$ rpki-client -vvf rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft File: I3R4bofEoOw9b6TAt4TkL-4AOm0.mft (raw, json) Hash identifier: 8W+7nHxqW7rKQzkn/bC/JQQkvIkOlHAlXdPB1JyQALA= Subject key identifier: 0D:DB:D1:D0:1D:C3:CB:10:1A:F4:F2:C4:ED:94:C3:06:D3:AC:CF:34 Authority key identifier: 23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D Certificate issuer: /CN=A9157615/serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft Manifest number: 18 Signing time: Sun 19 Oct 2025 11:29:46 +0000 Manifest this update: Sun 19 Oct 2025 11:29:45 +0000 Manifest next update: Sun 26 Oct 2025 11:29:45 +0000 Files and hashes: 1: I3R4bofEoOw9b6TAt4TkL-4AOm0.crl (hash: tglQJLN8XonZcnNCE1takfRWYAsFp5PFQ52mSKGibyA=) 2: 9F56DCE491F611F099771D3FC4F9AE02.roa (hash: MYr0RnnESBBRDJ22pf9EsF5pYGHY7f5iA1+28nEzneQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157615, serialNumber=2374786E87C4A0EC3D6FA4C0B784E42FEE003A6D Validity Not Before: Oct 19 11:29:45 2025 GMT Not After : Oct 26 11:29:45 2025 GMT Subject: CN=68f4cba9-e4b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:79:b7:76:b2:54:b0:6c:ea:58:4e:1f:4f:e5: 81:b2:c3:69:59:90:f3:81:ce:98:32:4d:98:53:df: c6:5f:e5:df:46:2a:c5:10:28:16:0e:2a:2e:c5:d6: 74:13:e1:a8:d6:06:2d:32:f1:99:5b:54:41:52:b5: c4:fd:90:c5:ef:62:5e:89:6d:eb:54:09:43:5f:3f: 1f:d9:d8:47:e9:7d:aa:4c:69:05:57:4a:0b:f2:f7: da:24:67:20:be:36:de:1c:6b:04:50:a9:5d:0c:db: d1:d8:5c:da:15:b1:d1:db:b0:66:68:87:f1:5d:db: f1:7c:a7:77:7c:9d:b4:4a:82:32:3f:88:da:b8:cc: 9f:96:8b:78:56:59:4a:da:dc:c5:7a:5b:d9:15:53: 46:21:bc:d7:1e:b2:d2:ad:63:17:8c:a8:2e:95:27: 11:06:76:f6:d5:26:c0:34:8e:31:f6:46:a2:31:bc: 75:a1:9b:c4:79:d9:6e:74:04:a1:e2:a4:9f:98:fe: 18:01:ff:3a:06:18:05:d3:43:96:4b:27:00:b3:3a: 06:c7:b0:c1:fa:80:d7:a2:5e:73:7c:f2:c7:0e:72: b2:58:d8:e8:0e:d1:ff:fb:e6:3d:52:94:c0:a1:91: ac:5c:d1:21:8c:35:0a:ea:9e:76:9f:31:c6:3f:db: af:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DB:D1:D0:1D:C3:CB:10:1A:F4:F2:C4:ED:94:C3:06:D3:AC:CF:34 X509v3 Authority Key Identifier: keyid:23:74:78:6E:87:C4:A0:EC:3D:6F:A4:C0:B7:84:E4:2F:EE:00:3A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3R4bofEoOw9b6TAt4TkL-4AOm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157615/BAF38E8A91F511F0B36B093CC4F9AE02/I3R4bofEoOw9b6TAt4TkL-4AOm0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:48:ee:77:a8:7a:ec:bf:08:f4:c7:5c:f8:a5:55:16:e9:89: 