$ rpki-client -vvf rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft File: f95kLEQhft58x2dxm6Z9A20X0Es.mft (raw, json) Hash identifier: IK6tMlHfk421Lq8BNl9FT5ov/pTPmya6hMFJYS5ooV8= Subject key identifier: 99:19:D2:FF:2E:46:DC:9F:A5:D6:63:FE:3D:D1:F4:DA:79:A9:36:55 Authority key identifier: 7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B Certificate issuer: /CN=A9189883/serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Certificate serial: 0178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft Manifest number: 0175 Signing time: Sun 19 Oct 2025 06:27:01 +0000 Manifest this update: Sun 19 Oct 2025 06:27:00 +0000 Manifest next update: Sun 26 Oct 2025 06:27:00 +0000 Files and hashes: 1: f95kLEQhft58x2dxm6Z9A20X0Es.crl (hash: iMMHPok0H07fkDp4tZddlxI9ZliMdkBjA4qNhx/4Ous=) 2: 166B5FEA727711EEA4209110C4F9AE02.roa (hash: 6XI21Rbox6GrvQ2XIiLWLaxiZEN511Ja5aYkWDlWtkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 376 (0x178) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189883, serialNumber=7FDE642C44217EDE7CC767719BA67D036D17D04B Validity Not Before: Oct 19 06:27:00 2025 GMT Not After : Oct 26 06:27:00 2025 GMT Subject: CN=68f484b4-d01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:33:24:09:23:74:47:85:ec:6b:65:25:29: d5:f4:d4:2a:97:f8:a4:0c:d0:ee:39:51:f4:a7:8e: 19:d1:c2:16:36:63:0c:59:18:93:67:68:40:c1:c6: 24:5b:ac:d3:86:3b:87:09:ee:9a:a9:84:f1:f3:59: 38:aa:e0:a2:2d:b5:74:e8:5e:cb:20:5b:cb:b6:33: bc:2b:2b:de:7b:aa:b0:f4:14:be:9a:08:ad:7e:c6: df:ad:2d:48:b3:fb:02:78:f3:85:cb:53:88:fd:59: 5f:31:e7:68:18:73:f7:cb:6d:80:ee:8d:9f:cc:ca: fd:94:75:76:2b:f9:6d:20:48:7c:10:31:10:ce:7f: 55:84:5f:50:b6:cb:98:3e:cb:16:89:fb:36:f6:c5: 2b:db:af:f9:1f:b4:1a:96:2a:fc:9b:a1:71:8e:a1: 92:cf:aa:5a:a9:e9:f4:22:ae:61:d7:cd:e0:d8:b2: 44:c0:03:e2:d5:5b:94:3f:06:6c:be:98:b7:4a:98: ee:8a:5e:bd:84:52:7a:eb:60:bf:92:76:d8:be:0d: 47:87:6c:bb:e9:b1:e4:1f:e2:c4:0a:80:ad:54:30: 7e:77:9f:39:cf:22:c7:fe:2b:bf:8d:e8:44:2f:28: 25:01:a1:8b:1c:69:ac:c6:73:00:f6:c6:dd:cf:4c: 9b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:19:D2:FF:2E:46:DC:9F:A5:D6:63:FE:3D:D1:F4:DA:79:A9:36:55 X509v3 Authority Key Identifier: keyid:7F:DE:64:2C:44:21:7E:DE:7C:C7:67:71:9B:A6:7D:03:6D:17:D0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f95kLEQhft58x2dxm6Z9A20X0Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189883/C37EC8B2727611EE8460290DC4F9AE02/f95kLEQhft58x2dxm6Z9A20X0Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:85:4a:c9:87:06:f4:52:a1:75:81:98:6f:3a:98:1c:b8:07: