$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft File: Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json) Hash identifier: +g3zwr92wdaNDfTg1h3kdlAEkogJ7aTD4kvog2Cdhhg= Subject key identifier: 40:5F:C9:29:D4:44:2F:3D:B3:69:30:AC:8A:81:7F:DF:37:D7:A2:ED Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 Certificate issuer: /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Certificate serial: AE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft Manifest number: AD Signing time: Sun 19 Oct 2025 09:18:51 +0000 Manifest this update: Sun 19 Oct 2025 09:18:51 +0000 Manifest next update: Sun 26 Oct 2025 09:18:51 +0000 Files and hashes: 1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: S1vVoIFyAFCc8KcA/bYjWZmb5badlPRMvSa+2tZGyZ8=) 2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: gEbj+lO4aYDwjrfL1QJi0wu8U7VQFh/BgCCzbNzGNWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 174 (0xae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Validity Not Before: Oct 19 09:18:51 2025 GMT Not After : Oct 26 09:18:51 2025 GMT Subject: CN=68f4acfb-3cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:39:35:c5:64:bd:23:12:a3:f2:19:c5:ad: e3:8a:60:ba:24:68:0b:9a:a1:91:c4:c4:61:9c:86: b6:2b:83:73:b5:37:59:bd:9e:88:fb:2e:e9:a0:d6: 00:d4:ce:c9:cf:68:e9:2e:a0:27:50:e3:40:73:4e: 69:c4:72:ff:ea:3a:47:b9:75:44:48:29:9e:68:5d: 90:b1:35:68:9e:b0:cb:91:9c:af:63:a9:a1:01:5f: 11:c7:03:fd:5c:96:cd:02:a1:c9:b3:42:41:49:c4: 8e:39:ac:8f:32:59:29:2a:33:6e:18:6e:25:a3:36: 68:0e:f9:34:ef:a3:12:4b:31:68:d2:d2:9a:af:d9: c2:ec:89:16:bd:6e:c1:ff:e3:9e:f7:f8:a2:f2:c5: d6:4e:97:8f:78:64:d6:f4:b1:e2:5d:8c:c8:16:e5: 82:ed:46:18:29:46:e2:34:1a:a9:46:cd:81:d7:98: a3:64:d8:51:3e:f5:e7:81:31:e2:52:82:83:15:12: e5:de:8b:f2:cc:15:ec:4b:78:05:da:fe:aa:a4:48: 7d:06:f6:7a:86:cd:09:ba:dc:39:45:42:b1:05:2a: d7:2b:45:c4:f3:ae:c9:fc:31:e6:f2:17:da:5c:61: 43:3f:48:c1:d4:ba:b6:9c:a3:86:17:a2:8d:cf:50: af:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5F:C9:29:D4:44:2F:3D:B3:69:30:AC:8A:81:7F:DF:37:D7:A2:ED X509v3 Authority Key Identifier: keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:63:fc:94:0a:66:4e:7b:a6:62:7c:db:30:42:66:bd:a2:4e: 9d:e2:fe:be:97:9b:0c:5e:ba:62:33:57:9e:fa:ff:ed:54:90: a9:ee:31:1f:ff:0d:3a:2c:3b:8f:4d:87:1a:bf:e2:1c:33:6e: de:7f:09:46:b2:20:d0:e8:cc:bf:a5:51:c7:ea:af:0d:9c:92: 43:f5:6f:10:f9:90:5b:de:a8:7f:17:e8:28:45:a7:b9:18:80: 08:20:ca:d8:50:e8:30:45:f2:c5:b1:22:d5:51:e1:bd:1c:9c: fe:cc:d1:02:26:1e:91:26:36:42:a5:d0:c4:93:86:07:b4:c1: 7a:1c:8b:a5:f3:a5:99:b4:c0:00:33:48:fc:2c:ea:28:70:18: 87:84:a3:56:b7:44:84:e7:d8:4a:bb:a3:7a:04:6c:1c:76:3c: 6d:eb:85:2c:cb:be:26:5c:85:fb:95:1e:8a:2c:00:9b:41:63: 23:81:d1:4c:4b:4d:64:5d:02:71:0d:c5:8e:85:f8:a5:48:6f: 39:f2:a0:8f:76:fd:05:90:df:80:f0:34:92:52:64:4a:a1:33: fa:72:91:30:19:f5:67:c3:7d:3a:cf:9c:f6:49:e5:74:ee:8f: 63:3a:85:13:51:08:0e:2c:49:24:34:79:23:76:d5:20:c9:43: b5:33:0b:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCRjAxMTAvBgNVBAUTKDIxQ0ZDRTgxRDg3NUQ1Q0Y4RjU5NkFEQkZDQzM2MDE5 NjFDNDQxRTcwHhcNMjUxMDE5MDkxODUxWhcNMjUxMDI2MDkxODUxWjAYMRYwFAYD VQQDEw02OGY0YWNmYi0zY2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu705NcVkvSMSo/IZxa3jimC6JGgLmqGRxMRhnIa2K4NztTdZvZ6I+y7poNYA 1M7Jz2jpLqAnUONAc05pxHL/6jpHuXVESCmeaF2QsTVonrDLkZyvY6mhAV8RxwP9 XJbNAqHJs0JBScSOOayPMlkpKjNuGG4lozZoDvk076MSSzFo0tKar9nC7IkWvW7B /+Oe9/ii8sXWTpePeGTW9LHiXYzIFuWC7UYYKUbiNBqpRs2B15ijZNhRPvXngTHi UoKDFRLl3ovyzBXsS3gF2v6qpEh9BvZ6hs0Jutw5RUKxBSrXK0XE867J/DHm8hfa XGFDP0jB1Lq2nKOGF6KNz1Cv2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBfySnU RC89s2kwrIqBf98316LtMB8GA1UdIwQYMBaAFCHPzoHYddXPj1lq2/zDYBlhxEHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUJGMC85RjU5MUU4RUE0 MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi9JY19PZ2RoMTFjLVBXV3JiX01OZ0dXSEVR ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ljX09nZGgxMWMtUFdXcmJfTU5nR1dIRVFlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUJGMC85RjU5MUU4RUE0MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi9JY19PZ2RoMTFj LVBXV3JiX01OZ0dXSEVRZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkY/yUCmZOe6ZifNswQma9ok6d4v6+l5sMXrpiM1ee+v/tVJCp7jEf /w06LDuPTYcav+IcM27efwlGsiDQ6My/pVHH6q8NnJJD9W8Q+ZBb3qh/F+goRae5 GIAIIMrYUOgwRfLFsSLVUeG9HJz+zNECJh6RJjZCpdDEk4YHtMF6HIul86WZtMAA M0j8LOoocBiHhKNWt0SE59hKu6N6BGwcdjxt64Usy74mXIX7lR6KLACbQWMjgdFM S01kXQJxDcWOhfilSG858qCPdv0FkN+A8DSSUmRKoTP6cpEwGfVnw306z5z2SeV0 7o9jOoUTUQgOLEkkNHkjdtUgyUO1Mwvt -----END CERTIFICATE-----Generated at Tue Oct 21 15:03:02 2025 by rpki-client