$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft File: IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json) Hash identifier: Ct8krO+WME4U198GnsOCp5SycasSu2Tx/YjzYFre+mo= Subject key identifier: 7D:BD:7D:A5:48:02:F0:E9:00:6C:BA:EB:9C:8E:50:43:A7:04:CC:FB Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft Manifest number: 0173 Signing time: Tue 07 Oct 2025 04:04:50 +0000 Manifest this update: Tue 07 Oct 2025 04:04:50 +0000 Manifest next update: Tue 14 Oct 2025 04:04:50 +0000 Files and hashes: 1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: FvJl5WkxqzLNElDJY870u2IGDHm/LKtkNYoff9zSRPE=) 2: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: YEagGQfd4UV4nz53l/WybeYAt4w6+zm6QyFgV48pGBc=) 3: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: zzpFcIYATvvz+ehYyoXcGsAYVOBFYBXyZDv/oX18Mx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Oct 2025 04:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BABFD, serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Validity Not Before: Oct 7 04:04:50 2025 GMT Not After : Oct 14 04:04:50 2025 GMT Subject: CN=68e49162-3548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:19:4c:a7:07:59:35:8d:03:19:01:45:aa: b7:52:c5:f1:60:de:44:82:9c:db:5a:f9:02:b1:96: 6b:ae:21:db:ae:32:a3:2e:34:c4:56:b7:4c:22:23: b1:b0:b8:df:e8:c2:c8:7c:fd:43:14:83:77:82:a5: ea:84:0d:be:06:3b:49:65:fd:02:5f:ae:21:dc:ec: 1f:9a:9e:19:4e:3e:06:90:80:d3:97:d5:a2:9a:b3: 42:51:36:74:b0:5d:9e:c9:16:77:e8:77:fe:78:cf: d8:0f:67:71:83:d1:2d:31:bc:52:4c:0a:34:67:cc: 80:d6:1a:9e:da:ec:8c:ff:19:dd:01:80:ac:53:2c: ed:96:c3:b9:c8:64:52:fb:5d:c1:18:b7:15:66:f7: a1:2b:ba:42:3a:f3:6c:81:c1:65:02:58:42:6d:e4: 57:21:11:73:d4:aa:7b:1a:38:70:da:00:7e:ca:2c: 87:90:61:f1:ae:f2:b2:a6:f6:91:a5:d5:7d:df:df: 35:60:b3:25:62:5f:bd:6e:2b:00:ac:1d:5f:f7:b3: 17:7e:77:34:da:5a:ed:27:44:b2:06:a2:9f:58:1c: 6e:7e:2d:ef:92:07:e5:dd:6a:25:e6:00:b7:39:16: d8:b6:5d:c2:bd:69:e0:44:3b:49:b3:e5:27:61:2d: 15:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BD:7D:A5:48:02:F0:E9:00:6C:BA:EB:9C:8E:50:43:A7:04:CC:FB X509v3 Authority Key Identifier: keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:7a:6e:af:fd:c2:73:32:ca:e6:36:52:fd:81:a0:08:77:36: 38:48:e6:a2:4c:3b:5d:fb:b6:ce:a2:92:76:82:78:9e:22:e6: 32:6b:6e:8e:f9:dc:2b:2c:1f:73:00:cd:7e:76:ce:2c:44:03: 62:a1:8d:a6:d4:a2:d7:2c:3f:76:bb:f7:40:f4:67:b4:74:65: 0c:e0:95:9c:d8:45:b3:5a:a1:52:a6:89:7e:b8:6f:54:5d:02: 4a:1d:94:3d:c8:42:0e:f2:4c:df:a2:94:f5:ea:49:19:ce:4d: ae:73:52:ef:5d:9b:38:91:b7:c0:85:ff:cb:55:00:13:11:d9: ac:c2:72:a4:04:a6:9b:cd:ea:be:ef:e2:7e:d9:47:4b:59:9f: 2c:66:c2:e2:6b:d3:08:ae:2f:81:a3:98:00:90:19:ec:21:f5: 2e:da:b7:df:15:53:0c:32:9d:b0:a5:9b:8d:25:cf:ca:18:02: 7d:c4:d0:54:65:85:46:0a:5a:fd:f8:07:97:bf:d4:d1:42:37: f9:03:74:61:cc:1b:76:e7:e1:2a:ef:2e:ab:2e:b3:03:72:80: 33:d6:3b:2e:8b:f2:2a:ee:ad:a4:1c:a1:fc:e7:38:07:92:83: 78:e1:79:00:f8:9b:1c:f9:e4:28:34:c1:0e:9c:84:55:ef:2e: aa:1e:24:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFCRkQxMTAvBgNVBAUTKDIxN0RBMjkwOEM3NTQ3NURCRENEQUE3MEUzNkI5QjQw RDQ5MTJFREQwHhcNMjUxMDA3MDQwNDUwWhcNMjUxMDE0MDQwNDUwWjAYMRYwFAYD VQQDEw02OGU0OTE2Mi0zNTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsaQZTKcHWTWNAxkBRaq3UsXxYN5EgpzbWvkCsZZrriHbrjKjLjTEVrdMIiOx sLjf6MLIfP1DFIN3gqXqhA2+BjtJZf0CX64h3Owfmp4ZTj4GkIDTl9WimrNCUTZ0 sF2eyRZ36Hf+eM/YD2dxg9EtMbxSTAo0Z8yA1hqe2uyM/xndAYCsUyztlsO5yGRS +13BGLcVZvehK7pCOvNsgcFlAlhCbeRXIRFz1Kp7Gjhw2gB+yiyHkGHxrvKypvaR pdV93981YLMlYl+9bisArB1f97MXfnc02lrtJ0SyBqKfWBxufi3vkgfl3Wol5gC3 ORbYtl3CvWngRDtJs+UnYS0VGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH29faVI AvDpAGy665yOUEOnBMz7MB8GA1UdIwQYMBaAFCF9opCMdUddvc2qcONrm0DUkS7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUJGRC84OTVBNDk1MDZE ODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIxMjl6YXB3NDJ1YlFOU1JM dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYMmlrSXgxUjEyOXphcHc0MnViUU5TUkx0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUJGRC84OTVBNDk1MDZEODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIx Mjl6YXB3NDJ1YlFOU1JMdDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5em6v/cJzMsrmNlL9gaAIdzY4SOaiTDtd+7bOopJ2gnieIuYya26O +dwrLB9zAM1+ds4sRANioY2m1KLXLD92u/dA9Ge0dGUM4JWc2EWzWqFSpol+uG9U XQJKHZQ9yEIO8kzfopT16kkZzk2uc1LvXZs4kbfAhf/LVQATEdmswnKkBKabzeq+ 7+J+2UdLWZ8sZsLia9MIri+Bo5gAkBnsIfUu2rffFVMMMp2wpZuNJc/KGAJ9xNBU ZYVGClr9+AeXv9TRQjf5A3RhzBt25+Eq7y6rLrMDcoAz1jsui/Iq7q2kHKH85zgH koN44XkA+Jsc+eQoNMEOnIRV7y6qHiQp -----END CERTIFICATE-----Generated at Wed Oct 8 21:27:13 2025 by rpki-client