ec:d0:f6:72:a7:84:3c:fb:f2:55:21:76:c1:de:9c:fe:c1:03: fb:8e:e2:2b:ef:32:7a:88:39:1b:f2:98:af:44:c7:19:6c:58: d3:27:22:f6:e5:e0:90:cb:32:d9:fc:dc:90:9e:30:04:d8:6d: 2b:83:63:ec:da:90:ba:18:0b:6e:3e:9c:cd:c2:1e:33:0a:70: 60:ca:b3:6e:7b:0e:e5:79:50:00:04:6e:20:82:d9:03:86:29: b3:f6:55:96:ee:7c:d7:df:bb:93:aa:15:15:c5:13:bd:a5:e7: 77:0b:79:aa:30:34:00:74:0c:85:f3:07:1c:e3:46:ba:81:58: a5:31:01:63:70:83:51:f0:77:d2:33:fa:9f:76:b3:e9:c1:87: f3:e1:0a:42:b9:21:7d:95:af:e5:f9:43:c7:37:bd:0e:8f:30: ca:91:e2:a7:7a:38:d2:bc:4a:60:df:8a:0a:99:5d:a6:96:f0: 17:f5:51:74:6c:44:d2:2f:90:68:47:25:2d:bd:79:f4:b4:16: da:b4:5c:cd:35:6b:1e:61:7a:45:9c:0f:55:77:98:91:f6:0c: b3:8a:c8:1a:f7:41:3a:a1:68:a8:be:d4:59:4a:13:ee:fd:92: fb:84:94:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk4ODMxMTAvBgNVBAUTKDdGREU2NDJDNDQyMTdFREU3Q0M3Njc3MTlCQTY3RDAz NkQxN0QwNEIwHhcNMjUxMDE5MDYyNzAwWhcNMjUxMDI2MDYyNzAwWjAYMRYwFAYD VQQDEw02OGY0ODRiNC1kMDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5IzJAkjdEeF7GtlJSnV9NQql/ikDNDuOVH0p44Z0cIWNmMMWRiTZ2hAwcYk W6zThjuHCe6aqYTx81k4quCiLbV06F7LIFvLtjO8Kyvee6qw9BS+mgitfsbfrS1I s/sCePOFy1OI/VlfMedoGHP3y22A7o2fzMr9lHV2K/ltIEh8EDEQzn9VhF9QtsuY PssWifs29sUr26/5H7Qalir8m6FxjqGSz6paqen0Iq5h183g2LJEwAPi1VuUPwZs vpi3Spjuil69hFJ662C/knbYvg1Hh2y76bHkH+LECoCtVDB+d585zyLH/iu/jehE LyglAaGLHGmsxnMA9sbdz0ybkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkZ0v8u RtyfpdZj/j3R9Np5qTZVMB8GA1UdIwQYMBaAFH/eZCxEIX7efMdncZumfQNtF9BL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTg4My9DMzdFQzhCMjcy NzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0NTh4MmR4bTZaOUEyMFgw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y5NWtMRVFoZnQ1OHgyZHhtNlo5QTIwWDBFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTg4My9DMzdFQzhCMjcyNzYxMUVFODQ2MDI5MERDNEY5QUUwMi9mOTVrTEVRaGZ0 NTh4MmR4bTZaOUEyMFgwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkhUrJhwb0UqF1gZhvOpgcuAfs0PZyp4Q8+/JVIXbB3pz+wQP7juIr 7zJ6iDkb8pivRMcZbFjTJyL25eCQyzLZ/NyQnjAE2G0rg2Ps2pC6GAtuPpzNwh4z CnBgyrNuew7leVAABG4ggtkDhimz9lWW7nzX37uTqhUVxRO9ped3C3mqMDQAdAyF 8wcc40a6gVilMQFjcINR8HfSM/qfdrPpwYfz4QpCuSF9la/l+UPHN70OjzDKkeKn ejjSvEpg34oKmV2mlvAX9VF0bETSL5BoRyUtvXn0tBbatFzNNWseYXpFnA9Vd5iR 9gyzisga90E6oWiovtRZShPu/ZL7hJRW -----END CERTIFICATE-----Generated at Mon Oct 20 21:41:40 2025 by rpki-client