$ rpki-client -vvf rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft File: IIUPxwwl_bFV037LDsOWLGtH_K0.mft (raw, json) Hash identifier: giRwRsHFUS430sOyNQic9AhlqG5wiTHZ/B0+ttMDdz4= Subject key identifier: BA:23:4B:B8:DE:35:6C:1B:A4:4D:26:AE:C6:E4:4B:15:FE:24:F5:1A Authority key identifier: 20:85:0F:C7:0C:25:FD:B1:55:D3:7E:CB:0E:C3:96:2C:6B:47:FC:AD Certificate issuer: /CN=A919D545/serialNumber=20850FC70C25FDB155D37ECB0EC3962C6B47FCAD Certificate serial: 078E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft Manifest number: 0787 Signing time: Tue 04 Nov 2025 21:35:52 +0000 Manifest this update: Tue 04 Nov 2025 21:35:51 +0000 Manifest next update: Tue 11 Nov 2025 21:35:51 +0000 Files and hashes: 1: IIUPxwwl_bFV037LDsOWLGtH_K0.crl (hash: jskmRfPA2YoMZz9rqtZ+bwjGSx4XJtLMZe+fgqkB2NI=) 2: 934C22582E1C11EBB3ADE232C4F9AE02.roa (hash: 1Nd3whCoQ3UeAyTbWO/1UHp1zlBom6OZhYQFPq70UDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.crl rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1934 (0x78e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D545, serialNumber=20850FC70C25FDB155D37ECB0EC3962C6B47FCAD Validity Not Before: Nov 4 21:35:51 2025 GMT Not After : Nov 11 21:35:51 2025 GMT Subject: CN=690a71b8-0603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a8:24:b8:14:fe:cf:d7:df:59:52:57:59:77: 2b:6b:1e:46:72:17:6c:a8:1b:25:4a:b3:54:f9:c8: 4a:68:96:e5:7e:93:34:fd:64:cc:c1:a1:47:3d:97: f0:9d:d4:c1:d7:9c:b0:aa:08:68:1b:4c:72:00:71: 59:0e:4b:c8:aa:c3:30:3e:ba:20:a1:b9:d1:c5:5b: b9:e4:86:05:c5:82:51:9c:44:00:bf:cb:12:2e:84: 03:24:fa:d5:42:84:da:08:ba:8c:43:ba:0b:f2:b5: a8:1e:ca:97:d7:d7:b8:79:e9:3a:cd:d3:08:b4:df: c9:29:ba:ba:9a:83:e0:3d:13:de:91:ee:7c:5a:6d: c0:f9:fb:2f:59:d5:e3:32:31:83:98:aa:9c:0e:0a: 15:5f:6e:90:6e:4c:92:2a:47:2d:31:38:eb:ee:e0: 20:28:9d:14:b6:17:90:db:94:6e:76:c2:5c:62:67: 40:5e:db:fc:b3:05:e1:fe:90:91:b7:16:0e:6e:a9: ce:94:53:36:97:d3:b2:34:03:4b:e9:0b:da:96:58: 89:97:92:9b:f3:0b:9e:36:11:9a:4c:93:94:b1:31: 24:c6:27:43:67:26:cc:d9:26:38:e6:62:3c:8e:51: 5e:3a:1a:63:a5:67:9c:40:d9:71:a4:14:14:0f:70: 88:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:23:4B:B8:DE:35:6C:1B:A4:4D:26:AE:C6:E4:4B:15:FE:24:F5:1A X509v3 Authority Key Identifier: keyid:20:85:0F:C7:0C:25:FD:B1:55:D3:7E:CB:0E:C3:96:2C:6B:47:FC:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:83:d5:8b:22:9e:ab:e0:e5:08:05:44:69:96:ce:6f:0b:f7: