$ rpki-client -vvf rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft File: IRcCLfYdpCG55OG7hIPYXkmCv5E.mft (raw, json) Hash identifier: cRNPT4KYw62xhl6+eVMKuKRsVoS+AsqAIsmsyZcGTJs= Subject key identifier: 76:4D:59:13:D6:00:72:33:46:BD:9E:B9:7D:EA:24:25:C5:F1:06:66 Authority key identifier: 21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 Certificate issuer: /CN=A9169382/serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Certificate serial: 052F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft Manifest number: 0527 Signing time: Sun 19 Oct 2025 01:17:38 +0000 Manifest this update: Sun 19 Oct 2025 01:17:38 +0000 Manifest next update: Sun 26 Oct 2025 01:17:38 +0000 Files and hashes: 1: IRcCLfYdpCG55OG7hIPYXkmCv5E.crl (hash: NFkoYO/wfoefXZ9utKlRQ3S9T0GF9Dv0SWaqFnaMgMc=) 2: E41BF8841CDC11ECBA794120C4F9AE02.roa (hash: rjtMstoekwsHa6BZ54dV6mwwRoqiKzp6w3p85Pa6dX4=) 3: B5D70D9ACE3311EFA7B9B640C4F9AE02.roa (hash: YGJLT2fYDhmz5xGHsZzCsBINR5owfOYXZwH2Xtyir7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1327 (0x52f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169382, serialNumber=2117022DF61DA421B9E4E1BB8483D85E4982BF91 Validity Not Before: Oct 19 01:17:38 2025 GMT Not After : Oct 26 01:17:38 2025 GMT Subject: CN=68f43c32-d2ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:25:aa:8a:5e:c5:37:7c:4b:72:dc:83:bb:84: c3:68:32:41:24:27:a9:d1:34:af:0f:ec:63:37:f2: d9:2a:e1:82:c6:dc:4a:95:fc:b8:48:76:88:b3:5d: 74:23:a4:f7:d6:b7:6d:78:33:c5:3e:1c:51:66:8f: 61:cb:b8:08:c1:53:e1:75:d5:29:81:f6:c6:f1:26: 18:76:72:f2:f1:93:67:a0:62:b7:32:94:cd:fe:d2: c0:71:9f:59:c4:ce:6a:b4:ce:77:e5:d5:b7:3c:5b: 59:b0:9e:72:94:56:f2:3c:3f:63:14:9b:22:bb:96: 0e:ab:94:51:fb:c7:ac:34:06:8f:a5:2e:76:e8:b2: 99:92:a1:a7:fd:ae:75:b1:d0:d0:ab:cc:ec:54:5e: 4c:81:b1:b0:58:2f:22:5a:9a:80:78:fa:54:a4:21: dd:e7:bf:13:6a:c3:0b:70:a7:4e:32:53:71:0a:fa: 08:5d:4d:12:aa:fa:90:19:bc:aa:b7:6a:1b:dc:fd: ba:0f:39:af:43:6d:2f:f3:7b:9b:50:b3:a6:23:b5: f3:81:c9:20:bb:a7:16:9e:25:9d:74:2a:f8:10:77: 55:eb:6a:ed:c6:77:92:c7:a5:cc:48:b1:bc:95:18: 03:9a:02:84:86:fc:ce:0f:51:be:76:30:73:bc:40: 5d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:4D:59:13:D6:00:72:33:46:BD:9E:B9:7D:EA:24:25:C5:F1:06:66 X509v3 Authority Key Identifier: keyid:21:17:02:2D:F6:1D:A4:21:B9:E4:E1:BB:84:83:D8:5E:49:82:BF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IRcCLfYdpCG55OG7hIPYXkmCv5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169382/A5FB81581CD911EC92AD571CC4F9AE02/IRcCLfYdpCG55OG7hIPYXkmCv5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:05:b3:cf:a4:0a:73:11:a5:2b:dc:d2:4f:f3:26:9f:50:80: