$ rpki-client -vvf rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft File: iH4RB6g_EXT_fj54CIjbVyO3kls.mft (raw, json) Hash identifier: hv9WUc+AChw97GTxEVXPOXrMOAHp9YxbPSWxSVX4hmU= Subject key identifier: 63:24:1B:19:32:5E:0A:B6:78:BB:16:41:E1:CE:39:CF:43:4A:C4:4E Authority key identifier: 88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B Certificate issuer: /CN=A9155806/serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft Manifest number: D7 Signing time: Sun 19 Oct 2025 08:45:49 +0000 Manifest this update: Sun 19 Oct 2025 08:45:49 +0000 Manifest next update: Sun 26 Oct 2025 08:45:49 +0000 Files and hashes: 1: iH4RB6g_EXT_fj54CIjbVyO3kls.crl (hash: 2sStiWaF3nHQvq4oiy9LVYyv0ycDPWDry2+4rVIZz9E=) 2: 10435EE8740511EF93658977C4F9AE02.roa (hash: xmMmx42YHDQ1ahK54oeYt43Mx+x7gEXdRkvJnhnT9V4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155806, serialNumber=887E1107A83F1174FF7E3E780888DB5723B7925B Validity Not Before: Oct 19 08:45:49 2025 GMT Not After : Oct 26 08:45:49 2025 GMT Subject: CN=68f4a53d-10aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:2e:23:2d:d6:ef:09:59:bd:92:4b:fb:94:87: 54:ec:15:4f:48:fe:61:7a:1e:9b:11:d3:76:6b:16: d2:60:23:a8:88:a6:d9:f4:11:e8:c4:68:bc:16:13: 4d:a7:ee:4b:e8:f1:ca:38:63:ff:90:6e:28:5e:bc: 2a:2c:1b:09:a0:70:cd:92:13:2d:a7:76:9c:61:78: 4e:32:a6:cc:cf:f3:c8:ab:f1:09:ac:81:d4:8f:4a: 31:8a:40:15:08:fd:75:64:aa:a8:3f:09:e7:8d:f8: 35:fc:af:b9:5c:7a:9a:7b:ca:ed:8c:f5:9d:e7:19: c9:c2:3f:b5:d5:e4:e1:af:58:79:5e:ba:40:0b:f6: ab:38:e2:ae:e4:45:1d:86:ad:53:67:d0:84:49:c1: 37:22:94:13:f8:02:9e:95:dc:46:20:3e:c7:a7:3d: 48:c2:c9:d9:f1:a0:7b:39:bd:4f:e1:a9:55:21:90: 53:19:9d:e4:c7:4c:76:aa:aa:3f:0b:09:63:9f:64: 9c:6e:b9:06:f1:6b:be:92:b1:9f:0e:90:30:e3:8a: 39:f3:15:67:01:b8:32:6b:e5:84:47:e5:5f:ac:a1: d6:22:cb:a1:67:62:c4:af:65:44:03:06:ad:2b:67: c6:98:56:b2:ce:e1:6e:79:6c:c5:9d:fa:f3:cf:3f: 85:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:24:1B:19:32:5E:0A:B6:78:BB:16:41:E1:CE:39:CF:43:4A:C4:4E X509v3 Authority Key Identifier: keyid:88:7E:11:07:A8:3F:11:74:FF:7E:3E:78:08:88:DB:57:23:B7:92:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iH4RB6g_EXT_fj54CIjbVyO3kls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155806/C739BAEE6E9111EFA62B4C3FC4F9AE02/iH4RB6g_EXT_fj54CIjbVyO3kls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:fa:6e:fc:5d:01:2e:1d:14:a5:0d:e7:bf:21:6c:3e:fd:23: 