7qH1iQ3QhdAQta7NQ9brQ+vbE+I41fOIBxU3 FS7lPNEZU0W6hmjn3CCUI7Hbp3hcwZ+zYsZkMYc/rz6yUG4qhGMDsKYhVJE1LzMm fDldsZvd+9ds8wFnT8ZNLdAWUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMzTjKc BdO0QMGX4oozR9Xk+VYNMB8GA1UdIwQYMBaAFCEXAi32HaQhueThu4SD2F5Jgr+R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTM4Mi9BNUZCODE1ODFD RDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBDRzU1T0c3aElQWVhrbUN2 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lSY0NMZllkcENHNTVPRzdoSVBZWGttQ3Y1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTM4Mi9BNUZCODE1ODFDRDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBD RzU1T0c3aElQWVhrbUN2NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyd87DuT5Sbtc7W9S0850WvDFJjnJvi4t1FCuanOzGHam+cFDyDTA0 9EVudkjt9ZRhuFW99PeCoiKtJtqGYsPkwDwOoc63JW0WNh0MSjW520F6K5j4Iw77 MCGRaqqCy7llXdjmJ5ox7gQINe/R1XtxOcijOOAIgk564uR/sgts8IThCB1J6GHK OEcg0bCgskZWmUmoaexUW3JQpl33n01X3OemoNPVbHffb4mTDydQ5fQYikMHVVLU BkLVEkzJEgK/MpsJOhMxyEuG7GOXTqlqbdMHNwELE4M3C8pTsMtpP2j9uOF/KnOF dt+9sWqAOz1CaMtvEmY384LBTFmRBppg -----END CERTIFICATE-----Generated at Wed Nov 5 04:04:52 2025 by rpki-client