$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft File: iro-R9UcXSye80Plr0EQHkPFiog.mft (raw, json) Hash identifier: gRHg9BOJrNUt+D8FJ9DunN7XvGxGcpdtSut8CehVokI= Subject key identifier: 3D:DC:15:F3:F9:6A:55:EE:08:01:07:D9:55:D8:B3:54:A0:6B:C2:B5 Authority key identifier: 8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 Certificate issuer: /CN=A91AE984/serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Certificate serial: 0C49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft Manifest number: 0C3E Signing time: Sun 02 Nov 2025 18:38:43 +0000 Manifest this update: Sun 02 Nov 2025 18:38:43 +0000 Manifest next update: Sun 09 Nov 2025 18:38:43 +0000 Files and hashes: 1: iro-R9UcXSye80Plr0EQHkPFiog.crl (hash: dfkkekeEAhtUm2UPblLADISzdNfDO3f4jVKcpYmDtmg=) 2: CEC4C3FC903B11ED96D73F40C4F9AE02.roa (hash: ZFOmsL5bJSLH6PZ2YkIqaVTwufEfPYg2DbDADn/8Z+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3145 (0xc49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE984, serialNumber=8ABA3E47D51C5D2C9EF343E5AF41101E43C58A88 Validity Not Before: Nov 2 18:38:43 2025 GMT Not After : Nov 9 18:38:43 2025 GMT Subject: CN=6907a533-3b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9d:82:bc:60:90:ea:49:20:7d:f7:52:e8:65: a1:3f:10:00:27:14:85:64:e3:c7:6c:f5:f4:40:2a: 28:57:f1:71:c9:3a:89:81:5c:a6:1d:8a:bd:f2:1c: a2:b2:dd:9a:9e:69:9d:b3:9f:47:bb:d1:bb:5e:24: ac:18:fc:5d:8a:68:07:65:75:0d:c0:af:1a:78:e5: 6b:7d:26:3e:aa:bc:6e:69:11:a6:fb:71:25:7c:0e: f4:51:bc:fd:56:e5:70:00:4d:29:14:a2:cd:b3:5d: 13:ff:e5:8d:eb:c8:f2:c4:c3:32:cf:b6:55:36:bf: ff:09:f8:c7:0a:63:b5:c6:6d:b2:fe:6f:5a:ca:9f: 99:5c:26:d4:51:9a:08:e5:70:45:43:08:25:ca:73: 56:25:35:65:71:3a:5f:d0:23:94:3d:0d:ed:be:02: 2e:2a:cb:8b:22:90:84:13:28:66:67:38:fe:21:70: db:5d:1c:1d:de:3a:4c:61:eb:63:46:e0:90:02:e1: c8:8e:09:5e:c1:7d:51:59:e3:bf:c0:82:94:c4:7a: 99:52:45:64:61:c3:6e:49:dd:ac:8d:11:60:d8:42: 50:40:94:1c:ff:59:55:2e:1b:ed:88:34:0a:cf:03: 79:41:0a:56:2d:48:ae:b8:11:9d:4e:ed:ef:10:46: 6e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DC:15:F3:F9:6A:55:EE:08:01:07:D9:55:D8:B3:54:A0:6B:C2:B5 X509v3 Authority Key Identifier: keyid:8A:BA:3E:47:D5:1C:5D:2C:9E:F3:43:E5:AF:41:10:1E:43:C5:8A:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iro-R9UcXSye80Plr0EQHkPFiog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE984/28745E4C15EE11EAA2D9E06EC4F9AE02/iro-R9UcXSye80Plr0EQHkPFiog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:64:2d:ba:0a:5a:a5:03:ca:8e:ff:0c:20:dd:03:66:88:f1: