$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.mft File: iil-A1bw979U3vVrJaH7Hq-EhD0.mft (raw, json) Hash identifier: 5COextR5WC3+OJrsTmUmWhutdQXlFBQQgKrP85HpR2s= Subject key identifier: 11:C1:51:89:D0:3B:62:0C:64:DB:30:DC:CE:62:F9:A1:F1:96:30:53 Authority key identifier: 8A:29:7E:03:56:F0:F7:BF:54:DE:F5:6B:25:A1:FB:1E:AF:84:84:3D Certificate issuer: /CN=A919EA40/serialNumber=8A297E0356F0F7BF54DEF56B25A1FB1EAF84843D Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iil-A1bw979U3vVrJaH7Hq-EhD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.mft Manifest number: 0211 Signing time: Thu 23 Oct 2025 03:43:18 +0000 Manifest this update: Thu 23 Oct 2025 03:43:17 +0000 Manifest next update: Thu 30 Oct 2025 03:43:17 +0000 Files and hashes: 1: iil-A1bw979U3vVrJaH7Hq-EhD0.crl (hash: aB/YxbkcqiuQHrdcsjotiIKZTSZOhMW9sPJ+mHSJzMk=) 2: 16C04B8680FB11ED9B35954DC4F9AE02.roa (hash: mHCGsiMH+RVpi8uw/SNyVdE1yXadTr0gkZyL1YqI7+I=) 3: 17465D8E80FB11ED9B35954DC4F9AE02.roa (hash: xUUg2QhbKCBoFWOdE6zgMU2Uv4rHZ9uj4wyu9I5RY5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.crl rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iil-A1bw979U3vVrJaH7Hq-EhD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 03:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EA40, serialNumber=8A297E0356F0F7BF54DEF56B25A1FB1EAF84843D Validity Not Before: Oct 23 03:43:17 2025 GMT Not After : Oct 30 03:43:17 2025 GMT Subject: CN=68f9a455-be38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:15:21:9e:94:88:17:12:2e:5f:e1:27:02:94: ce:c2:71:f7:14:d7:80:9b:55:29:9c:cd:0e:96:06: 13:5f:41:c4:bd:0b:0a:62:d2:eb:89:22:af:1d:1c: 04:2a:41:58:fd:95:ad:6f:b6:6e:65:15:87:f9:00: 6d:03:02:f1:52:62:1e:18:10:b2:74:26:1b:98:b6: be:4c:a8:10:ce:b4:79:34:b8:a3:78:7b:27:f0:b8: d6:4c:1a:0d:ad:25:76:b1:d5:9b:90:85:04:3b:29: ad:54:f2:e0:1e:8e:03:6e:ec:b6:6c:86:9b:6f:ae: c7:5e:c2:97:e5:81:a9:24:07:8c:91:4a:a4:53:db: be:30:fe:77:13:b1:fc:d4:0a:8d:2f:91:71:66:db: c8:b0:af:bf:41:3f:dc:f2:c3:c5:65:5c:2b:b4:b9: 54:99:4b:e0:bb:75:6e:9c:20:7a:e7:5a:43:a6:e1: c0:b7:f6:23:4b:13:1a:39:05:3f:9c:95:c3:d0:29: 8a:5b:27:16:af:f3:f7:f1:2a:a3:a2:34:10:71:73: 49:66:d9:1b:fe:73:18:03:a1:d7:9c:35:31:90:ca: 5d:11:80:82:a2:3e:24:d5:3e:23:16:60:e4:55:72: 7e:12:bb:82:3b:37:af:12:f4:57:04:0b:1b:05:2f: 22:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C1:51:89:D0:3B:62:0C:64:DB:30:DC:CE:62:F9:A1:F1:96:30:53 X509v3 Authority Key Identifier: