$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft File: Ixupmdjogk9iIrhWhdB91HpwRts.mft (raw, json) Hash identifier: b+AK+1gXuwNMiE4d2DpO7q3g+rKlvHTNvxfgkGx3Td0= Subject key identifier: A2:14:E7:6D:78:BD:B9:9D:97:D1:F8:44:DF:33:28:62:EA:7D:83:09 Authority key identifier: 23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB Certificate issuer: /CN=A916B95A/serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft Manifest number: FC Signing time: Wed 05 Nov 2025 05:17:37 +0000 Manifest this update: Wed 05 Nov 2025 05:17:36 +0000 Manifest next update: Wed 12 Nov 2025 05:17:36 +0000 Files and hashes: 1: Ixupmdjogk9iIrhWhdB91HpwRts.crl (hash: 0kwosiMecjGrynveM1kXxQuJrst2ZvuA+S2NZ+a5WQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B95A, serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB Validity Not Before: Nov 5 05:17:36 2025 GMT Not After : Nov 12 05:17:36 2025 GMT Subject: CN=690addf0-dd3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:be:64:32:3f:bd:ad:a2:2e:9a:52:2c:63:4a: 01:20:bb:58:db:75:b1:12:6d:68:f5:5e:4b:71:b1: f2:e4:2b:69:87:b0:c8:b5:cc:58:a0:e2:8f:ce:cb: 50:12:e0:94:fc:bf:fc:8f:f6:66:29:99:e8:de:e2: 11:b0:dd:e8:8a:b8:22:cf:3b:50:2a:ed:6d:63:7a: 89:a6:db:22:6c:d3:85:19:ab:29:ea:ff:27:dd:a4: 6b:35:5e:23:78:a8:c3:c8:d9:10:5b:03:f1:31:11: f2:d9:b2:94:78:8d:2b:27:7d:06:7e:56:c9:3e:7e: d9:4e:d6:14:e6:9f:c8:96:42:e8:7c:8a:32:5e:77: d0:f9:3d:3d:bb:c3:d9:1e:b3:0e:00:cd:68:66:aa: 73:28:bd:4d:ff:fd:d6:a4:09:bf:84:23:57:55:89: d4:b2:ef:0c:d8:2b:dc:9a:cf:72:29:9f:3c:6b:42: e6:90:3a:19:bf:82:34:4b:b8:9f:e9:68:dc:a8:f6: 4a:07:a1:2f:07:82:be:f1:77:1d:7c:a7:6d:ed:9a: 0d:16:e2:54:bc:12:d2:b9:9f:dd:ef:23:c1:fc:fb: 96:f6:7e:8d:9f:64:52:57:d0:14:b8:0f:84:63:41: da:74:6d:51:b5:d4:e7:75:20:ff:d0:a6:85:aa:78: 7d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:14:E7:6D:78:BD:B9:9D:97:D1:F8:44:DF:33:28:62:EA:7D:83:09 X509v3 Authority Key Identifier: keyid:23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:c1:13:22:6d:a0:f0:f9:81:eb:37:bf:c8:82:b0:96:89:c9: 92:4a:94:e6:dd:90:96:dc:86:84:2b:90:c4:c7:32:10:45:6a: 55:f6:59:af:a2:62:7e:1a:1f:c0:e9:e6:d8:f6:cb:89:df:3c: e7:29:71:c6:ae:60:60:64:6a:42:d4:f6:e8:65:53:93:f8:60: 6a:05:c6:19:3c:f4:57:79:ed:56:c7:be:25:42:7d:e1:31:a8: 40:f5:28:28:b7:24:38:96:8e:21:94:70:ae:d6:38:ba:7f:ac: 19:86:17:6a:0e:fa:e7:30:14:ed:0e:76:65:23:9c:71:6f:e5: 7c:a0:47:7c:f8:43:3c:3a:32:29:f7:f7:21:b7:ae:25:80:6c: 7c:64:5d:e9:09:99:06:a8:37:9e:4a:62:73:28:de:b2:17:5f: 8a:23:81:27:3e:e4:db:30:a8:d7:3f:08:dc:17:15:57:ed:15: 81:ac:d7:86:a3:57:cf:ba:fe:3b:56:43:0a:19:78:52:1e:39: 93:69:1e:26:01:93:72:ef:13:ad:03:01:c6:91:f2:8f:49:26: 2c:89:4f:b6:b1:d4:65:9a:25:f0:6c:e9:a2:85:94:3f:09:df: c5:b0:ff:ac:2d:f4:47:c2:ea:d3:3e:e3:e6:90:48:24:a1:a6: 05:a3:11:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NUExMTAvBgNVBAUTKDIzMUJBOTk5RDhFODgyNEY2MjIyQjg1Njg1RDA3REQ0 N0E3MDQ2REIwHhcNMjUxMTA1MDUxNzM2WhcNMjUxMTEyMDUxNzM2WjAYMRYwFAYD VQQDEw02OTBhZGRmMC1kZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw75kMj+9raIumlIsY0oBILtY23WxEm1o9V5LcbHy5Ctph7DItcxYoOKPzstQ EuCU/L/8j/ZmKZno3uIRsN3oirgizztQKu1tY3qJptsibNOFGasp6v8n3aRrNV4j eKjDyNkQWwPxMRHy2bKUeI0rJ30GflbJPn7ZTtYU5p/IlkLofIoyXnfQ+T09u8PZ HrMOAM1oZqpzKL1N//3WpAm/hCNXVYnUsu8M2Cvcms9yKZ88a0LmkDoZv4I0S7if 6WjcqPZKB6EvB4K+8XcdfKdt7ZoNFuJUvBLSuZ/d7yPB/PuW9n6Nn2RSV9AUuA+E Y0HadG1RtdTndSD/0KaFqnh9XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIU5214 vbmdl9H4RN8zKGLqfYMJMB8GA1UdIwQYMBaAFCMbqZnY6IJPYiK4VoXQfdR6cEbb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk1QS81QTE5QkRDQTM3 QUUxMUVGOEE0NThFMzdDNEY5QUUwMi9JeHVwbWRqb2drOWlJcmhXaGRCOTFIcHdS dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l4dXBtZGpvZ2s5aUlyaFdoZEI5MUhwd1J0cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qjk1QS81QTE5QkRDQTM3QUUxMUVGOEE0NThFMzdDNEY5QUUwMi9JeHVwbWRqb2dr OWlJcmhXaGRCOTFIcHdSdHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjwRMibaDw+YHrN7/IgrCWicmSSpTm3ZCW3IaEK5DExzIQRWpV9lmv omJ+Gh/A6ebY9suJ3zznKXHGrmBgZGpC1PboZVOT+GBqBcYZPPRXee1Wx74lQn3h MahA9SgotyQ4lo4hlHCu1ji6f6wZhhdqDvrnMBTtDnZlI5xxb+V8oEd8+EM8OjIp 9/cht64lgGx8ZF3pCZkGqDeeSmJzKN6yF1+KI4EnPuTbMKjXPwjcFxVX7RWBrNeG o1fPuv47VkMKGXhSHjmTaR4mAZNy7xOtAwHGkfKPSSYsiU+2sdRlmiXwbOmihZQ/ Cd/FsP+sLfRHwurTPuPmkEgkoaYFoxE+ -----END CERTIFICATE-----Generated at Wed Nov 5 21:00:48 2025 by rpki-client