$ rpki-client -vvf rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft File: iiZW272QAzaEH_UDU2_5kY_rJcY.mft (raw, json) Hash identifier: jYZJtMvSTNwodeFys3uRu7KunHRAgBs0aqczrpAHVbY= Subject key identifier: E1:12:3F:A5:92:EA:F8:34:E9:76:59:0C:8F:82:F4:39:2B:57:B8:55 Authority key identifier: 8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 Certificate issuer: /CN=A91A267C/serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Certificate serial: 0A3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft Manifest number: 0A32 Signing time: Sun 02 Nov 2025 19:42:07 +0000 Manifest this update: Sun 02 Nov 2025 19:42:06 +0000 Manifest next update: Sun 09 Nov 2025 19:42:06 +0000 Files and hashes: 1: iiZW272QAzaEH_UDU2_5kY_rJcY.crl (hash: mTUf1wfaukWR/mu6Ir2RRj7o+zoFDWKyOzcvu0kwfZ4=) 2: 9244682C7BD711EAA889485EC4F9AE02.roa (hash: ZCM+V6Y56yepaeegUajjp4xOF8Q6SeyZY2EvL4X5a+Y=) 3: 8B802D485F2211EC88AA0F84C4F9AE02.roa (hash: qSGZ+j4RvXroFxByBDcPf9/bS2chAaWe7JM19f3ZPpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2622 (0xa3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A267C, serialNumber=8A2656DBBD900336841FF503536FF9918FEB25C6 Validity Not Before: Nov 2 19:42:06 2025 GMT Not After : Nov 9 19:42:06 2025 GMT Subject: CN=6907b40f-621d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a2:4a:c6:36:d5:0e:3f:17:98:4d:1c:00:68: 90:b3:3a:ba:fe:61:29:6f:52:72:54:be:f6:a3:59: 54:36:20:6a:94:f6:a9:80:c6:20:d4:69:5f:30:2c: 22:3b:62:2d:f0:98:8b:75:2e:ea:77:af:37:10:9d: e4:14:9d:00:24:ce:b3:6a:05:41:bf:34:51:db:46: 82:59:c6:57:5e:22:ac:73:26:7f:11:a2:98:0d:eb: 6e:54:3e:48:d5:24:ee:b6:70:f3:61:1d:c4:f0:10: be:95:70:8f:dc:c6:9d:c0:58:22:c3:30:be:12:84: 56:b0:24:2d:01:8a:f3:6e:1b:58:8c:35:06:0a:88: 15:c5:af:ca:10:62:f0:1f:df:ec:b8:96:6d:c4:69: 69:fb:02:53:19:73:2c:9a:25:3d:1c:51:3d:88:46: b8:1b:f7:4c:71:89:2a:14:42:5c:24:17:4e:54:b1: 9b:a6:aa:2d:82:fd:df:8a:59:e8:9f:aa:4d:9f:e0: 45:10:c9:4e:41:94:86:f8:65:cb:e7:8e:46:1b:13: 1c:44:e9:a9:d4:e2:98:91:ae:29:89:5b:49:79:a2: 04:a2:9d:e2:81:bd:cd:5f:e1:54:3d:e7:68:14:95: cd:46:24:f1:79:63:d8:0f:5a:1a:48:b9:51:1b:bb: f2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:12:3F:A5:92:EA:F8:34:E9:76:59:0C:8F:82:F4:39:2B:57:B8:55 X509v3 Authority Key Identifier: keyid:8A:26:56:DB:BD:90:03:36:84:1F:F5:03:53:6F:F9:91:8F:EB:25:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iiZW272QAzaEH_UDU2_5kY_rJcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A267C/5B5389667BD611EA803F9B5CC4F9AE02/iiZW272QAzaEH_UDU2_5kY_rJcY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:99:43:6b:ac:39:aa:35:70:79:20:7b:72:58:66:79:52:2a: 