$ rpki-client -vvf rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft File: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft (raw, json) Hash identifier: mKIrvs4mm4gE2k89J/O9UecvAKdAuZ0ixeA2aOgVUSo= Subject key identifier: E4:92:36:B6:AA:73:91:92:06:62:5B:27:7C:2F:8B:98:68:06:B7:21 Authority key identifier: EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F Certificate issuer: /CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Certificate serial: 2170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft Manifest number: 2170 Signing time: Sat 18 Oct 2025 16:10:31 +0000 Manifest this update: Sat 18 Oct 2025 16:10:31 +0000 Manifest next update: Sat 25 Oct 2025 16:10:31 +0000 Files and hashes: 1: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl (hash: cTtm/tfnk58nEWj93sjQJYZK3gLcsqxX21CmA+4P9yw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8560 (0x2170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141526, serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Validity Not Before: Oct 18 16:10:31 2025 GMT Not After : Oct 25 16:10:31 2025 GMT Subject: CN=68f3bbf7-d47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b5:86:24:e1:a3:05:5b:a3:78:40:a2:ea:c7: e4:d7:82:45:a3:67:96:90:da:19:a8:97:6d:3b:18: cd:dd:75:05:32:ff:df:1d:1f:74:e2:d9:9d:24:01: 80:2c:c3:6e:8b:68:82:ae:f7:33:04:c8:bd:fd:a0: 42:be:2f:96:12:77:02:35:d5:15:a8:51:d5:5e:4f: 7c:a0:19:d1:07:d8:8b:4c:41:d2:8a:19:8c:60:6c: a2:84:45:b8:da:ed:f3:33:57:f0:22:ca:b3:e3:49: b0:02:24:ba:7d:18:40:00:c5:5b:b8:1c:71:9f:b9: 6d:5f:68:05:0a:a5:a6:36:ed:b8:56:12:d1:a9:1e: ab:68:01:6f:1a:b4:3e:6b:62:c6:38:28:22:bb:7d: f9:81:bf:74:54:59:ca:e4:4a:41:a7:17:a6:b8:96: 9e:de:4d:5b:3f:15:4d:07:a3:b9:3f:dc:b3:6b:df: 52:fa:ca:55:5f:c7:5d:6a:a0:ae:77:97:fc:3d:5b: 1c:42:47:c9:97:4e:12:e3:20:0b:f7:4a:83:bc:16: a7:96:55:d5:ae:45:37:cf:79:0c:6f:2e:fb:e8:24: e2:41:bc:d3:09:f2:dc:72:df:bd:5e:71:bb:5f:22: bc:1f:b9:61:f7:02:23:da:50:5a:a2:9a:63:ec:05: 63:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:92:36:B6:AA:73:91:92:06:62:5B:27:7C:2F:8B:98:68:06:B7:21 X509v3 Authority Key Identifier: keyid:EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:a0:16:f9:aa:24:db:c0:3a:d0:8f:ef:09:e3:17:69:ff:0b: 91:0d:d3:b3:64:9e:30:1c:d6:48:f5:31:f8:a9:ed:f7:02:94: db:da:98:ee:e5:0f:20:af:98:ef:e2:13:03:1e:5e:c2:34:c4: 71:c5:1f:8a:e4:0a:ea:6d:23:27:81:cf:5f:5e:ef:81:3c:53: 7e:24:77:83:a9:1d:ae:dd:2b:2c:3d:6a:a4:47:31:50:f5:fb: d1:5f:a8:6a:86:30:a3:8c:43:cb:e1:4a:96:96:83:b1:ed:2f: 1b:ed:47:0c:c5:ba:a0:9d:8f:34:9c:bb:e1:4a:13:19:3b:13: 71:3c:18:67:d3:f6:75:4b:ed:dd:d6:74:a8:c6:e1:a0:3e:f1: 59:03:f7:38:1b:8f:38:b7:0c:57:ec:d4:a6:c5:80:dc:e1:46: a7:99:68:4d:c9:be:13:99:17:01:cd:60:4b:0b:65:05:6c:d9: 3e:ae:c8:bc:f5:7d:9b:74:06:ad:40:e7:e0:d2:83:39:53:0b: 49:bf:c0:9a:aa:61:16:5a:3a:da:a3:f9:85:ff:3b:37:64:75: 91:0c:7a:9f:0f:80:de:b4:8d:71:1e:bc:99:94:ad:a4:85:d5: e1:29:7a:f1:ee:ae:6c:4a:fb:f1:47:19:b8:dc:0c:5c:4e:39: 08:33:b8:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1MjYxMTAvBgNVBAUTKEVDODAwODZDMjIwN0IxQTA0NjAwNzI1MTgzRTNDNEYw RkRFMTY3NUYwHhcNMjUxMDE4MTYxMDMxWhcNMjUxMDI1MTYxMDMxWjAYMRYwFAYD VQQDEw02OGYzYmJmNy1kNDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLWGJOGjBVujeECi6sfk14JFo2eWkNoZqJdtOxjN3XUFMv/fHR904tmdJAGA LMNui2iCrvczBMi9/aBCvi+WEncCNdUVqFHVXk98oBnRB9iLTEHSihmMYGyihEW4 2u3zM1fwIsqz40mwAiS6fRhAAMVbuBxxn7ltX2gFCqWmNu24VhLRqR6raAFvGrQ+ a2LGOCgiu335gb90VFnK5EpBpxemuJae3k1bPxVNB6O5P9yza99S+spVX8ddaqCu d5f8PVscQkfJl04S4yAL90qDvBanllXVrkU3z3kMby776CTiQbzTCfLcct+9XnG7 XyK8H7lh9wIj2lBaoppj7AVjKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSSNraq c5GSBmJbJ3wvi5hoBrchMB8GA1UdIwQYMBaAFOyACGwiB7GgRgByUYPjxPD94Wdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTUyNi9GNjI4QTMzNkU5 QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNhQkdBSEpSZy1QRThQM2ha MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdJQUliQ0lIc2FCR0FISlJnLVBFOFAzaFoxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTUyNi9GNjI4QTMzNkU5QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNh QkdBSEpSZy1QRThQM2haMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEoBb5qiTbwDrQj+8J4xdp/wuRDdOzZJ4wHNZI9TH4qe33ApTb2pju 5Q8gr5jv4hMDHl7CNMRxxR+K5ArqbSMngc9fXu+BPFN+JHeDqR2u3SssPWqkRzFQ 9fvRX6hqhjCjjEPL4UqWloOx7S8b7UcMxbqgnY80nLvhShMZOxNxPBhn0/Z1S+3d 1nSoxuGgPvFZA/c4G484twxX7NSmxYDc4UanmWhNyb4TmRcBzWBLC2UFbNk+rsi8 9X2bdAatQOfg0oM5UwtJv8CaqmEWWjrao/mF/zs3ZHWRDHqfD4DetI1xHryZlK2k hdXhKXrx7q5sSvvxRxm43AxcTjkIM7jj -----END CERTIFICATE-----Generated at Mon Oct 20 08:56:05 2025 by rpki-client