$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft File: i2WlKUN31oY3jEaz6drXzbW2Z5E.mft (raw, json) Hash identifier: Rnk33cbl+5XmI+gnTh8xlKAp/8nwFfIyB2Al1I1BPGU= Subject key identifier: 60:B3:08:F0:62:11:02:B3:73:52:AB:16:A7:E8:1C:34:01:88:5D:23 Authority key identifier: 8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91 Certificate issuer: /CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791 Certificate serial: 016E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft Manifest number: 0168 Signing time: Thu 23 Oct 2025 05:44:28 +0000 Manifest this update: Thu 23 Oct 2025 05:44:27 +0000 Manifest next update: Thu 30 Oct 2025 05:44:27 +0000 Files and hashes: 1: i2WlKUN31oY3jEaz6drXzbW2Z5E.crl (hash: tCmxgXQqPZMTi+WuGauy/hnEeWLFrvfDTxOWBKrFjQM=) 2: A2F568A08CDC11EEA05B6E55C4F9AE02.roa (hash: 1BbW+GzFmicFxrJi47abULi9jqJhPlJkmCnwzd461wM=) 3: 83298B188CDD11EE9C0A8258C4F9AE02.roa (hash: uYX2IlbgkFVHpSI6ncTYHrhhVumZeL9bEclaECevCas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 05:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 366 (0x16e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C2D, serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791 Validity Not Before: Oct 23 05:44:27 2025 GMT Not After : Oct 30 05:44:27 2025 GMT Subject: CN=68f9c0bc-9bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ac:ed:c9:22:87:fd:4b:80:e7:ad:ad:8d:2b: e0:bd:6c:19:59:9d:b0:2c:73:e8:bf:27:2f:2a:88: f6:42:76:eb:6e:a9:d5:37:31:91:b4:47:ff:33:fb: 6b:f2:ba:d2:e9:79:bc:6c:4d:75:fe:b7:6a:e2:87: d2:53:2c:35:22:9f:39:f0:91:f0:21:1e:ac:13:52: d1:7b:b8:14:c0:68:82:c2:e7:09:56:0e:b0:8a:bb: 5a:70:ac:20:a4:e7:ec:5f:96:28:9c:4d:14:95:2d: ef:07:9c:fd:b3:4b:ed:f0:9f:b0:7e:54:9f:ff:4d: 6b:7e:55:fe:1b:68:31:41:e0:b8:b9:5d:8c:21:1c: 5e:98:21:88:e7:5c:3e:d8:a8:05:6c:57:73:b0:70: ad:6f:f6:6a:11:f9:df:73:fa:f7:aa:ff:2b:5f:a8: 4b:26:d4:94:9e:41:a3:6d:30:86:c8:3c:92:bc:55: b1:c0:6c:ad:4e:a2:76:d2:c1:22:4e:37:ae:f9:28: d2:b3:9d:0d:a2:20:08:04:54:d5:0f:8d:61:c2:d1: 42:53:6d:31:a4:e6:48:f6:8b:9a:ef:00:70:ba:d7: bc:5e:7c:19:4c:de:d3:0d:67:bb:db:80:67:83:75: e8:4f:55:bf:a2:3a:40:dc:ab:96:d7:1d:20:f8:3a: fe:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B3:08:F0:62:11:02:B3:73:52:AB:16:A7:E8:1C:34:01:88:5D:23 X509v3 Authority Key Identifier: keyid:8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a4:4e:49:3e:37:83:5d:2d:c7:08:c8:2b:76:c2:50:ee:36: 