$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.mft File: iil-A1bw979U3vVrJaH7Hq-EhD0.mft (raw, json) Hash identifier: FN3Nnoy/Z141ppmY0X7C1BGMZp3Qs4u9r9DUcqtPEQA= Subject key identifier: 3E:DC:BD:F1:9F:8C:F1:97:8C:79:F9:5B:32:33:BF:EA:54:A0:BF:0F Authority key identifier: 8A:29:7E:03:56:F0:F7:BF:54:DE:F5:6B:25:A1:FB:1E:AF:84:84:3D Certificate issuer: /CN=A919EA40/serialNumber=8A297E0356F0F7BF54DEF56B25A1FB1EAF84843D Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iil-A1bw979U3vVrJaH7Hq-EhD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.mft Manifest number: 0218 Signing time: Wed 05 Nov 2025 02:17:22 +0000 Manifest this update: Wed 05 Nov 2025 02:17:21 +0000 Manifest next update: Wed 12 Nov 2025 02:17:21 +0000 Files and hashes: 1: iil-A1bw979U3vVrJaH7Hq-EhD0.crl (hash: 4/gxmeVpQ63f8gqcRmnuqwrEKTP0g/Olm3WqcpEC/k0=) 2: 16C04B8680FB11ED9B35954DC4F9AE02.roa (hash: mHCGsiMH+RVpi8uw/SNyVdE1yXadTr0gkZyL1YqI7+I=) 3: 17465D8E80FB11ED9B35954DC4F9AE02.roa (hash: xUUg2QhbKCBoFWOdE6zgMU2Uv4rHZ9uj4wyu9I5RY5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.crl rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iil-A1bw979U3vVrJaH7Hq-EhD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EA40, serialNumber=8A297E0356F0F7BF54DEF56B25A1FB1EAF84843D Validity Not Before: Nov 5 02:17:21 2025 GMT Not After : Nov 12 02:17:21 2025 GMT Subject: CN=690ab3b2-4f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9a:b4:00:9c:8f:1a:42:47:d4:56:5a:e3:8f: bf:2e:c6:93:af:dc:38:7d:8c:e5:cc:91:8f:39:02: f9:ad:79:a1:c2:26:04:94:f1:64:70:15:5f:b2:f7: 12:47:54:c5:9f:b1:c4:b4:17:bb:f7:18:80:61:10: 55:94:b9:3c:b0:28:d7:fd:ac:4c:b6:64:e1:da:c7: d9:58:81:d2:2c:d2:66:0b:b2:fc:05:dc:28:ac:a3: a2:b7:76:82:e2:87:2e:dc:79:01:7b:c7:d5:59:94: 50:84:8d:d5:58:c0:b5:b7:69:76:3c:36:cd:55:06: 3d:b9:82:68:c9:4a:45:4f:bb:38:e8:50:71:1f:68: f0:4e:48:cd:54:c2:9d:e2:63:e3:19:6f:94:bd:3a: 66:ec:17:d8:bc:36:51:53:25:d2:bd:19:e4:22:b3: ba:97:ca:c5:7a:c2:0b:07:ef:5e:e2:db:b6:ad:c9: 0b:33:21:36:94:93:19:e0:4f:9f:cc:e4:90:b3:3a: c4:c4:0f:4d:7c:a9:0d:cd:85:60:20:a7:91:e0:a1: 4c:44:d8:df:c5:8e:c9:c0:09:48:c3:2d:53:1f:99: 3e:e1:c0:69:23:aa:ef:e9:63:77:e0:7f:a3:a3:8a: 0b:5b:a2:bd:7f:5a:c6:11:78:cd:e6:c2:53:c5:8b: a6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DC:BD:F1:9F:8C:F1:97:8C:79:F9:5B:32:33:BF:EA:54:A0:BF:0F X509v3 Authority Key Identifier: