$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft File: IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json) Hash identifier: 9TkSqsWoGnH+ycKAJo8EG3hPaP7pqxKr9f6UC2W9m6w= Subject key identifier: 65:9F:35:2C:E4:E0:0F:6E:5E:7E:E4:FD:FB:1B:AB:F9:47:1F:CF:75 Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft Manifest number: 0183 Signing time: Wed 05 Nov 2025 03:49:00 +0000 Manifest this update: Wed 05 Nov 2025 03:49:00 +0000 Manifest next update: Wed 12 Nov 2025 03:49:00 +0000 Files and hashes: 1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: Nu4B2eTHCUDsipNVrxyHg303T7brkZh39xXTAMh2gts=) 2: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: /Y8xFoBMkV8uPy89Axb0Y8yaa9CAWLFHVU01k7AfOCU=) 3: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: olVXu+2blIiQ/nPaKs9oAvL7LtQPo2noHIFDjFZB8b8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BABFD, serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Validity Not Before: Nov 5 03:49:00 2025 GMT Not After : Nov 12 03:49:00 2025 GMT Subject: CN=690ac92c-5fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3f:4b:6c:f9:95:15:a8:6e:be:60:22:b4:94: c2:73:06:09:38:dd:67:ca:b0:65:fc:b2:a7:25:92: a9:a6:ab:bf:7c:53:d2:c5:8d:f4:0f:2b:4a:f0:7e: e3:d7:4d:a3:dd:f6:c8:26:a5:62:81:06:14:2b:4b: 5a:ac:f5:ba:b9:2a:dd:d3:c8:33:36:5a:da:2f:00: b0:32:85:6c:2b:7c:c3:15:b6:3d:0f:db:18:83:75: 32:17:14:aa:49:b3:8a:c9:0a:66:3d:29:a6:21:97: c1:3e:c5:c4:21:0f:97:c5:98:bf:94:a6:dc:85:fb: f9:eb:97:0e:b4:d0:e4:4e:a1:ad:97:df:c1:d4:f5: c0:28:4e:a7:c7:55:be:66:f2:77:58:2c:79:b8:73: 8f:bd:26:ba:8f:62:2e:25:a9:d9:f3:03:08:3f:57: ec:09:4d:c4:61:af:cb:12:c7:52:63:05:6f:44:ad: ab:16:73:ff:78:71:4d:ee:cc:14:85:fa:23:a2:1f: 0e:7f:28:16:31:3d:99:32:f0:ac:4f:0b:b8:55:d6: 3a:41:fe:43:24:69:5b:c3:14:e4:d1:8b:2a:45:f6: 66:85:23:6b:33:7e:ae:ff:29:2c:56:58:d7:b5:5b: e2:c9:8a:8b:24:a5:f8:01:64:63:59:a0:7a:1d:af: b0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9F:35:2C:E4:E0:0F:6E:5E:7E:E4:FD:FB:1B:AB:F9:47:1F:CF:75 X509v3 Authority Key Identifier: keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:b8:36:ba:23:78:7b:67:31:b9:75:e8:b5:91:0b:40:b4:bf: 7e:3b:79:3d:a1:a5:9c:b5:e5:1e:87:63:08:0f:97:58:a5:b5: e7:9e:fb:75:26:4f:bd:d9:ae:9e:2e:45:77:96:be:02:2b:8f: fb:41:9e:62:29:26:25:40:dd:86:20:0b:4e:42:24:a7:c3:e4: ec:64:ec:84:83:31:2d:81:59:df:19:15:ea:3f:d3:5a:bf:5c: 9a:99:7e:59:bc:1d:17:a1:d7:fb:4a:c5:ec:06:bb:9f:06:1c: 84:4b:86:d4:e3:71:c5:19:d5:23:af:6b:42:5c:a6:98:60:6f: 50:97:51:51:b8:9d:3c:78:bf:c2:be:ff:71:93:d0:40:9b:5d: 0b:5e:59:39:ee:c0:f4:9c:88:23:d8:4e:81:85:fc:83:4b:a7: 6f:e1:73:04:8f:de:59:40:a5:dd:f6:c3:c2:6a:18:5f:5f:b5: bf:b0:73:eb:05:3e:9e:61:4f:6b:ed:de:85:09:bb:c3:cd:a1: 75:57:62:3c:01:53:3a:cd:1d:c3:76:e9:32:aa:7b:bf:6b:c4: 1a:71:b2:c2:92:66:6f:5d:f2:09:32:c7:bf:7b:5e:5a:53:4a: 6f:ee:08:30:26:fc:98:48:86:d0:b8:c8:51:75:cb:6d:31:ef: 34:7e:af:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFCRkQxMTAvBgNVBAUTKDIxN0RBMjkwOEM3NTQ3NURCRENEQUE3MEUzNkI5QjQw RDQ5MTJFREQwHhcNMjUxMTA1MDM0OTAwWhcNMjUxMTEyMDM0OTAwWjAYMRYwFAYD VQQDEw02OTBhYzkyYy01ZmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmz9LbPmVFahuvmAitJTCcwYJON1nyrBl/LKnJZKppqu/fFPSxY30DytK8H7j 102j3fbIJqVigQYUK0tarPW6uSrd08gzNlraLwCwMoVsK3zDFbY9D9sYg3UyFxSq SbOKyQpmPSmmIZfBPsXEIQ+XxZi/lKbchfv565cOtNDkTqGtl9/B1PXAKE6nx1W+ ZvJ3WCx5uHOPvSa6j2IuJanZ8wMIP1fsCU3EYa/LEsdSYwVvRK2rFnP/eHFN7swU hfojoh8OfygWMT2ZMvCsTwu4VdY6Qf5DJGlbwxTk0YsqRfZmhSNrM36u/yksVljX tVviyYqLJKX4AWRjWaB6Ha+w9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWfNSzk 4A9uXn7k/fsbq/lHH891MB8GA1UdIwQYMBaAFCF9opCMdUddvc2qcONrm0DUkS7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUJGRC84OTVBNDk1MDZE ODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIxMjl6YXB3NDJ1YlFOU1JM dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYMmlrSXgxUjEyOXphcHc0MnViUU5TUkx0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUJGRC84OTVBNDk1MDZEODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIx Mjl6YXB3NDJ1YlFOU1JMdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByuDa6I3h7ZzG5dei1kQtAtL9+O3k9oaWcteUeh2MID5dYpbXnnvt1 Jk+92a6eLkV3lr4CK4/7QZ5iKSYlQN2GIAtOQiSnw+TsZOyEgzEtgVnfGRXqP9Na v1yamX5ZvB0Xodf7SsXsBrufBhyES4bU43HFGdUjr2tCXKaYYG9Ql1FRuJ08eL/C vv9xk9BAm10LXlk57sD0nIgj2E6BhfyDS6dv4XMEj95ZQKXd9sPCahhfX7W/sHPr BT6eYU9r7d6FCbvDzaF1V2I8AVM6zR3Ddukyqnu/a8QacbLCkmZvXfIJMse/e15a U0pv7ggwJvyYSIbQuMhRdcttMe80fq/E -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:47 2025 by rpki-client