$ rpki-client -vvf rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft File: MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft (raw, json) Hash identifier: k1vTz4HUo0R1G0Et8eMqAWZokYVpwcLFtb3xrhO7VAM= Subject key identifier: 3B:85:02:F0:1A:5E:F9:86:CD:57:8D:7F:A9:D0:DF:DA:F1:08:22:8D Authority key identifier: 32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71 Certificate issuer: /CN=A9180127/serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft Manifest number: 0185 Signing time: Sun 19 Oct 2025 06:14:00 +0000 Manifest this update: Sun 19 Oct 2025 06:14:00 +0000 Manifest next update: Sun 26 Oct 2025 06:14:00 +0000 Files and hashes: 1: MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl (hash: nUgWCmMYfuS//woXMjkXGaT6gVVySzdj+JqljAGl/8U=) 2: 80A66D902A6411F09ACA5C61C4F9AE02.roa (hash: VkiCTpbHNMdBRPiF1oBiRg7dOTIy/YEbnzSkLjMcvbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180127, serialNumber=3215C5516AFB54D8E612D1EC3D5182D321E53171 Validity Not Before: Oct 19 06:14:00 2025 GMT Not After : Oct 26 06:14:00 2025 GMT Subject: CN=68f481a8-c812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:21:a6:4b:90:e3:f9:c2:b0:e7:c7:36:01:1b: ca:39:ce:a6:86:29:58:7c:31:da:36:cf:65:79:9f: b2:82:e7:e2:ba:55:f7:80:5d:21:82:8d:59:20:06: 9d:ee:36:38:17:72:f1:f6:44:75:98:4c:86:3a:ce: 1e:63:66:cb:e2:6c:b1:cb:cd:83:9d:69:75:11:20: 32:05:8d:9a:c4:72:9c:d2:14:b9:0f:5d:30:21:17: a1:67:d2:b4:5a:bd:78:7a:b8:b7:ab:3e:9b:be:1f: 9d:42:74:1a:f9:bc:30:6e:01:ef:a4:78:2c:60:b0: 78:f8:3e:9a:05:9e:9f:db:32:e6:04:41:ec:4e:d0: 06:a9:98:37:75:e7:cb:52:c6:fc:04:2c:49:95:cf: 4a:59:2f:78:13:5e:1e:c9:d4:e7:35:5a:e8:2f:1f: 8d:a5:d1:6e:b0:c8:41:75:6e:7b:bc:8e:ce:b1:df: 91:5e:d6:fb:69:a9:4c:5c:a8:7d:6a:aa:47:39:cf: 5b:77:23:91:52:92:ea:14:60:26:85:8a:e2:36:a4: 2f:e3:3d:b6:7b:e8:4a:48:e6:2e:43:15:be:73:8d: 88:67:cd:a5:f6:bb:36:41:2e:62:c5:1e:8f:da:fe: dd:64:15:ff:bc:7d:8d:af:d8:b8:51:89:1f:40:6f: fb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:85:02:F0:1A:5E:F9:86:CD:57:8D:7F:A9:D0:DF:DA:F1:08:22:8D X509v3 Authority Key Identifier: keyid:32:15:C5:51:6A:FB:54:D8:E6:12:D1:EC:3D:51:82:D3:21:E5:31:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MhXFUWr7VNjmEtHsPVGC0yHlMXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180127/16AF1D205B7F11EEBE320E35C4F9AE02/MhXFUWr7VNjmEtHsPVGC0yHlMXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:5d:ed:8f:84:eb:3f:79:80:aa:9a:67:a7:e6:59:6f:ba:63: