$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft File: mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft (raw, json) Hash identifier: kLrt6HDupVqMOf3knUaC3ChDSAJ9pvjB4sMZ66+8x5s= Subject key identifier: B1:0F:FF:94:1C:AF:09:1E:F8:5B:D1:3E:3C:7C:BE:8D:53:35:D4:DD Authority key identifier: 98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B Certificate issuer: /CN=A9161322/serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft Manifest number: 014B Signing time: Sun 19 Oct 2025 06:58:14 +0000 Manifest this update: Sun 19 Oct 2025 06:58:14 +0000 Manifest next update: Sun 26 Oct 2025 06:58:14 +0000 Files and hashes: 1: mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl (hash: fkuqgv9uLfug3f2asPwPvaxzZ38kGFUJhaVSGESXgZ0=) 2: A023DD56B12F11EEB1221E32C4F9AE02.roa (hash: NmbBdfuCudYxF5RZcp9GpJHBkLSfYF/OMfMDOKpiQbY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161322, serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B Validity Not Before: Oct 19 06:58:14 2025 GMT Not After : Oct 26 06:58:14 2025 GMT Subject: CN=68f48c06-312d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:82:91:41:fe:a7:0c:f6:03:e6:1a:f5:f8:51: a7:50:0b:5e:d2:b0:7a:10:7a:9c:a9:de:ab:3e:38: f0:6e:1f:57:9e:88:c3:85:c5:e6:3f:88:eb:7e:21: 6b:de:db:6e:07:63:45:d4:54:88:72:56:00:58:2d: 67:b8:60:29:51:fa:a6:20:09:2e:bf:8b:61:09:51: 51:d1:b7:e2:f5:47:dc:1c:03:c6:7d:70:03:a5:21: 28:1d:3d:de:d9:15:65:e9:94:3b:eb:cd:0c:23:50: d3:14:f5:9f:ae:b4:19:d6:98:c9:fe:2d:08:7c:31: 4a:91:43:e4:19:9f:62:33:42:ca:b6:92:30:25:09: b1:1c:7a:1e:ca:cc:e3:65:bc:29:c9:26:78:d4:0d: dd:7c:b7:db:08:47:cb:0e:64:18:33:c9:83:b4:f8: 28:b8:ce:47:f3:a0:64:61:e2:aa:5d:05:da:b3:ea: 97:c6:02:6b:89:21:cd:27:7c:97:be:68:8d:9a:2e: ff:08:3e:90:aa:a9:14:09:ef:a7:b7:09:ab:42:50: c5:c2:b4:6f:30:85:e0:89:86:b1:36:cb:67:b9:eb: c2:b2:84:6a:17:e9:cd:36:0b:c1:ca:ff:1d:93:cf: d9:82:0b:2e:22:76:79:6f:3b:a7:e2:dd:54:6e:14: 6b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0F:FF:94:1C:AF:09:1E:F8:5B:D1:3E:3C:7C:BE:8D:53:35:D4:DD X509v3 Authority Key Identifier: keyid:98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d2:ff:f2:26:04:ea:39:d3:0f:dd:0c:13:73:2e:7e:39:a0: 83:14:81:82:89:69:bf:fb:aa:78:04:f0:bc:d2:81:0c:3c:82: 21:9f:5f:d9:57:60:b0:b8:84:e2:af:db:66:5d:c5:cc:de:01: c6:68:5d:32:42:95:e9:e4:34:62:c7:44:c0:37:1a:60:c2:87: 92:0b:02:b9:8e:5c:81:8e:dc:0d:3a:c1:8f:7b:67:7b:79:50: ac:68:af:b4:8f:38:64:15:1f:66:2f:86:90:18:4a:83:d2:72: b5:a4:01:97:8b:b0:e1:44:62:b4:b0:e5:8d:74:9c:55:83:12: 08:5a:f0:73:ff:eb:60:34:cb:fc:95:bc:a1:eb:d6:ae:44:9b: c2:85:36:b8:49:5e:83:04:6e:c1:5b:d4:3a:ca:06:70:0e:f3: d7:45:d6:4f:3d:bd:e1:2e:f6:f4:84:1e:40:28:d3:65:96:a7: 4c:83:cc:93:b5:00:7a:fd:0d:8e:71:db:ca:1a:cd:bb:4d:c3: 3d:88:b6:c6:6f:a2:f3:62:40:81:1a:4f:ac:bf:62:35:9e:9b: 00:42:2c:e5:bd:63:94:7c:b3:8e:78:9f:02:e5:06:0f:10:34: 81:1d:4f:3a:a9:6b:09:e2:82:d6:7b:6f:fb:67:9b:86:e0:e3: d2:a2:ee:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEzMjIxMTAvBgNVBAUTKDk4NzM4ODk3ODNGNzUzMEVCNDRCRTAwOTdBQTM2MThC MDcxNjhGM0IwHhcNMjUxMDE5MDY1ODE0WhcNMjUxMDI2MDY1ODE0WjAYMRYwFAYD VQQDEw02OGY0OGMwNi0zMTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYKRQf6nDPYD5hr1+FGnUAte0rB6EHqcqd6rPjjwbh9XnojDhcXmP4jrfiFr 3ttuB2NF1FSIclYAWC1nuGApUfqmIAkuv4thCVFR0bfi9UfcHAPGfXADpSEoHT3e 2RVl6ZQ7680MI1DTFPWfrrQZ1pjJ/i0IfDFKkUPkGZ9iM0LKtpIwJQmxHHoeyszj ZbwpySZ41A3dfLfbCEfLDmQYM8mDtPgouM5H86BkYeKqXQXas+qXxgJriSHNJ3yX vmiNmi7/CD6QqqkUCe+ntwmrQlDFwrRvMIXgiYaxNstnuevCsoRqF+nNNgvByv8d k8/ZggsuInZ5bzun4t1UbhRrLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEP/5Qc rwke+FvRPjx8vo1TNdTdMB8GA1UdIwQYMBaAFJhziJeD91MOtEvgCXqjYYsHFo87 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTMyMi80OUU0QjAwOEIw RUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3NjBTLUFKZXFOaGl3Y1dq enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21IT0lsNFAzVXc2MFMtQUplcU5oaXdjV2p6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTMyMi80OUU0QjAwOEIwRUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3 NjBTLUFKZXFOaGl3Y1dqenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA90v/yJgTqOdMP3QwTcy5+OaCDFIGCiWm/+6p4BPC80oEMPIIhn1/Z V2CwuITir9tmXcXM3gHGaF0yQpXp5DRix0TANxpgwoeSCwK5jlyBjtwNOsGPe2d7 eVCsaK+0jzhkFR9mL4aQGEqD0nK1pAGXi7DhRGK0sOWNdJxVgxIIWvBz/+tgNMv8 lbyh69auRJvChTa4SV6DBG7BW9Q6ygZwDvPXRdZPPb3hLvb0hB5AKNNllqdMg8yT tQB6/Q2OcdvKGs27TcM9iLbGb6LzYkCBGk+sv2I1npsAQizlvWOUfLOOeJ8C5QYP EDSBHU86qWsJ4oLWe2/7Z5uG4OPSou5D -----END CERTIFICATE-----Generated at Tue Oct 21 15:10:29 2025 by rpki-client