9b:eb:f3:a2:06:13:b4:16:b3:42:3e:c1:7a:36:7a:03:3d:f3: 43:d9:54:bf:10:4b:df:8a:66:e1:74:8a:b4:af:5a:59:10:cb: 65:77:3f:92:78:49:a7:1c:63:c5:e9:db:0b:f9:af:8a:8a:ec: 7f:bc:26:0e:f9:fe:c2:7c:c4:84:1a:5a:28:02:ad:d9:dc:90: 69:5e:7c:a3:24:5f:3d:af:08:fa:f2:82:f7:50:3f:da:f0:8d: 21:e8:f9:a2:81:28:b9:ba:a8:54:3d:c3:19:38:f7:cb:69:93: 2b:d7:40:e7:a5:e8:e5:a8:e6:d1:8a:fa:a6:2c:3b:5c:7a:be: 0a:06:7a:ea:1f:b2:d6:60:a8:19:25:21:fe:6f:18:53:8c:4c: 59:96:58:c6:a3:88:34:19:09:07:e9:ba:4f:4a:ca:42:de:49: d8:f8:a4:6f:1b:13:74:9b:f2:58:94:62:11:5d:d9:a2:6d:73: 14:5e:3e:6d:5a:25:e2:8f:17:62:5d:72:22:93:bf:61:ef:72: 34:db:72:c0:0e:ed:0a:f6:77:07:66:69:e6:af:b8:c2:1a:d1: a4:08:1d:93:8a:ec:77:bd:7f:7f:07:33:e1:7d:9b:20:68:0e: 74:9b:93:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdDMkQxMTAvBgNVBAUTKDhCNjVBNTI5NDM3N0Q2ODYzNzhDNDZCM0U5REFEN0NE QjVCNjY3OTEwHhcNMjUxMDIzMDU0NDI3WhcNMjUxMDMwMDU0NDI3WjAYMRYwFAYD VQQDEw02OGY5YzBiYy05YmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKztySKH/UuA562tjSvgvWwZWZ2wLHPovycvKoj2QnbrbqnVNzGRtEf/M/tr 8rrS6Xm8bE11/rdq4ofSUyw1Ip858JHwIR6sE1LRe7gUwGiCwucJVg6wirtacKwg pOfsX5YonE0UlS3vB5z9s0vt8J+wflSf/01rflX+G2gxQeC4uV2MIRxemCGI51w+ 2KgFbFdzsHCtb/ZqEfnfc/r3qv8rX6hLJtSUnkGjbTCGyDySvFWxwGytTqJ20sEi Tjeu+SjSs50NoiAIBFTVD41hwtFCU20xpOZI9oua7wBwute8XnwZTN7TDWe724Bn g3XoT1W/ojpA3KuW1x0g+Dr+OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGCzCPBi EQKzc1KrFqfoHDQBiF0jMB8GA1UdIwQYMBaAFItlpSlDd9aGN4xGs+na1821tmeR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0MyRC85RTM5RjkzNjhD OUUxMUVFODdDOEVFNzhDNEY5QUUwMi9pMldsS1VOMzFvWTNqRWF6NmRyWHpiVzJa NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyV2xLVU4zMW9ZM2pFYXo2ZHJYemJXMlo1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0MyRC85RTM5RjkzNjhDOUUxMUVFODdDOEVFNzhDNEY5QUUwMi9pMldsS1VOMzFv WTNqRWF6NmRyWHpiVzJaNUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8pE5JPjeDXS3HCMgrdsJQ7jab6/OiBhO0FrNCPsF6NnoDPfND2VS/ EEvfimbhdIq0r1pZEMtldz+SeEmnHGPF6dsL+a+Kiux/vCYO+f7CfMSEGlooAq3Z 3JBpXnyjJF89rwj68oL3UD/a8I0h6PmigSi5uqhUPcMZOPfLaZMr10DnpejlqObR ivqmLDtcer4KBnrqH7LWYKgZJSH+bxhTjExZlljGo4g0GQkH6bpPSspC3knY+KRv GxN0m/JYlGIRXdmibXMUXj5tWiXijxdiXXIik79h73I023LADu0K9ncHZmnmr7jC GtGkCB2Tiux3vX9/BzPhfZsgaA50m5Pz -----END CERTIFICATE-----Generated at Thu Oct 23 20:31:36 2025 by rpki-client