$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft File: iuWu7yqR89-GYD7cVP6ExbtXnBU.mft (raw, json) Hash identifier: t8gK1hOeLeBU0ZJhsfUv6lvj6AaTyEDSQo09mtstnPk= Subject key identifier: 5F:C1:6F:4F:E9:74:BF:24:9C:38:31:3E:A1:AC:27:61:4D:EB:F1:7A Authority key identifier: 8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15 Certificate issuer: /CN=A9167CB5/serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15 Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft Manifest number: 0106 Signing time: Sun 19 Oct 2025 07:58:48 +0000 Manifest this update: Sun 19 Oct 2025 07:58:48 +0000 Manifest next update: Sun 26 Oct 2025 07:58:48 +0000 Files and hashes: 1: iuWu7yqR89-GYD7cVP6ExbtXnBU.crl (hash: vpUJnCq5NzF6WasRCDUi3IhrtC0jZc5GkWqVbVrFoxU=) 2: DC857BE8843111F09719836AC4F9AE02.roa (hash: qHV4LLtdLNsakUr43NtlwblQMKyqVyTmPBHeJjQSZeE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167CB5, serialNumber=8AE5AEEF2A91F3DF86603EDC54FE84C5BB579C15 Validity Not Before: Oct 19 07:58:48 2025 GMT Not After : Oct 26 07:58:48 2025 GMT Subject: CN=68f49a38-2997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9c:55:1a:b1:9f:77:5c:2b:14:bd:15:c8:78: 95:52:d2:3c:ff:bb:75:21:26:ac:c9:f5:da:1b:71: cc:b5:29:ad:7b:27:8e:ce:19:78:88:de:ce:1a:61: 0a:60:87:1b:d6:86:d3:33:db:20:3d:d1:7c:5f:32: 5f:d5:71:3f:db:ad:c0:7c:6c:e7:85:ab:b1:37:cc: a2:b9:2c:62:fc:39:98:5b:10:3f:9d:31:d7:8a:9c: a9:eb:0f:c2:ad:2c:5e:69:7b:90:02:a9:fc:ce:a3: df:11:be:dd:ce:a0:a3:37:b0:ef:fa:cf:33:02:ab: c9:e1:04:ad:34:40:05:a1:6d:a2:dd:f3:f2:21:a2: 83:9f:cc:b2:2b:3c:79:b6:f9:8f:5a:32:bc:e9:63: 03:ee:b5:7c:44:95:e8:32:0a:d0:9d:20:bb:66:79: c4:42:4f:66:d2:71:34:d4:27:4f:e2:af:25:03:17: 33:30:8b:9d:68:61:15:a1:2d:c4:16:b4:b8:a3:4e: d8:5a:aa:7c:d2:08:12:9b:a8:15:40:fa:67:0b:4e: 19:ba:cb:33:ab:09:59:74:46:4a:69:ac:a4:aa:52: d1:38:f7:0c:45:aa:fb:66:ff:f7:cd:fe:54:19:66: 51:78:cd:7b:8f:fa:05:d1:f9:6c:ee:0a:8d:d2:a6: cc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:C1:6F:4F:E9:74:BF:24:9C:38:31:3E:A1:AC:27:61:4D:EB:F1:7A X509v3 Authority Key Identifier: keyid:8A:E5:AE:EF:2A:91:F3:DF:86:60:3E:DC:54:FE:84:C5:BB:57:9C:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iuWu7yqR89-GYD7cVP6ExbtXnBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CB5/EFD47D54225611EFB7561F46C4F9AE02/iuWu7yqR89-GYD7cVP6ExbtXnBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:d6:e9:7d:8d:b7:ce:3b:86:03:1d:89:45:99:ab:76:d4:9f: 