$ rpki-client -vvf rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft File: 0_p517hB6Lp5mOoihhupD7llH2Q.mft (raw, json) Hash identifier: wn78lUW5Qz2VPt5lsA0NaQ45n1tlAZzuBj9CgB/lPvw= Subject key identifier: 7B:BA:A3:2B:07:6C:45:8E:6B:4B:87:9D:EC:EC:93:CF:C0:47:3E:FE Authority key identifier: D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64 Certificate issuer: /CN=A9189346/serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64 Certificate serial: 1C27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft Manifest number: 1C1B Signing time: Sat 18 Oct 2025 16:31:49 +0000 Manifest this update: Sat 18 Oct 2025 16:31:49 +0000 Manifest next update: Sat 25 Oct 2025 16:31:49 +0000 Files and hashes: 1: 0_p517hB6Lp5mOoihhupD7llH2Q.crl (hash: zf9o4szIomj/091V2hfZhUCDqti6LxA0ZUYUGzi5TN0=) 2: 082ADE2CF72411E6BA654B38C4F9AE02.roa (hash: IUcoRHe1SU3qiEDcCn613MUCKIsCGyKLZbPsU64+ZDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7207 (0x1c27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189346, serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64 Validity Not Before: Oct 18 16:31:49 2025 GMT Not After : Oct 25 16:31:49 2025 GMT Subject: CN=68f3c0f5-2d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:75:41:8e:47:90:53:7a:6c:47:5c:8d:77:e4: 61:30:ad:4c:3b:f0:62:24:56:c5:aa:80:e4:e8:d3: 25:4a:c2:0e:f4:6c:ea:2e:bd:75:89:15:4d:d7:27: c1:86:d6:ed:67:32:ce:60:ea:18:a6:95:20:d4:42: ca:83:c0:18:38:29:43:f5:93:13:b8:83:60:6d:d3: aa:6c:3c:3b:0d:06:f7:cb:ce:b4:34:c7:e9:86:9f: 18:0e:cf:c8:4d:71:10:44:02:28:5a:47:52:4e:16: 87:eb:61:d0:3d:2d:c4:68:38:d2:b9:04:67:96:c2: 9c:be:67:f0:4a:48:08:9d:4c:41:70:6d:9a:49:a7: d4:bb:c1:63:16:3a:90:8d:c8:e7:5d:31:cf:5c:44: fd:ed:43:73:cd:b3:eb:84:1d:2a:01:33:26:5c:23: a3:f3:65:ac:25:1f:5f:31:3f:1e:f7:ff:68:55:38: 9e:db:31:06:7f:49:23:0c:a4:9b:03:63:ae:ee:f3: da:70:d8:f4:6c:cc:a8:16:e9:ba:7b:dc:66:0d:06: 7f:a5:97:c5:d8:35:b2:80:8a:68:07:83:22:c0:c5: bd:70:2c:f8:1d:74:f5:e8:c5:b3:f2:5d:09:b2:b5: 13:17:8c:cc:bc:ee:6b:f4:5e:46:40:11:0a:11:da: 32:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BA:A3:2B:07:6C:45:8E:6B:4B:87:9D:EC:EC:93:CF:C0:47:3E:FE X509v3 Authority Key Identifier: keyid:D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:81:95:81:0b:69:6c:40:52:21:4b:a0:25:cc:62:bf:49:e8: 7a:56:64:82:54:62:21:17:55:e4:33:01:22:d6:64:4e:c3:11: 17:53:d6:f5:3b:f8:cd:29:7b:1a:d5:43:5d:34:a7:a5:39:6b: 99:32:e0:c0:0c:6c:7f:e1:ea:7d:d6:d5:22:93:2b:5b:67:09: 00:bb:96:f9:fe:55:2e:eb:06:73:ed:60:42:9e:be:f6:31:0d: 75:3d:34:58:3e:18:77:a8:5b:b7:27:40:6c:74:75:a6:c6:ac: 2d:fa:38:0e:eb:83:f6:23:a2:f2:cb:2e:00:c0:70:fd:86:94: 83:e1:89:37:6c:ce:75:67:8a:8e:38:fe:a4:78:8e:a5:24:aa: 3f:f5:82:d0:5f:4c:82:3d:94:e8:2c:72:bc:22:ce:cd:19:6f: 46:ca:ad:3f:c2:b2:51:8f:25:c6:e8:11:43:d9:0e:52:f8:db: cc:cf:f3:b0:2b:61:67:60:2a:c8:a9:82:63:f2:d2:a9:1d:95: 84:84:cf:07:33:8d:68:26:db:2e:e0:03:69:a0:81:f7:9d:a7: 79:09:2e:e7:12:fd:72:1c:fd:92:27:a7:9e:31:cb:4c:72:b6: 9d:67:f0:f6:d6:92:47:27:69:c8:ad:02:a6:13:03:45:20:46: 4d:ca:69:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkzNDYxMTAvBgNVBAUTKEQzRkE3OUQ3Qjg0MUU4QkE3OTk4RUEyMjg2MUJBOTBG Qjk2NTFGNjQwHhcNMjUxMDE4MTYzMTQ5WhcNMjUxMDI1MTYzMTQ5WjAYMRYwFAYD VQQDEw02OGYzYzBmNS0yZDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7XVBjkeQU3psR1yNd+RhMK1MO/BiJFbFqoDk6NMlSsIO9GzqLr11iRVN1yfB htbtZzLOYOoYppUg1ELKg8AYOClD9ZMTuINgbdOqbDw7DQb3y860NMfphp8YDs/I TXEQRAIoWkdSThaH62HQPS3EaDjSuQRnlsKcvmfwSkgInUxBcG2aSafUu8FjFjqQ jcjnXTHPXET97UNzzbPrhB0qATMmXCOj82WsJR9fMT8e9/9oVTie2zEGf0kjDKSb A2Ou7vPacNj0bMyoFum6e9xmDQZ/pZfF2DWygIpoB4MiwMW9cCz4HXT16MWz8l0J srUTF4zMvO5r9F5GQBEKEdoyJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHu6oysH bEWOa0uHnezsk8/ARz7+MB8GA1UdIwQYMBaAFNP6ede4Qei6eZjqIoYbqQ+5ZR9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTM0Ni84QzY1QjZFNkY3 MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZMcDVtT29paGh1cEQ3bGxI MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBfcDUxN2hCNkxwNW1Pb2loaHVwRDdsbEgyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTM0Ni84QzY1QjZFNkY3MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZM cDVtT29paGh1cEQ3bGxIMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwgZWBC2lsQFIhS6AlzGK/Seh6VmSCVGIhF1XkMwEi1mROwxEXU9b1 O/jNKXsa1UNdNKelOWuZMuDADGx/4ep91tUikytbZwkAu5b5/lUu6wZz7WBCnr72 MQ11PTRYPhh3qFu3J0BsdHWmxqwt+jgO64P2I6Lyyy4AwHD9hpSD4Yk3bM51Z4qO OP6keI6lJKo/9YLQX0yCPZToLHK8Is7NGW9Gyq0/wrJRjyXG6BFD2Q5S+NvMz/Ow K2FnYCrIqYJj8tKpHZWEhM8HM41oJtsu4ANpoIH3nad5CS7nEv1yHP2SJ6eeMctM cradZ/D21pJHJ2nIrQKmEwNFIEZNymn+ -----END CERTIFICATE-----Generated at Mon Oct 20 16:42:46 2025 by rpki-client