$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft File: mRs2LGa5oYApqN1CgVXZfHbgEgk.mft (raw, json) Hash identifier: +eAxI7XCdalt6kaC5raMIAtprCEUamM/gAHC+/dFEPo= Subject key identifier: 2C:4F:43:40:7F:E7:D9:A8:B8:20:59:9E:08:9C:E0:50:17:F6:D0:A3 Authority key identifier: 99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09 Certificate issuer: /CN=A9178D2A/serialNumber=991B362C66B9A18029A8DD428155D97C76E01209 Certificate serial: 056B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft Manifest number: 0566 Signing time: Sun 19 Oct 2025 01:04:51 +0000 Manifest this update: Sun 19 Oct 2025 01:04:50 +0000 Manifest next update: Sun 26 Oct 2025 01:04:50 +0000 Files and hashes: 1: mRs2LGa5oYApqN1CgVXZfHbgEgk.crl (hash: oym2rs5a7bUz2k3Xt7oGpDIG2Avt2uS9PEfQcf3mlRI=) 2: DB9C041801B311ECBA0E715CC4F9AE02.roa (hash: POPDOMnD2vV8xWQMiufmv3X0702RYs86sixhHrnG1/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1387 (0x56b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178D2A, serialNumber=991B362C66B9A18029A8DD428155D97C76E01209 Validity Not Before: Oct 19 01:04:50 2025 GMT Not After : Oct 26 01:04:50 2025 GMT Subject: CN=68f43932-9228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bb:aa:58:c4:19:49:c5:d2:5b:a9:06:9d:07: 77:65:af:a5:e7:35:35:31:c2:d4:58:72:20:c7:29: 82:3e:a7:70:70:41:58:6d:63:21:ce:db:f7:a3:59: e1:bf:13:d1:46:94:9f:77:a0:09:79:5c:59:33:6f: 1e:97:81:e5:be:d7:d2:ee:f8:48:96:0f:95:55:ca: b0:9c:3b:0d:35:82:58:92:c7:a9:55:22:48:84:b2: 3e:b9:ab:f5:ab:ce:95:67:23:c6:66:70:7e:26:e4: 3a:67:cb:fb:45:4d:64:e1:0a:4d:6b:19:2f:80:4c: fa:42:bb:02:9b:ac:10:e9:07:32:7e:02:e9:c1:ef: fc:17:19:3d:a1:fa:33:76:7a:ab:e2:1c:c6:e0:b0: ad:44:a8:2f:23:7b:96:52:a1:9d:52:b2:e1:3e:a9: 1c:ba:df:f3:4c:08:b5:89:60:39:dd:97:57:ca:66: d8:ea:22:81:d1:a8:49:b4:e5:38:2c:29:66:3b:a3: 95:73:17:18:cd:d7:19:3e:7d:5d:b1:2c:fc:d7:b9: 0c:ab:3f:6c:86:f9:98:49:06:69:eb:00:2c:ba:ed: 3c:fb:b8:1c:eb:bc:b1:db:0c:ce:90:49:36:82:d4: d0:27:3f:a7:7d:c3:7f:a4:a3:2f:c4:21:b7:61:d9: 2f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4F:43:40:7F:E7:D9:A8:B8:20:59:9E:08:9C:E0:50:17:F6:D0:A3 X509v3 Authority Key Identifier: keyid:99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:23:b2:ca:5e:87:94:d4:57:64:c4:4b:76:b1:2f:28:b9:bf: 