45:dd:a7:6d:0f:4c:d8:21:d9:17:c3:0a:ff:17:cd:56:b4:38: e4:3e:8f:55:5f:eb:ec:21:84:70:63:c5:8d:f9:51:c7:b5:2d: 82:ad:14:b0:f7:79:f8:7e:6e:56:73:c8:ae:32:f0:7a:c5:35: 69:25:31:01:ed:9e:16:3a:38:84:9e:de:52:ed:12:bf:17:47: b5:a3:12:5e:16:4c:4d:10:10:90:f2:70:9b:48:a9:64:02:03: 66:ee:6a:62:d1:68:50:1e:6c:7e:45:83:08:bb:9f:fa:dc:a9: d4:56:a4:67:26:83:6c:b8:9f:3f:36:ad:9e:32:7a:59:ca:5d: ae:78:72:56:be:4f:ba:cc:38:17:bd:fd:0f:39:08:12:73:cf: 84:94:d3:d3:51:b9:a9:66:26:6c:03:92:fd:c0:7a:c7:24:7d: 0e:3b:fb:08:8a:c3:ee:6c:22:19:f4:9f:18:cd:49:a8:7c:24: 7c:ed:a6:3b:f3:0b:4b:97:4b:f7:7f:96:05:d3:4d:bf:11:00: c2:bf:ba:bf:8f:6c:49:3c:44:3c:72:99:54:83:f7:18:d8:af: ac:7c:fe:6b:5c:c9:4b:76:3f:75:dd:66:b1:f9:ad:41:88:9e: 83:a0:05:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdDQjUxMTAvBgNVBAUTKDhBRTVBRUVGMkE5MUYzREY4NjYwM0VEQzU0RkU4NEM1 QkI1NzlDMTUwHhcNMjUxMDE5MDc1ODQ4WhcNMjUxMDI2MDc1ODQ4WjAYMRYwFAYD VQQDEw02OGY0OWEzOC0yOTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupxVGrGfd1wrFL0VyHiVUtI8/7t1ISasyfXaG3HMtSmteyeOzhl4iN7OGmEK YIcb1obTM9sgPdF8XzJf1XE/263AfGznhauxN8yiuSxi/DmYWxA/nTHXipyp6w/C rSxeaXuQAqn8zqPfEb7dzqCjN7Dv+s8zAqvJ4QStNEAFoW2i3fPyIaKDn8yyKzx5 tvmPWjK86WMD7rV8RJXoMgrQnSC7ZnnEQk9m0nE01CdP4q8lAxczMIudaGEVoS3E FrS4o07YWqp80ggSm6gVQPpnC04ZusszqwlZdEZKaaykqlLROPcMRar7Zv/3zf5U GWZReM17j/oF0fls7gqN0qbMxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/Bb0/p dL8knDgxPqGsJ2FN6/F6MB8GA1UdIwQYMBaAFIrlru8qkfPfhmA+3FT+hMW7V5wV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0NCNS9FRkQ0N0Q1NDIy NTYxMUVGQjc1NjFGNDZDNEY5QUUwMi9pdVd1N3lxUjg5LUdZRDdjVlA2RXhidFhu QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2l1V3U3eXFSODktR1lEN2NWUDZFeGJ0WG5CVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0NCNS9FRkQ0N0Q1NDIyNTYxMUVGQjc1NjFGNDZDNEY5QUUwMi9pdVd1N3lxUjg5 LUdZRDdjVlA2RXhidFhuQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS1ul9jbfOO4YDHYlFmat21J9F3adtD0zYIdkXwwr/F81WtDjkPo9V X+vsIYRwY8WN+VHHtS2CrRSw93n4fm5Wc8iuMvB6xTVpJTEB7Z4WOjiEnt5S7RK/ F0e1oxJeFkxNEBCQ8nCbSKlkAgNm7mpi0WhQHmx+RYMIu5/63KnUVqRnJoNsuJ8/ Nq2eMnpZyl2ueHJWvk+6zDgXvf0POQgSc8+ElNPTUbmpZiZsA5L9wHrHJH0OO/sI isPubCIZ9J8YzUmofCR87aY78wtLl0v3f5YF002/EQDCv7q/j2xJPEQ8cplUg/cY 2K+sfP5rXMlLdj913Wax+a1BiJ6DoAVw -----END CERTIFICATE-----Generated at Tue Oct 21 10:17:15 2025 by rpki-client