$ rpki-client -vvf rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft File: MBTdOHsX8ziHOip6N_gkTZNwLqg.mft (raw, json) Hash identifier: osXJOhQ594rZR/jvOIYBjgrSSJISbaG/9qgKrUNLJq8= Subject key identifier: 7E:B7:A7:B1:0F:58:4B:3A:1D:5F:72:AD:3A:6B:F4:45:B6:0D:0B:B8 Authority key identifier: 30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8 Certificate issuer: /CN=A9172E1E/serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8 Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft Manifest number: 0184 Signing time: Sun 19 Oct 2025 06:14:18 +0000 Manifest this update: Sun 19 Oct 2025 06:14:17 +0000 Manifest next update: Sun 26 Oct 2025 06:14:17 +0000 Files and hashes: 1: MBTdOHsX8ziHOip6N_gkTZNwLqg.crl (hash: SpBNvg9jO6JBEEjx6eABtluCuhhafslL5qmQyNH9O7s=) 2: B9645EC65C2511EEAF0A215DC4F9AE02.roa (hash: vLLtqJRwe55PLrIjKzUZV3hunL6I7HlofeTqMR4Wk9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172E1E, serialNumber=3014DD387B17F338873A2A7A37F8244D93702EA8 Validity Not Before: Oct 19 06:14:17 2025 GMT Not After : Oct 26 06:14:17 2025 GMT Subject: CN=68f481ba-2a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:79:8b:77:f0:7f:1b:c3:6a:18:b1:24:c2:95: 4c:b9:7a:65:a4:01:c0:57:55:9a:62:7f:51:31:15: 95:68:ef:80:03:f2:d5:73:ac:ea:f9:8f:a8:a4:30: 6c:fa:25:3e:8e:ac:9c:4d:eb:31:0c:1f:ac:54:4f: 89:ec:b9:3b:f7:84:dc:d7:2c:1f:06:0b:79:4a:6d: 92:cc:28:59:11:f7:60:a1:bc:da:b4:14:15:a4:d7: d2:ab:44:d3:97:34:88:e3:99:2b:79:6c:45:95:1d: 97:6e:33:f1:58:85:e1:ba:c7:95:05:4b:18:17:6a: 41:a7:24:e6:80:a0:dd:47:ac:32:88:53:4e:d9:7e: 43:b5:ee:38:0b:09:de:a8:97:63:b0:e5:23:48:d6: ba:78:08:a2:c9:b9:b4:4a:23:c3:c2:b8:d9:83:08: 81:d5:e6:6e:3c:91:b9:60:1e:6c:c2:b8:f9:46:0e: 83:24:67:2c:ed:05:34:5d:da:52:bb:ee:01:f1:2f: 70:a3:89:72:89:44:31:36:f0:d6:a1:26:e6:26:74: 40:6c:b1:eb:42:62:8f:75:75:bd:fe:d1:4e:aa:e2: 3c:bd:a7:c7:eb:da:45:dc:9a:e7:06:78:49:d1:bb: 31:67:84:4a:95:14:c7:a7:81:d8:3f:19:c5:9e:f9: 43:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B7:A7:B1:0F:58:4B:3A:1D:5F:72:AD:3A:6B:F4:45:B6:0D:0B:B8 X509v3 Authority Key Identifier: keyid:30:14:DD:38:7B:17:F3:38:87:3A:2A:7A:37:F8:24:4D:93:70:2E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MBTdOHsX8ziHOip6N_gkTZNwLqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172E1E/278817C05C1311EEA907183DC4F9AE02/MBTdOHsX8ziHOip6N_gkTZNwLqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:62:b4:2f:4f:4a:b4:7f:9f:c9:68:28:ed:12:c7:05:ff:e7: 