9d:c9:6f:ba:2b:d8:e2:f4:1d:c5:90:78:bc:35:66:c6:6e:64: be:4b:1c:b1:a7:b2:30:29:f4:bf:c0:9e:7e:08:4b:16:31:f0: c2:ab:0c:ef:e1:4c:92:cf:6f:ed:ce:a4:37:b3:ad:3f:88:ca: c0:fc:a8:ab:fb:37:9a:37:6a:2e:c9:bb:e0:88:79:01:1c:88: 65:cd:c3:2e:0e:ec:05:8b:a5:73:eb:8b:45:8a:af:73:f0:38: 3e:ea:93:0e:b9:4d:54:0f:d0:7b:ef:83:58:a6:3e:88:f8:63: d0:8d:3e:43:d3:f8:53:01:2d:a5:19:1f:80:87:ad:42:72:c0: a3:f7:dc:ea:f7:e5:5c:d7:65:b7:8f:45:84:55:da:c2:47:31: 5f:09:5c:b4:25:e2:4d:5b:ee:98:7f:33:76:fe:41:5e:36:f6: d6:17:ba:11:b9:3a:43:5a:0f:d4:ff:44:e1:56:d7:6b:47:35: 58:e5:f0:b7:17:fa:bd:fe:e8:01:22:33:f2:79:29:af:74:41: e0:ff:42:de:5a:c4:7a:db:d1:42:4e:bf:18:09:af:73:af:2a: 8c:ca:79:93:7c:6c:b3:c8:07:4e:0e:14:04:25:12:1c:a3:c8: 5c:30:a6:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhEMkExMTAvBgNVBAUTKDk5MUIzNjJDNjZCOUExODAyOUE4REQ0MjgxNTVEOTdD NzZFMDEyMDkwHhcNMjUxMDE5MDEwNDUwWhcNMjUxMDI2MDEwNDUwWjAYMRYwFAYD VQQDEw02OGY0MzkzMi05MjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm7uqWMQZScXSW6kGnQd3Za+l5zU1McLUWHIgxymCPqdwcEFYbWMhztv3o1nh vxPRRpSfd6AJeVxZM28el4HlvtfS7vhIlg+VVcqwnDsNNYJYksepVSJIhLI+uav1 q86VZyPGZnB+JuQ6Z8v7RU1k4QpNaxkvgEz6QrsCm6wQ6QcyfgLpwe/8Fxk9ofoz dnqr4hzG4LCtRKgvI3uWUqGdUrLhPqkcut/zTAi1iWA53ZdXymbY6iKB0ahJtOU4 LClmO6OVcxcYzdcZPn1dsSz817kMqz9shvmYSQZp6wAsuu08+7gc67yx2wzOkEk2 gtTQJz+nfcN/pKMvxCG3YdkvZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxPQ0B/ 59mouCBZngic4FAX9tCjMB8GA1UdIwQYMBaAFJkbNixmuaGAKajdQoFV2Xx24BIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEQyQS8yRDJGODI2NjAx QjIxMUVDQTU3RUY1NUJDNEY5QUUwMi9tUnMyTEdhNW9ZQXBxTjFDZ1ZYWmZIYmdF Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21SczJMR2E1b1lBcHFOMUNnVlhaZkhiZ0Vnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEQyQS8yRDJGODI2NjAxQjIxMUVDQTU3RUY1NUJDNEY5QUUwMi9tUnMyTEdhNW9Z QXBxTjFDZ1ZYWmZIYmdFZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCI7LKXoeU1FdkxEt2sS8oub+dyW+6K9ji9B3FkHi8NWbGbmS+Sxyx p7IwKfS/wJ5+CEsWMfDCqwzv4UySz2/tzqQ3s60/iMrA/Kir+zeaN2ouybvgiHkB HIhlzcMuDuwFi6Vz64tFiq9z8Dg+6pMOuU1UD9B774NYpj6I+GPQjT5D0/hTAS2l GR+Ah61CcsCj99zq9+Vc12W3j0WEVdrCRzFfCVy0JeJNW+6YfzN2/kFeNvbWF7oR uTpDWg/U/0ThVtdrRzVY5fC3F/q9/ugBIjPyeSmvdEHg/0LeWsR629FCTr8YCa9z ryqMynmTfGyzyAdODhQEJRIco8hcMKba -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:28 2025 by rpki-client