$ rpki-client -vvf rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft File: tO2w1sy18AyTBDdO6B9eJhrmcck.mft (raw, json) Hash identifier: X5XWmWsZbXo2osVY69sUuDg8ZXeChLv4MeXxoW1mYOE= Subject key identifier: B3:5C:AB:64:31:AD:99:2C:F6:B3:D3:E2:E6:97:81:7B:E9:77:02:CF Authority key identifier: B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 Certificate issuer: /CN=A9116AC6/serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft Manifest number: 0174 Signing time: Sun 19 Oct 2025 06:31:08 +0000 Manifest this update: Sun 19 Oct 2025 06:31:07 +0000 Manifest next update: Sun 26 Oct 2025 06:31:07 +0000 Files and hashes: 1: tO2w1sy18AyTBDdO6B9eJhrmcck.crl (hash: 3GPgxZEMdwW1s1jl7bcZ+zKqRFjBDW9d24Kdsy6Ng4A=) 2: 34DED1A2798711EEA7D73423C4F9AE02.roa (hash: pB1reIfyHdxeUfXs+919CuRxWhrieVaoumr+2A452aM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116AC6, serialNumber=B4EDB0D6CCB5F00C9304374EE81F5E261AE671C9 Validity Not Before: Oct 19 06:31:07 2025 GMT Not After : Oct 26 06:31:07 2025 GMT Subject: CN=68f485ab-d234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b2:09:33:65:34:6a:91:50:35:8f:99:e8:f8: 58:8e:b8:dc:b7:e1:f9:1c:08:dc:d0:e2:d5:24:39: 60:46:aa:52:d0:a1:61:de:2c:f9:f9:dc:cb:69:f1: 7c:01:e8:c4:50:54:79:36:c6:93:74:ee:51:ae:27: 9d:fe:b1:f9:39:0d:79:92:b5:3d:9f:e7:69:c6:96: aa:0a:87:15:fb:83:e9:45:65:1e:9c:74:7a:e5:c9: be:cf:47:bf:87:9c:61:6e:fd:72:50:88:1c:7b:b5: 4f:a1:bd:fd:76:4a:ca:ec:d0:d8:aa:90:fb:66:3f: 5c:5f:9b:21:23:9b:ed:07:29:af:a5:ea:12:76:5d: 3f:0b:31:c1:09:18:fe:9e:96:7f:d2:ee:87:8d:79: 4f:f6:9b:58:d3:51:8f:81:3a:62:cb:36:57:e3:84: 9c:8a:00:58:61:cb:06:29:49:27:71:93:45:79:e7: b7:22:02:cd:72:b6:e5:82:92:1f:39:5f:5d:ff:8c: 3b:45:5f:48:d9:b3:84:2e:2e:a5:c1:59:9a:84:d7: 0e:e7:6f:7c:3c:d3:92:22:23:ef:cd:96:37:64:eb: 3e:26:7b:dd:c8:5c:d1:63:82:08:05:d6:a0:f3:85: d2:4c:81:20:26:c9:47:32:e6:89:b3:c6:55:0f:71: 58:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5C:AB:64:31:AD:99:2C:F6:B3:D3:E2:E6:97:81:7B:E9:77:02:CF X509v3 Authority Key Identifier: keyid:B4:ED:B0:D6:CC:B5:F0:0C:93:04:37:4E:E8:1F:5E:26:1A:E6:71:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tO2w1sy18AyTBDdO6B9eJhrmcck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116AC6/A1B6CBEA797D11EE9949B073C4F9AE02/tO2w1sy18AyTBDdO6B9eJhrmcck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f3:1f:a2:2b:c6:0c:c4:ff:c9:fd:8d:14:60:5d:e7:75:f7: