$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft File: 7iTJi5YTEPUN8Nyy0naWug69fUs.mft (raw, json) Hash identifier: aKFw9zXcmYxd+8s2cRiiSVRaO1bjRfcQ1nkCjiLqILo= Subject key identifier: 86:4E:86:8E:8B:04:16:45:B7:32:62:F4:B1:1C:03:AB:DE:DC:41:C0 Authority key identifier: EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B Certificate issuer: /CN=A9186883/serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft Manifest number: 0181 Signing time: Sun 19 Oct 2025 06:14:39 +0000 Manifest this update: Sun 19 Oct 2025 06:14:38 +0000 Manifest next update: Sun 26 Oct 2025 06:14:38 +0000 Files and hashes: 1: 7iTJi5YTEPUN8Nyy0naWug69fUs.crl (hash: woIpbkJvLtQ67R6thJE29wXrP7WvROyA5Rg4N8dLXIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883, serialNumber=EE24C98B961310F50DF0DCB2D27696BA0EBD7D4B Validity Not Before: Oct 19 06:14:38 2025 GMT Not After : Oct 26 06:14:38 2025 GMT Subject: CN=68f481cf-6646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6b:e1:3c:21:34:d2:86:ca:25:2b:59:d6:c8: e6:2e:ad:8b:3c:4f:96:ca:d4:73:a2:2b:57:fa:1c: 2a:8d:81:eb:c8:72:28:49:cd:eb:ce:80:bd:c7:a4: 0a:ec:7e:7d:c2:c3:b9:fd:73:10:43:c2:36:20:94: 50:7a:68:59:42:dd:a4:18:ef:30:f5:22:a9:54:2d: de:fc:c7:26:91:33:66:67:6a:ae:ce:d1:ed:0a:4e: 3b:01:9e:2a:39:9a:35:c2:6d:c1:1d:53:60:1b:f3: 29:9c:f1:55:b0:35:25:f2:2d:73:7a:f1:08:75:12: 1a:ca:ea:6d:fa:08:d8:8f:8e:78:45:4c:50:73:f0: 54:cc:b0:03:b8:c1:cb:44:2d:bb:76:bb:7b:4c:bf: f3:b2:d3:67:b9:45:a2:ac:5f:63:0b:8e:9d:88:c7: ef:13:3e:dd:54:87:00:2c:62:1d:ef:5d:e7:1a:e8: a6:bb:aa:09:2e:c5:98:a9:c1:ee:b3:82:4a:24:a1: 79:a7:6d:d5:34:c4:c4:d3:2f:41:53:80:1b:f8:0e: ca:ed:75:e4:79:0f:97:c9:7c:f2:08:65:ec:3c:f2: e2:f9:b3:1f:94:04:86:2c:b6:4a:a1:86:68:e5:53: e9:db:93:46:e9:49:f7:3a:f6:2f:bd:ae:03:14:8d: af:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4E:86:8E:8B:04:16:45:B7:32:62:F4:B1:1C:03:AB:DE:DC:41:C0 X509v3 Authority Key Identifier: keyid:EE:24:C9:8B:96:13:10:F5:0D:F0:DC:B2:D2:76:96:BA:0E:BD:7D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7iTJi5YTEPUN8Nyy0naWug69fUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/A88FFCF85C5311EE951E9D58C4F9AE02/7iTJi5YTEPUN8Nyy0naWug69fUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:1c:53:c8:b5:27:ca:2d:70:1e:18:3d:92:3f:f9:05:e2:d1: 3e:6a:82:e3:5f:fc:ee:d2:e8:d7:ef:c8:0b:77:d4:ed:ff:92: 26:35:1a:bd:8b:f8:10:97:d1:4b:5b:92:b5:3a:0f:09:ee:db: 70:8f:22:e3:d2:3c:ad:c5:77:1b:a4:51:93:bd:9b:14:6c:75: cd:5d:5c:70:d5:17:6b:5c:42:1d:da:3b:98:5d:8e:4c:e0:bc: ca:db:8b:8a:3b:7f:3a:4c:a3:b7:17:f8:3b:44:5d:8e:10:f7: af:4c:60:e1:f9:0d:4e:bf:13:88:26:d9:a7:48:d1:b4:8c:18: c0:83:d7:0b:15:8f:4e:b7:58:91:7a:9b:ef:7a:73:0e:1e:ad: d0:b0:00:1a:eb:48:e4:6b:d2:0b:cb:a3:fd:7f:5a:83:ab:a8: 09:e7:25:29:b0:35:01:39:2a:01:ca:0f:e4:d5:3d:53:0b:cb: 2d:32:43:f4:dd:e2:04:ab:ca:3f:b3:c9:bf:34:7a:a0:2f:b1: ca:83:42:e1:0b:22:dd:0a:18:d4:c7:eb:54:39:06:ba:4d:47: 54:23:74:de:d5:73:c6:3e:2d:81:ad:8e:5e:e9:a7:e7:51:78: 75:85:70:87:a5:3f:4a:66:b6:77:c4:d0:f9:c5:c5:70:a3:92: fb:bf:3a:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKEVFMjRDOThCOTYxMzEwRjUwREYwRENCMkQyNzY5NkJB MEVCRDdENEIwHhcNMjUxMDE5MDYxNDM4WhcNMjUxMDI2MDYxNDM4WjAYMRYwFAYD VQQDEw02OGY0ODFjZi02NjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmvhPCE00obKJStZ1sjmLq2LPE+WytRzoitX+hwqjYHryHIoSc3rzoC9x6QK 7H59wsO5/XMQQ8I2IJRQemhZQt2kGO8w9SKpVC3e/McmkTNmZ2quztHtCk47AZ4q OZo1wm3BHVNgG/MpnPFVsDUl8i1zevEIdRIayupt+gjYj454RUxQc/BUzLADuMHL RC27drt7TL/zstNnuUWirF9jC46diMfvEz7dVIcALGId713nGuimu6oJLsWYqcHu s4JKJKF5p23VNMTE0y9BU4Ab+A7K7XXkeQ+XyXzyCGXsPPLi+bMflASGLLZKoYZo 5VPp25NG6Un3OvYvva4DFI2v/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZOho6L BBZFtzJi9LEcA6ve3EHAMB8GA1UdIwQYMBaAFO4kyYuWExD1DfDcstJ2lroOvX1L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9BODhGRkNGODVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQVU44Tnl5MG5hV3VnNjlm VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdpVEppNVlURVBVTjhOeXkwbmFXdWc2OWZVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9BODhGRkNGODVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi83aVRKaTVZVEVQ VU44Tnl5MG5hV3VnNjlmVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkHFPItSfKLXAeGD2SP/kF4tE+aoLjX/zu0ujX78gLd9Tt/5ImNRq9 i/gQl9FLW5K1Og8J7ttwjyLj0jytxXcbpFGTvZsUbHXNXVxw1RdrXEId2juYXY5M 4LzK24uKO386TKO3F/g7RF2OEPevTGDh+Q1OvxOIJtmnSNG0jBjAg9cLFY9Ot1iR epvvenMOHq3QsAAa60jka9ILy6P9f1qDq6gJ5yUpsDUBOSoByg/k1T1TC8stMkP0 3eIEq8o/s8m/NHqgL7HKg0LhCyLdChjUx+tUOQa6TUdUI3Te1XPGPi2BrY5e6afn UXh1hXCHpT9KZrZ3xND5xcVwo5L7vzqJ -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:48 2025 by rpki-client