keyid:8A:29:7E:03:56:F0:F7:BF:54:DE:F5:6B:25:A1:FB:1E:AF:84:84:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iil-A1bw979U3vVrJaH7Hq-EhD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/52923F4480F011EDAAE48F7BC4F9AE02/iil-A1bw979U3vVrJaH7Hq-EhD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:56:e0:11:85:a2:07:16:8f:d2:73:db:c9:b3:8f:ac:30:26: 0f:c4:13:5f:36:79:7d:cd:5a:ca:03:46:05:96:50:d0:e9:85: a3:96:19:e6:34:da:55:fa:30:aa:73:bc:68:b6:5e:ab:b2:20: 22:2f:bb:40:96:b0:89:70:df:cb:37:92:41:53:3d:c4:ba:fa: 4f:d9:e4:64:db:14:f3:f6:4c:e0:8d:96:e7:c2:f3:78:17:14: d1:2c:d4:09:f0:3c:5e:b3:f3:4d:3e:35:ee:06:dc:5d:bd:a6: 23:aa:17:5f:11:80:c8:be:f9:78:61:b4:3a:39:45:b5:56:29: 66:9d:5d:24:88:81:f6:c5:00:5a:41:ae:18:1f:48:d6:2c:c0: 69:2a:64:9a:f6:cb:41:6e:d8:57:a7:45:f4:21:51:33:5c:b3: 00:9c:26:c3:98:54:fd:1e:15:55:67:c4:e6:eb:43:32:21:8c: 6b:16:69:0b:70:0a:f8:72:d3:ce:b2:3a:c5:4c:8f:d8:8d:bb: 74:20:96:be:68:57:aa:52:be:4d:e1:02:5b:41:ad:7d:33:76: 33:6c:2d:66:17:c3:25:64:c1:0f:62:6d:5c:88:b0:7b:fe:24: 0f:70:71:c7:48:85:b2:33:36:9c:26:a3:87:df:90:3b:1e:c9: 6e:58:f4:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBNDAxMTAvBgNVBAUTKDhBMjk3RTAzNTZGMEY3QkY1NERFRjU2QjI1QTFGQjFF QUY4NDg0M0QwHhcNMjUxMDIzMDM0MzE3WhcNMjUxMDMwMDM0MzE3WjAYMRYwFAYD VQQDEw02OGY5YTQ1NS1iZTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRUhnpSIFxIuX+EnApTOwnH3FNeAm1UpnM0OlgYTX0HEvQsKYtLriSKvHRwE KkFY/ZWtb7ZuZRWH+QBtAwLxUmIeGBCydCYbmLa+TKgQzrR5NLijeHsn8LjWTBoN rSV2sdWbkIUEOymtVPLgHo4Dbuy2bIabb67HXsKX5YGpJAeMkUqkU9u+MP53E7H8 1AqNL5FxZtvIsK+/QT/c8sPFZVwrtLlUmUvgu3VunCB651pDpuHAt/YjSxMaOQU/ nJXD0CmKWycWr/P38SqjojQQcXNJZtkb/nMYA6HXnDUxkMpdEYCCoj4k1T4jFmDk VXJ+EruCOzevEvRXBAsbBS8i2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHBUYnQ O2IMZNsw3M5i+aHxljBTMB8GA1UdIwQYMBaAFIopfgNW8Pe/VN71ayWh+x6vhIQ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUE0MC81MjkyM0Y0NDgw RjAxMUVEQUFFNDhGN0JDNEY5QUUwMi9paWwtQTFidzk3OVUzdlZySmFIN0hxLUVo RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lpbC1BMWJ3OTc5VTN2VnJKYUg3SHEtRWhEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUE0MC81MjkyM0Y0NDgwRjAxMUVEQUFFNDhGN0JDNEY5QUUwMi9paWwtQTFidzk3 OVUzdlZySmFIN0hxLUVoRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9VuARhaIHFo/Sc9vJs4+sMCYPxBNfNnl9zVrKA0YFllDQ6YWjlhnm NNpV+jCqc7xotl6rsiAiL7tAlrCJcN/LN5JBUz3EuvpP2eRk2xTz9kzgjZbnwvN4 FxTRLNQJ8Dxes/NNPjXuBtxdvaYjqhdfEYDIvvl4YbQ6OUW1VilmnV0kiIH2xQBa Qa4YH0jWLMBpKmSa9stBbthXp0X0IVEzXLMAnCbDmFT9HhVVZ8Tm60MyIYxrFmkL cAr4ctPOsjrFTI/Yjbt0IJa+aFeqUr5N4QJbQa19M3YzbC1mF8MlZMEPYm1ciLB7 /iQPcHHHSIWyMzacJqOH35A7HsluWPTT -----END CERTIFICATE-----Generated at Thu Oct 23 20:02:23 2025 by rpki-client