11:3e:87:cc:af:51:1b:61:f2:0b:bd:0e:b9:eb:73:3d:bd:08: e0:b4:0c:e8:3b:05:de:0e:3b:80:9e:fc:91:58:0e:fa:77:87: 89:af:53:80:a5:e9:54:48:87:85:8c:28:a0:9a:d2:c0:b2:63: cb:94:13:b3:16:e7:70:1c:6b:d8:53:b2:ef:db:37:69:91:bb: 51:a3:16:70:fd:50:c9:16:12:e3:40:e9:a2:9a:49:cd:42:07: 16:0e:06:46:c9:ab:55:a9:17:e2:12:cf:a4:5d:94:4a:7d:d1: 29:26:6f:39:7b:6b:e2:40:38:0c:58:12:c8:d3:a4:e6:71:08: cf:a7:dd:cd:4b:d5:29:1b:29:ce:5c:66:e9:41:9e:39:95:4d: d1:3a:7d:8e:9c:56:c4:27:fd:ee:08:af:9b:9f:aa:6d:0a:92: 3b:74:d9:40:09:d5:0e:04:32:e7:6d:e8:33:2d:94:8a:8b:ae: ad:df:f7:04:8f:3f:5e:11:db:50:f2:50:8d:70:89:94:6d:e6: 3f:5a:9a:aa:e6:99:77:a3:6e:d9:90:ec:c0:20:5e:ab:67:5d: 33:1f:ea:35:77:8f:2d:4a:d6:f8:ac:24:95:74:f7:bb:4c:5e: 60:e8:96:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJFMUUxMTAvBgNVBAUTKDMwMTRERDM4N0IxN0YzMzg4NzNBMkE3QTM3RjgyNDRE OTM3MDJFQTgwHhcNMjUxMDE5MDYxNDE3WhcNMjUxMDI2MDYxNDE3WjAYMRYwFAYD VQQDEw02OGY0ODFiYS0yYTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXmLd/B/G8NqGLEkwpVMuXplpAHAV1WaYn9RMRWVaO+AA/LVc6zq+Y+opDBs +iU+jqycTesxDB+sVE+J7Lk794Tc1ywfBgt5Sm2SzChZEfdgobzatBQVpNfSq0TT lzSI45kreWxFlR2XbjPxWIXhuseVBUsYF2pBpyTmgKDdR6wyiFNO2X5Dte44Cwne qJdjsOUjSNa6eAiiybm0SiPDwrjZgwiB1eZuPJG5YB5swrj5Rg6DJGcs7QU0XdpS u+4B8S9wo4lyiUQxNvDWoSbmJnRAbLHrQmKPdXW9/tFOquI8vafH69pF3JrnBnhJ 0bsxZ4RKlRTHp4HYPxnFnvlDdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH63p7EP WEs6HV9yrTpr9EW2DQu4MB8GA1UdIwQYMBaAFDAU3Th7F/M4hzoqejf4JE2TcC6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkUxRS8yNzg4MTdDMDVD MTMxMUVFQTkwNzE4M0RDNEY5QUUwMi9NQlRkT0hzWDh6aUhPaXA2Tl9na1RaTndM cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01CVGRPSHNYOHppSE9pcDZOX2drVFpOd0xxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkUxRS8yNzg4MTdDMDVDMTMxMUVFQTkwNzE4M0RDNEY5QUUwMi9NQlRkT0hzWDh6 aUhPaXA2Tl9na1RaTndMcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdYrQvT0q0f5/JaCjtEscF/+cRPofMr1EbYfILvQ6563M9vQjgtAzo OwXeDjuAnvyRWA76d4eJr1OApelUSIeFjCigmtLAsmPLlBOzFudwHGvYU7Lv2zdp kbtRoxZw/VDJFhLjQOmimknNQgcWDgZGyatVqRfiEs+kXZRKfdEpJm85e2viQDgM WBLI06TmcQjPp93NS9UpGynOXGbpQZ45lU3ROn2OnFbEJ/3uCK+bn6ptCpI7dNlA CdUOBDLnbegzLZSKi66t3/cEjz9eEdtQ8lCNcImUbeY/Wpqq5pl3o27ZkOzAIF6r Z10zH+o1d48tStb4rCSVdPe7TF5g6JaI -----END CERTIFICATE-----Generated at Mon Oct 20 01:43:45 2025 by rpki-client