0b:fa:f2:4a:a0:ac:00:c4:77:c9:b2:76:7d:ab:ac:01:c6:c6: d2:58:a8:ad:08:35:58:1e:a8:5e:5f:e8:4b:32:72:1c:ee:62: a0:0d:f2:14:5f:63:1e:1c:ac:08:99:b6:ee:18:6f:50:51:0f: 49:ba:39:81:99:1b:b1:6f:dd:fd:a6:0f:08:20:bb:24:2b:a2: d9:84:a4:b0:f1:e4:94:5a:35:1f:49:9c:60:a4:2a:e3:2c:70: 3a:7d:3b:bb:35:16:b8:b2:16:0e:50:57:f6:9a:22:80:cb:b1: 8b:e5:c3:93:ea:4b:f1:97:30:35:e9:52:cb:e8:d6:ea:e1:5c: da:b6:d7:79:d9:21:f9:94:31:87:4e:d2:17:09:fc:bd:9f:1b: 93:77:0b:0a:ea:ba:d5:b1:a8:8d:8e:0b:5a:85:7d:ad:ab:69: d3:63:67:10:40:82:7d:ea:a3:a6:2e:27:45:b7:ca:e1:38:a9: 56:6c:9d:d6:c6:74:36:24:c8:80:4e:90:47:ec:cc:b8:d0:65: 93:a8:ba:77:ab:59:ce:dd:88:9f:80:3c:fa:3c:c8:16:45:b8: 29:b6:3d:fa:f7:ac:ec:43:0a:b6:e4:05:8e:49:c6:57:2d:65: 34:5c:71:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NzYxNTExMC8GA1UEBRMoMjM3NDc4NkU4N0M0QTBFQzNENkZBNEMwQjc4NEU0MkZF RTAwM0E2RDAeFw0yNTEwMTkxMTI5NDVaFw0yNTEwMjYxMTI5NDVaMBgxFjAUBgNV BAMTDTY4ZjRjYmE5LWU0YjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZebd2slSwbOpYTh9P5YGyw2lZkPOBzpgyTZhT38Zf5d9GKsUQKBYOKi7F1nQT 4ajWBi0y8ZlbVEFStcT9kMXvYl6JbetUCUNfPx/Z2EfpfapMaQVXSgvy99okZyC+ Nt4cawRQqV0M29HYXNoVsdHbsGZoh/Fd2/F8p3d8nbRKgjI/iNq4zJ+Wi3hWWUra 3MV6W9kVU0YhvNcestKtYxeMqC6VJxEGdvbVJsA0jjH2RqIxvHWhm8R52W50BKHi pJ+Y/hgB/zoGGAXTQ5ZLJwCzOgbHsMH6gNeiXnN88scOcrJY2OgO0f/75j1SlMCh kaxc0SGMNQrqnnafMcY/26+tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDdvR0B3D yxAa9PLE7ZTDBtOszzQwHwYDVR0jBBgwFoAUI3R4bofEoOw9b6TAt4TkL+4AOm0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3NjE1L0JBRjM4RThBOTFG NTExRjBCMzZCMDkzQ0M0RjlBRTAyL0kzUjRib2ZFb093OWI2VEF0NFRrTC00QU9t MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSTNSNGJvZkVvT3c5YjZUQXQ0VGtMLTRBT20wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3 NjE1L0JBRjM4RThBOTFGNTExRjBCMzZCMDkzQ0M0RjlBRTAyL0kzUjRib2ZFb093 OWI2VEF0NFRrTC00QU9tMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADlI7neoeuy/CPTHXPilVRbpiQv68kqgrADEd8mydn2rrAHGxtJYqK0I NVgeqF5f6EsychzuYqAN8hRfYx4crAiZtu4Yb1BRD0m6OYGZG7Fv3f2mDwgguyQr otmEpLDx5JRaNR9JnGCkKuMscDp9O7s1FriyFg5QV/aaIoDLsYvlw5PqS/GXMDXp Usvo1urhXNq213nZIfmUMYdO0hcJ/L2fG5N3CwrqutWxqI2OC1qFfa2radNjZxBA gn3qo6YuJ0W3yuE4qVZsndbGdDYkyIBOkEfszLjQZZOounerWc7diJ+APPo8yBZF uCm2Pfr3rOxDCrbkBY5JxlctZTRccaI= -----END CERTIFICATE-----Generated at Sun Oct 19 22:58:44 2025 by rpki-client