$ rpki-client -vvf rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft File: IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft (raw, json) Hash identifier: pd+uTm+vwGpSLgAMmaprI0+Lgq94uAujkJ3uOo88i5M= Subject key identifier: 70:74:9F:50:C2:8D:47:12:B7:B1:18:84:6C:5D:F8:EC:6E:FE:CA:B5 Authority key identifier: 22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 Certificate issuer: /CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft Manifest number: 01C1 Signing time: Mon 03 Nov 2025 02:56:11 +0000 Manifest this update: Mon 03 Nov 2025 02:56:10 +0000 Manifest next update: Mon 10 Nov 2025 02:56:10 +0000 Files and hashes: 1: IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl (hash: QnEAe6l3+TeH0Dt8JPa1PLIsYWRohvgoVJ8VBKeiwgg=) 2: 73E56336069E11EE9D687712C4F9AE02.roa (hash: 2Dnxh30mhffjOkqJSVSDIOGgOimqWD/AADTc7ZuBX6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A42A4, serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Validity Not Before: Nov 3 02:56:10 2025 GMT Not After : Nov 10 02:56:10 2025 GMT Subject: CN=690819cb-94a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:35:90:e8:44:a3:8c:fc:df:31:91:8a:35:a2: bc:31:d0:7b:ac:68:ae:eb:34:66:8d:f6:79:c2:12: 20:b4:b2:3e:28:29:c2:1f:bc:b3:1f:9f:5a:ae:b4: ba:45:44:1f:8b:f2:2f:ec:e6:38:d2:c0:da:d9:2a: 25:bf:20:39:bd:dd:cb:65:af:2d:32:9a:1a:46:74: 54:34:59:59:56:46:40:04:39:7b:b3:3b:d0:bd:12: 68:ac:b8:2f:3a:70:6b:16:3d:44:20:cc:a6:c0:96: 8d:67:23:c8:e5:c1:76:09:70:e9:1b:5b:a0:8d:d9: f2:bb:d1:96:92:64:ee:2e:23:02:39:b2:fa:9a:c3: a6:14:3a:b2:d2:7e:1b:c2:65:c4:a2:0d:f7:a8:c8: 80:b3:df:72:95:3c:10:f7:aa:85:0b:39:34:31:9f: 96:48:1b:e1:c1:2d:39:7f:62:30:c0:c2:f3:1d:71: 84:37:ed:da:be:b6:e6:5b:54:90:73:af:03:48:02: be:7d:5d:ab:49:86:dd:b0:97:bb:90:1b:e2:a9:63: 4c:03:dc:ec:90:71:b4:e9:6f:34:05:98:13:a8:a9: 07:73:db:d4:71:8a:e6:89:c2:64:4b:c1:27:70:35: 8a:28:37:96:c4:2f:2e:3e:6e:a8:1f:7c:4e:60:f3: 56:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:74:9F:50:C2:8D:47:12:B7:B1:18:84:6C:5D:F8:EC:6E:FE:CA:B5 X509v3 Authority Key Identifier: keyid:22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:2c:64:d8:c4:19:e7:d5:ac:a9:df:c4:0b:f2:4b:ed:f5:f2: e6:72:d1:ec:a8:93:88:4e:4a:d9:6c:4f:96:60:5d:f6:dc:1f: e2:f6:a8:3f:20:49:c0:bc:1f:a8:38:71:1b:4b:1b:32:69:41: 17:cd:a5:67:53:d3:04:51:21:03:9b:af:5d:8a:83:1a:64:50: 86:7d:bb:8a:91:13:9f:c5:75:6e:41:f8:0d:3f:92:06:32:75: 06:7e:71:a3:2d:86:8a:33:62:44:91:89:3c:c1:6f:ff:4b:16: 24:b4:de:1a:82:b5:a7:43:66:6e:2b:3a:ad:c3:d1:4d:f3:12: 6a:b6:83:ca:e6:1e:70:19:60:e8:c6:b1:ce:74:4c:a6:87:66: e5:10:f7:9f:37:5b:66:2a:85:57:fe:ee:a1:d4:52:52:83:e0: e6:37:29:7c:3c:f7:8e:28:5b:6a:2b:fb:da:f4:f0:e5:28:4f: db:7c:bb:68:ce:8a:8b:18:2c:13:37:ec:60:bc:0a:28:a3:40: 55:37:55:4d:ab:bc:1b:03:75:06:5c:9a:7c:b9:5d:a8:3f:5e: e5:6f:51:20:f7:bf:db:bf:b7:fa:d4:c4:7b:89:67:35:a7:10: a1:90:3c:4a:9f:d9:3c:b9:c5:52:79:a0:f2:85:9f:d6:8b:9d: 1d:d7:4b:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyQTQxMTAvBgNVBAUTKDIyMjVFM0ZBMkM2RkUyRUZCNjc2NjVFNTNDRTlGRTBD REY5QzlCQTcwHhcNMjUxMTAzMDI1NjEwWhcNMjUxMTEwMDI1NjEwWjAYMRYwFAYD VQQDEw02OTA4MTljYi05NGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jWQ6ESjjPzfMZGKNaK8MdB7rGiu6zRmjfZ5whIgtLI+KCnCH7yzH59arrS6 RUQfi/Iv7OY40sDa2SolvyA5vd3LZa8tMpoaRnRUNFlZVkZABDl7szvQvRJorLgv OnBrFj1EIMymwJaNZyPI5cF2CXDpG1ugjdnyu9GWkmTuLiMCObL6msOmFDqy0n4b wmXEog33qMiAs99ylTwQ96qFCzk0MZ+WSBvhwS05f2IwwMLzHXGEN+3avrbmW1SQ c68DSAK+fV2rSYbdsJe7kBviqWNMA9zskHG06W80BZgTqKkHc9vUcYrmicJkS8En cDWKKDeWxC8uPm6oH3xOYPNWxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHB0n1DC jUcSt7EYhGxd+Oxu/sq1MB8GA1UdIwQYMBaAFCIl4/osb+LvtnZl5Tzp/gzfnJun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDJBNC82Njg0MTYzQTA2 MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1LTJkbVhsUE9uLUROLWNt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpWGotaXh2NHUtMmRtWGxQT24tRE4tY202Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDJBNC82Njg0MTYzQTA2MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1 LTJkbVhsUE9uLUROLWNtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeLGTYxBnn1ayp38QL8kvt9fLmctHsqJOITkrZbE+WYF323B/i9qg/ IEnAvB+oOHEbSxsyaUEXzaVnU9MEUSEDm69dioMaZFCGfbuKkROfxXVuQfgNP5IG MnUGfnGjLYaKM2JEkYk8wW//SxYktN4agrWnQ2ZuKzqtw9FN8xJqtoPK5h5wGWDo xrHOdEymh2blEPefN1tmKoVX/u6h1FJSg+DmNyl8PPeOKFtqK/va9PDlKE/bfLto zoqLGCwTN+xgvAooo0BVN1VNq7wbA3UGXJp8uV2oP17lb1Eg97/bv7f61MR7iWc1 pxChkDxKn9k8ucVSeaDyhZ/Wi50d10u8 -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:08 2025 by rpki-client