$ rpki-client -vvf rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft File: IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft (raw, json) Hash identifier: KlbwEQBFj+O0mnlHHCB1LPp56m+VIAuIc9cFal+x47c= Subject key identifier: 99:05:67:FA:5E:1A:11:CC:6E:F8:59:42:6D:B6:3C:73:16:03:1B:B0 Authority key identifier: 22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 Certificate issuer: /CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft Manifest number: 01AB Signing time: Fri 19 Sep 2025 03:39:21 +0000 Manifest this update: Fri 19 Sep 2025 03:39:21 +0000 Manifest next update: Fri 26 Sep 2025 03:39:21 +0000 Files and hashes: 1: IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl (hash: YZ/Q230cQkcAcQg5Ng77jd4h3xefQYcS4MxnontTXuU=) 2: 73E56336069E11EE9D687712C4F9AE02.roa (hash: 2Dnxh30mhffjOkqJSVSDIOGgOimqWD/AADTc7ZuBX6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 03:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A42A4, serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Validity Not Before: Sep 19 03:39:21 2025 GMT Not After : Sep 26 03:39:21 2025 GMT Subject: CN=68ccd069-c5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b6:a9:29:65:6e:52:02:7b:3b:36:cb:e3:09: ef:4f:55:09:2e:f7:b1:3b:87:04:97:f6:26:eb:d2: 27:94:86:62:64:4d:a7:7b:82:e8:9f:ce:6b:d5:30: 22:a3:17:35:c1:d4:11:0a:fd:0e:9b:c9:0d:2a:15: 0c:fa:1d:6e:9e:9d:1f:24:64:7a:43:85:f7:d0:03: e0:18:eb:9d:fa:d8:e8:93:28:41:f1:d8:0c:9f:04: 3c:3a:ef:2d:22:05:5c:8d:3e:2f:96:c6:37:8c:72: 6b:72:84:e4:b6:1f:33:2a:5c:49:41:ce:e7:c8:f2: 39:aa:ef:c6:69:9e:03:77:63:7e:ef:a9:d8:ef:75: 00:97:c2:17:6d:f6:2a:1d:74:4a:4b:a0:47:80:4d: 60:ec:31:c2:bc:6a:cb:36:22:e3:28:43:3e:07:c7: 34:e3:d2:93:c9:31:58:0a:2c:a1:1b:ce:d1:18:07: e7:f4:39:81:87:d1:7c:49:29:6c:78:13:49:01:17: 98:4c:7c:35:f5:eb:b3:3a:5d:26:49:47:af:97:10: c0:a5:96:8c:44:7c:dc:16:d0:24:ae:18:6e:74:68: 8f:50:5f:b2:bf:e4:c1:13:7a:56:08:26:59:df:70: ff:de:2c:03:73:42:bd:00:01:83:7a:2e:f1:a2:cf: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:05:67:FA:5E:1A:11:CC:6E:F8:59:42:6D:B6:3C:73:16:03:1B:B0 X509v3 Authority Key Identifier: keyid:22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:71:5b:da:8b:d6:72:94:b0:3d:20:47:2b:17:2a:03:9c:9c: f3:62:03:2c:a1:78:3e:ae:97:09:2c:08:89:a0:a2:0d:96:38: dd:7a:66:20:eb:ab:94:4d:84:8b:74:c7:60:94:ce:6f:58:8d: 48:11:a6:ba:da:7e:99:93:31:3b:aa:31:a1:45:9c:a0:e9:1f: c4:bf:af:db:4d:35:3e:14:f5:13:a6:e9:2d:5f:25:d8:19:51: 31:96:d4:68:99:41:8c:eb:67:30:fe:57:f6:2a:63:78:eb:41: b4:71:ec:37:61:c8:8e:7a:5f:5f:90:af:58:1e:8b:b5:ce:1f: 1e:dc:de:a0:0f:78:bb:38:0d:90:27:b0:5c:33:54:37:93:82: 40:0d:d3:a4:28:5a:7a:63:53:dc:66:ee:49:d5:97:39:6a:bc: bc:e4:28:2d:13:56:f1:ab:a5:ff:df:ae:57:9c:48:35:7c:01: 5e:ae:48:97:97:11:42:08:09:05:e2:6c:4f:97:80:2f:65:14: f6:58:60:88:c6:c6:6b:51:a9:9c:65:87:58:65:ff:ce:b9:85: 6d:c7:24:f0:c7:59:96:35:7c:b6:5c:8d:bb:47:05:71:0d:b8: 3a:a3:0d:33:f6:a8:a8:d9:62:bb:da:ee:fe:8e:d5:83:4f:5a: d4:01:c1:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyQTQxMTAvBgNVBAUTKDIyMjVFM0ZBMkM2RkUyRUZCNjc2NjVFNTNDRTlGRTBD REY5QzlCQTcwHhcNMjUwOTE5MDMzOTIxWhcNMjUwOTI2MDMzOTIxWjAYMRYwFAYD VQQDEw02OGNjZDA2OS1jNWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrapKWVuUgJ7OzbL4wnvT1UJLvexO4cEl/Ym69InlIZiZE2ne4Lon85r1TAi oxc1wdQRCv0Om8kNKhUM+h1unp0fJGR6Q4X30APgGOud+tjokyhB8dgMnwQ8Ou8t IgVcjT4vlsY3jHJrcoTkth8zKlxJQc7nyPI5qu/GaZ4Dd2N+76nY73UAl8IXbfYq HXRKS6BHgE1g7DHCvGrLNiLjKEM+B8c049KTyTFYCiyhG87RGAfn9DmBh9F8SSls eBNJAReYTHw19euzOl0mSUevlxDApZaMRHzcFtAkrhhudGiPUF+yv+TBE3pWCCZZ 33D/3iwDc0K9AAGDei7xos9tXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkFZ/pe GhHMbvhZQm22PHMWAxuwMB8GA1UdIwQYMBaAFCIl4/osb+LvtnZl5Tzp/gzfnJun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDJBNC82Njg0MTYzQTA2 MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1LTJkbVhsUE9uLUROLWNt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpWGotaXh2NHUtMmRtWGxQT24tRE4tY202Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDJBNC82Njg0MTYzQTA2MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1 LTJkbVhsUE9uLUROLWNtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKcVvai9ZylLA9IEcrFyoDnJzzYgMsoXg+rpcJLAiJoKINljjdemYg 66uUTYSLdMdglM5vWI1IEaa62n6ZkzE7qjGhRZyg6R/Ev6/bTTU+FPUTpuktXyXY GVExltRomUGM62cw/lf2KmN460G0cew3YciOel9fkK9YHou1zh8e3N6gD3i7OA2Q J7BcM1Q3k4JADdOkKFp6Y1PcZu5J1Zc5ary85CgtE1bxq6X/365XnEg1fAFerkiX lxFCCAkF4mxPl4AvZRT2WGCIxsZrUamcZYdYZf/OuYVtxyTwx1mWNXy2XI27RwVx Dbg6ow0z9qio2WK72u7+jtWDT1rUAcHP -----END CERTIFICATE-----Generated at Fri Sep 19 05:29:11 2025 by rpki-client