c7:90:d8:d7:4a:f5:7b:a8:04:44:84:04:b8:86:d4:7e:1e:e2: 92:47:ef:cb:05:d1:35:06:93:36:57:57:3b:ea:fd:7f:c4:47: 46:e5:cb:fe:6a:09:54:2d:5a:62:8f:d6:3b:cb:4c:14:aa:fe: e9:96:c1:27:12:e1:b7:16:e7:5f:6e:90:f9:18:67:7f:3b:fb: 1f:e8:9a:f9:b1:c9:5b:78:f6:a1:c1:52:ae:89:0a:f3:78:24: f5:ea:43:f5:16:45:75:e7:1f:20:20:b1:86:94:67:98:28:8f: cf:60:02:e5:31:c0:68:db:1f:09:58:75:92:e3:8f:23:b0:fa: 89:ee:97:50:af:03:4b:40:d5:0f:34:50:6b:d0:fb:2e:d3:29: 36:f7:68:bc:f3:1c:24:74:3f:18:d3:1b:77:e9:74:ed:67:45: e6:14:9e:99:8f:fa:84:3d:7e:d1:8d:21:8e:a7:a0:b6:c4:a2: e9:15:fe:4e:c1:c1:17:4a:c3:b8:f1:2e:e0:9d:b9:48:94:7d: 67:cf:39:a6:d4:e7:84:ee:6c:34:5a:01:55:7d:18:50:75:5c: df:93:83:21:6c:00:8a:71:96:43:bd:bd:42:24:d9:5c:25:3c: aa:73:f8:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjkzODIxMTAvBgNVBAUTKDIxMTcwMjJERjYxREE0MjFCOUU0RTFCQjg0ODNEODVF NDk4MkJGOTEwHhcNMjUxMDE5MDExNzM4WhcNMjUxMDI2MDExNzM4WjAYMRYwFAYD VQQDEw02OGY0M2MzMi1kMmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SWqil7FN3xLctyDu4TDaDJBJCep0TSvD+xjN/LZKuGCxtxKlfy4SHaIs110 I6T31rdteDPFPhxRZo9hy7gIwVPhddUpgfbG8SYYdnLy8ZNnoGK3MpTN/tLAcZ9Z xM5qtM535dW3PFtZsJ5ylFbyPD9jFJsiu5YOq5RR+8esNAaPpS526LKZkqGn/a51 sdDQq8zsVF5MgbGwWC8iWpqAePpUpCHd578TasMLcKdOMlNxCvoIXU0SqvqQGbyq t2ob3P26DzmvQ20v83ubULOmI7Xzgckgu6cWniWddCr4EHdV62rtxneSx6XMSLG8 lRgDmgKEhvzOD1G+djBzvEBdhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZNWRPW AHIzRr2euX3qJCXF8QZmMB8GA1UdIwQYMBaAFCEXAi32HaQhueThu4SD2F5Jgr+R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTM4Mi9BNUZCODE1ODFD RDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBDRzU1T0c3aElQWVhrbUN2 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lSY0NMZllkcENHNTVPRzdoSVBZWGttQ3Y1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTM4Mi9BNUZCODE1ODFDRDkxMUVDOTJBRDU3MUNDNEY5QUUwMi9JUmNDTGZZZHBD RzU1T0c3aElQWVhrbUN2NUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/BbPPpApzEaUr3NJP8yafUIDHkNjXSvV7qAREhAS4htR+HuKSR+/L BdE1BpM2V1c76v1/xEdG5cv+aglULVpij9Y7y0wUqv7plsEnEuG3FudfbpD5GGd/ O/sf6Jr5sclbePahwVKuiQrzeCT16kP1FkV15x8gILGGlGeYKI/PYALlMcBo2x8J WHWS448jsPqJ7pdQrwNLQNUPNFBr0Psu0yk292i88xwkdD8Y0xt36XTtZ0XmFJ6Z j/qEPX7RjSGOp6C2xKLpFf5OwcEXSsO48S7gnblIlH1nzzmm1OeE7mw0WgFVfRhQ dVzfk4MhbACKcZZDvb1CJNlcJTyqc/iN -----END CERTIFICATE-----Generated at Mon Oct 20 06:55:47 2025 by rpki-client