$ rpki-client -vvf rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft File: IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft (raw, json) Hash identifier: b0h1i6s5DHcf1Xbr/f6h7K5iJnb3nE8Gdp8T0ExxG1g= Subject key identifier: 4C:A3:CA:60:AC:C2:57:F4:D0:9F:56:59:83:F8:48:E1:DF:61:7A:0A Authority key identifier: 21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 Certificate issuer: /CN=A9170BBF/serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Certificate serial: 0501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft Manifest number: 04F7 Signing time: Mon 27 Oct 2025 00:42:43 +0000 Manifest this update: Mon 27 Oct 2025 00:42:42 +0000 Manifest next update: Mon 03 Nov 2025 00:42:42 +0000 Files and hashes: 1: IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl (hash: t5rj1BdmzOrkJX582jQ8PHLh1QYIwXi+U4wlxdrIcZA=) 2: 06CAA9C230C211ECBB5A4116C4F9AE02.roa (hash: CU8ZA4/4TdlPTUdktMFTY7GCuwd/QCyrxC7+CMDATDo=) 3: 0628D74630C211ECBB5A4116C4F9AE02.roa (hash: yUQWHT36J9pLE1kpKGBgRzyjB4VNhd4/HCHR7qeOtAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 00:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1281 (0x501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170BBF, serialNumber=210FF16668DF963BE0FCA906933917FFEDED9F95 Validity Not Before: Oct 27 00:42:42 2025 GMT Not After : Nov 3 00:42:42 2025 GMT Subject: CN=68fec003-c4cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fa:af:eb:2c:59:d6:e2:f9:1f:51:8a:2f:a5: 4a:7c:52:30:e0:a0:a7:bf:41:d0:5e:56:39:94:63: 3b:fa:27:59:bb:e1:39:c1:71:1b:b1:b2:d0:60:c0: 0e:b5:4c:84:8e:3e:af:ea:4a:4f:11:95:82:71:92: 89:d9:56:9d:c8:b5:fb:56:06:bd:6e:09:90:52:6d: 1b:68:a5:6b:7e:4d:13:f2:1a:f1:c9:c7:85:bc:84: 6d:66:62:55:f1:41:ee:0e:b1:36:11:8a:dd:a1:27: 6a:f1:c5:bd:f5:54:51:57:c4:4d:02:6c:d7:e8:53: 9b:99:42:e3:0a:b6:05:49:43:b6:ec:75:20:1c:25: b9:22:a2:06:90:11:05:15:54:a8:a8:59:1f:60:e5: cc:d0:e9:05:fb:20:9f:f8:15:38:8c:8b:f6:62:20: 91:a6:41:0e:8d:db:c4:ab:5a:9c:27:a4:54:d0:cf: f5:99:38:09:28:66:6a:10:9e:ac:30:89:10:04:4c: 60:d9:f4:3e:38:2b:43:8f:55:72:da:84:c3:bf:f4: bf:0a:db:4c:fd:27:e9:d2:3a:19:6a:62:f5:38:73: a6:0e:0f:e4:fb:78:d0:65:3d:3c:ff:4d:74:22:7c: 59:56:c1:18:7a:2e:bf:23:2e:9d:98:8d:76:80:33: 60:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A3:CA:60:AC:C2:57:F4:D0:9F:56:59:83:F8:48:E1:DF:61:7A:0A X509v3 Authority Key Identifier: