$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft File: Iq_UzdnE9MODdis-k-7PGub_nRY.mft (raw, json) Hash identifier: /j6hWZRrI4FOFYBsatwr9VPNRMuBTcXeYrle2XXqgN4= Subject key identifier: 6E:40:5C:30:10:A6:C1:22:10:65:FD:4A:CD:D0:A3:7E:44:6E:9A:AC Authority key identifier: 22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 Certificate issuer: /CN=A917DFDA/serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft Manifest number: 0109 Signing time: Mon 27 Oct 2025 07:08:19 +0000 Manifest this update: Mon 27 Oct 2025 07:08:18 +0000 Manifest next update: Mon 03 Nov 2025 07:08:18 +0000 Files and hashes: 1: Iq_UzdnE9MODdis-k-7PGub_nRY.crl (hash: 3kyVw7pZ8XUxmIcxMueAKywzlFZlpON84bAnyZrnYTk=) 2: 493F98CE230111EFB4355F5FC4F9AE02.roa (hash: 2Ea6pfyMHuu7UJGQSJfsHF3FX8pvDKiDVHdhUSz8QqA=) 3: 1E85ABA6231E11EFA893585AC4F9AE02.roa (hash: fSTt/OP/CCIEWdda0wFEWb+9ChFos6G9oFISz4g6itU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 07:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DFDA, serialNumber=22AFD4CDD9C4F4C383762B3E93EECF1AE6FF9D16 Validity Not Before: Oct 27 07:08:18 2025 GMT Not After : Nov 3 07:08:18 2025 GMT Subject: CN=68ff1a63-4080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a5:40:b3:2d:9e:28:0a:5d:55:dd:de:2f:ce: 7c:51:2d:4b:ff:70:06:ad:ca:07:e4:43:90:2b:ad: ac:d4:73:eb:f7:59:d0:84:8d:48:70:81:01:04:a8: 33:67:2c:5c:18:da:5f:18:b3:8c:29:84:92:74:27: 95:9a:07:46:38:9a:15:ff:eb:6a:ec:b8:da:6a:92: 76:7f:6d:cc:9b:5d:8e:ea:4b:1a:a7:05:d3:d2:38: f4:4d:20:01:6a:07:b8:79:5c:be:ed:69:7c:e0:bf: 98:34:cb:9a:a5:15:e7:59:1f:6c:bd:13:a1:59:a9: 4f:a5:f9:d1:fc:8a:1e:59:a5:ce:0a:80:d5:be:28: d6:cd:12:1f:51:78:ac:ab:51:58:16:a2:7f:25:08: 6e:9d:03:e5:63:c3:9c:04:03:df:10:fd:37:1a:32: af:e6:9a:f1:fc:b6:49:a5:90:ab:85:fe:29:09:52: 11:fe:3b:d2:af:a6:ad:f8:5d:30:80:49:72:d3:97: 8e:12:d6:d0:d3:f0:29:bc:b3:8b:8e:1a:98:7d:14: 5c:f9:d7:be:5e:68:93:54:80:96:39:07:ca:3c:3b: b0:5c:98:38:0c:ef:63:ca:7d:4e:59:86:dc:6f:37: 3f:b3:32:4f:fc:f3:8b:d2:ec:d8:de:b3:6b:89:e7: b4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:40:5C:30:10:A6:C1:22:10:65:FD:4A:CD:D0:A3:7E:44:6E:9A:AC X509v3 Authority Key Identifier: keyid:22:AF:D4:CD:D9:C4:F4:C3:83:76:2B:3E:93:EE:CF:1A:E6:FF:9D:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iq_UzdnE9MODdis-k-7PGub_nRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/AF2D50E6230011EF945DE382C4F9AE02/Iq_UzdnE9MODdis-k-7PGub_nRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:da:39:60:85:5e:c5:58:6b:7b:4c:df:61:b0:48:23:ba:cd: 