$ rpki-client -vvf rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft File: iifxtRRZ_TbLLIBghxxVOPnSPX4.mft (raw, json) Hash identifier: OngR5erbyzG8+3PuQm3gGni8MN8uDJIpWrljoCS3TVU= Subject key identifier: E9:E9:39:92:3D:33:C4:B2:BB:C9:AE:1C:08:9B:B7:D5:00:66:A8:E0 Authority key identifier: 8A:27:F1:B5:14:59:FD:36:CB:2C:80:60:87:1C:55:38:F9:D2:3D:7E Certificate issuer: /CN=A918AACD/serialNumber=8A27F1B51459FD36CB2C8060871C5538F9D23D7E Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft Manifest number: 0117 Signing time: Wed 05 Nov 2025 05:03:12 +0000 Manifest this update: Wed 05 Nov 2025 05:03:12 +0000 Manifest next update: Wed 12 Nov 2025 05:03:12 +0000 Files and hashes: 1: iifxtRRZ_TbLLIBghxxVOPnSPX4.crl (hash: 1BbOo8UMHsqxOYMnZs9GubRM2ybTfm1ZKYvwH6XSOaI=) 2: 7DA22F2C199D11EFB19DA380C4F9AE02.roa (hash: 7Ge+Ur1HNSgNTEqBJNH+Y2JY0m3BlGqRwSkervRpW04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.crl rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:03:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AACD, serialNumber=8A27F1B51459FD36CB2C8060871C5538F9D23D7E Validity Not Before: Nov 5 05:03:12 2025 GMT Not After : Nov 12 05:03:12 2025 GMT Subject: CN=690ada90-32d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:bf:79:09:24:f9:a5:08:ae:0b:df:41:a3: c5:ce:a4:3f:0b:6c:d3:92:88:e7:1c:dc:6c:f0:4f: 54:ae:5a:b1:33:c7:67:94:7c:e6:b2:10:fb:fa:e3: fa:f3:10:94:fa:e6:ff:74:9a:6f:19:de:3b:95:99: a5:17:cc:c2:03:eb:bb:27:30:7f:64:c1:32:9e:20: 39:e8:84:eb:0d:28:9d:18:88:2d:d8:8c:12:db:77: 74:11:38:00:b8:4d:94:75:a0:a7:bc:a3:a6:7d:f6: e2:f9:f8:20:08:94:86:8b:29:e8:8f:e9:3c:e5:df: 07:29:f3:49:73:60:d6:c3:94:20:d5:7c:b5:54:ff: 74:af:8a:9e:6f:06:a5:b3:30:36:17:f8:ac:e8:f0: 4c:88:29:85:33:65:a7:28:5f:99:56:ce:b0:f7:92: 15:f0:7d:97:b3:0d:c4:d2:84:52:af:f8:f0:8b:97: 42:6b:88:77:b9:e7:16:bb:da:91:76:30:82:b8:a4: 86:c6:bd:39:b7:41:6f:fd:49:5d:72:ab:1a:e3:0a: 7a:0e:bc:3b:1f:4b:6c:5f:a8:43:34:04:8d:90:61: 56:a9:99:47:bb:a8:ab:d2:da:52:1f:7f:6d:68:0d: 12:e6:61:f0:4b:90:b2:32:a4:e5:49:ea:85:3c:22: 1f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E9:39:92:3D:33:C4:B2:BB:C9:AE:1C:08:9B:B7:D5:00:66:A8:E0 X509v3 Authority Key Identifier: keyid:8A:27:F1:B5:14:59:FD:36:CB:2C:80:60:87:1C:55:38:F9:D2:3D:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iifxtRRZ_TbLLIBghxxVOPnSPX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AACD/8EA19AA2199C11EF9697347FC4F9AE02/iifxtRRZ_TbLLIBghxxVOPnSPX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:97:85:c8:dd:0e:7d:25:95:2e:ee:eb:49:78:9e:02:75:6f: