$ rpki-client -vvf rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft File: ilgWVckip6USHgD7ekJ-AZrHMHs.mft (raw, json) Hash identifier: jbNE/NdcGiXu79veMtaWHrKG5tJ1HF2FXpb6UfA/PrY= Subject key identifier: 67:11:9C:3A:0A:BC:59:0A:A6:F1:6C:E0:FF:AD:9E:80:4D:5E:1B:14 Authority key identifier: 8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B Certificate issuer: /CN=A9154376/serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft Manifest number: 01AE Signing time: Sun 19 Oct 2025 05:43:41 +0000 Manifest this update: Sun 19 Oct 2025 05:43:40 +0000 Manifest next update: Sun 26 Oct 2025 05:43:40 +0000 Files and hashes: 1: ilgWVckip6USHgD7ekJ-AZrHMHs.crl (hash: I1eCrqc8d575+Yj26RTBL0+1iNaiQ3alQnHNe47GP9Q=) 2: 85CE44A4BC1111EE9E42EB2DC4F9AE02.roa (hash: AfyKET21CuVm+C0lZplWyO7fvqiYNNsqsgPynM9Y4+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:43:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154376, serialNumber=8A581655C922A7A5121E00FB7A427E019AC7307B Validity Not Before: Oct 19 05:43:40 2025 GMT Not After : Oct 26 05:43:40 2025 GMT Subject: CN=68f47a8c-71f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ee:a6:ed:e4:ae:c9:a9:76:40:93:9e:44:0b: 66:79:82:12:98:68:ad:4b:24:e8:f4:a4:9e:0b:2a: 26:a9:11:ed:7a:7c:b9:28:da:a7:65:56:3f:75:46: 35:ed:df:50:4e:16:8d:36:18:40:62:93:0f:d6:10: 40:43:c7:9a:70:10:53:13:68:91:a5:d5:f9:fc:00: 30:b2:8b:12:56:5e:23:a2:3b:7f:4f:04:98:5c:1d: ed:18:23:77:76:3b:e4:1b:2b:c0:9d:34:a2:33:15: 5e:22:5f:d1:61:aa:eb:d8:54:ac:08:1a:0f:73:b6: 16:5e:81:1f:12:a1:07:eb:48:f9:73:5e:d2:c4:27: dd:a5:90:a3:bb:15:74:0b:4d:b5:77:50:48:2e:68: 23:9a:f8:f0:9c:79:09:52:71:51:35:88:60:c7:d0: 7e:32:36:bf:1c:03:1d:6e:f2:a0:fe:bb:b9:78:00: 39:4b:cd:bf:7b:5f:2d:d7:a6:1b:3f:b4:08:bf:35: 3b:70:78:ba:de:9c:c5:9e:f0:27:8c:5b:b6:90:c7: 7b:62:3f:af:7f:d0:6e:d5:8d:1e:11:15:3c:45:44: 49:66:9b:d3:2c:21:ca:23:01:52:f3:69:82:ab:aa: 13:1d:e6:c3:75:13:34:72:41:bf:df:b7:ba:f9:66: 6d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:11:9C:3A:0A:BC:59:0A:A6:F1:6C:E0:FF:AD:9E:80:4D:5E:1B:14 X509v3 Authority Key Identifier: keyid:8A:58:16:55:C9:22:A7:A5:12:1E:00:FB:7A:42:7E:01:9A:C7:30:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilgWVckip6USHgD7ekJ-AZrHMHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154376/A357D796208B11EEA8B58934C4F9AE02/ilgWVckip6USHgD7ekJ-AZrHMHs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:7c:9f:4b:a5:23:b1:9e:99:a1:62:71:85:3b:0c:d9:c3:99: