$ rpki-client -vvf rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft File: -IHZTXommvaISDplHTc5GOeGUB4.mft (raw, json) Hash identifier: DEtpvJ3QjsDf2NrU+NTEjkTf09OIk6SPrMPy6cwBnTI= Subject key identifier: EC:2F:57:46:81:C7:85:FB:76:FA:2A:48:CA:00:6A:7A:E9:DB:6B:E7 Authority key identifier: F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E Certificate issuer: /CN=A9182644/serialNumber=F881D94D7A269AF688483A651D373918E786501E Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft Manifest number: 01A2 Signing time: Sun 19 Oct 2025 05:49:35 +0000 Manifest this update: Sun 19 Oct 2025 05:49:34 +0000 Manifest next update: Sun 26 Oct 2025 05:49:34 +0000 Files and hashes: 1: -IHZTXommvaISDplHTc5GOeGUB4.crl (hash: gTY6s5plvnZ1v2a6btKHj69D6SocxOgxH/bo5k2LK8c=) 2: 8A50B69C2F2B11EE8CD3F880C4F9AE02.roa (hash: X7xyaBh0Wrmfm5LffdWxPUUrmnom17OByzAiI+OrkqU=) 3: 89E0172A2F2B11EE8CD3F880C4F9AE02.roa (hash: MWF9yk30FJElBkURG2FIcNXpLWF91bW+ys8O1aYlGaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182644, serialNumber=F881D94D7A269AF688483A651D373918E786501E Validity Not Before: Oct 19 05:49:34 2025 GMT Not After : Oct 26 05:49:34 2025 GMT Subject: CN=68f47bee-8a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:6d:67:36:30:96:d7:7f:d5:65:d6:3d:d1:b1: 42:60:65:40:81:5c:f9:03:08:e4:8e:b4:64:50:51: 08:80:8b:f6:1f:c0:42:57:55:66:df:50:b5:3e:bc: f0:5e:d4:a0:3c:ca:30:06:f0:f7:93:c6:6b:99:e8: ad:f1:b3:a6:f8:a0:0f:d5:c6:6f:e5:75:d6:2a:36: 6f:8a:d9:d0:aa:39:e5:8f:59:c7:60:78:c3:73:61: 0a:32:a5:40:35:e8:23:af:41:4c:3b:73:10:0b:ca: d6:f1:a1:42:dd:87:16:be:74:1b:ef:da:f4:28:3c: 48:c2:93:91:0a:eb:1f:3c:a9:9f:ce:12:44:d6:19: 93:9f:88:46:87:a3:79:d8:2b:23:27:cd:c0:6d:ae: ab:9d:05:96:dd:9e:6f:6f:c0:fb:63:b3:82:da:b8: f5:09:db:89:cf:2d:f7:af:d8:94:31:9a:76:74:e2: 6b:d3:be:e5:eb:fd:cf:73:cc:86:0e:8d:e3:29:86: 7c:2a:bf:fa:b7:bf:5c:c2:db:cf:b7:84:d7:2e:73: 92:9e:e4:36:9a:1b:67:05:8c:66:52:e5:6a:2b:1c: 41:01:65:80:6d:32:79:db:6f:04:eb:2f:58:34:f7: 3f:88:51:d2:3f:13:84:f4:30:5f:27:69:7b:b4:8c: 80:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2F:57:46:81:C7:85:FB:76:FA:2A:48:CA:00:6A:7A:E9:DB:6B:E7 X509v3 Authority Key Identifier: keyid:F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:1a:a3:a5:3b:48:a6:df:26:0f:f6:ab:19:5b:a2:7d:97:a7: 