$ rpki-client -vvf rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft File: AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft (raw, json) Hash identifier: X+FLfY/OT/fnqT1KTqiG6+BvT7xC9IE6sIkdiZEacis= Subject key identifier: 37:E0:75:BC:DF:B3:F9:E9:E3:B0:26:82:26:1A:DE:F3:BF:23:72:33 Authority key identifier: 00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 Certificate issuer: /CN=A915E678/serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft Manifest number: 0177 Signing time: Sun 19 Oct 2025 06:30:49 +0000 Manifest this update: Sun 19 Oct 2025 06:30:48 +0000 Manifest next update: Sun 26 Oct 2025 06:30:48 +0000 Files and hashes: 1: AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl (hash: KFsjvfTIPTHirac+3FuntSUlpNtFk0K6v2gqGDW0Y0w=) 2: D39B04847C4B11EEB4EA3632C4F9AE02.roa (hash: jCjk18NlTAO280vVwUPsYgJU42p5ZyEQ+Q3/KbnN9I8=) 3: 5694D344791B11EEA64C016BC4F9AE02.roa (hash: ZHYQ3wHDGWknZGEZPQElBL1vATEt+W0eJbB64xYMxf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E678, serialNumber=008F5D06F0FEFC40FD830B26CD7660A383110C91 Validity Not Before: Oct 19 06:30:48 2025 GMT Not After : Oct 26 06:30:48 2025 GMT Subject: CN=68f48599-c514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:58:38:02:c9:f0:f3:d7:7b:18:96:bf:e3:05: eb:70:30:37:a6:43:29:41:de:ea:25:08:5c:d6:7e: e2:94:35:82:35:40:03:09:35:ca:c4:f6:5f:98:7f: da:db:aa:fb:6a:93:cb:51:0f:ba:83:43:48:07:0a: f6:04:e1:0d:2a:ef:d3:32:ee:98:4b:e2:39:58:17: 00:f1:1d:77:12:89:b3:57:d7:48:50:f9:bb:e6:8e: cc:15:fb:54:cd:37:90:5e:e3:86:72:02:d7:cb:5b: 2d:22:bb:17:f1:e8:49:9b:30:92:5f:6f:e8:1d:18: a3:dc:56:92:86:ee:02:4a:cd:b8:97:09:6a:17:f2: 68:b7:80:19:7d:a0:be:b9:72:3c:ab:95:df:6f:be: 36:27:53:e2:b2:83:cf:80:55:50:fb:ee:4c:04:7b: b1:ba:1a:24:a7:c0:a8:34:31:9e:f3:7a:98:14:90: 3f:d1:1f:5d:3a:ca:a3:1f:2d:e8:2e:f4:d4:99:43: 79:4c:43:c2:66:cf:80:3f:14:f9:fd:19:6d:e5:d5: 56:10:b2:dd:da:17:be:5e:86:69:35:5d:71:1b:6a: 14:28:a5:7a:bc:48:5a:01:70:69:ca:b9:a2:6d:fc: af:13:68:77:84:03:11:67:8d:7c:96:b6:22:16:62: 6d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E0:75:BC:DF:B3:F9:E9:E3:B0:26:82:26:1A:DE:F3:BF:23:72:33 X509v3 Authority Key Identifier: keyid:00:8F:5D:06:F0:FE:FC:40:FD:83:0B:26:CD:76:60:A3:83:11:0C:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI9dBvD-_ED9gwsmzXZgo4MRDJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E678/7AEED862791A11EEACA1AD2BC4F9AE02/AI9dBvD-_ED9gwsmzXZgo4MRDJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:f4:91:54:96:9f:50:cc:9e:67:e1:64:ac:b6:66:90:5f:f2: 