ea:5b:ec:2b:62:75:97:7d:61:31:97:42:ce:5f:2a:89:30:7d: 42:07:6c:51:8e:a1:63:3b:b4:6e:bd:e3:34:32:a9:0e:51:b2: ef:c1:36:b6:35:2b:4b:37:82:49:c9:6e:f5:a0:22:ee:76:79: 1a:ff:b8:0c:92:17:92:a0:c0:1c:e2:e6:f8:d0:be:fa:fe:41: f0:e3:3d:90:95:d4:15:48:7e:80:9d:5b:24:9d:8d:10:f2:16: 09:ea:29:32:b9:11:e2:8b:d2:8f:dc:e5:4f:ae:d5:d7:f7:3e: f7:12:8d:24:49:4b:29:ff:91:35:1c:f4:cf:40:75:cf:9d:e0: 2a:33:3f:db:cc:f2:4f:03:2e:5b:9b:44:4c:20:bf:0d:7b:9f: ae:00:40:2c:bd:bf:c8:ce:d0:ed:c3:21:1b:95:ca:7e:ce:aa: 73:2a:f5:c2:7c:37:64:dc:bb:77:e4:30:05:08:83:bc:23:d6: 20:c7:71:7d:4b:af:39:6f:b6:69:b4:17:a9:62:35:6d:a1:9e: c4:41:5c:db:38:26:a7:15:8e:3c:b2:cc:ce:e3:4f:85:0b:f6: 91:94:fa:7a:0c:1a:d5:f3:29:d8:ce:8a:cf:d2:fa:8d:30:9e: 33:ce:2e:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5ODQxMTAvBgNVBAUTKDhBQkEzRTQ3RDUxQzVEMkM5RUYzNDNFNUFGNDExMDFF NDNDNThBODgwHhcNMjUxMTAyMTgzODQzWhcNMjUxMTA5MTgzODQzWjAYMRYwFAYD VQQDEw02OTA3YTUzMy0zYjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzp2CvGCQ6kkgffdS6GWhPxAAJxSFZOPHbPX0QCooV/FxyTqJgVymHYq98hyi st2anmmds59Hu9G7XiSsGPxdimgHZXUNwK8aeOVrfSY+qrxuaRGm+3ElfA70Ubz9 VuVwAE0pFKLNs10T/+WN68jyxMMyz7ZVNr//CfjHCmO1xm2y/m9ayp+ZXCbUUZoI 5XBFQwglynNWJTVlcTpf0COUPQ3tvgIuKsuLIpCEEyhmZzj+IXDbXRwd3jpMYetj RuCQAuHIjglewX1RWeO/wIKUxHqZUkVkYcNuSd2sjRFg2EJQQJQc/1lVLhvtiDQK zwN5QQpWLUiuuBGdTu3vEEZuGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3cFfP5 alXuCAEH2VXYs1Sga8K1MB8GA1UdIwQYMBaAFIq6PkfVHF0snvND5a9BEB5DxYqI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTk4NC8yODc0NUU0QzE1 RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hTeWU4MFBscjBFUUhrUEZp b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lyby1SOVVjWFN5ZTgwUGxyMEVRSGtQRmlvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTk4NC8yODc0NUU0QzE1RUUxMUVBQTJEOUUwNkVDNEY5QUUwMi9pcm8tUjlVY1hT eWU4MFBscjBFUUhrUEZpb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKZC26ClqlA8qO/wwg3QNmiPHqW+wrYnWXfWExl0LOXyqJMH1CB2xR jqFjO7RuveM0MqkOUbLvwTa2NStLN4JJyW71oCLudnka/7gMkheSoMAc4ub40L76 /kHw4z2QldQVSH6AnVsknY0Q8hYJ6ikyuRHii9KP3OVPrtXX9z73Eo0kSUsp/5E1 HPTPQHXPneAqMz/bzPJPAy5bm0RMIL8Ne5+uAEAsvb/IztDtwyEblcp+zqpzKvXC fDdk3Lt35DAFCIO8I9Ygx3F9S685b7ZptBepYjVtoZ7EQVzbOCanFY48sszO40+F C/aRlPp6DBrV8ynYzorP0vqNMJ4zzi7f -----END CERTIFICATE-----Generated at Tue Nov 4 07:22:47 2025 by rpki-client