16:d5:fe:a1:4a:24:a0:9e:91:b8:5c:91:1f:db:2c:8f:4b:7f: fe:42:d3:4c:25:e6:f9:1f:0f:d5:ad:c4:17:af:80:82:f6:88: b7:5a:7c:9c:01:49:e3:2e:05:d2:ae:fa:69:83:45:b5:56:f1: d7:3b:85:f5:9d:09:f9:d2:fc:54:e2:58:dc:0e:08:c8:6d:c8: f1:bf:eb:d7:92:84:8c:ea:38:32:a9:86:4f:b4:44:8f:b5:32: e4:c9:96:a0:80:0a:c2:02:0c:5c:c0:9a:4b:9c:3a:93:73:2d: 85:2f:86:16:aa:1e:e5:43:98:60:81:b1:b9:a2:30:a4:be:4a: cf:1c:50:61:d6:77:e3:91:ad:f6:8d:21:b6:18:42:f3:8a:3f: 3f:47:bd:00:17:b1:dc:4a:55:18:e9:03:5a:0d:09:a2:52:b5: 04:ca:5f:95:79:05:49:ea:be:62:21:89:78:8b:a6:b7:73:dd: 3e:ed:c9:81:70:db:5a:f7:0f:34:dd:62:11:ed:34:15:4e:c2: 31:bc:99:be:1a:96:77:07:17:c4:3e:aa:61:6f:f2:df:df:9d: 22:80:dc:23:bf:58:aa:19:a4:c4:64:e4:1a:de:03:86:7c:ab: 70:f8:07:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI2N0MxMTAvBgNVBAUTKDhBMjY1NkRCQkQ5MDAzMzY4NDFGRjUwMzUzNkZGOTkx OEZFQjI1QzYwHhcNMjUxMTAyMTk0MjA2WhcNMjUxMTA5MTk0MjA2WjAYMRYwFAYD VQQDEw02OTA3YjQwZi02MjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqaJKxjbVDj8XmE0cAGiQszq6/mEpb1JyVL72o1lUNiBqlPapgMYg1GlfMCwi O2It8JiLdS7qd683EJ3kFJ0AJM6zagVBvzRR20aCWcZXXiKscyZ/EaKYDetuVD5I 1STutnDzYR3E8BC+lXCP3MadwFgiwzC+EoRWsCQtAYrzbhtYjDUGCogVxa/KEGLw H9/suJZtxGlp+wJTGXMsmiU9HFE9iEa4G/dMcYkqFEJcJBdOVLGbpqotgv3filno n6pNn+BFEMlOQZSG+GXL545GGxMcROmp1OKYka4piVtJeaIEop3igb3NX+FUPedo FJXNRiTxeWPYD1oaSLlRG7vyrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOESP6WS 6vg06XZZDI+C9DkrV7hVMB8GA1UdIwQYMBaAFIomVtu9kAM2hB/1A1Nv+ZGP6yXG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjY3Qy81QjUzODk2NjdC RDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6YUVIX1VEVTJfNWtZX3JK Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lpWlcyNzJRQXphRUhfVURVMl81a1lfckpjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjY3Qy81QjUzODk2NjdCRDYxMUVBODAzRjlCNUNDNEY5QUUwMi9paVpXMjcyUUF6 YUVIX1VEVTJfNWtZX3JKY1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMmUNrrDmqNXB5IHtyWGZ5UioW1f6hSiSgnpG4XJEf2yyPS3/+QtNM Jeb5Hw/VrcQXr4CC9oi3WnycAUnjLgXSrvppg0W1VvHXO4X1nQn50vxU4ljcDgjI bcjxv+vXkoSM6jgyqYZPtESPtTLkyZaggArCAgxcwJpLnDqTcy2FL4YWqh7lQ5hg gbG5ojCkvkrPHFBh1nfjka32jSG2GELzij8/R70AF7HcSlUY6QNaDQmiUrUEyl+V eQVJ6r5iIYl4i6a3c90+7cmBcNta9w803WIR7TQVTsIxvJm+GpZ3BxfEPqphb/Lf 350igNwjv1iqGaTEZOQa3gOGfKtw+Acy -----END CERTIFICATE-----Generated at Tue Nov 4 01:10:21 2025 by rpki-client