$ rpki-client -vvf rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft File: IiQPt4cqphjT4NSTRdv0JHOtBMc.mft (raw, json) Hash identifier: zMhi/cJS6aq4PaEsSp4dII/7vINcMkEHIf2uyqmDxPk= Subject key identifier: FD:45:09:E2:12:A2:72:E8:1B:BF:B2:B6:C1:39:30:71:22:38:7F:2F Authority key identifier: 22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7 Certificate issuer: /CN=A916C38F/serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7 Certificate serial: 0B82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft Manifest number: 0B7A Signing time: Sat 18 Oct 2025 19:55:09 +0000 Manifest this update: Sat 18 Oct 2025 19:55:09 +0000 Manifest next update: Sat 25 Oct 2025 19:55:09 +0000 Files and hashes: 1: IiQPt4cqphjT4NSTRdv0JHOtBMc.crl (hash: ducipNUtKzznL09kXaRF9rsGUyPm//4JA78T/8NFi44=) 2: 0F072D383AAE11EAB5D8270EC4F9AE02.roa (hash: Qsy4TKaFv40VH7rqRhiymRYP7EU8I6x9tTe3ND6Wurc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2946 (0xb82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C38F, serialNumber=22240FB7872AA618D3E0D49345DBF42473AD04C7 Validity Not Before: Oct 18 19:55:09 2025 GMT Not After : Oct 25 19:55:09 2025 GMT Subject: CN=68f3f09d-84c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c6:63:69:2e:27:d4:6c:b4:20:9c:82:42:52: 48:db:85:37:8f:75:ae:14:cb:eb:0b:fd:a5:35:df: 70:b8:72:67:f9:3d:7e:e0:10:9e:5d:3c:bd:ce:87: 6b:8f:f2:62:0c:7c:b6:2b:97:e2:3b:e1:69:d5:6c: c0:7e:a5:82:f2:0b:71:80:80:8f:71:b6:85:86:64: 24:d1:da:61:e0:f1:e6:4f:67:eb:07:b0:90:58:f5: a6:fc:99:f6:b2:55:09:42:5e:38:db:ad:25:10:f7: 3c:08:c5:6b:93:a8:44:3d:b4:d0:ad:40:a8:5a:1f: 84:ff:7a:b2:9c:17:ef:9c:a0:20:ad:35:77:10:2b: c0:2f:d9:9c:b9:1c:a3:c8:84:fa:9b:da:57:4e:ab: 42:d4:42:ab:bf:c2:1d:d5:ef:e4:1b:a8:8d:27:1f: 74:59:3b:3d:2d:48:d5:3e:32:b5:62:c2:b1:92:bd: 57:15:c5:6d:4d:3c:4b:10:2c:ab:8b:a2:72:b1:ba: 36:61:a9:f2:f1:17:0d:7d:62:c7:79:41:50:d8:ea: 30:df:b9:31:b4:fb:d1:ab:f6:cd:00:f4:f4:4e:45: 8b:b8:85:d6:a4:cc:b4:70:8b:24:81:d1:d1:23:3a: ea:70:00:22:57:9d:57:88:6b:c2:c8:e6:77:64:55: e9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:45:09:E2:12:A2:72:E8:1B:BF:B2:B6:C1:39:30:71:22:38:7F:2F X509v3 Authority Key Identifier: keyid:22:24:0F:B7:87:2A:A6:18:D3:E0:D4:93:45:DB:F4:24:73:AD:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiQPt4cqphjT4NSTRdv0JHOtBMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C38F/69E99B8E3AAC11EA84795E0BC4F9AE02/IiQPt4cqphjT4NSTRdv0JHOtBMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:50:db:f6:79:7c:fd:88:d7:4e:61:99:4f:e1:af:25:ec:94: