$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft File: iro-R9UcXSye80Plr0EQHkPFiog.mft (raw, json) Hash identifier: T9bMUSz4G0aAx6TAAyIqlrY/7HHFTjhYKHBeeNdLZCc= Subject key identifier: DC:F4:78:16:DA:BC:7B:BD:60:2C:65:E2:B9:A5:2D:14:17:58:5E:06 Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 Certificate issuer: /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Certificate serial: 0C32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft Manifest number: 0C27 Signing time: Thu 18 Sep 2025 18:53:08 +0000 Manifest this update: Thu 18 Sep 2025 18:53:08 +0000 Manifest next update: Thu 25 Sep 2025 18:53:08 +0000 Files and hashes: 1: iro-R9UcXSye80Plr0EQHkPFiog.crl (hash: m5R/HACFAm8etNomc/5cCj735relo83d+pbJO0Fxqqw=) 2: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (hash: ZFOmsL5bJSLH6PZ2YkIqaVTwufEfPYg2DbDADn/8Z+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3122 (0xc32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE984, serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Validity Not Before: Sep 18 18:53:08 2025 GMT Not After : Sep 25 18:53:08 2025 GMT Subject: CN=68cc5514-ef34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:3e:11:3b:5e:a1:73:9e:c2:0f:36:28:b3:3b: 62:16:a0:f2:9a:d9:35:e8:57:da:d3:1c:da:3b:d8: 60:96:ed:37:09:a6:37:2a:91:e3:54:a4:2e:12:c1: 1b:ae:c4:75:47:78:bd:e6:0f:cf:6d:58:54:02:59: f0:d7:cf:e8:f7:ef:43:40:74:a2:47:2c:6e:27:22: 42:32:59:d3:92:d5:c6:39:88:47:60:f0:bc:17:eb: 5d:3e:ab:6e:fa:5b:55:9e:e4:ef:bc:eb:35:10:96: 04:dc:cb:9b:5b:d7:6d:55:71:47:2b:5b:93:05:4c: b1:bf:a3:ea:6a:b8:98:d7:50:c3:b7:ed:61:9a:a0: 93:56:22:99:c1:38:0e:0f:b7:35:a4:6b:63:57:77: 1f:25:b2:da:d7:43:c7:0f:c0:91:7f:a4:f6:35:7a: 44:78:62:bb:96:c4:fc:d5:eb:f6:1d:ac:f8:fa:dd: 8a:f5:23:88:d3:b1:51:cb:68:90:18:06:ce:79:4d: 13:80:63:33:af:cb:ab:e1:db:bd:42:d4:16:b3:b5: 71:a0:16:1c:64:6e:08:6e:82:19:6c:1e:c6:38:c9: ac:2b:9d:cc:7b:69:5c:6b:b8:10:0b:2e:51:c9:4e: b6:d7:e5:1a:e9:29:f3:20:69:2d:4b:11:7e:b4:98: 96:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F4:78:16:DA:BC:7B:BD:60:2C:65:E2:B9:A5:2D:14:17:58:5E:06 X509v3 Authority Key Identifier: keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:e2:6e:9b:d4:0d:d1:e8:d9:ae:15:e3:83:0d:83:fe:29:25: 45:0a:bd:f4:0c:d4:5e:07:ab:fa:5e:b4:2e:20:66:d1:9f:d9: 4a:8a:5e:1f:e5:78:e7:3b:b3:ae:1e:28:5d:16:c6:d2:7d:1b: 9e:68:0d:59:c8:b6:b0:c2:af:b3:ab:94:8f:ff:a5:fd:a3:72: 34:d0:89:a4:92:c9:3f:c9:ca:fd:55:04:ed:36:9a:99:2c:35: 62:58:d2:b2:78:8d:e7:d4:37:9f:1e:65:8e:2d:77:67:08:5a: 23:69:63:92:16:2e:bf:5b:1d:34:8d:69:6c:6e:34:80:51:c4: c7:db:11:a0:93:82:f2:64:2d:94:71:20:2f:e0:b2:2c:d7:ee: 37:82:53:b8:a2:2b:60:fe:57:e3:5d:74:5f:ac:98:c7:06:95: 2d:01:bc:54:c6:77:ac:69:4b:75:db:1b:d7:06:b7:49:79:68: ff:a6:07:91:0c:9e:ad:33:4f:df:5f:52:78:21:5b:d1:c6:92: b2:ea:10:98:63:18:72:0d:8d:21:c4:46:01:55:38:ce:7a:7a: 06:a2:0d:45:29:70:0e:e7:87:3b:4a:22:ff:bb:04:23:27:cf: 96:d6:df:d4:eb:7d:76:fd:7a:05:18:46:fd:fd:e8:70:f6:ab: e6:da:83:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5ODQxMTAvBgNVBAUTKDhBQkEzRTQ3RDUxQzVEMkM5RUYzNDNFNUFGNDExMDFF NDNDNThBODgwHhcNMjUwOTE4MTg1MzA4WhcNMjUwOTI1MTg1MzA4WjAYMRYwFAYD VQQDEw02OGNjNTUxNC1lZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9z4RO16hc57CDzYosztiFqDymtk16Ffa0xzaO9hglu03CaY3KpHjVKQuEsEb rsR1R3i95g/PbVhUAlnw18/o9+9DQHSiRyxuJyJCMlnTktXGOYhHYPC8F+tdPqtu +ltVnuTvvOs1EJYE3MubW9dtVXFHK1uTBUyxv6PqariY11DDt+1hmqCTViKZwTgO D7c1pGtjV3cfJbLa10PHD8CRf6T2NXpEeGK7lsT81ev2Haz4+t2K9SOI07FRy2iQ GAbOeU0TgGMzr8ur4du9QtQWs7VxoBYcZG4IboIZbB7GOMmsK53Me2lca7gQCy5R yU621+Ua6SnzIGktSxF+tJiWxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNz0eBba vHu9YCxl4rmlLRQXWF4GMB8GA1UdIwQYMBaAFIq6PkfVHF0snvND5a9BEB5DxYqI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTk4NC8yODc0NUU0QzE1 RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hTeWU4MFBscjBFUUhrUEZp b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lyby1SOVVjWFN5ZTgwUGxyMEVRSGtQRmlvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTk4NC8yODc0NUU0QzE1RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hT eWU4MFBscjBFUUhrUEZpb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB14m6b1A3R6NmuFeODDYP+KSVFCr30DNReB6v6XrQuIGbRn9lKil4f 5XjnO7OuHihdFsbSfRueaA1ZyLawwq+zq5SP/6X9o3I00Imkksk/ycr9VQTtNpqZ LDViWNKyeI3n1DefHmWOLXdnCFojaWOSFi6/Wx00jWlsbjSAUcTH2xGgk4LyZC2U cSAv4LIs1+43glO4oitg/lfjXXRfrJjHBpUtAbxUxnesaUt12xvXBrdJeWj/pgeR DJ6tM0/fX1J4IVvRxpKy6hCYYxhyDY0hxEYBVTjOenoGog1FKXAO54c7SiL/uwQj J8+W1t/U6312/XoFGEb9/ehw9qvm2oNn -----END CERTIFICATE-----Generated at Fri Sep 19 00:59:43 2025 by rpki-client