69:66:fd:c0:69:d3:ab:da:96:e8:86:e3:88:53:89:45:95:73: bf:52:9d:ce:ac:e8:b1:58:ef:48:b2:ad:20:4f:51:16:53:fa: 04:a7:c9:9f:cf:67:35:5d:72:1c:38:ea:4d:69:10:cb:3c:19: ba:5b:ff:d5:59:3a:6a:cd:e8:f2:1f:63:21:b4:c4:3c:40:75: d2:75:5c:bc:89:d5:14:ac:c7:c3:ab:e7:5f:56:40:5a:5c:f6: 8d:d1:7b:6c:56:14:5f:7e:44:47:23:92:66:91:a2:a0:e7:c8: a8:1c:7e:13:1a:e5:07:86:1b:dc:64:11:9d:37:1c:46:53:e7: fd:a9:64:d0:f4:2d:d1:00:2f:4e:c1:e8:c1:9c:07:40:03:b4: de:12:8d:89:07:d0:ce:d6:3f:c2:8d:30:25:88:80:95:a5:43: 43:90:c6:07:b3:01:7e:3c:35:9e:14:15:4c:3c:76:c4:e7:02: 12:7f:d4:60:71:7d:2d:93:e9:7c:28:b3:f7:ce:3b:8f:e5:a8: ff:c0:5c:f4:15:1b:5b:0a:8d:f9:bf:3f:9a:da:a8:b7:ef:c3: fd:c5:d6:9b:81:ee:eb:78:37:29:5c:55:b4:18:2b:9c:35:39: f3:fb:4d:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI2NDQxMTAvBgNVBAUTKEY4ODFEOTREN0EyNjlBRjY4ODQ4M0E2NTFEMzczOTE4 RTc4NjUwMUUwHhcNMjUxMDE5MDU0OTM0WhcNMjUxMDI2MDU0OTM0WjAYMRYwFAYD VQQDEw02OGY0N2JlZS04YTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA921nNjCW13/VZdY90bFCYGVAgVz5AwjkjrRkUFEIgIv2H8BCV1Vm31C1Przw XtSgPMowBvD3k8Zrmeit8bOm+KAP1cZv5XXWKjZvitnQqjnlj1nHYHjDc2EKMqVA Negjr0FMO3MQC8rW8aFC3YcWvnQb79r0KDxIwpORCusfPKmfzhJE1hmTn4hGh6N5 2CsjJ83Aba6rnQWW3Z5vb8D7Y7OC2rj1CduJzy33r9iUMZp2dOJr077l6/3Pc8yG Do3jKYZ8Kr/6t79cwtvPt4TXLnOSnuQ2mhtnBYxmUuVqKxxBAWWAbTJ5228E6y9Y NPc/iFHSPxOE9DBfJ2l7tIyAdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwvV0aB x4X7dvoqSMoAanrp22vnMB8GA1UdIwQYMBaAFPiB2U16Jpr2iEg6ZR03ORjnhlAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjY0NC9CRjEzMUQzNDJE MDAxMUVFOUQxMEZGMThDNEY5QUUwMi8tSUhaVFhvbW12YUlTRHBsSFRjNUdPZUdV QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1JSFpUWG9tbXZhSVNEcGxIVGM1R09lR1VCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjY0NC9CRjEzMUQzNDJEMDAxMUVFOUQxMEZGMThDNEY5QUUwMi8tSUhaVFhvbW12 YUlTRHBsSFRjNUdPZUdVQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1GqOlO0im3yYP9qsZW6J9l6dpZv3AadOr2pbohuOIU4lFlXO/Up3O rOixWO9Isq0gT1EWU/oEp8mfz2c1XXIcOOpNaRDLPBm6W//VWTpqzejyH2MhtMQ8 QHXSdVy8idUUrMfDq+dfVkBaXPaN0XtsVhRffkRHI5JmkaKg58ioHH4TGuUHhhvc ZBGdNxxGU+f9qWTQ9C3RAC9OwejBnAdAA7TeEo2JB9DO1j/CjTAliICVpUNDkMYH swF+PDWeFBVMPHbE5wISf9RgcX0tk+l8KLP3zjuP5aj/wFz0FRtbCo35vz+a2qi3 78P9xdabge7reDcpXFW0GCucNTnz+03/ -----END CERTIFICATE-----Generated at Mon Oct 20 11:37:01 2025 by rpki-client