$ rpki-client -vvf rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft File: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft (raw, json) Hash identifier: 9mXk6KCV/zW/aN0eyUx8PdZQP2rS+mDUqi5AMA6omZc= Subject key identifier: 3B:05:83:2E:DA:69:0D:08:10:1E:80:A2:70:4E:D2:D2:E6:C3:74:1C Authority key identifier: EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F Certificate issuer: /CN=A9141526/serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Certificate serial: 2179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft Manifest number: 2179 Signing time: Tue 04 Nov 2025 16:00:32 +0000 Manifest this update: Tue 04 Nov 2025 16:00:31 +0000 Manifest next update: Tue 11 Nov 2025 16:00:31 +0000 Files and hashes: 1: 7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl (hash: qFWItCKUvalU1iF6+VH4Ak83yW+tZjUqo/Kh6KLpYU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8569 (0x2179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141526, serialNumber=EC80086C2207B1A04600725183E3C4F0FDE1675F Validity Not Before: Nov 4 16:00:31 2025 GMT Not After : Nov 11 16:00:31 2025 GMT Subject: CN=690a231f-c80d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4e:de:3d:60:dd:78:b0:00:21:be:35:cb:e8: ae:fb:2d:a4:45:02:a3:3a:90:44:9c:1e:1a:c0:54: 0b:5d:69:de:da:76:ca:2d:6a:a3:11:c1:d0:ec:b7: 81:99:b3:22:b5:b3:9d:85:eb:84:40:88:db:09:87: e8:f1:9f:42:55:ba:9c:fc:f7:f2:57:f3:82:1f:76: 15:83:aa:87:f5:63:d1:b3:03:82:ff:27:41:b9:d0: aa:f6:40:76:09:34:47:b0:43:bd:d4:a1:8e:ce:08: ff:7d:c0:ac:1b:60:ad:6e:7f:52:02:17:4b:ab:e7: 18:73:a1:49:dd:1e:75:ca:3b:5e:cf:a5:f3:08:1d: 24:11:d0:9c:22:96:ad:21:73:f2:e2:15:2c:f4:10: a1:c6:09:1b:31:e1:63:8b:96:43:4f:03:55:32:b3: 41:95:c8:9d:9a:78:1e:da:49:5e:9c:51:48:2b:1f: 17:d3:95:45:21:f1:b1:d0:5c:8f:53:aa:fe:cd:69: 46:0a:13:3d:78:ca:1d:1d:17:07:b5:b9:d0:7b:be: e9:02:32:33:91:fc:9f:dd:53:23:0b:e8:46:e1:c8: 34:30:61:40:fc:a6:79:3a:5b:9a:ec:0f:02:79:6a: 71:6a:c7:0a:d6:56:0c:45:d5:42:32:6b:f2:6d:f9: e8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:05:83:2E:DA:69:0D:08:10:1E:80:A2:70:4E:D2:D2:E6:C3:74:1C X509v3 Authority Key Identifier: keyid:EC:80:08:6C:22:07:B1:A0:46:00:72:51:83:E3:C4:F0:FD:E1:67:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IAIbCIHsaBGAHJRg-PE8P3hZ18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141526/F628A336E9A411E596AB8223C4F9AE02/7IAIbCIHsaBGAHJRg-PE8P3hZ18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:41:cc:6d:a6:9b:89:99:75:9f:fb:f3:dc:01:43:83:36:7b: 92:d9:8a:ef:35:c1:0a:44:c2:84:96:e3:d4:05:92:c1:d8:da: 22:b1:a0:ac:b9:e6:e7:e3:11:0e:c4:b4:3f:f7:23:fb:2f:24: cc:5e:71:59:89:8b:3f:a6:f1:4b:38:70:64:51:da:18:88:f3: 65:ec:c9:ab:e0:c1:3d:b0:36:52:76:6d:42:b7:53:43:b4:9b: 11:7b:6b:3a:bc:c0:8b:5a:09:ae:d1:eb:72:67:38:42:9b:3d: 0a:a4:d5:ff:be:17:c5:51:1a:01:7e:8b:e8:5e:71:20:f7:94: 62:c7:6b:d3:ba:66:63:2d:b0:7c:09:92:3d:8c:04:48:a0:7a: 89:cc:87:8e:17:69:54:2d:a4:d2:b8:69:21:f4:18:c0:bb:46: 2e:55:d8:93:b2:13:9a:cf:c3:45:11:25:39:c2:23:27:08:70: e2:c8:d2:09:80:98:4c:82:9a:f6:52:85:29:21:84:f3:5c:66: 2a:61:f2:20:8d:70:6f:d8:8b:1f:2f:2b:95:8d:62:e5:b4:53: e0:2d:08:c9:2a:a4:cc:20:17:75:6f:ac:37:64:df:f1:bb:e4: a1:1c:d2:be:e5:5c:32:6b:5a:25:80:56:57:b7:27:54:97:7d: fa:4c:f2:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1MjYxMTAvBgNVBAUTKEVDODAwODZDMjIwN0IxQTA0NjAwNzI1MTgzRTNDNEYw RkRFMTY3NUYwHhcNMjUxMTA0MTYwMDMxWhcNMjUxMTExMTYwMDMxWjAYMRYwFAYD VQQDEw02OTBhMjMxZi1jODBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqU7ePWDdeLAAIb41y+iu+y2kRQKjOpBEnB4awFQLXWne2nbKLWqjEcHQ7LeB mbMitbOdheuEQIjbCYfo8Z9CVbqc/PfyV/OCH3YVg6qH9WPRswOC/ydBudCq9kB2 CTRHsEO91KGOzgj/fcCsG2Ctbn9SAhdLq+cYc6FJ3R51yjtez6XzCB0kEdCcIpat IXPy4hUs9BChxgkbMeFji5ZDTwNVMrNBlcidmnge2klenFFIKx8X05VFIfGx0FyP U6r+zWlGChM9eModHRcHtbnQe77pAjIzkfyf3VMjC+hG4cg0MGFA/KZ5Olua7A8C eWpxascK1lYMRdVCMmvybfnouwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsFgy7a aQ0IEB6AonBO0tLmw3QcMB8GA1UdIwQYMBaAFOyACGwiB7GgRgByUYPjxPD94Wdf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTUyNi9GNjI4QTMzNkU5 QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNhQkdBSEpSZy1QRThQM2ha MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdJQUliQ0lIc2FCR0FISlJnLVBFOFAzaFoxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTUyNi9GNjI4QTMzNkU5QTQxMUU1OTZBQjgyMjNDNEY5QUUwMi83SUFJYkNJSHNh QkdBSEpSZy1QRThQM2haMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJQcxtppuJmXWf+/PcAUODNnuS2YrvNcEKRMKEluPUBZLB2NoisaCs uebn4xEOxLQ/9yP7LyTMXnFZiYs/pvFLOHBkUdoYiPNl7Mmr4ME9sDZSdm1Ct1ND tJsRe2s6vMCLWgmu0etyZzhCmz0KpNX/vhfFURoBfovoXnEg95Rix2vTumZjLbB8 CZI9jARIoHqJzIeOF2lULaTSuGkh9BjAu0YuVdiTshOaz8NFESU5wiMnCHDiyNIJ gJhMgpr2UoUpIYTzXGYqYfIgjXBv2IsfLyuVjWLltFPgLQjJKqTMIBd1b6w3ZN/x u+ShHNK+5Vwya1olgFZXtydUl336TPIN -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:45 2025 by rpki-client