$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft File: -1uWlTzNsR6SaDs-tbekV0lLJfA.mft (raw, json) Hash identifier: xfpyRKYc+7vCSo+cJFuVFCgYttAdl8/4ktOEOypTmdM= Subject key identifier: E8:78:6E:FC:2C:15:80:4E:23:E3:30:5A:8D:24:F8:76:8E:91:0D:E6 Authority key identifier: FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0 Certificate issuer: /CN=A9146A72/serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0 Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft Manifest number: 0178 Signing time: Mon 20 Oct 2025 15:38:34 +0000 Manifest this update: Mon 20 Oct 2025 15:38:33 +0000 Manifest next update: Mon 27 Oct 2025 15:38:33 +0000 Files and hashes: 1: -1uWlTzNsR6SaDs-tbekV0lLJfA.crl (hash: GuzdoU+xWU1WABIgCXj1pVL2okmGKjnu5YLojPzbhjU=) 2: 67B0ACBC8E5011EE95DFC141C4F9AE02.roa (hash: v8nxYYW0hF0+DI8v9AY4Ub2lKaqI81YP/TyFzHf/96E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0 Validity Not Before: Oct 20 15:38:33 2025 GMT Not After : Oct 27 15:38:33 2025 GMT Subject: CN=68f65779-05d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:03:23:45:6b:d7:c9:36:66:96:07:6f:1e:77: ed:bf:b4:b3:9f:f5:59:66:d9:c1:d6:1d:23:3a:ee: 9d:72:b1:a3:2f:60:74:52:fe:54:8d:31:a4:69:d2: 97:c1:d6:46:39:c1:cb:6a:83:2b:20:de:b1:3e:b4: 6c:eb:5b:27:a2:8e:0f:50:c6:af:a4:6e:49:be:8d: 21:e7:a0:6f:28:26:a9:73:eb:e8:9e:e3:82:1c:46: 6b:2e:c2:7f:e3:4b:aa:9c:a2:09:c7:78:90:85:22: 5a:9b:a3:20:43:73:53:50:9b:a8:ab:82:4c:c0:e5: 07:7b:98:09:d1:1b:8c:82:9e:af:39:33:2b:c2:7b: 4d:54:52:9d:8a:77:d9:e9:9c:8d:8a:54:05:04:dd: e2:bc:d6:ab:53:ba:7f:de:0e:01:ba:d5:1c:81:c5: 65:ff:9e:ec:45:20:4e:30:5e:96:3f:ed:5d:65:0f: 9b:df:99:37:b2:51:e8:f0:2b:1f:11:62:23:0d:ef: 21:73:d0:c1:c1:5b:67:95:b1:94:f4:d3:36:03:37: b9:0e:06:e8:92:9d:95:a4:60:08:52:f8:b9:e5:8f: 25:5e:35:87:26:e7:c1:78:6b:3c:02:92:5d:49:04: 99:60:c4:12:1b:d0:42:09:9e:ba:3e:98:dd:8a:2a: eb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:78:6E:FC:2C:15:80:4E:23:E3:30:5A:8D:24:F8:76:8E:91:0D:E6 X509v3 Authority Key Identifier: keyid:FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:de:16:49:e6:6e:58:fb:6e:e9:d0:c4:8a:36:9b:a3:d1:1e: 18:2a:ab:8e:75:de:e7:cc:91:dc:26:3a:20:79:f1:2a:3a:63: e4:d4:58:eb:fc:7c:57:8f:23:27:91:59:bc:a0:4f:76:bd:38: 77:57:02:3a:a9:bb:ad:0a:f4:ed:c7:79:06:dd:d4:39:0c:3f: fc:88:de:6b:c3:ee:6d:36:b9:e7:69:b3:86:34:71:ea:16:cc: a4:2d:86:51:61:ae:86:ad:d7:b5:ed:ab:e8:23:6b:d3:00:63: cc:c5:cf:74:4d:47:9f:8f:c6:75:23:23:d2:bb:58:e4:2b:d4: 46:96:fb:5a:ad:37:0e:d2:0d:49:97:c5:45:27:98:f6:6b:0b: 4f:c5:5d:73:69:4b:77:60:05:16:3b:32:3f:8d:b0:25:9e:0f: 60:b6:46:7d:99:34:9f:e9:e1:66:0e:1c:d5:0d:3c:a9:f3:12: f0:a0:19:3c:61:94:1e:40:04:52:b3:b8:89:ff:e3:ce:5e:ea: 02:6b:02:01:f8:8c:8a:85:82:41:44:66:dc:19:d2:c2:49:9a: 0d:40:63:a5:38:c1:4e:ce:48:4c:a7:a0:2e:b5:78:4e:0c:ad: fb:44:a5:0e:26:f3:3d:8e:c0:47:15:f5:eb:37:12:56:b9:bf: 57:e5:67:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKEZCNUI5Njk1M0NDREIxMUU5MjY4M0IzRUI1QjdBNDU3 NDk0QjI1RjAwHhcNMjUxMDIwMTUzODMzWhcNMjUxMDI3MTUzODMzWjAYMRYwFAYD VQQDEw02OGY2NTc3OS0wNWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2gMjRWvXyTZmlgdvHnftv7Szn/VZZtnB1h0jOu6dcrGjL2B0Uv5UjTGkadKX wdZGOcHLaoMrIN6xPrRs61snoo4PUMavpG5Jvo0h56BvKCapc+vonuOCHEZrLsJ/ 40uqnKIJx3iQhSJam6MgQ3NTUJuoq4JMwOUHe5gJ0RuMgp6vOTMrwntNVFKdinfZ 6ZyNilQFBN3ivNarU7p/3g4ButUcgcVl/57sRSBOMF6WP+1dZQ+b35k3slHo8Csf EWIjDe8hc9DBwVtnlbGU9NM2Aze5Dgbokp2VpGAIUvi55Y8lXjWHJufBeGs8ApJd SQSZYMQSG9BCCZ66PpjdiirrDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOh4bvws FYBOI+MwWo0k+HaOkQ3mMB8GA1UdIwQYMBaAFPtblpU8zbEekmg7PrW3pFdJSyXw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi80RjU2QzAxQzc3 OUQxMUVFQkI0OUUyNjlDNEY5QUUwMi8tMXVXbFR6TnNSNlNhRHMtdGJla1YwbExK ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy0xdVdsVHpOc1I2U2FEcy10YmVrVjBsTEpmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi80RjU2QzAxQzc3OUQxMUVFQkI0OUUyNjlDNEY5QUUwMi8tMXVXbFR6TnNS NlNhRHMtdGJla1YwbExKZkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs3hZJ5m5Y+27p0MSKNpuj0R4YKquOdd7nzJHcJjogefEqOmPk1Fjr /HxXjyMnkVm8oE92vTh3VwI6qbutCvTtx3kG3dQ5DD/8iN5rw+5tNrnnabOGNHHq FsykLYZRYa6Grde17avoI2vTAGPMxc90TUefj8Z1IyPSu1jkK9RGlvtarTcO0g1J l8VFJ5j2awtPxV1zaUt3YAUWOzI/jbAlng9gtkZ9mTSf6eFmDhzVDTyp8xLwoBk8 YZQeQARSs7iJ/+POXuoCawIB+IyKhYJBRGbcGdLCSZoNQGOlOMFOzkhMp6AutXhO DK37RKUOJvM9jsBHFfXrNxJWub9X5Wce -----END CERTIFICATE-----Generated at Tue Oct 21 10:42:13 2025 by rpki-client