$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft File: IqYsFNK9MuPlltij5iu8MnRGj5k.mft (raw, json) Hash identifier: b+1TQjU+OW1PsQjCox5ki26b6vzP5wsuPbWGMjZObiI= Subject key identifier: 1A:83:A2:12:EB:D8:89:C8:35:83:F6:BD:B7:ED:65:F1:52:9B:6A:68 Authority key identifier: 22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99 Certificate issuer: /CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft Manifest number: F6 Signing time: Sun 19 Oct 2025 08:10:36 +0000 Manifest this update: Sun 19 Oct 2025 08:10:35 +0000 Manifest next update: Sun 26 Oct 2025 08:10:35 +0000 Files and hashes: 1: IqYsFNK9MuPlltij5iu8MnRGj5k.crl (hash: iHI5hWTkdXNvU2QODyS8R0dQ7rT5wZ0VeGUWAhTNSg4=) 2: 1DD85DA2386311EFB10A6A1CC4F9AE02.roa (hash: wZz+OlqUMy/mBTlpV+JPL6/+u7+0FBG8gjwEC4u2wAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EA7, serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99 Validity Not Before: Oct 19 08:10:35 2025 GMT Not After : Oct 26 08:10:35 2025 GMT Subject: CN=68f49cfb-4a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8e:18:dc:5e:18:14:0e:8c:ae:31:c4:b9:2a: 27:3d:55:a7:64:cd:03:31:3a:73:bc:c0:75:38:e7: 33:62:e6:cb:6b:02:b7:1d:82:1e:4b:11:1f:63:77: 6f:c0:7c:65:34:0c:06:9e:a9:47:16:f5:7c:05:a9: 28:13:a6:10:ac:68:d4:a8:f1:45:7c:33:2b:06:16: d3:7f:cd:9d:74:d2:86:39:1f:73:d3:80:d4:d4:79: 3d:75:ed:a1:c4:03:76:3c:31:b6:5b:19:19:b1:a2: 68:4e:c7:c1:1f:b9:d4:ec:5c:e9:d3:75:44:38:8a: 05:88:c0:b5:54:fa:40:fb:13:be:53:e6:ca:44:74: 3c:73:4b:72:1f:a1:9f:14:19:dd:0a:d5:62:2c:11: b9:31:84:e6:56:47:57:ba:6c:d8:43:24:55:7e:e3: 84:e5:4f:d8:95:32:0e:41:29:43:ee:e3:e4:20:8c: 2f:58:25:aa:0d:e6:c8:13:6f:78:f2:32:b1:49:d7: 95:8d:6f:1a:d0:be:f6:80:14:2e:59:e3:74:53:c4: 8e:8a:87:77:fe:82:84:02:3b:4a:0d:c3:f1:06:46: f0:6d:a2:72:08:d3:ef:67:4f:dd:3a:31:da:71:5f: 2f:4d:5a:38:23:ff:19:2a:61:ba:0a:2c:cb:85:c1: 50:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:83:A2:12:EB:D8:89:C8:35:83:F6:BD:B7:ED:65:F1:52:9B:6A:68 X509v3 Authority Key Identifier: keyid:22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c8:3a:6d:f7:8f:28:e4:c6:d0:2a:5b:cd:65:6c:72:68:8c: b8:31:16:60:7c:9e:e0:e8:82:c0:cd:b3:26:c5:6b:4e:63:11: 2c:80:23:8a:04:8f:05:ce:bc:38:9d:fa:c4:8d:f7:e9:8c:32: 0f:66:d3:4a:db:6a:72:fc:06:72:51:c7:33:28:3d:80:3c:8e: 10:08:77:39:26:14:9e:13:93:7b:f6:81:00:c4:91:12:2b:0d: 68:77:60:1e:9d:dc:76:08:5c:c9:f5:cc:24:02:4b:ab:f8:8a: 77:ec:11:5c:96:ee:a7:16:27:99:a9:66:eb:4d:3c:95:17:9f: 53:56:ac:c7:10:67:3e:12:8f:d5:b5:01:90:37:ac:f7:09:01: 61:86:56:04:a0:35:3f:ee:d4:d2:00:ab:98:34:a4:99:d4:20: d5:5e:92:80:6f:65:82:49:6c:6b:94:54:cc:bc:77:90:f0:e4: 23:e0:54:d2:9c:a0:fa:a6:c9:8d:96:f0:1c:81:ec:e3:7b:c0: 6f:58:a7:05:66:53:48:5d:d0:31:39:0b:66:6c:63:9a:12:27: 2b:73:7d:c4:fc:d7:c3:2e:f8:6f:c1:be:b9:ef:aa:a4:d2:da: 8c:6c:bd:06:5b:64:ec:45:f7:21:f8:05:d5:a2:0c:02:df:ac: 8a:bd:a2:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQTcxMTAvBgNVBAUTKDIyQTYyQzE0RDJCRDMyRTNFNTk2RDhBM0U2MkJCQzMy NzQ0NjhGOTkwHhcNMjUxMDE5MDgxMDM1WhcNMjUxMDI2MDgxMDM1WjAYMRYwFAYD VQQDEw02OGY0OWNmYi00YTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApo4Y3F4YFA6MrjHEuSonPVWnZM0DMTpzvMB1OOczYubLawK3HYIeSxEfY3dv wHxlNAwGnqlHFvV8BakoE6YQrGjUqPFFfDMrBhbTf82ddNKGOR9z04DU1Hk9de2h xAN2PDG2WxkZsaJoTsfBH7nU7Fzp03VEOIoFiMC1VPpA+xO+U+bKRHQ8c0tyH6Gf FBndCtViLBG5MYTmVkdXumzYQyRVfuOE5U/YlTIOQSlD7uPkIIwvWCWqDebIE294 8jKxSdeVjW8a0L72gBQuWeN0U8SOiod3/oKEAjtKDcPxBkbwbaJyCNPvZ0/dOjHa cV8vTVo4I/8ZKmG6CizLhcFQ8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqDohLr 2InINYP2vbftZfFSm2poMB8GA1UdIwQYMBaAFCKmLBTSvTLj5ZbYo+YrvDJ0Ro+Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVBNy9CMUIzRTJENjM4 NjIxMUVGOUUxN0U4NkZDNEY5QUUwMi9JcVlzRk5LOU11UGxsdGlqNWl1OE1uUkdq NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxWXNGTks5TXVQbGx0aWo1aXU4TW5SR2o1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVBNy9CMUIzRTJENjM4NjIxMUVGOUUxN0U4NkZDNEY5QUUwMi9JcVlzRk5LOU11 UGxsdGlqNWl1OE1uUkdqNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0yDpt948o5MbQKlvNZWxyaIy4MRZgfJ7g6ILAzbMmxWtOYxEsgCOK BI8Fzrw4nfrEjffpjDIPZtNK22py/AZyUcczKD2API4QCHc5JhSeE5N79oEAxJES Kw1od2Aendx2CFzJ9cwkAkur+Ip37BFclu6nFieZqWbrTTyVF59TVqzHEGc+Eo/V tQGQN6z3CQFhhlYEoDU/7tTSAKuYNKSZ1CDVXpKAb2WCSWxrlFTMvHeQ8OQj4FTS nKD6psmNlvAcgezje8BvWKcFZlNIXdAxOQtmbGOaEicrc33E/NfDLvhvwb6576qk 0tqMbL0GW2TsRfch+AXVogwC36yKvaJw -----END CERTIFICATE-----Generated at Mon Oct 20 04:49:40 2025 by rpki-client