$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft File: sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft (raw, json) Hash identifier: pW+Q6IeVyBo0fW3pTnMPwpETCpm0S3vD0EIusWaUpHo= Subject key identifier: 8A:C7:28:34:A6:A2:E5:2E:72:46:40:DE:C0:12:BB:D3:68:36:51:20 Authority key identifier: B1:52:4F:BE:46:5F:E4:FB:99:FE:61:1D:FC:04:0F:51:0C:11:68:FE Certificate issuer: /CN=A9176E5A/serialNumber=B1524FBE465FE4FB99FE611DFC040F510C1168FE Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft Manifest number: 1C Signing time: Sun 19 Oct 2025 11:22:01 +0000 Manifest this update: Sun 19 Oct 2025 11:22:01 +0000 Manifest next update: Sun 26 Oct 2025 11:22:01 +0000 Files and hashes: 1: sVJPvkZf5PuZ_mEd_AQPUQwRaP4.crl (hash: b4xYqBTsPr5ps6w4v3NfDwnceY/3kYo+rizHXtSzkco=) 2: D9624ED082FD11F088ACD36DC4F9AE02.roa (hash: HOuEpvKZ0GdEdY0npcf+ynIRcDCsB00lu6CmVmYa5Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.crl rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176E5A, serialNumber=B1524FBE465FE4FB99FE611DFC040F510C1168FE Validity Not Before: Oct 19 11:22:01 2025 GMT Not After : Oct 26 11:22:01 2025 GMT Subject: CN=68f4c9d9-e92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:c8:8c:12:18:e8:98:37:9e:0d:ca:23:ca: b9:64:40:52:ce:ae:04:9a:76:99:16:e8:4c:af:f1: 65:f0:8e:df:3e:20:98:e4:97:a6:80:e7:5a:12:de: 6e:74:f1:40:aa:d5:de:24:49:d3:45:e0:79:71:3d: 66:c5:05:4f:61:ba:0e:3e:59:56:5d:29:1a:01:31: 02:49:bf:3a:8b:72:fb:84:22:53:64:19:82:27:2d: 5a:57:a6:7e:50:42:85:16:b3:2f:51:c8:78:be:92: 16:13:d5:de:11:7a:49:64:cd:3c:7c:48:33:1b:de: 2d:95:9a:0c:eb:38:ff:77:b5:1c:c7:96:42:cf:af: 88:1c:fc:64:d1:7b:84:fb:a3:a6:49:18:59:1d:c7: b8:8a:5a:7d:46:fd:76:43:f2:6a:5e:6f:5e:37:e9: 4b:5a:e3:07:6a:60:73:8f:85:e6:23:32:f8:9a:af: d5:84:7d:6c:f0:03:c9:c6:74:5f:cd:77:05:21:10: b9:a1:ee:e7:67:cf:c4:13:07:77:ad:3d:0f:ed:9c: bf:46:2d:c3:99:98:ee:2c:12:b8:3d:42:b3:a0:c6: a3:7e:7f:e9:36:96:37:23:64:04:a7:22:a6:43:68: b2:ae:2f:67:45:04:9e:c9:42:3b:1c:10:80:85:0f: 89:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C7:28:34:A6:A2:E5:2E:72:46:40:DE:C0:12:BB:D3:68:36:51:20 X509v3 Authority Key Identifier: keyid:B1:52:4F:BE:46:5F:E4:FB:99:FE:61:1D:FC:04:0F:51:0C:11:68:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:cb:c7:8e:44:55:f4:7c:39:f3:89:e2:9d:cb:0d:7b:71:64: 