keyid:8A:29:7E:03:56:F0:F7:BF:54:DE:F5:6B:25:A1:FB:1E:AF:84:84:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iil-A1bw979U3vVrJaH7Hq-EhD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:af:a0:6d:ed:a2:e2:93:cc:1b:9e:1f:9f:07:8c:05:ba:c2: 56:ab:68:7f:70:38:eb:3e:50:bd:96:3c:f8:42:8b:d5:05:af: cd:1d:42:28:dd:ba:77:d1:73:33:96:1a:c5:dc:fb:8c:2d:a7: f8:d6:89:4c:e0:51:57:28:71:a0:eb:d7:6b:23:32:3d:57:f6: e5:14:5e:84:5e:6e:13:74:0d:39:d2:52:e5:1c:46:79:58:25: 18:5c:14:7b:09:20:93:fb:c3:5e:81:29:c1:b6:47:80:7b:de: bf:0c:fb:38:fe:6b:47:e7:6f:a1:18:73:2f:86:64:6f:8d:bf: ea:4a:e4:20:82:01:f9:45:c2:d5:f7:df:8e:ff:bc:1c:f9:8b: 4b:1d:84:27:75:51:03:03:0f:17:94:f2:c5:8d:0e:3a:22:4d: 27:8e:3f:2a:fe:4b:73:ae:51:c3:23:d8:5e:2e:17:93:e2:94: 1a:56:40:8f:7a:de:26:c3:9f:c3:de:d3:c8:3f:19:a2:71:4b: f2:88:3c:05:64:9a:d3:66:0a:bc:66:ab:7d:10:2d:51:98:b6: 70:3d:4e:8f:52:f5:e2:5a:9b:f9:a9:59:8d:69:91:ff:43:a1: 91:29:96:b9:1d:29:47:98:6a:4d:db:39:70:73:a9:f8:44:1b: ec:4d:4a:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBNDAxMTAvBgNVBAUTKDhBMjk3RTAzNTZGMEY3QkY1NERFRjU2QjI1QTFGQjFF QUY4NDg0M0QwHhcNMjUxMTA1MDIxNzIxWhcNMjUxMTEyMDIxNzIxWjAYMRYwFAYD VQQDEw02OTBhYjNiMi00ZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZq0AJyPGkJH1FZa44+/LsaTr9w4fYzlzJGPOQL5rXmhwiYElPFkcBVfsvcS R1TFn7HEtBe79xiAYRBVlLk8sCjX/axMtmTh2sfZWIHSLNJmC7L8BdworKOit3aC 4ocu3HkBe8fVWZRQhI3VWMC1t2l2PDbNVQY9uYJoyUpFT7s46FBxH2jwTkjNVMKd 4mPjGW+UvTpm7BfYvDZRUyXSvRnkIrO6l8rFesILB+9e4tu2rckLMyE2lJMZ4E+f zOSQszrExA9NfKkNzYVgIKeR4KFMRNjfxY7JwAlIwy1TH5k+4cBpI6rv6WN34H+j o4oLW6K9f1rGEXjN5sJTxYumEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7cvfGf jPGXjHn5WzIzv+pUoL8PMB8GA1UdIwQYMBaAFIopfgNW8Pe/VN71ayWh+x6vhIQ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUE0MC81MjkyM0Y0NDgw RjAxMUVEQUFFNDhGN0JDNEY5QUUwMi9paWwtQTFidzk3OVUzdlZySmFIN0hxLUVo RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lpbC1BMWJ3OTc5VTN2VnJKYUg3SHEtRWhEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUE0MC81MjkyM0Y0NDgwRjAxMUVEQUFFNDhGN0JDNEY5QUUwMi9paWwtQTFidzk3 OVUzdlZySmFIN0hxLUVoRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTr6Bt7aLik8wbnh+fB4wFusJWq2h/cDjrPlC9ljz4QovVBa/NHUIo 3bp30XMzlhrF3PuMLaf41olM4FFXKHGg69drIzI9V/blFF6EXm4TdA050lLlHEZ5 WCUYXBR7CSCT+8NegSnBtkeAe96/DPs4/mtH52+hGHMvhmRvjb/qSuQgggH5RcLV 99+O/7wc+YtLHYQndVEDAw8XlPLFjQ46Ik0njj8q/ktzrlHDI9heLheT4pQaVkCP et4mw5/D3tPIPxmicUvyiDwFZJrTZgq8Zqt9EC1RmLZwPU6PUvXiWpv5qVmNaZH/ Q6GRKZa5HSlHmGpN2zlwc6n4RBvsTUp9 -----END CERTIFICATE-----Generated at Wed Nov 5 12:28:43 2025 by rpki-client