32:85:fc:2a:b0:54:a2:8f:0e:d3:e3:6b:e7:b6:97:ed:84:6c: bb:f2:90:2d:ba:99:09:4a:94:30:3c:bd:20:5f:43:f7:a5:e4: bc:80:3f:bd:22:89:55:d8:1d:15:d0:69:b6:da:80:4f:c5:8c: 99:63:3d:12:6f:d8:6b:aa:c5:28:94:94:d8:7f:06:ae:82:a2: 27:c6:62:4d:39:08:6c:bb:20:22:63:93:13:f7:af:92:ad:99: 00:15:5c:69:a2:b3:e6:c3:f6:b8:d2:ae:13:b6:31:69:6c:8a: 98:3a:dd:09:34:22:59:17:a8:c0:48:63:52:89:34:38:c5:51: 25:3c:31:69:50:dc:6c:6f:50:ca:2c:12:54:8f:3d:92:9b:e2: 04:9c:48:68:c2:ae:d3:6a:9a:3c:4f:b3:77:58:22:93:95:22: 45:f1:99:7d:ef:c6:64:ab:59:b8:17:93:1b:d0:d0:8b:b1:c2: f6:c0:bb:3a:90:36:79:b3:9c:6c:5f:33:a3:de:d7:a6:bf:83: 37:83:2c:48:8b:26:55:f0:fe:34:d9:ae:68:85:92:25:14:cb: 26:f6:22:5d:ef:38:4c:a6:9b:40:5b:c0:f3:86:80:f5:ad:34: e2:78:27:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU4MDYxMTAvBgNVBAUTKDg4N0UxMTA3QTgzRjExNzRGRjdFM0U3ODA4ODhEQjU3 MjNCNzkyNUIwHhcNMjUxMDE5MDg0NTQ5WhcNMjUxMDI2MDg0NTQ5WjAYMRYwFAYD VQQDEw02OGY0YTUzZC0xMGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7y4jLdbvCVm9kkv7lIdU7BVPSP5heh6bEdN2axbSYCOoiKbZ9BHoxGi8FhNN p+5L6PHKOGP/kG4oXrwqLBsJoHDNkhMtp3acYXhOMqbMz/PIq/EJrIHUj0oxikAV CP11ZKqoPwnnjfg1/K+5XHqae8rtjPWd5xnJwj+11eThr1h5XrpAC/arOOKu5EUd hq1TZ9CEScE3IpQT+AKeldxGID7Hpz1IwsnZ8aB7Ob1P4alVIZBTGZ3kx0x2qqo/ Cwljn2ScbrkG8Wu+krGfDpAw44o58xVnAbgya+WER+VfrKHWIsuhZ2LEr2VEAwat K2fGmFayzuFueWzFnfrzzz+FeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMkGxky Xgq2eLsWQeHOOc9DSsROMB8GA1UdIwQYMBaAFIh+EQeoPxF0/34+eAiI21cjt5Jb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTgwNi9DNzM5QkFFRTZF OTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9pSDRSQjZnX0VYVF9majU0Q0lqYlZ5TzNr bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lINFJCNmdfRVhUX2ZqNTRDSWpiVnlPM2tscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTgwNi9DNzM5QkFFRTZFOTExMUVGQTYyQjRDM0ZDNEY5QUUwMi9pSDRSQjZnX0VY VF9majU0Q0lqYlZ5TzNrbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf+m78XQEuHRSlDee/IWw+/SMyhfwqsFSijw7T42vntpfthGy78pAt upkJSpQwPL0gX0P3peS8gD+9IolV2B0V0Gm22oBPxYyZYz0Sb9hrqsUolJTYfwau gqInxmJNOQhsuyAiY5MT96+SrZkAFVxporPmw/a40q4TtjFpbIqYOt0JNCJZF6jA SGNSiTQ4xVElPDFpUNxsb1DKLBJUjz2Sm+IEnEhowq7Tapo8T7N3WCKTlSJF8Zl9 78Zkq1m4F5Mb0NCLscL2wLs6kDZ5s5xsXzOj3temv4M3gyxIiyZV8P402a5ohZIl FMsm9iJd7zhMpptAW8DzhoD1rTTieCes -----END CERTIFICATE-----Generated at Tue Oct 21 00:03:53 2025 by rpki-client