2a:92:08:fe:ec:2b:df:c6:10:cd:6a:cd:50:87:f4:ae:dc:2a: 37:29:eb:0e:af:9f:07:1b:37:5d:ad:1f:10:77:96:24:d3:a5: e8:98:24:7e:3d:af:b0:b5:22:8e:6e:94:46:b3:a7:17:df:1f: 87:38:a3:da:bc:83:c1:fd:90:4c:e8:9c:68:4e:8b:94:4e:fb: ac:79:3e:6c:7b:1e:47:f2:12:d8:a7:61:53:bb:66:63:53:76: 96:8c:cc:6b:3e:d6:a5:e8:a6:2b:5b:f8:cd:46:62:c1:c8:ea: aa:00:c3:77:e1:6c:9a:52:be:6e:09:cc:62:fb:d3:77:7a:a8: cf:d6:d8:0c:3f:c8:af:4e:93:6a:3f:aa:6b:e0:3b:13:91:01: c8:ad:3f:ff:d1:dc:7d:82:46:6e:aa:eb:d5:84:e5:92:d4:51: 52:0b:02:69:c3:5b:5a:c9:45:06:d7:03:14:97:bb:79:a1:3d: 68:ed:e6:fc:ee:de:f3:46:7a:83:78:3f:97:5f:03:51:a7:39: f0:2e:88:4d:b9:a9:4d:a6:2b:d8:c1:fd:ea:34:61:ed:90:24: d6:f6:41:24:da:64:97:f2:e4:16:d7:29:82:68:b0:36:b4:06: 3d:8d:2d:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU2NzgxMTAvBgNVBAUTKDAwOEY1RDA2RjBGRUZDNDBGRDgzMEIyNkNENzY2MEEz ODMxMTBDOTEwHhcNMjUxMDE5MDYzMDQ4WhcNMjUxMDI2MDYzMDQ4WjAYMRYwFAYD VQQDEw02OGY0ODU5OS1jNTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11g4Asnw89d7GJa/4wXrcDA3pkMpQd7qJQhc1n7ilDWCNUADCTXKxPZfmH/a 26r7apPLUQ+6g0NIBwr2BOENKu/TMu6YS+I5WBcA8R13EomzV9dIUPm75o7MFftU zTeQXuOGcgLXy1stIrsX8ehJmzCSX2/oHRij3FaShu4CSs24lwlqF/Jot4AZfaC+ uXI8q5Xfb742J1PisoPPgFVQ++5MBHuxuhokp8CoNDGe83qYFJA/0R9dOsqjHy3o LvTUmUN5TEPCZs+APxT5/Rlt5dVWELLd2he+XoZpNV1xG2oUKKV6vEhaAXBpyrmi bfyvE2h3hAMRZ418lrYiFmJtIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfgdbzf s/np47AmgiYa3vO/I3IzMB8GA1UdIwQYMBaAFACPXQbw/vxA/YMLJs12YKODEQyR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTY3OC83QUVFRDg2Mjc5 MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9FRDlnd3NtelhaZ280TVJE SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJOWRCdkQtX0VEOWd3c216WFpnbzRNUkRKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTY3OC83QUVFRDg2Mjc5MUExMUVFQUNBMUFEMkJDNEY5QUUwMi9BSTlkQnZELV9F RDlnd3NtelhaZ280TVJESkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY9JFUlp9QzJ5n4WSstmaQX/Iqkgj+7CvfxhDNas1Qh/Su3Co3KesO r58HGzddrR8Qd5Yk06XomCR+Pa+wtSKObpRGs6cX3x+HOKPavIPB/ZBM6JxoTouU TvuseT5sex5H8hLYp2FTu2ZjU3aWjMxrPtal6KYrW/jNRmLByOqqAMN34WyaUr5u Ccxi+9N3eqjP1tgMP8ivTpNqP6pr4DsTkQHIrT//0dx9gkZuquvVhOWS1FFSCwJp w1tayUUG1wMUl7t5oT1o7eb87t7zRnqDeD+XXwNRpznwLohNualNpivYwf3qNGHt kCTW9kEk2mSX8uQW1ymCaLA2tAY9jS0d -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:31 2025 by rpki-client