$ rpki-client -vvf rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft File: IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft (raw, json) Hash identifier: x+4TBN/WEQdUDE/lKRb9HqMg1ZJGxcU7pYWlW7ZlWqE= Subject key identifier: 5A:48:14:5F:31:71:E9:F6:E8:75:5D:F3:53:73:77:8E:CF:EB:2C:E8 Authority key identifier: 22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 Certificate issuer: /CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft Manifest number: 01C2 Signing time: Wed 05 Nov 2025 03:04:24 +0000 Manifest this update: Wed 05 Nov 2025 03:04:24 +0000 Manifest next update: Wed 12 Nov 2025 03:04:24 +0000 Files and hashes: 1: IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl (hash: bHzShdAAM7sWItxFCOTv/RRHKT1SUKXTv9m2e3OH5Vg=) 2: 73E56336069E11EE9D687712C4F9AE02.roa (hash: 2Dnxh30mhffjOkqJSVSDIOGgOimqWD/AADTc7ZuBX6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A42A4, serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Validity Not Before: Nov 5 03:04:24 2025 GMT Not After : Nov 12 03:04:24 2025 GMT Subject: CN=690abeb8-37e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:12:59:d8:ad:58:2a:77:db:6c:e8:6c:4f:7d: 4e:69:4f:3b:40:fe:77:ba:8d:af:bf:5c:09:0c:0a: b6:3d:11:a9:40:a7:23:c8:fe:5c:38:c4:9b:f1:68: de:25:d7:3d:b6:4f:a3:87:0b:ce:85:67:29:34:76: 84:02:a0:02:f8:c3:e8:bb:df:f4:58:3b:b0:4c:68: 98:4e:6d:ba:fa:ce:7e:f8:04:95:78:9e:00:86:ac: 59:82:7b:91:5e:fb:80:78:da:68:4d:e6:7a:f5:e6: 7e:01:07:dc:4d:1b:11:b4:af:3d:9b:6d:44:fe:96: 03:87:e3:d1:b9:0b:d0:47:39:1d:a3:d8:91:8a:93: 77:02:04:b5:7c:5e:19:28:4a:b7:76:aa:93:e3:fb: 91:5a:ba:ec:f1:88:64:62:47:35:4f:da:18:f1:fa: f6:2f:76:da:24:eb:1a:e0:11:46:fc:c8:ed:2b:81: 55:74:82:4b:9f:ef:f3:d6:d9:d9:bb:10:3a:46:4c: 85:30:2a:88:d9:a8:e4:05:46:3a:ee:a0:72:5d:d1: 19:d5:31:d9:a9:6e:7c:e3:02:e6:dc:cc:f7:c4:21: 21:92:09:b9:66:af:30:a4:19:7d:6d:ad:a9:65:d5: 9b:d6:f1:ee:57:c7:98:59:d7:a7:63:88:06:e1:2c: c0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:48:14:5F:31:71:E9:F6:E8:75:5D:F3:53:73:77:8E:CF:EB:2C:E8 X509v3 Authority Key Identifier: keyid:22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:03:c7:91:ef:4e:e3:6e:d6:b8:68:58:1c:ca:cc:85:03:c7: 84:8d:80:3e:89:dc:b1:6e:77:1c:6e:fb:28:c9:bd:5d:b6:2b: 70:55:49:d1:2f:c8:bd:c3:5d:0f:d2:7c:b8:a3:37:81:64:9c: b7:32:e8:de:6c:a4:d6:60:ca:d6:27:7b:ae:f0:df:4a:ef:3e: b4:d4:b4:4c:66:13:f9:a7:96:54:10:d9:cc:31:58:f1:57:02: 9b:d5:2f:73:20:b9:fe:8b:f4:83:a7:ad:e9:c5:55:93:87:76: 4d:8b:82:e1:f2:82:c6:70:58:cb:44:62:60:03:e1:b9:78:1d: 18:af:3f:37:f1:6a:26:15:73:78:e5:35:b4:21:64:79:cf:30: b4:be:6b:65:8d:97:37:45:af:f8:cb:04:7e:e6:f2:7b:9e:c9: 2e:10:db:dd:6f:09:bb:5b:01:21:91:0a:8b:91:45:e4:c6:2c: b0:3a:de:ff:28:51:a4:a9:c5:30:46:f8:c7:20:17:b2:e3:de: 47:d2:85:43:3e:38:ef:9b:75:42:ac:24:85:bc:74:fa:b5:93: 80:e8:ae:fd:46:76:6d:98:17:67:e2:a1:0a:f2:65:fe:4e:a4: 10:ae:e8:69:3a:f5:d0:3c:29:8a:f9:58:df:33:da:a4:60:d5: 5f:21:60:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyQTQxMTAvBgNVBAUTKDIyMjVFM0ZBMkM2RkUyRUZCNjc2NjVFNTNDRTlGRTBD REY5QzlCQTcwHhcNMjUxMTA1MDMwNDI0WhcNMjUxMTEyMDMwNDI0WjAYMRYwFAYD VQQDEw02OTBhYmViOC0zN2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxJZ2K1YKnfbbOhsT31OaU87QP53uo2vv1wJDAq2PRGpQKcjyP5cOMSb8Wje Jdc9tk+jhwvOhWcpNHaEAqAC+MPou9/0WDuwTGiYTm26+s5++ASVeJ4AhqxZgnuR XvuAeNpoTeZ69eZ+AQfcTRsRtK89m21E/pYDh+PRuQvQRzkdo9iRipN3AgS1fF4Z KEq3dqqT4/uRWrrs8YhkYkc1T9oY8fr2L3baJOsa4BFG/MjtK4FVdIJLn+/z1tnZ uxA6RkyFMCqI2ajkBUY67qByXdEZ1THZqW584wLm3Mz3xCEhkgm5Zq8wpBl9ba2p ZdWb1vHuV8eYWdenY4gG4SzAgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpIFF8x cen26HVd81Nzd47P6yzoMB8GA1UdIwQYMBaAFCIl4/osb+LvtnZl5Tzp/gzfnJun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDJBNC82Njg0MTYzQTA2 MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1LTJkbVhsUE9uLUROLWNt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpWGotaXh2NHUtMmRtWGxQT24tRE4tY202Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDJBNC82Njg0MTYzQTA2MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1 LTJkbVhsUE9uLUROLWNtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvA8eR707jbta4aFgcysyFA8eEjYA+idyxbnccbvsoyb1dtitwVUnR L8i9w10P0ny4ozeBZJy3MujebKTWYMrWJ3uu8N9K7z601LRMZhP5p5ZUENnMMVjx VwKb1S9zILn+i/SDp63pxVWTh3ZNi4Lh8oLGcFjLRGJgA+G5eB0Yrz838WomFXN4 5TW0IWR5zzC0vmtljZc3Ra/4ywR+5vJ7nskuENvdbwm7WwEhkQqLkUXkxiywOt7/ KFGkqcUwRvjHIBey495H0oVDPjjvm3VCrCSFvHT6tZOA6K79RnZtmBdn4qEK8mX+ TqQQruhpOvXQPCmK+VjfM9qkYNVfIWAb -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:04 2025 by rpki-client