$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft File: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft (raw, json) Hash identifier: U8OvaacJlcG2naaMhkLxr+cJf6Bk7ncEpDOr6qn/NZw= Subject key identifier: 09:A8:3C:B1:D1:0B:3D:4E:A8:F9:7C:37:F7:A6:F3:F2:C1:F7:4D:F6 Authority key identifier: 21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4 Certificate issuer: /CN=A9176302/serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft Manifest number: FA Signing time: Sun 19 Oct 2025 08:09:42 +0000 Manifest this update: Sun 19 Oct 2025 08:09:41 +0000 Manifest next update: Sun 26 Oct 2025 08:09:41 +0000 Files and hashes: 1: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl (hash: fo0exQT1LU2aTq7Dtd0joBtggL+W0YmgSyumibN/qWs=) 2: 0EE57B38378F11EF88F9BF5AC4F9AE02.roa (hash: 59HLMBrfjjdy7ZkLbK5ZAyw/H+2uYObVepiHANeb3uU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176302, serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4 Validity Not Before: Oct 19 08:09:41 2025 GMT Not After : Oct 26 08:09:41 2025 GMT Subject: CN=68f49cc5-16d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dd:0a:9f:5f:9d:55:d5:5f:1a:e6:98:fe:75: 44:66:5a:48:13:99:6a:2b:8e:ff:dd:ac:f9:bf:da: d7:85:4c:69:79:8c:0f:e4:6b:07:b0:30:89:a8:22: 0f:59:a9:0b:e5:18:55:bc:ba:06:74:1d:3a:8d:b0: 6f:d9:1e:d3:ad:ec:ba:d7:f1:cc:23:6c:5b:9a:a3: e4:06:6f:1a:83:2e:dc:52:d7:48:30:d4:bf:2c:55: 29:11:99:7f:df:6c:aa:5a:97:85:22:34:6e:66:09: 5f:16:99:3d:15:d0:8e:8f:7b:a8:c0:49:0e:5c:d0: df:40:79:e5:70:93:b2:5b:09:1b:8a:7b:df:7f:41: 75:1d:1e:d6:a3:3a:17:b8:1e:7b:9a:2f:82:5f:66: 72:1f:b0:7f:40:83:d8:b6:18:1c:6e:87:19:9c:0b: a4:e1:4d:be:2f:ea:a1:b3:3f:d7:a3:27:15:77:97: 00:2f:e8:cf:3c:4f:36:6f:31:ae:23:72:57:ec:09: 83:9d:c9:8c:03:c0:4f:97:d2:5b:30:f4:a9:d3:10: a5:ac:bc:af:86:0c:06:24:48:d2:47:06:f4:63:a5: eb:a7:16:48:dd:a0:1b:13:04:1e:d9:cb:b0:4c:35: 81:92:7c:3d:87:35:c2:31:8a:1c:4a:40:7b:b6:58: 58:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A8:3C:B1:D1:0B:3D:4E:A8:F9:7C:37:F7:A6:F3:F2:C1:F7:4D:F6 X509v3 Authority Key Identifier: keyid:21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3a:0e:69:c0:77:f7:5c:2c:1d:d1:bc:37:1d:e7:aa:5f:43: ca:aa:2a:a6:f5:8f:d7:aa:e4:83:a6:9b:1a:51:4f:a3:24:2e: 5d:ba:b3:71:01:45:f4:27:30:3f:52:8c:19:6c:a5:30:56:4b: a0:56:74:f2:26:3d:44:c6:79:f3:d5:75:52:e5:ec:b7:4b:62: c6:ef:eb:d1:b5:2c:4a:5a:ca:76:35:55:5c:00:2f:7c:fe:d2: d5:36:aa:4c:c3:23:c3:6f:0e:dc:b9:6e:80:de:ac:e1:0d:11: 2e:39:c4:e5:2c:ae:cc:86:4b:25:c9:02:6e:d7:3b:59:76:3e: 0c:5c:af:76:7e:97:48:06:36:a1:0c:f2:28:47:f4:bc:81:70: d7:75:57:77:a8:a3:09:41:fe:55:c8:79:e3:67:d0:4f:f1:1f: 7e:3c:32:67:c3:ec:4b:84:7b:4a:28:f4:38:9c:2f:34:f4:28: 31:0c:53:87:5f:5d:a2:3b:70:95:43:1c:5d:2b:37:17:36:39: 61:67:00:fd:08:c9:ae:d1:0f:ff:b7:c8:8e:f3:bb:31:b6:87: 8e:23:10:68:56:a7:79:be:0d:46:8f:64:c3:d9:54:e3:99:b5: 7a:1d:8d:d1:b8:72:eb:91:9d:ac:38:66:fb:aa:46:4b:7d:3b: e7:48:51:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYzMDIxMTAvBgNVBAUTKDIxQkU4QzhGRTk1M0Y2RUM5N0I3RjEyMTYxN0VEOTEw NDdEQUE1QTQwHhcNMjUxMDE5MDgwOTQxWhcNMjUxMDI2MDgwOTQxWjAYMRYwFAYD VQQDEw02OGY0OWNjNS0xNmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtN0Kn1+dVdVfGuaY/nVEZlpIE5lqK47/3az5v9rXhUxpeYwP5GsHsDCJqCIP WakL5RhVvLoGdB06jbBv2R7Trey61/HMI2xbmqPkBm8agy7cUtdIMNS/LFUpEZl/ 32yqWpeFIjRuZglfFpk9FdCOj3uowEkOXNDfQHnlcJOyWwkbinvff0F1HR7WozoX uB57mi+CX2ZyH7B/QIPYthgcbocZnAuk4U2+L+qhsz/XoycVd5cAL+jPPE82bzGu I3JX7AmDncmMA8BPl9JbMPSp0xClrLyvhgwGJEjSRwb0Y6XrpxZI3aAbEwQe2cuw TDWBknw9hzXCMYocSkB7tlhYqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmoPLHR Cz1OqPl8N/em8/LB9032MB8GA1UdIwQYMBaAFCG+jI/pU/bsl7fxIWF+2RBH2qWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjMwMi9BMzJGREZERTM3 NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1eVh0X0VoWVg3WkVFZmFw YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liNk1qLWxUOXV5WHRfRWhZWDdaRUVmYXBhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjMwMi9BMzJGREZERTM3NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1 eVh0X0VoWVg3WkVFZmFwYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeOg5pwHf3XCwd0bw3HeeqX0PKqiqm9Y/XquSDppsaUU+jJC5durNx AUX0JzA/UowZbKUwVkugVnTyJj1Exnnz1XVS5ey3S2LG7+vRtSxKWsp2NVVcAC98 /tLVNqpMwyPDbw7cuW6A3qzhDREuOcTlLK7MhkslyQJu1ztZdj4MXK92fpdIBjah DPIoR/S8gXDXdVd3qKMJQf5VyHnjZ9BP8R9+PDJnw+xLhHtKKPQ4nC809CgxDFOH X12iO3CVQxxdKzcXNjlhZwD9CMmu0Q//t8iO87sxtoeOIxBoVqd5vg1Gj2TD2VTj mbV6HY3RuHLrkZ2sOGb7qkZLfTvnSFHA -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:50 2025 by rpki-client