b9:73:bc:40:5c:ef:de:27:2d:92:60:a7:06:e4:89:a3:e8:8b: 8a:72:10:43:a8:c4:90:a2:77:7f:1e:81:f5:3e:37:72:c3:29: ca:f8:d9:df:b1:3f:7b:4a:a8:3f:08:24:64:e3:5e:06:bf:32: de:c1:a7:b4:c6:e0:76:7f:c8:b0:db:fd:02:dc:cb:91:b8:a3: 2e:a7:79:37:cb:29:fd:d8:5e:6c:f8:78:b4:7b:17:c8:54:39: 78:88:5a:ee:20:9e:e1:ac:4d:41:15:2c:d3:56:a4:c8:0d:6a: b1:0f:73:ee:09:92:58:bd:22:60:e1:ef:f0:78:74:04:85:76: 56:ff:cd:0a:12:05:a3:c1:8a:e0:51:25:6a:23:66:de:69:11: dd:8b:7b:e6:94:0f:51:48:c9:dc:0d:97:7f:d5:d8:d7:23:da: c5:60:ee:95:3d:d1:d6:73:e7:00:cf:64:40:e2:2e:25:39:de: 41:c4:6c:11:92:07:6d:ef:30:be:69:fb:21:d3:a6:63:58:51: c9:ab:92:aa:08:be:96:ff:be:bc:02:3c:4a:0b:c6:f8:80:13: 07:d2:d5:37:91:bf:db:a3:85:4f:b4:6e:2b:9d:21:81:ae:ab: e2:35:18:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZBQzYxMTAvBgNVBAUTKEI0RURCMEQ2Q0NCNUYwMEM5MzA0Mzc0RUU4MUY1RTI2 MUFFNjcxQzkwHhcNMjUxMDE5MDYzMTA3WhcNMjUxMDI2MDYzMTA3WjAYMRYwFAYD VQQDEw02OGY0ODVhYi1kMjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbIJM2U0apFQNY+Z6PhYjrjct+H5HAjc0OLVJDlgRqpS0KFh3iz5+dzLafF8 AejEUFR5NsaTdO5Rried/rH5OQ15krU9n+dpxpaqCocV+4PpRWUenHR65cm+z0e/ h5xhbv1yUIgce7VPob39dkrK7NDYqpD7Zj9cX5shI5vtBymvpeoSdl0/CzHBCRj+ npZ/0u6HjXlP9ptY01GPgTpiyzZX44ScigBYYcsGKUkncZNFeee3IgLNcrblgpIf OV9d/4w7RV9I2bOELi6lwVmahNcO5298PNOSIiPvzZY3ZOs+JnvdyFzRY4IIBdag 84XSTIEgJslHMuaJs8ZVD3FYIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNcq2Qx rZks9rPT4uaXgXvpdwLPMB8GA1UdIwQYMBaAFLTtsNbMtfAMkwQ3TugfXiYa5nHJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkFDNi9BMUI2Q0JFQTc5 N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThBeVRCRGRPNkI5ZUpocm1j Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPMncxc3kxOEF5VEJEZE82QjllSmhybWNjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkFDNi9BMUI2Q0JFQTc5N0QxMUVFOTk0OUIwNzNDNEY5QUUwMi90TzJ3MXN5MThB eVRCRGRPNkI5ZUpocm1jY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu8x+iK8YMxP/J/Y0UYF3ndfe5c7xAXO/eJy2SYKcG5Imj6IuKchBD qMSQond/HoH1PjdywynK+NnfsT97Sqg/CCRk414GvzLewae0xuB2f8iw2/0C3MuR uKMup3k3yyn92F5s+Hi0exfIVDl4iFruIJ7hrE1BFSzTVqTIDWqxD3PuCZJYvSJg 4e/weHQEhXZW/80KEgWjwYrgUSVqI2beaRHdi3vmlA9RSMncDZd/1djXI9rFYO6V PdHWc+cAz2RA4i4lOd5BxGwRkgdt7zC+afsh06ZjWFHJq5KqCL6W/768AjxKC8b4 gBMH0tU3kb/bo4VPtG4rnSGBrqviNRgb -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:32 2025 by rpki-client