$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft File: IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json) Hash identifier: nXUJu0blsHPD+84ZH+33Cyj83Ju/YiRZNTL9jxRfikY= Subject key identifier: DC:BB:A6:0D:39:B5:DD:8D:7D:11:6D:AD:03:70:AB:00:79:C0:46:66 Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D Certificate issuer: /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft Manifest number: 35 Signing time: Sun 19 Oct 2025 00:15:22 +0000 Manifest this update: Sun 19 Oct 2025 00:15:21 +0000 Manifest next update: Sun 26 Oct 2025 00:15:21 +0000 Files and hashes: 1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: mi4WsseM0/av4/uK7bnTGWa8rllSSNMj/+fElZbS7os=) 2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: tRrklyhCDRycwJaKFRwEZyyD1E5up+J5TjkxJCAvISc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Validity Not Before: Oct 19 00:15:21 2025 GMT Not After : Oct 26 00:15:21 2025 GMT Subject: CN=68f42d9a-2473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8f:46:7d:b5:0c:39:ec:39:37:f1:c7:5f:fe: 4d:9f:ed:22:70:b8:2a:ee:da:b7:16:c7:20:bd:e2: 89:68:03:55:2b:29:e1:e1:ee:ec:77:28:8d:e6:fa: f6:07:3c:98:e4:bd:11:d2:cd:0d:e6:90:3c:64:98: 6e:07:0b:c8:95:b5:81:2b:ef:71:b9:68:01:67:6a: bc:9c:2e:ff:77:9d:c1:5b:4a:5a:bf:f7:17:c1:c9: d4:d6:94:7a:a5:42:c0:3c:d8:c6:de:04:ca:df:73: 77:02:17:e1:3a:e0:94:2c:68:de:73:37:0a:d2:1c: 8c:75:79:9e:02:b5:f0:39:14:e4:73:55:ea:f2:82: dc:3f:4d:8d:25:04:2f:b6:08:e8:e8:04:3a:5c:a1: 6d:37:50:78:45:73:a0:e0:5c:87:a3:b7:b7:45:d5: d5:35:3b:b6:8c:7e:b2:90:3b:ed:37:15:0d:9c:9f: 99:f5:b9:4e:d4:46:fa:e4:dc:84:41:5d:44:91:10: b4:d9:f8:93:47:da:0d:e5:fb:96:6d:c2:a5:bc:37: aa:d1:e5:de:4e:db:ba:77:e1:b2:40:cd:47:63:51: 0a:03:a3:52:b4:f0:6b:41:74:67:46:f9:00:fa:bd: 59:c0:96:b8:97:9d:a1:2f:65:c6:50:06:43:fe:61: f8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BB:A6:0D:39:B5:DD:8D:7D:11:6D:AD:03:70:AB:00:79:C0:46:66 X509v3 Authority Key Identifier: keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:f5:25:f1:37:ee:54:bd:e6:c3:1f:c6:fb:a5:9d:b6:0f:ad: b5:2e:48:6c:09:4a:58:99:dd:28:05:9a:95:cc:d1:ab:16:b3: 40:4f:90:48:d0:26:75:c0:08:1b:74:3a:60:18:93:ea:e5:3b: d9:9c:0a:55:ae:f8:fb:c3:db:39:8d:d8:f4:44:79:7b:aa:55: a4:3c:87:09:e7:6e:df:3e:09:12:1d:51:6c:c6:45:9f:f5:43: 07:99:7e:38:dd:08:82:7d:cf:39:58:c3:95:e6:bb:ef:30:25: a3:dc:3a:dd:39:79:f7:f5:f5:9c:73:7a:99:97:ac:9b:4e:97: 36:ce:2d:3c:51:3e:ab:9b:be:fc:4e:2d:e2:35:3d:d6:d5:af: fe:cf:94:9a:6d:aa:5c:35:70:9f:db:28:26:59:f4:39:f8:61: 62:df:81:cb:88:b9:d5:d3:e3:4e:5c:02:64:63:76:22:6e:5b: 10:a9:5b:78:d3:73:c0:e0:1c:8d:22:75:ae:8d:67:8a:fc:e3: 3d:da:30:4c:6c:df:3d:19:e2:c4:5a:ef:30:7c:58:6b:3a:22: eb:54:f4:32:0c:fd:f2:40:61:df:76:ee:53:9e:a0:09:85:01: ad:5d:f9:a9:7d:41:40:eb:f5:ca:76:99:9f:45:37:4a:a4:4a: 5a:f3:3c:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OEQwMDExMC8GA1UEBRMoMjE0MjkzM0ZCRTZFN0M1RkI3NjdBODZBNUUyMURENjAx NzhFQTM5RDAeFw0yNTEwMTkwMDE1MjFaFw0yNTEwMjYwMDE1MjFaMBgxFjAUBgNV BAMTDTY4ZjQyZDlhLTI0NzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYj0Z9tQw57Dk38cdf/k2f7SJwuCru2rcWxyC94oloA1UrKeHh7ux3KI3m+vYH PJjkvRHSzQ3mkDxkmG4HC8iVtYEr73G5aAFnarycLv93ncFbSlq/9xfBydTWlHql QsA82MbeBMrfc3cCF+E64JQsaN5zNwrSHIx1eZ4CtfA5FORzVerygtw/TY0lBC+2 COjoBDpcoW03UHhFc6DgXIejt7dF1dU1O7aMfrKQO+03FQ2cn5n1uU7URvrk3IRB XUSRELTZ+JNH2g3l+5ZtwqW8N6rR5d5O27p34bJAzUdjUQoDo1K08GtBdGdG+QD6 vVnAlriXnaEvZcZQBkP+YfgPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3LumDTm1 3Y19EW2tA3CrAHnARmYwHwYDVR0jBBgwFoAUIUKTP75ufF+3Z6hqXiHdYBeOo50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4RDAwL0YxQUYxMDUyNjFE RjExRjBBNkY3NEQ3RkM0RjlBRTAyL0lVS1RQNzV1ZkYtM1o2aHFYaUhkWUJlT281 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSVVLVFA3NXVmRi0zWjZocVhpSGRZQmVPbzUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 RDAwL0YxQUYxMDUyNjFERjExRjBBNkY3NEQ3RkM0RjlBRTAyL0lVS1RQNzV1ZkYt M1o2aHFYaUhkWUJlT281MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMP1JfE37lS95sMfxvulnbYPrbUuSGwJSliZ3SgFmpXM0asWs0BPkEjQ JnXACBt0OmAYk+rlO9mcClWu+PvD2zmN2PREeXuqVaQ8hwnnbt8+CRIdUWzGRZ/1 QweZfjjdCIJ9zzlYw5Xmu+8wJaPcOt05eff19ZxzepmXrJtOlzbOLTxRPqubvvxO LeI1PdbVr/7PlJptqlw1cJ/bKCZZ9Dn4YWLfgcuIudXT405cAmRjdiJuWxCpW3jT c8DgHI0ida6NZ4r84z3aMExs3z0Z4sRa7zB8WGs6IutU9DIM/fJAYd927lOeoAmF Aa1d+al9QUDr9cp2mZ9FN0qkSlrzPDQ= -----END CERTIFICATE-----Generated at Mon Oct 20 18:23:06 2025 by rpki-client