$ rpki-client -vvf rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft File: IL0_f5mO1D1fxPhindDBiOx92uA.mft (raw, json) Hash identifier: WhiN1GBdKrgwj1kE6d/9iaX3g/PcF35p5Iq4NZrDLgI= Subject key identifier: BD:C8:55:91:7D:54:49:8D:CF:0B:12:B0:DF:4B:C3:8B:9E:FE:97:67 Authority key identifier: 20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0 Certificate issuer: /CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft Manifest number: 0172 Signing time: Sun 19 Oct 2025 06:27:44 +0000 Manifest this update: Sun 19 Oct 2025 06:27:44 +0000 Manifest next update: Sun 26 Oct 2025 06:27:44 +0000 Files and hashes: 1: IL0_f5mO1D1fxPhindDBiOx92uA.crl (hash: JK6V3hyJ4LIL8GGaD9WT7uUU9KZ8fd8+r/ckdsIaSqk=) 2: 10EB474C730311EE9ADB6C46C4F9AE02.roa (hash: cWgOEcKhYYXBYZ1Qeif6nqia0tYqSc7zBIrXwtNmPdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E9A4, serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0 Validity Not Before: Oct 19 06:27:44 2025 GMT Not After : Oct 26 06:27:44 2025 GMT Subject: CN=68f484e0-3b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6c:0c:ee:2d:3c:8e:7d:7d:62:6b:40:8c:05: 7f:be:54:14:74:82:c8:7d:28:e0:b9:72:53:af:cf: eb:bd:30:d6:05:9b:06:9f:9f:05:5f:4e:7b:ff:8d: 83:92:37:86:27:4e:7e:af:2d:1d:ba:22:d2:72:14: e3:3f:dc:1c:32:e3:e4:f0:cf:d7:b3:dd:8a:d9:93: 28:6a:fb:16:84:c5:0b:f1:b2:b9:66:0b:eb:f0:58: e3:20:3d:cd:6a:08:d5:59:1b:35:79:56:60:78:db: 02:62:9a:28:d1:9d:53:6a:a2:c7:6a:a4:fd:5c:87: c4:55:5f:5a:d8:6e:32:dd:33:5b:ab:1d:d5:04:13: a1:bc:1b:b8:50:cc:80:c6:0b:03:a0:3d:0a:c6:61: 01:2e:a5:cd:bb:77:b6:7d:b0:01:72:90:a0:d3:aa: f5:41:55:84:a8:59:82:06:e3:68:cc:09:7c:2a:ad: 74:c0:38:fc:66:8f:2d:3b:bc:4c:4d:d5:92:18:70: 9f:51:c4:e7:8c:e9:38:ac:00:86:27:f5:06:3c:98: 9b:15:26:d1:2b:49:98:a4:07:a6:1f:c6:56:8c:31: 7d:59:4c:b1:49:ac:53:b2:3b:83:9d:eb:44:2c:e0: 14:93:02:ca:bb:ef:6a:bd:23:d2:95:12:f6:b4:0b: 8e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C8:55:91:7D:54:49:8D:CF:0B:12:B0:DF:4B:C3:8B:9E:FE:97:67 X509v3 Authority Key Identifier: keyid:20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:cd:7f:e1:f1:7a:8e:3e:6a:2a:b2:59:eb:4f:21:6e:e1:27: e6:e5:31:28:a0:2e:03:58:9d:9f:55:fb:95:21:a8:47:91:74: 97:1b:4b:c7:26:f8:47:05:a7:51:3c:ff:a0:28:50:ad:30:20: 9e:f8:08:68:05:2b:6d:84:13:b1:b3:d4:a6:b2:a7:08:ad:0a: b6:ca:7a:fa:46:af:33:5e:de:7c:27:16:ba:c3:4a:51:7c:c5: 12:70:6b:27:d0:2a:21:49:7c:4d:55:6b:1b:da:ee:53:b6:07: d7:8e:43:9d:4c:52:aa:1f:13:7a:07:d6:21:bb:ba:28:92:56: 57:3c:65:01:e4:b4:a9:db:75:92:c4:f2:b0:e9:2d:5e:5c:4f: 4d:c7:ab:a0:2d:de:70:01:27:d3:19:98:90:ea:74:52:f9:7e: b8:76:d9:f8:49:4f:8c:75:65:3b:ba:53:1c:3f:a4:ec:de:ba: ff:c6:ca:dc:91:01:d3:13:fd:af:32:c0:1a:62:00:80:c7:89: da:24:54:ad:8d:a1:9a:b5:af:a8:b8:52:f0:d5:fe:a1:63:59: 11:16:b2:b2:0e:2f:62:d1:ad:95:c2:c5:f4:4d:bf:f2:27:b0: ea:ba:a0:b4:9c:5d:33:69:32:b5:67:5b:25:82:ac:b9:86:b8: ef:b1:7a:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU5QTQxMTAvBgNVBAUTKDIwQkQzRjdGOTk4RUQ0M0Q1RkM0Rjg2MjlERDBDMTg4 RUM3RERBRTAwHhcNMjUxMDE5MDYyNzQ0WhcNMjUxMDI2MDYyNzQ0WjAYMRYwFAYD VQQDEw02OGY0ODRlMC0zYjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmwM7i08jn19YmtAjAV/vlQUdILIfSjguXJTr8/rvTDWBZsGn58FX057/42D kjeGJ05+ry0duiLSchTjP9wcMuPk8M/Xs92K2ZMoavsWhMUL8bK5Zgvr8FjjID3N agjVWRs1eVZgeNsCYpoo0Z1TaqLHaqT9XIfEVV9a2G4y3TNbqx3VBBOhvBu4UMyA xgsDoD0KxmEBLqXNu3e2fbABcpCg06r1QVWEqFmCBuNozAl8Kq10wDj8Zo8tO7xM TdWSGHCfUcTnjOk4rACGJ/UGPJibFSbRK0mYpAemH8ZWjDF9WUyxSaxTsjuDnetE LOAUkwLKu+9qvSPSlRL2tAuOIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3IVZF9 VEmNzwsSsN9Lw4ue/pdnMB8GA1UdIwQYMBaAFCC9P3+ZjtQ9X8T4Yp3QwYjsfdrg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTlBNC8wRDVEQzUyNDcz MDIxMUVFQjVDQ0MyNDRDNEY5QUUwMi9JTDBfZjVtTzFEMWZ4UGhpbmREQmlPeDky dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lMMF9mNW1PMUQxZnhQaGluZERCaU94OTJ1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTlBNC8wRDVEQzUyNDczMDIxMUVFQjVDQ0MyNDRDNEY5QUUwMi9JTDBfZjVtTzFE MWZ4UGhpbmREQmlPeDkydUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClzX/h8XqOPmoqslnrTyFu4Sfm5TEooC4DWJ2fVfuVIahHkXSXG0vH JvhHBadRPP+gKFCtMCCe+AhoBStthBOxs9SmsqcIrQq2ynr6Rq8zXt58Jxa6w0pR fMUScGsn0CohSXxNVWsb2u5TtgfXjkOdTFKqHxN6B9Yhu7ooklZXPGUB5LSp23WS xPKw6S1eXE9Nx6ugLd5wASfTGZiQ6nRS+X64dtn4SU+MdWU7ulMcP6Ts3rr/xsrc kQHTE/2vMsAaYgCAx4naJFStjaGata+ouFLw1f6hY1kRFrKyDi9i0a2VwsX0Tb/y J7DquqC0nF0zaTK1Z1slgqy5hrjvsXqK -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:32 2025 by rpki-client