d7:f8:c0:f2:13:7b:b7:20:a4:fb:13:d9:aa:31:da:ce:da:c0: b5:eb:f1:38:82:89:0c:40:5c:19:93:2f:e2:c7:8d:86:47:44: cc:04:35:2d:f1:79:1b:be:b9:df:05:1a:76:d6:46:8b:94:21: da:52:fb:e2:dd:d8:bb:94:98:c5:ab:c6:fb:4f:8a:fc:96:c2: 07:5c:76:2a:0e:a9:c3:46:7b:86:92:c3:93:69:9d:4a:5a:7f: 76:d1:8f:4b:aa:fe:b2:c7:0f:d9:00:15:d4:e0:a2:72:7e:c2: 6a:ee:04:0f:20:6d:2b:4b:2d:c4:ac:ef:4e:94:7a:34:24:be: 60:21:42:2f:ee:a4:4c:98:56:d9:33:50:c7:97:c2:54:a5:28: 4f:a2:58:66:ac:0a:72:1f:5a:f9:0a:1d:d7:a8:3b:c9:20:e3: 38:2c:e1:8a:13:ee:7e:a3:43:ce:dc:c3:12:d9:36:51:c9:b3: 8a:0e:db:1c:a5:87:b1:68:cf:f4:a7:bb:15:24:0a:7b:6e:fd: a0:56:f9:1c:c0:61:90:ef:f6:88:be:56:4e:56:60:5e:67:bf: 49:7f:dc:b8:a9:31:cf:83:ab:37:bf:c6:2a:03:15:8a:ce:e7: 0e:7a:05:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMzOEYxMTAvBgNVBAUTKDIyMjQwRkI3ODcyQUE2MThEM0UwRDQ5MzQ1REJGNDI0 NzNBRDA0QzcwHhcNMjUxMDE4MTk1NTA5WhcNMjUxMDI1MTk1NTA5WjAYMRYwFAYD VQQDEw02OGYzZjA5ZC04NGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA68ZjaS4n1Gy0IJyCQlJI24U3j3WuFMvrC/2lNd9wuHJn+T1+4BCeXTy9zodr j/JiDHy2K5fiO+Fp1WzAfqWC8gtxgICPcbaFhmQk0dph4PHmT2frB7CQWPWm/Jn2 slUJQl44260lEPc8CMVrk6hEPbTQrUCoWh+E/3qynBfvnKAgrTV3ECvAL9mcuRyj yIT6m9pXTqtC1EKrv8Id1e/kG6iNJx90WTs9LUjVPjK1YsKxkr1XFcVtTTxLECyr i6Jysbo2Yany8RcNfWLHeUFQ2Oow37kxtPvRq/bNAPT0TkWLuIXWpMy0cIskgdHR IzrqcAAiV51XiGvCyOZ3ZFXpYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1FCeIS onLoG7+ytsE5MHEiOH8vMB8GA1UdIwQYMBaAFCIkD7eHKqYY0+DUk0Xb9CRzrQTH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzM4Ri82OUU5OUI4RTNB QUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBoalQ0TlNUUmR2MEpIT3RC TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpUVB0NGNxcGhqVDROU1RSZHYwSkhPdEJNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzM4Ri82OUU5OUI4RTNBQUMxMUVBODQ3OTVFMEJDNEY5QUUwMi9JaVFQdDRjcXBo alQ0TlNUUmR2MEpIT3RCTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKUNv2eXz9iNdOYZlP4a8l7JTX+MDyE3u3IKT7E9mqMdrO2sC16/E4 gokMQFwZky/ix42GR0TMBDUt8XkbvrnfBRp21kaLlCHaUvvi3di7lJjFq8b7T4r8 lsIHXHYqDqnDRnuGksOTaZ1KWn920Y9Lqv6yxw/ZABXU4KJyfsJq7gQPIG0rSy3E rO9OlHo0JL5gIUIv7qRMmFbZM1DHl8JUpShPolhmrApyH1r5Ch3XqDvJIOM4LOGK E+5+o0PO3MMS2TZRybOKDtscpYexaM/0p7sVJAp7bv2gVvkcwGGQ7/aIvlZOVmBe Z79Jf9y4qTHPg6s3v8YqAxWKzucOegUk -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:18 2025 by rpki-client