b5:b1:ce:f9:82:20:45:59:ea:a2:f9:d2:aa:74:e6:c9:fa:cc: dc:11:52:92:e2:b8:e5:f6:c8:80:72:82:3e:a4:36:5f:75:db: 90:bc:91:3f:27:91:8a:15:9f:ed:d7:65:9c:73:59:a5:c4:ca: ed:d1:5b:c9:3d:26:ea:58:64:de:a1:bd:07:83:c6:bb:09:4f: d9:9a:32:5c:84:7a:77:3b:75:24:83:eb:27:88:da:41:e6:81: 75:86:73:77:04:33:ef:a0:60:be:15:59:35:8f:83:1a:1d:1b: d8:30:0a:fc:7f:ea:ba:21:b2:c8:26:49:59:35:23:84:9e:44: e9:75:74:ca:13:c8:ad:1b:cf:39:12:42:e7:6d:7e:33:2e:9f: a2:c8:e9:1b:a6:2d:5f:a2:3d:cf:bb:db:2b:3d:ab:8c:91:f9: a4:df:a9:60:29:24:fd:e4:15:a2:9f:b3:86:f3:92:5d:66:27: 6a:ce:7b:06:d3:0c:f4:f7:b5:f1:87:e1:4c:ce:58:8e:d6:d9: 97:2f:d4:e9:2f:96:17:ca:3c:de:d0:15:ac:55:d0:35:fd:f1: c2:48:06:6b:8d:83:bf:e5:c4:1e:2a:0c:1d:71:05:a9:e8:76: 4e:79:98:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBQ0QxMTAvBgNVBAUTKDhBMjdGMUI1MTQ1OUZEMzZDQjJDODA2MDg3MUM1NTM4 RjlEMjNEN0UwHhcNMjUxMTA1MDUwMzEyWhcNMjUxMTEyMDUwMzEyWjAYMRYwFAYD VQQDEw02OTBhZGE5MC0zMmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVy/eQkk+aUIrgvfQaPFzqQ/C2zTkojnHNxs8E9UrlqxM8dnlHzmshD7+uP6 8xCU+ub/dJpvGd47lZmlF8zCA+u7JzB/ZMEyniA56ITrDSidGIgt2IwS23d0ETgA uE2UdaCnvKOmffbi+fggCJSGiynoj+k85d8HKfNJc2DWw5Qg1Xy1VP90r4qebwal szA2F/is6PBMiCmFM2WnKF+ZVs6w95IV8H2Xsw3E0oRSr/jwi5dCa4h3uecWu9qR djCCuKSGxr05t0Fv/Uldcqsa4wp6Drw7H0tsX6hDNASNkGFWqZlHu6ir0tpSH39t aA0S5mHwS5CyMqTlSeqFPCIfvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnpOZI9 M8Syu8muHAibt9UAZqjgMB8GA1UdIwQYMBaAFIon8bUUWf02yyyAYIccVTj50j1+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUFDRC84RUExOUFBMjE5 OUMxMUVGOTY5NzM0N0ZDNEY5QUUwMi9paWZ4dFJSWl9UYkxMSUJnaHh4Vk9QblNQ WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lpZnh0UlJaX1RiTExJQmdoeHhWT1BuU1BYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUFDRC84RUExOUFBMjE5OUMxMUVGOTY5NzM0N0ZDNEY5QUUwMi9paWZ4dFJSWl9U YkxMSUJnaHh4Vk9QblNQWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOl4XI3Q59JZUu7utJeJ4CdW+1sc75giBFWeqi+dKqdObJ+szcEVKS 4rjl9siAcoI+pDZfdduQvJE/J5GKFZ/t12Wcc1mlxMrt0VvJPSbqWGTeob0Hg8a7 CU/ZmjJchHp3O3Ukg+sniNpB5oF1hnN3BDPvoGC+FVk1j4MaHRvYMAr8f+q6IbLI JklZNSOEnkTpdXTKE8itG885EkLnbX4zLp+iyOkbpi1foj3Pu9srPauMkfmk36lg KST95BWin7OG85JdZidqznsG0wz097Xxh+FMzliO1tmXL9TpL5YXyjze0BWsVdA1 /fHCSAZrjYO/5cQeKgwdcQWp6HZOeZhU -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:47 2025 by rpki-client