b5:41:4f:09:2b:df:d7:20:9f:31:f1:6d:66:6f:b0:fd:a4:72: 4c:86:b4:13:31:c4:5f:e9:60:4d:57:2e:c4:dd:f0:62:d8:68: 61:e3:99:f7:fc:f2:70:a7:0a:db:d4:1b:b9:e4:df:31:d1:e3: 81:11:0e:08:0d:8c:54:2a:fe:ef:5f:77:c3:57:f5:f6:ff:de: a7:25:58:4d:2b:42:35:d7:8e:b9:23:a3:da:f2:7e:39:1d:e7: ad:40:c3:f8:f1:eb:3a:f7:5a:94:a3:52:13:c4:2e:96:cb:21: e2:d3:b8:dc:09:50:7c:61:14:41:0b:49:c4:99:9a:70:de:ad: b6:e8:6d:3b:2a:ae:3e:0a:94:ad:7c:ce:32:71:8a:62:55:0e: c0:18:7d:44:9c:bc:79:92:f1:ed:f8:fb:cb:a4:d6:ed:9c:ca: 8c:c7:58:21:f1:c6:37:db:1c:87:af:83:18:ce:3c:39:56:f1: a2:ef:78:ee:d6:26:f5:f6:53:39:64:ae:ee:db:d5:bb:60:46: 13:50:2c:e8:4f:a9:76:02:9e:0c:fc:0f:67:fe:55:8a:d6:b3: 90:de:5a:6b:47:11:05:d3:77:e5:4a:08:24:b6:a1:a6:24:35: 03:21:66:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxMjcxMTAvBgNVBAUTKDMyMTVDNTUxNkFGQjU0RDhFNjEyRDFFQzNENTE4MkQz MjFFNTMxNzEwHhcNMjUxMDE5MDYxNDAwWhcNMjUxMDI2MDYxNDAwWjAYMRYwFAYD VQQDEw02OGY0ODFhOC1jODEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSGmS5Dj+cKw58c2ARvKOc6mhilYfDHaNs9leZ+ygufiulX3gF0hgo1ZIAad 7jY4F3Lx9kR1mEyGOs4eY2bL4myxy82DnWl1ESAyBY2axHKc0hS5D10wIRehZ9K0 Wr14eri3qz6bvh+dQnQa+bwwbgHvpHgsYLB4+D6aBZ6f2zLmBEHsTtAGqZg3defL Usb8BCxJlc9KWS94E14eydTnNVroLx+NpdFusMhBdW57vI7Osd+RXtb7aalMXKh9 aqpHOc9bdyORUpLqFGAmhYriNqQv4z22e+hKSOYuQxW+c42IZ82l9rs2QS5ixR6P 2v7dZBX/vH2Nr9i4UYkfQG/7BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuFAvAa XvmGzVeNf6nQ39rxCCKNMB8GA1UdIwQYMBaAFDIVxVFq+1TY5hLR7D1RgtMh5TFx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDEyNy8xNkFGMUQyMDVC N0YxMUVFQkUzMjBFMzVDNEY5QUUwMi9NaFhGVVdyN1ZOam1FdEhzUFZHQzB5SGxN WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01oWEZVV3I3Vk5qbUV0SHNQVkdDMHlIbE1YRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDEyNy8xNkFGMUQyMDVCN0YxMUVFQkUzMjBFMzVDNEY5QUUwMi9NaFhGVVdyN1ZO am1FdEhzUFZHQzB5SGxNWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSXe2PhOs/eYCqmmen5llvumO1QU8JK9/XIJ8x8W1mb7D9pHJMhrQT McRf6WBNVy7E3fBi2Ghh45n3/PJwpwrb1Bu55N8x0eOBEQ4IDYxUKv7vX3fDV/X2 /96nJVhNK0I11465I6Pa8n45HeetQMP48es691qUo1ITxC6WyyHi07jcCVB8YRRB C0nEmZpw3q226G07Kq4+CpStfM4ycYpiVQ7AGH1EnLx5kvHt+PvLpNbtnMqMx1gh 8cY32xyHr4MYzjw5VvGi73ju1ib19lM5ZK7u29W7YEYTUCzoT6l2Ap4M/A9n/lWK 1rOQ3lprRxEF03flSggktqGmJDUDIWav -----END CERTIFICATE-----Generated at Mon Oct 20 08:04:56 2025 by rpki-client