$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft File: iiZW272QAzaEH_UDU2_5kY_rJcY.mft (raw, json) Hash identifier: 8G/rPlTfnLYXWENzozCaUu1cZD5v3G6W4fHUdf/xj+U= Subject key identifier: A6:6E:FD:30:0D:44:A5:EF:3A:F5:85:5C:6D:BD:94:CD:2E:74:72:BA Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 Certificate issuer: /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Certificate serial: 0A3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft Manifest number: 0A33 Signing time: Tue 04 Nov 2025 19:49:55 +0000 Manifest this update: Tue 04 Nov 2025 19:49:54 +0000 Manifest next update: Tue 11 Nov 2025 19:49:54 +0000 Files and hashes: 1: iiZW272QAzaEH_UDU2_5kY_rJcY.crl (hash: 7YUn6p8Kq8ffTZF3F0K/gY5WpYw14XN3puAP0MxFwqg=) 2: 9244682C7BD711EAA889485EC4F9AE02.roa (hash: ZCM+V6Y56yepaeegUajjp4xOF8Q6SeyZY2EvL4X5a+Y=) 3: 8B802D485F2211EC88AA0F84C4F9AE02.roa (hash: qSGZ+j4RvXroFxByBDcPf9/bS2chAaWe7JM19f3ZPpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2623 (0xa3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A267C, serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Validity Not Before: Nov 4 19:49:54 2025 GMT Not After : Nov 11 19:49:54 2025 GMT Subject: CN=690a58e3-79d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:60:2a:15:51:df:80:44:19:20:f3:a4:a2:fc: be:68:37:0b:b6:2f:58:a3:f1:89:00:d6:26:2e:48: e6:b2:41:69:fa:9c:0e:bc:5f:29:23:69:c8:f9:35: 6c:e4:4b:95:75:3b:23:9b:ef:ad:c1:41:82:b7:b5: bc:04:71:d3:08:e8:18:32:ab:73:fb:1c:e9:2a:50: 47:64:2f:a5:2f:bb:ed:fe:7c:bd:ea:c7:30:82:fa: 75:c4:bb:75:0f:52:0b:ef:5f:49:68:59:12:1c:24: 05:da:e2:d9:e1:fd:b1:1f:12:8b:5e:dc:90:d1:d9: e7:34:50:e4:c1:f5:e7:c6:c5:67:19:ff:3e:98:08: 6a:6f:bd:15:e8:a5:02:38:55:c2:56:07:6c:f9:c4: 05:7d:b8:a4:31:56:56:8d:28:85:35:98:cc:b1:79: af:e0:27:0d:9b:12:92:23:1f:c9:43:07:90:10:43: c5:f6:95:2b:36:2c:e4:3e:af:23:7b:eb:16:37:2a: ae:07:57:d0:4d:13:55:b5:1b:f5:e4:5a:c2:70:71: a3:aa:44:e6:b6:95:7e:d7:30:a3:c0:ac:93:57:75: 7c:00:a5:cf:6e:3d:40:d6:0c:b1:95:6a:45:a8:6d: 37:c8:94:01:73:5b:cf:5c:55:24:86:68:7d:ab:ef: d7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:6E:FD:30:0D:44:A5:EF:3A:F5:85:5C:6D:BD:94:CD:2E:74:72:BA X509v3 Authority Key Identifier: keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:ff:4c:ce:98:a1:ce:79:29:63:cb:38:73:b0:fc:88:ea:6b: ea:7e:9d:f1:27:fe:9a:05:ac:20:cd:48:af:43:40:40:0b:8e: f9:89:1c:05:ab:be:89:d6:c7:37:32:c5:1d:2f:84:5d:a9:80: c2:d4:48:c0:71:c8:8e:88:9d:5b:69:2c:e5:5b:3a:e1:64:4d: 29:9d:c6:61:06:8e:48:30:d1:25:39:f1:31:58:50:a6:92:90: 3c:75:c2:11:d5:c6:0c:b7:c8:17:00:f9:d2:c1:93:68:e3:86: ae:52:cd:82:0e:de:a5:e2:c5:e8:4d:e4:ad:12:a6:c0:1b:63: dc:55:e9:51:68:64:7d:5f:df:cc:74:a7:66:9d:e3:83:ef:a3: bf:cd:d7:f6:e6:c4:c6:63:04:e0:c5:04:80:86:7d:b3:cc:14: ce:10:dd:15:63:65:ba:ed:d3:49:45:3f:e5:4f:d2:1c:2a:69: a2:35:be:83:21:f6:bc:8b:cf:00:79:00:e7:90:ae:65:c5:cd: 7a:b4:da:6b:91:2a:a3:83:2e:48:1b:94:a8:c8:2a:06:6a:45: 1a:2c:5d:f2:d0:ac:43:ef:15:7e:7c:52:58:04:48:6e:8f:fa: 69:c1:b0:35:e9:c3:74:da:27:44:a7:1e:8b:f8:75:9b:84:17: 41:77:cb:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI2N0MxMTAvBgNVBAUTKDhBMjY1NkRCQkQ5MDAzMzY4NDFGRjUwMzUzNkZGOTkx OEZFQjI1QzYwHhcNMjUxMTA0MTk0OTU0WhcNMjUxMTExMTk0OTU0WjAYMRYwFAYD VQQDEw02OTBhNThlMy03OWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02AqFVHfgEQZIPOkovy+aDcLti9Yo/GJANYmLkjmskFp+pwOvF8pI2nI+TVs 5EuVdTsjm++twUGCt7W8BHHTCOgYMqtz+xzpKlBHZC+lL7vt/ny96scwgvp1xLt1 D1IL719JaFkSHCQF2uLZ4f2xHxKLXtyQ0dnnNFDkwfXnxsVnGf8+mAhqb70V6KUC OFXCVgds+cQFfbikMVZWjSiFNZjMsXmv4CcNmxKSIx/JQweQEEPF9pUrNizkPq8j e+sWNyquB1fQTRNVtRv15FrCcHGjqkTmtpV+1zCjwKyTV3V8AKXPbj1A1gyxlWpF qG03yJQBc1vPXFUkhmh9q+/X1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZu/TAN RKXvOvWFXG29lM0udHK6MB8GA1UdIwQYMBaAFIomVtu9kAM2hB/1A1Nv+ZGP6yXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjY3Qy81QjUzODk2NjdC RDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6YUVIX1VEVTJfNWtZX3JK Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lpWlcyNzJRQXphRUhfVURVMl81a1lfckpjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjY3Qy81QjUzODk2NjdCRDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6 YUVIX1VEVTJfNWtZX3JKY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH/0zOmKHOeSljyzhzsPyI6mvqfp3xJ/6aBawgzUivQ0BAC475iRwF q76J1sc3MsUdL4RdqYDC1EjAcciOiJ1baSzlWzrhZE0pncZhBo5IMNElOfExWFCm kpA8dcIR1cYMt8gXAPnSwZNo44auUs2CDt6l4sXoTeStEqbAG2PcVelRaGR9X9/M dKdmneOD76O/zdf25sTGYwTgxQSAhn2zzBTOEN0VY2W67dNJRT/lT9IcKmmiNb6D Ifa8i88AeQDnkK5lxc16tNprkSqjgy5IG5SoyCoGakUaLF3y0KxD7xV+fFJYBEhu j/ppwbA16cN02idEpx6L+HWbhBdBd8t2 -----END CERTIFICATE-----Generated at Thu Nov 6 04:58:15 2025 by rpki-client