$ rpki-client -vvf rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft File: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft (raw, json) Hash identifier: u+sMY8PusgQKwt/FseyBDVBH1ECuGIhJ25cXO/bNnY0= Subject key identifier: 09:BB:25:01:6D:ED:CA:BF:4E:94:8C:60:63:8C:9F:AD:AA:84:6D:CA Authority key identifier: 16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 Certificate issuer: /CN=A9187208/serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft Manifest number: 01B4 Signing time: Sun 19 Oct 2025 05:40:02 +0000 Manifest this update: Sun 19 Oct 2025 05:40:01 +0000 Manifest next update: Sun 26 Oct 2025 05:40:01 +0000 Files and hashes: 1: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl (hash: xtdxEYW80lJi17GRB6s2kNcaxt457HI5Y9oZifKMYVo=) 2: 7F5C2CFA1A1B11EEBC083487C4F9AE02.roa (hash: IU2n2x/NVgQOUwGjqFagszzivCXrq63+ZL+OISFLwDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187208, serialNumber=16144C8235B4519F50EDD555368118844D1711A5 Validity Not Before: Oct 19 05:40:01 2025 GMT Not After : Oct 26 05:40:01 2025 GMT Subject: CN=68f479b1-f712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:75:96:71:49:7f:54:8b:e7:61:d8:11:a4:3c: 77:e7:ba:00:a8:22:3e:d8:02:af:f2:15:43:2a:5a: a7:dd:17:6b:71:a0:3a:dd:dd:03:00:33:55:04:8f: cd:9b:a2:67:d2:70:83:39:c9:f4:28:94:71:12:de: 4c:40:fb:59:91:1f:48:38:41:9c:21:0f:80:d0:9f: 96:11:b3:7a:d9:24:0b:d6:6c:2a:55:de:58:5d:91: 54:fb:67:18:0e:95:c5:8f:3e:71:8a:2d:7a:86:50: 25:e5:b7:4f:0a:1f:01:f8:d4:0d:62:ea:07:ed:a2: bf:52:4f:ee:d5:98:e6:61:b8:57:b6:ff:e6:eb:ab: 64:20:33:6f:3c:18:54:61:8e:12:c1:d8:40:21:52: b0:4e:26:a5:6a:d4:d4:db:c4:46:41:68:2b:c1:a1: 03:26:00:c9:46:34:18:12:c8:b2:b4:bb:93:4d:47: 49:14:22:ad:5e:60:27:9e:7c:96:dd:61:dd:00:68: 39:ae:bf:55:ae:52:06:1a:5b:f0:db:39:52:63:52: 49:08:32:23:b4:2d:46:02:05:d7:5e:38:8c:19:58: 72:cc:73:27:d1:33:92:a3:7f:ca:7d:0a:23:e0:3f: a9:fe:6d:7e:74:ee:25:5c:9d:49:ca:fc:12:dc:d1: b4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BB:25:01:6D:ED:CA:BF:4E:94:8C:60:63:8C:9F:AD:AA:84:6D:CA X509v3 Authority Key Identifier: keyid:16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:6e:32:fb:22:0b:9e:02:41:36:3a:c0:84:ab:28:34:72:d6: e5:4a:87:58:cb:ba:ba:c5:0e:6e:b1:9f:51:72:18:87:2b:bc: 83:de:66:e7:5d:ed:82:85:b1:a3:53:db:65:82:4d:54:55:65: 42:b1:eb:6a:eb:0d:40:3e:0d:73:4d:cc:ad:91:a5:24:61:cf: 8e:11:bf:fd:d6:4f:42:07:75:49:a7:0f:16:bd:d6:12:79:e2: 49:7e:e8:5c:f4:7d:83:36:81:76:2d:84:fc:f9:c2:86:5c:62: 97:9c:91:e3:0a:eb:67:69:bf:50:e5:5d:5a:4e:79:c2:70:4b: 5a:0e:24:b5:43:14:cb:f6:d7:25:e7:9e:9f:32:a8:d7:11:11: e2:68:a1:31:7f:10:18:12:5b:77:35:99:27:04:74:3e:e8:6b: ad:29:57:ac:f5:ca:96:af:11:7a:5a:b9:87:e1:50:1b:b5:58: 0b:3a:52:1c:74:96:53:76:61:e8:c2:44:f2:5f:d5:6b:3a:56: e2:6c:97:4e:c5:2f:7c:97:84:c6:11:99:ee:aa:e9:38:ae:7c: a4:d5:6d:c9:3b:9d:9b:09:84:58:83:1c:e7:e0:c9:9b:73:65: e0:f7:b8:38:f4:81:60:41:67:80:ba:15:98:cc:4b:18:2e:96: 13:22:ac:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcyMDgxMTAvBgNVBAUTKDE2MTQ0QzgyMzVCNDUxOUY1MEVERDU1NTM2ODExODg0 NEQxNzExQTUwHhcNMjUxMDE5MDU0MDAxWhcNMjUxMDI2MDU0MDAxWjAYMRYwFAYD VQQDEw02OGY0NzliMS1mNzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HWWcUl/VIvnYdgRpDx357oAqCI+2AKv8hVDKlqn3RdrcaA63d0DADNVBI/N m6Jn0nCDOcn0KJRxEt5MQPtZkR9IOEGcIQ+A0J+WEbN62SQL1mwqVd5YXZFU+2cY DpXFjz5xii16hlAl5bdPCh8B+NQNYuoH7aK/Uk/u1ZjmYbhXtv/m66tkIDNvPBhU YY4SwdhAIVKwTialatTU28RGQWgrwaEDJgDJRjQYEsiytLuTTUdJFCKtXmAnnnyW 3WHdAGg5rr9VrlIGGlvw2zlSY1JJCDIjtC1GAgXXXjiMGVhyzHMn0TOSo3/KfQoj 4D+p/m1+dO4lXJ1JyvwS3NG0aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAm7JQFt 7cq/TpSMYGOMn62qhG3KMB8GA1UdIwQYMBaAFBYUTII1tFGfUO3VVTaBGIRNFxGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzIwOC9DNkQ5NkQ5RTFB MTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVaOVE3ZFZWTm9FWWhFMFhF YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUk1nalcwVVo5UTdkVlZOb0VZaEUwWEVhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzIwOC9DNkQ5NkQ5RTFBMTcxMUVFODIwNjM2ODFDNEY5QUUwMi9GaFJNZ2pXMFVa OVE3ZFZWTm9FWWhFMFhFYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQbjL7IgueAkE2OsCEqyg0ctblSodYy7q6xQ5usZ9RchiHK7yD3mbn Xe2ChbGjU9tlgk1UVWVCsetq6w1APg1zTcytkaUkYc+OEb/91k9CB3VJpw8WvdYS eeJJfuhc9H2DNoF2LYT8+cKGXGKXnJHjCutnab9Q5V1aTnnCcEtaDiS1QxTL9tcl 556fMqjXERHiaKExfxAYElt3NZknBHQ+6GutKVes9cqWrxF6WrmH4VAbtVgLOlIc dJZTdmHowkTyX9VrOlbibJdOxS98l4TGEZnuquk4rnyk1W3JO52bCYRYgxzn4Mmb c2Xg97g49IFgQWeAuhWYzEsYLpYTIqzM -----END CERTIFICATE-----Generated at Mon Oct 20 19:47:51 2025 by rpki-client