f1:05:05:0a:a1:6b:da:22:66:44:e1:b0:75:ce:8a:aa:c4:1d: dd:ce:7d:cb:88:43:ed:2c:c5:e4:7b:35:5a:62:b1:01:39:cf: 70:6f:b4:f4:a4:f9:78:5e:08:5a:42:21:1f:74:59:c0:6b:56: 61:f8:73:6a:d5:20:73:71:b7:64:93:28:8a:d7:3a:f6:74:51: 8e:2f:ed:4a:c1:89:4f:8c:ad:2a:16:77:43:09:d7:e6:4a:b0: 13:03:29:f1:b2:e3:8e:92:49:8f:95:9b:69:a2:dd:4d:07:4a: c7:b4:b4:57:82:c5:b9:c1:67:a7:a1:a7:4e:45:f4:f2:a7:ef: 33:ec:b7:d6:56:e4:b9:ee:5b:d7:7b:2f:02:22:70:7d:ef:6f: c8:dd:47:f9:0c:e7:5c:00:dc:ef:bd:40:6e:b2:2e:0e:20:b1: ed:34:b9:15:01:50:cb:15:a5:08:13:10:b0:29:95:52:5b:5f: d8:60:a1:d1:c2:29:f5:44:38:1b:fe:75:60:84:f6:81:6a:7d: fc:f9:a5:5a:1c:a9:7a:e8:7d:c6:19:1b:90:e2:37:1a:ee:b8: 1b:4f:01:33:e7:be:c3:bb:b1:ba:58:ec:02:f4:a9:b8:d1:d2: b6:a7:29:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1NDUxMTAvBgNVBAUTKDIwODUwRkM3MEMyNUZEQjE1NUQzN0VDQjBFQzM5NjJD NkI0N0ZDQUQwHhcNMjUxMTA0MjEzNTUxWhcNMjUxMTExMjEzNTUxWjAYMRYwFAYD VQQDEw02OTBhNzFiOC0wNjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqagkuBT+z9ffWVJXWXcrax5GchdsqBslSrNU+chKaJblfpM0/WTMwaFHPZfw ndTB15ywqghoG0xyAHFZDkvIqsMwProgobnRxVu55IYFxYJRnEQAv8sSLoQDJPrV QoTaCLqMQ7oL8rWoHsqX19e4eek6zdMItN/JKbq6moPgPRPeke58Wm3A+fsvWdXj MjGDmKqcDgoVX26QbkySKkctMTjr7uAgKJ0UtheQ25RudsJcYmdAXtv8swXh/pCR txYObqnOlFM2l9OyNANL6QvalliJl5Kb8wueNhGaTJOUsTEkxidDZybM2SY45mI8 jlFeOhpjpWecQNlxpBQUD3CIswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLojS7je NWwbpE0mrsbkSxX+JPUaMB8GA1UdIwQYMBaAFCCFD8cMJf2xVdN+yw7DlixrR/yt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDU0NS9GM0I5NzYwNjJF MUExMUVCQjIzOURFMzBDNEY5QUUwMi9JSVVQeHd3bF9iRlYwMzdMRHNPV0xHdEhf SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lJVVB4d3dsX2JGVjAzN0xEc09XTEd0SF9LMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDU0NS9GM0I5NzYwNjJFMUExMUVCQjIzOURFMzBDNEY5QUUwMi9JSVVQeHd3bF9i RlYwMzdMRHNPV0xHdEhfSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIg9WLIp6r4OUIBURpls5vC/fxBQUKoWvaImZE4bB1zoqqxB3dzn3L iEPtLMXkezVaYrEBOc9wb7T0pPl4XghaQiEfdFnAa1Zh+HNq1SBzcbdkkyiK1zr2 dFGOL+1KwYlPjK0qFndDCdfmSrATAynxsuOOkkmPlZtpot1NB0rHtLRXgsW5wWen oadORfTyp+8z7LfWVuS57lvXey8CInB972/I3Uf5DOdcANzvvUBusi4OILHtNLkV AVDLFaUIExCwKZVSW1/YYKHRwin1RDgb/nVghPaBan38+aVaHKl66H3GGRuQ4jca 7rgbTwEz577Du7G6WOwC9Km40dK2pyma -----END CERTIFICATE-----Generated at Wed Nov 5 13:51:57 2025 by rpki-client