$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft File: iz8j61_ij1gF49J7lTe7r6fN-UY.mft (raw, json) Hash identifier: PomB/Bi1L4Sgy7Cz48PLUXuxoNbWJbU9120AwmUH+gQ= Subject key identifier: 57:FE:F6:F7:D7:62:7D:F5:2E:23:32:59:9E:EE:20:32:88:4D:0A:DB Authority key identifier: 8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46 Certificate issuer: /CN=A91E6C2D/serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft Manifest number: 0215 Signing time: Mon 03 Nov 2025 02:11:35 +0000 Manifest this update: Mon 03 Nov 2025 02:11:35 +0000 Manifest next update: Mon 10 Nov 2025 02:11:35 +0000 Files and hashes: 1: iz8j61_ij1gF49J7lTe7r6fN-UY.crl (hash: 9gxHZCRPy2eNL5BLPUQKXQu9lsmfKXaFOlAzLjJFYQ8=) 2: E8F4B2C48A0911ED8FCEE137C4F9AE02.roa (hash: hyVOWGrjCzsgaB5t6a964tLdF9KDC2L1JSe9IYMG8n4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C2D, serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946 Validity Not Before: Nov 3 02:11:35 2025 GMT Not After : Nov 10 02:11:35 2025 GMT Subject: CN=69080f57-55b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0c:77:96:5f:d5:a3:af:18:2b:af:32:6a:b1: a4:81:bb:c7:6f:30:f2:46:43:56:69:c9:98:de:79: 48:47:47:89:4c:48:eb:72:2a:bb:75:7b:fc:20:8f: 67:49:10:a6:c4:e9:76:12:15:fb:25:b5:06:d8:d9: 5e:ce:6e:da:ae:87:27:45:01:67:b8:e9:76:41:9f: 26:4e:f0:9f:db:ef:d2:a3:9d:c3:19:bd:3e:b8:cc: 87:ff:c5:e0:5d:44:f6:6d:07:bc:f7:5a:6f:a3:71: ec:1c:3b:b7:9c:d8:69:fb:5f:60:53:bc:81:a1:91: 5f:89:f1:f9:01:97:80:26:bd:6b:55:2f:45:9f:6c: 5d:58:69:99:62:5b:a0:0d:0e:ca:2a:5a:a1:80:7b: 65:87:14:78:3b:f4:cd:54:a6:85:24:5d:d3:30:39: 1f:c4:ee:77:83:36:ac:64:da:98:01:23:60:75:17: 66:c4:eb:16:17:86:6c:96:73:03:b0:e2:b9:6b:8e: 67:b4:09:f2:4d:db:5c:f6:9b:32:a8:fd:66:64:38: 56:b9:33:0c:19:3c:e5:81:34:5c:7f:60:a0:6e:c4: 34:ea:d1:a5:d5:20:10:37:bf:d5:0f:f7:2f:c4:b7: c9:5f:15:ae:36:ef:b5:23:1d:a5:ed:c9:6d:e3:3a: cb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FE:F6:F7:D7:62:7D:F5:2E:23:32:59:9E:EE:20:32:88:4D:0A:DB X509v3 Authority Key Identifier: keyid:8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:3b:40:74:7a:c3:85:2f:b1:ee:4a:00:ae:c2:0f:52:29:70: 88:5d:46:f1:a1:f3:ee:8e:31:a3:94:7e:9b:9f:89:7d:28:f7: a9:51:da:17:8e:ac:ad:e7:51:af:3d:17:19:48:ea:bb:a8:74: 05:ba:3d:27:66:42:fe:61:f2:40:ab:44:e2:c6:31:e6:2f:8c: 33:52:99:bf:60:6a:52:8f:58:43:31:2d:39:d5:f0:db:11:11: 7f:37:4f:35:07:65:b7:01:d0:4b:43:f2:f3:41:f6:d3:b0:6e: 12:d9:17:73:f8:53:02:5d:20:f9:37:82:3b:84:01:ff:47:94: 3a:b8:40:f9:47:a3:dc:16:83:ab:c7:14:b1:93:48:66:de:d0: 71:58:5a:30:10:4b:67:08:48:5e:5c:ef:98:bd:73:7c:83:27: 53:02:e0:2d:26:ff:0b:87:7e:3c:e1:7d:2b:92:4b:42:e8:1a: e2:21:79:68:b9:3b:cd:ea:e8:8a:ad:8f:cb:0d:4a:67:8c:1d: 8c:3d:1b:5a:9f:03:6a:c2:20:74:24:ac:7e:fd:7f:c1:33:f1: 2d:35:98:86:cf:48:b3:27:55:c3:35:1e:3f:79:1c:35:01:c9: 41:d0:72:82:4c:07:d4:b0:a3:ee:f6:41:ed:72:ca:2b:e5:4c: f4:9a:f8:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDMkQxMTAvBgNVBAUTKDhCM0YyM0VCNUZFMjhGNTgwNUUzRDI3Qjk1MzdCQkFG QTdDREY5NDYwHhcNMjUxMTAzMDIxMTM1WhcNMjUxMTEwMDIxMTM1WjAYMRYwFAYD VQQDEw02OTA4MGY1Ny01NWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Qx3ll/Vo68YK68yarGkgbvHbzDyRkNWacmY3nlIR0eJTEjrciq7dXv8II9n SRCmxOl2EhX7JbUG2Nlezm7arocnRQFnuOl2QZ8mTvCf2+/So53DGb0+uMyH/8Xg XUT2bQe891pvo3HsHDu3nNhp+19gU7yBoZFfifH5AZeAJr1rVS9Fn2xdWGmZYlug DQ7KKlqhgHtlhxR4O/TNVKaFJF3TMDkfxO53gzasZNqYASNgdRdmxOsWF4ZslnMD sOK5a45ntAnyTdtc9psyqP1mZDhWuTMMGTzlgTRcf2CgbsQ06tGl1SAQN7/VD/cv xLfJXxWuNu+1Ix2l7clt4zrL3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFf+9vfX Yn31LiMyWZ7uIDKITQrbMB8GA1UdIwQYMBaAFIs/I+tf4o9YBePSe5U3u6+nzflG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkMyRC9DMzcyMTMyQzhB MDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWoxZ0Y0OUo3bFRlN3I2Zk4t VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l6OGo2MV9pajFnRjQ5SjdsVGU3cjZmTi1VWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkMyRC9DMzcyMTMyQzhBMDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWox Z0Y0OUo3bFRlN3I2Zk4tVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWO0B0esOFL7HuSgCuwg9SKXCIXUbxofPujjGjlH6bn4l9KPepUdoX jqyt51GvPRcZSOq7qHQFuj0nZkL+YfJAq0TixjHmL4wzUpm/YGpSj1hDMS051fDb ERF/N081B2W3AdBLQ/LzQfbTsG4S2Rdz+FMCXSD5N4I7hAH/R5Q6uED5R6PcFoOr xxSxk0hm3tBxWFowEEtnCEheXO+YvXN8gydTAuAtJv8Lh3484X0rkktC6BriIXlo uTvN6uiKrY/LDUpnjB2MPRtanwNqwiB0JKx+/X/BM/EtNZiGz0izJ1XDNR4/eRw1 AclB0HKCTAfUsKPu9kHtcsor5Uz0mviy -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:11 2025 by rpki-client