b4:62:ec:25:8c:23:88:24:bf:d2:51:8b:e4:58:e7:0d:3b:35: 15:4f:49:69:be:a0:4f:b5:8e:78:a2:fe:2a:b2:5b:24:79:b5: 2a:c7:3a:35:1d:8b:85:2d:0e:52:72:a6:ec:08:a1:3b:ad:d9: 2e:77:17:3d:e0:b4:03:99:22:5b:98:70:dc:98:ab:c0:b8:3c: ce:8f:0f:09:4b:d7:10:fa:d6:10:63:0e:35:5a:37:5f:54:36: e8:18:71:0a:ed:bf:28:b4:cc:96:e5:d7:ba:56:36:33:05:c7: 5f:94:b0:e4:85:b8:f8:f8:9f:45:f2:33:e1:44:12:2d:6d:62: 38:40:bc:82:58:6c:7a:25:2a:ec:a4:86:56:be:e2:d5:e9:f1: eb:6e:24:7b:5b:19:01:2a:ed:48:fe:65:14:9b:16:f6:66:2e: e7:4e:e1:a2:2f:1d:89:0b:ea:b5:f5:1e:b1:57:75:2b:47:d1: df:41:ee:7c:18:d2:e6:b5:c5:4a:12:27:46:5d:aa:dd:17:05: 71:0f:22:41:7e:d2:2a:cd:4d:a8:69:55:7b:ad:ba:ac:d3:41: 83:63:2c:c1:4c:66:b8:18:27:4b:d2:b8:81:7b:24:35:aa:aa: 59:cb:cc:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzNzYxMTAvBgNVBAUTKDhBNTgxNjU1QzkyMkE3QTUxMjFFMDBGQjdBNDI3RTAx OUFDNzMwN0IwHhcNMjUxMDE5MDU0MzQwWhcNMjUxMDI2MDU0MzQwWjAYMRYwFAYD VQQDEw02OGY0N2E4Yy03MWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+6m7eSuyal2QJOeRAtmeYISmGitSyTo9KSeCyomqRHteny5KNqnZVY/dUY1 7d9QThaNNhhAYpMP1hBAQ8eacBBTE2iRpdX5/AAwsosSVl4jojt/TwSYXB3tGCN3 djvkGyvAnTSiMxVeIl/RYarr2FSsCBoPc7YWXoEfEqEH60j5c17SxCfdpZCjuxV0 C021d1BILmgjmvjwnHkJUnFRNYhgx9B+Mja/HAMdbvKg/ru5eAA5S82/e18t16Yb P7QIvzU7cHi63pzFnvAnjFu2kMd7Yj+vf9Bu1Y0eERU8RURJZpvTLCHKIwFS82mC q6oTHebDdRM0ckG/37e6+WZtHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcRnDoK vFkKpvFs4P+tnoBNXhsUMB8GA1UdIwQYMBaAFIpYFlXJIqelEh4A+3pCfgGaxzB7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDM3Ni9BMzU3RDc5NjIw OEIxMUVFQThCNTg5MzRDNEY5QUUwMi9pbGdXVmNraXA2VVNIZ0Q3ZWtKLUFackhN SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lsZ1dWY2tpcDZVU0hnRDdla0otQVpySE1Icy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDM3Ni9BMzU3RDc5NjIwOEIxMUVFQThCNTg5MzRDNEY5QUUwMi9pbGdXVmNraXA2 VVNIZ0Q3ZWtKLUFackhNSHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEfJ9LpSOxnpmhYnGFOwzZw5m0YuwljCOIJL/SUYvkWOcNOzUVT0lp vqBPtY54ov4qslskebUqxzo1HYuFLQ5ScqbsCKE7rdkudxc94LQDmSJbmHDcmKvA uDzOjw8JS9cQ+tYQYw41WjdfVDboGHEK7b8otMyW5de6VjYzBcdflLDkhbj4+J9F 8jPhRBItbWI4QLyCWGx6JSrspIZWvuLV6fHrbiR7WxkBKu1I/mUUmxb2Zi7nTuGi Lx2JC+q19R6xV3UrR9HfQe58GNLmtcVKEidGXardFwVxDyJBftIqzU2oaVV7rbqs 00GDYyzBTGa4GCdL0riBeyQ1qqpZy8wZ -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:56 2025 by rpki-client