57:18:c0:5d:0c:60:06:c5:6e:5d:e5:aa:03:a1:99:ef:d9:2d: 22:4d:6c:c0:36:ec:16:ea:dc:79:f1:29:25:67:cc:8c:96:2c: 62:e6:e5:0d:7e:1f:a4:7e:6c:1b:b7:fd:28:89:87:df:71:85: fd:02:2c:f1:7b:48:7b:20:f8:07:51:5b:9b:b6:f0:0c:b6:14: 26:67:c0:e4:8a:94:ba:43:36:fb:da:b0:4a:e2:56:d4:08:0d: ca:63:70:4e:9d:62:85:76:98:00:33:cf:92:7f:06:73:66:d0: 10:7d:54:07:e6:b3:e1:f6:0b:15:95:6a:a4:8d:94:dc:da:8e: 25:d6:ac:ea:cc:b1:51:d2:1f:c4:97:ea:ca:1d:63:bb:f6:c9: aa:98:a6:b0:26:f6:0b:ea:3d:bc:f4:9d:f0:91:bd:d2:88:6e: 3c:3c:82:03:c5:f1:17:f3:60:65:2f:dc:e9:9b:cf:05:03:7c: 10:c5:b3:38:4b:49:02:44:90:3f:58:bd:c3:03:fa:b0:bb:ed: b9:53:5a:3b:cd:a2:e7:a2:c6:c0:a8:49:53:6c:06:bf:52:0c: 3a:1d:d9:10:4c:a7:f6:3b:86:0b:63:4b:22:b2:0e:99:98:f9: 4a:0d:76:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RGREExMTAvBgNVBAUTKDIyQUZENENERDlDNEY0QzM4Mzc2MkIzRTkzRUVDRjFB RTZGRjlEMTYwHhcNMjUxMDI3MDcwODE4WhcNMjUxMTAzMDcwODE4WjAYMRYwFAYD VQQDEw02OGZmMWE2My00MDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6aVAsy2eKApdVd3eL858US1L/3AGrcoH5EOQK62s1HPr91nQhI1IcIEBBKgz ZyxcGNpfGLOMKYSSdCeVmgdGOJoV/+tq7LjaapJ2f23Mm12O6ksapwXT0jj0TSAB age4eVy+7Wl84L+YNMuapRXnWR9svROhWalPpfnR/IoeWaXOCoDVvijWzRIfUXis q1FYFqJ/JQhunQPlY8OcBAPfEP03GjKv5prx/LZJpZCrhf4pCVIR/jvSr6at+F0w gEly05eOEtbQ0/ApvLOLjhqYfRRc+de+XmiTVICWOQfKPDuwXJg4DO9jyn1OWYbc bzc/szJP/POL0uzY3rNriee0nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5AXDAQ psEiEGX9Ss3Qo35EbpqsMB8GA1UdIwQYMBaAFCKv1M3ZxPTDg3YrPpPuzxrm/50W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REZEQS9BRjJENTBFNjIz MDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlNT0RkaXMtay03UEd1Yl9u UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxX1V6ZG5FOU1PRGRpcy1rLTdQR3ViX25SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REZEQS9BRjJENTBFNjIzMDAxMUVGOTQ1REUzODJDNEY5QUUwMi9JcV9VemRuRTlN T0RkaXMtay03UEd1Yl9uUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX2jlghV7FWGt7TN9hsEgjus1XGMBdDGAGxW5d5aoDoZnv2S0iTWzA NuwW6tx58SklZ8yMlixi5uUNfh+kfmwbt/0oiYffcYX9Aizxe0h7IPgHUVubtvAM thQmZ8DkipS6Qzb72rBK4lbUCA3KY3BOnWKFdpgAM8+SfwZzZtAQfVQH5rPh9gsV lWqkjZTc2o4l1qzqzLFR0h/El+rKHWO79smqmKawJvYL6j289J3wkb3SiG48PIID xfEX82BlL9zpm88FA3wQxbM4S0kCRJA/WL3DA/qwu+25U1o7zaLnosbAqElTbAa/ Ugw6HdkQTKf2O4YLY0sisg6ZmPlKDXaw -----END CERTIFICATE-----Generated at Tue Oct 28 12:37:02 2025 by rpki-client