54:65:f2:bc:44:fd:3a:26:d3:69:84:56:ee:5e:49:54:d3:9c: 5f:b2:46:ba:f9:66:95:53:41:d5:1b:5d:db:a7:8d:d2:70:89: a3:84:db:d7:69:9f:01:ec:ec:88:60:e7:c5:9a:4f:c8:d3:3f: af:f9:d2:34:40:4f:7c:87:9e:b9:d0:5a:1d:26:b6:f5:a9:92: fb:eb:3a:5a:23:89:6f:3b:db:57:55:2a:d8:d3:f5:c1:4a:b0: cc:5f:2e:91:1a:8c:64:0b:1a:0b:1e:b6:72:87:1d:a3:2f:45: 0a:15:d4:0f:18:5b:86:ec:46:71:5d:da:d7:0a:57:7d:80:ac: ec:5f:ec:46:e2:56:0a:20:61:3e:1a:4a:f6:bd:7a:7d:3e:48: 85:98:05:a7:16:94:cd:3e:f2:0b:98:f7:c6:fd:07:df:3f:d2: 97:c9:a5:77:4a:4f:63:f2:a4:a6:f7:a5:4c:d6:a5:ea:10:f2: 52:11:c4:93:c9:71:8e:22:05:60:ab:a2:3c:70:86:da:85:0f: 5b:06:8f:92:2b:35:1a:8a:f7:d9:82:22:43:9c:98:b2:48:52: 46:43:75:32:5e:8b:26:09:78:2e:65:4e:8d:87:e8:0a:68:f8: 23:6e:32:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NkU1QTExMC8GA1UEBRMoQjE1MjRGQkU0NjVGRTRGQjk5RkU2MTFERkMwNDBGNTEw QzExNjhGRTAeFw0yNTEwMTkxMTIyMDFaFw0yNTEwMjYxMTIyMDFaMBgxFjAUBgNV BAMTDTY4ZjRjOWQ5LWU5MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCg9MiMEhjomDeeDcojyrlkQFLOrgSadpkW6Eyv8WXwjt8+IJjkl6aA51oS3m50 8UCq1d4kSdNF4HlxPWbFBU9hug4+WVZdKRoBMQJJvzqLcvuEIlNkGYInLVpXpn5Q QoUWsy9RyHi+khYT1d4ReklkzTx8SDMb3i2VmgzrOP93tRzHlkLPr4gc/GTRe4T7 o6ZJGFkdx7iKWn1G/XZD8mpeb1436Uta4wdqYHOPheYjMviar9WEfWzwA8nGdF/N dwUhELmh7udnz8QTB3etPQ/tnL9GLcOZmO4sErg9QrOgxqN+f+k2ljcjZASnIqZD aLKuL2dFBJ7JQjscEICFD4nTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiscoNKai 5S5yRkDewBK702g2USAwHwYDVR0jBBgwFoAUsVJPvkZf5PuZ/mEd/AQPUQwRaP4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2RTVBLzgwMzc5ODM4ODJG RDExRjBBRTBGODc2QUM0RjlBRTAyL3NWSlB2a1pmNVB1Wl9tRWRfQVFQVVF3UmFQ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc1ZKUHZrWmY1UHVaX21FZF9BUVBVUXdSYVA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 RTVBLzgwMzc5ODM4ODJGRDExRjBBRTBGODc2QUM0RjlBRTAyL3NWSlB2a1pmNVB1 Wl9tRWRfQVFQVVF3UmFQNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB/Lx45EVfR8OfOJ4p3LDXtxZFRl8rxE/Tom02mEVu5eSVTTnF+yRrr5 ZpVTQdUbXdunjdJwiaOE29dpnwHs7Ihg58WaT8jTP6/50jRAT3yHnrnQWh0mtvWp kvvrOlojiW8721dVKtjT9cFKsMxfLpEajGQLGgsetnKHHaMvRQoV1A8YW4bsRnFd 2tcKV32ArOxf7EbiVgogYT4aSva9en0+SIWYBacWlM0+8guY98b9B98/0pfJpXdK T2PypKb3pUzWpeoQ8lIRxJPJcY4iBWCrojxwhtqFD1sGj5IrNRqK99mCIkOcmLJI UkZDdTJeiyYJeC5lTo2H6Apo+CNuMpY= -----END CERTIFICATE-----Generated at Mon Oct 20 17:58:21 2025 by rpki-client