keyid:21:0F:F1:66:68:DF:96:3B:E0:FC:A9:06:93:39:17:FF:ED:ED:9F:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IQ_xZmjfljvg_KkGkzkX_-3tn5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170BBF/E491123A30BF11ECA85C4414C4F9AE02/IQ_xZmjfljvg_KkGkzkX_-3tn5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d8:6e:32:83:4e:4d:2d:1e:8b:cc:9e:46:3b:ae:7f:e0:74: fd:8b:f7:70:87:4a:93:25:b7:ef:ea:7e:88:d4:8b:8c:c5:26: 7c:7a:fb:53:0d:02:9e:1c:5c:f5:33:cf:9e:9a:bd:6b:9e:4b: 55:54:90:ad:19:fc:ef:07:f3:58:19:b4:e6:f0:fb:cb:77:69: 79:1f:24:e5:ea:84:35:9a:62:34:45:0c:12:75:36:a8:7c:85: d9:5b:eb:fa:89:77:5b:d4:aa:0c:64:51:b5:6d:49:e9:cd:fc: f4:e9:89:99:8a:b5:92:ce:b8:a4:38:5e:40:ba:b4:6c:53:cb: ac:15:b8:3a:65:1d:70:0e:15:a8:72:97:75:c9:72:30:fa:2b: ca:a5:3d:40:39:14:f2:02:d1:e9:3a:cd:9f:3f:79:3f:93:3f: 6e:ee:91:f4:f5:a8:94:a5:af:18:9f:f6:b3:78:18:51:de:ac: 68:70:9d:95:d8:d7:d8:97:b7:15:6e:9a:14:b5:e1:ed:e0:dc: 00:0a:43:24:0d:4e:88:43:48:cb:e8:5f:a5:f5:eb:5a:9d:f7: 87:8a:ba:1c:d7:d5:9e:30:f4:0a:fa:d4:57:b3:4b:bd:34:2b: 8e:09:98:df:29:4b:e8:ed:79:16:85:ec:b3:25:53:b6:e5:ce: fc:8f:e9:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBCQkYxMTAvBgNVBAUTKDIxMEZGMTY2NjhERjk2M0JFMEZDQTkwNjkzMzkxN0ZG RURFRDlGOTUwHhcNMjUxMDI3MDA0MjQyWhcNMjUxMTAzMDA0MjQyWjAYMRYwFAYD VQQDEw02OGZlYzAwMy1jNGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvqv6yxZ1uL5H1GKL6VKfFIw4KCnv0HQXlY5lGM7+idZu+E5wXEbsbLQYMAO tUyEjj6v6kpPEZWCcZKJ2VadyLX7Vga9bgmQUm0baKVrfk0T8hrxyceFvIRtZmJV 8UHuDrE2EYrdoSdq8cW99VRRV8RNAmzX6FObmULjCrYFSUO27HUgHCW5IqIGkBEF FVSoqFkfYOXM0OkF+yCf+BU4jIv2YiCRpkEOjdvEq1qcJ6RU0M/1mTgJKGZqEJ6s MIkQBExg2fQ+OCtDj1Vy2oTDv/S/CttM/Sfp0joZamL1OHOmDg/k+3jQZT08/010 InxZVsEYei6/Iy6dmI12gDNgoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyjymCs wlf00J9WWYP4SOHfYXoKMB8GA1UdIwQYMBaAFCEP8WZo35Y74PypBpM5F//t7Z+V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEJCRi9FNDkxMTIzQTMw QkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxqdmdfS2tHa3prWF8tM3Ru NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lRX3habWpmbGp2Z19La0dremtYXy0zdG41VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEJCRi9FNDkxMTIzQTMwQkYxMUVDQTg1QzQ0MTRDNEY5QUUwMi9JUV94Wm1qZmxq dmdfS2tHa3prWF8tM3RuNVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ2G4yg05NLR6LzJ5GO65/4HT9i/dwh0qTJbfv6n6I1IuMxSZ8evtT DQKeHFz1M8+emr1rnktVVJCtGfzvB/NYGbTm8PvLd2l5HyTl6oQ1mmI0RQwSdTao fIXZW+v6iXdb1KoMZFG1bUnpzfz06YmZirWSzrikOF5AurRsU8usFbg6ZR1wDhWo cpd1yXIw+ivKpT1AORTyAtHpOs2fP3k/kz9u7pH09aiUpa8Yn/azeBhR3qxocJ2V 2NfYl7cVbpoUteHt4NwACkMkDU6IQ0jL6F+l9etanfeHiroc19WeMPQK+tRXs0u9 NCuOCZjfKUvo7XkWheyzJVO25c78j+nq -----END CERTIFICATE-----Generated at Tue Oct 28 12:59:47 2025 by rpki-client