$ rpki-client -vvf rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft File: IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft (raw, json) Hash identifier: aeRYpRqxyIB/zDOVO1egv7AEj4pP4z6KrJYvXAXkyVI= Subject key identifier: 4F:9E:E0:A6:A9:F4:A2:09:87:58:EC:4B:76:5C:CE:2F:E3:A3:D0:92 Authority key identifier: 20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17 Certificate issuer: /CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317 Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft Manifest number: 0205 Signing time: Mon 03 Nov 2025 02:22:29 +0000 Manifest this update: Mon 03 Nov 2025 02:22:28 +0000 Manifest next update: Mon 10 Nov 2025 02:22:28 +0000 Files and hashes: 1: IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl (hash: enkyQhHu1psl3Xf8x7tskbAsLjHeryw9GBL7EToCv4M=) 2: CE9A4D70D6EA11ED8F0C322EC4F9AE02.roa (hash: d/kODO73Q/KifMio6xDH+g4+aS9A4hPWbQYW6hwYowo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912905D, serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317 Validity Not Before: Nov 3 02:22:28 2025 GMT Not After : Nov 10 02:22:28 2025 GMT Subject: CN=690811e5-e44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f2:a8:90:ad:a4:d4:15:68:80:eb:c0:f9:02: bb:a6:55:06:b9:eb:c2:7e:ca:27:04:e6:14:a3:8d: 3d:96:f7:61:f5:b6:89:fb:cc:9e:47:ac:ed:9c:d3: d4:03:01:44:ae:02:d5:58:72:24:07:5b:be:76:1c: eb:1e:67:04:56:f7:f1:24:e9:5a:62:ba:44:3c:1c: b3:a9:d4:ad:a1:37:e6:21:8a:15:f9:8c:ee:56:31: 25:60:b6:a8:8c:53:2f:aa:57:00:c1:9e:0f:ee:53: 38:0d:5e:a4:49:2b:3f:5a:f2:6e:69:e5:f3:55:71: 72:cc:a8:f2:eb:b6:4b:d0:ae:2d:93:7f:98:4c:9b: f7:84:64:5f:13:95:4a:3e:bf:5c:cb:1b:b0:b3:e8: 8d:b7:b4:1b:86:74:22:b7:44:3b:ab:67:d7:e8:6a: 4e:5f:ae:27:35:ac:52:e4:3e:3a:e0:ea:72:da:e7: 8c:d3:66:f9:31:d9:06:44:55:97:41:32:83:16:1e: 7f:22:e7:4e:27:87:51:5c:c1:cc:a4:d2:ea:96:0a: b1:9b:ca:c8:69:5e:f3:75:d4:94:34:c8:ef:19:64: f1:01:79:38:13:d9:2f:49:26:8d:36:15:eb:45:65: db:2f:90:5b:85:a0:d0:56:07:b1:f2:a2:31:b8:e6: f0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:9E:E0:A6:A9:F4:A2:09:87:58:EC:4B:76:5C:CE:2F:E3:A3:D0:92 X509v3 Authority Key Identifier: keyid:20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:3d:22:bd:18:fa:72:60:37:db:4f:f7:c9:d2:02:c2:a6:e5: 93:25:b3:43:03:4a:97:49:4c:fb:83:88:e9:f3:27:23:c8:34: df:de:8e:03:66:a6:c9:55:b7:39:8f:4c:3f:d5:7f:1a:b7:9c: 15:95:99:3e:ee:d4:a2:d0:1c:41:ae:09:bb:dd:8f:dc:cb:eb: 13:f8:58:10:06:cc:88:38:95:9e:e5:01:10:81:aa:95:ee:17: 91:ce:00:d2:2c:31:c4:cb:87:7f:c6:b4:50:94:db:45:e6:d5: 1d:7b:03:9b:76:d7:e5:57:c7:05:6d:e2:2a:ef:bf:c7:43:2c: 1d:3d:de:61:2b:03:79:34:7e:b7:b5:1d:0c:6e:0a:dd:2d:69: b2:ae:a2:4e:9e:ad:d0:2e:81:a2:f9:ed:71:69:0e:79:f5:8b: cb:40:d9:17:8f:01:78:15:69:b9:0d:2c:f1:96:eb:35:cb:ef: b5:f8:9d:0a:34:eb:66:4d:af:be:f2:ac:c7:a7:ff:37:db:79: ad:11:1b:0d:ff:98:91:8f:c3:16:0b:1d:13:0d:e6:46:0a:f8: 27:50:4b:87:6f:35:be:9a:db:ba:04:5a:09:00:bc:15:aa:d6: 2f:fd:38:b4:b9:b5:f1:a7:3c:7d:3e:9b:94:a3:a3:22:8e:55: 3a:8b:97:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkwNUQxMTAvBgNVBAUTKDIwNDFBNTQ4MjE2RkYwMTQ4OTRCNzlDQzlGRDc3MzEx QkM3Q0EzMTcwHhcNMjUxMTAzMDIyMjI4WhcNMjUxMTEwMDIyMjI4WjAYMRYwFAYD VQQDEw02OTA4MTFlNS1lNDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4PKokK2k1BVogOvA+QK7plUGuevCfsonBOYUo409lvdh9baJ+8yeR6ztnNPU AwFErgLVWHIkB1u+dhzrHmcEVvfxJOlaYrpEPByzqdStoTfmIYoV+YzuVjElYLao jFMvqlcAwZ4P7lM4DV6kSSs/WvJuaeXzVXFyzKjy67ZL0K4tk3+YTJv3hGRfE5VK Pr9cyxuws+iNt7QbhnQit0Q7q2fX6GpOX64nNaxS5D464Opy2ueM02b5MdkGRFWX QTKDFh5/IudOJ4dRXMHMpNLqlgqxm8rIaV7zddSUNMjvGWTxAXk4E9kvSSaNNhXr RWXbL5BbhaDQVgex8qIxuObwZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+e4Kap 9KIJh1jsS3Zczi/jo9CSMB8GA1UdIwQYMBaAFCBBpUghb/AUiUt5zJ/XcxG8fKMX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTA1RC8zNEJGOTkwOEFD M0QxMUVEQkQ0RDEzNUVDNEY5QUUwMi9JRUdsU0NGdjhCU0pTM25NbjlkekVieDhv eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lFR2xTQ0Z2OEJTSlMzbk1uOWR6RWJ4OG94Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTA1RC8zNEJGOTkwOEFDM0QxMUVEQkQ0RDEzNUVDNEY5QUUwMi9JRUdsU0NGdjhC U0pTM25NbjlkekVieDhveGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3PSK9GPpyYDfbT/fJ0gLCpuWTJbNDA0qXSUz7g4jp8ycjyDTf3o4D ZqbJVbc5j0w/1X8at5wVlZk+7tSi0BxBrgm73Y/cy+sT+FgQBsyIOJWe5QEQgaqV 7heRzgDSLDHEy4d/xrRQlNtF5tUdewObdtflV8cFbeIq77/HQywdPd5hKwN5NH63 tR0MbgrdLWmyrqJOnq3QLoGi+e1xaQ559YvLQNkXjwF4FWm5DSzxlus1y++1+J0K NOtmTa++8qzHp/8323mtERsN/5iRj8MWCx0TDeZGCvgnUEuHbzW+mtu6BFoJALwV qtYv/Ti0ubXxpzx9PpuUo6MijlU6i5c5 -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:52 2025 by rpki-client