$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft File: iKLLRiSAG8nHraIjg5_DxTbH-yY.mft (raw, json) Hash identifier: 7GHZAJxkQBFdRACBONcx1lDbqipfYieRMzKST+I48pE= Subject key identifier: 98:DB:14:FB:22:72:23:EA:F5:AB:E2:6A:0F:70:DD:A4:8E:55:18:88 Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 Certificate issuer: /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft Manifest number: 0186 Signing time: Thu 23 Oct 2025 05:17:12 +0000 Manifest this update: Thu 23 Oct 2025 05:17:11 +0000 Manifest next update: Thu 30 Oct 2025 05:17:11 +0000 Files and hashes: 1: iKLLRiSAG8nHraIjg5_DxTbH-yY.crl (hash: mrzG4FMcTbz9RK9oVzfBvtosQdro82sswmmaDUIPkBY=) 2: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (hash: 8QOgqDdN+ptFq5t2Do1YrPeFHrdcCMOhvnCtIt6h2xM=) 3: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (hash: wS/1XbTV0fUfoxUiBL8wib+ZANzACMiLYvLQVQtAvJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 05:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26 Validity Not Before: Oct 23 05:17:11 2025 GMT Not After : Oct 30 05:17:11 2025 GMT Subject: CN=68f9ba57-e85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b1:21:b1:c0:96:ee:52:ad:b2:1b:96:1f:0b: 0e:8d:53:be:dd:1b:27:10:8c:52:1d:22:e5:d6:56: 49:02:9b:4b:25:62:90:45:4c:19:8c:83:57:f4:9e: c8:53:93:a5:f9:fc:1c:5c:71:7e:30:79:5f:1f:e5: fa:63:92:77:13:c6:88:5e:1d:76:f4:50:a5:71:b0: df:ac:68:fa:6e:9f:d5:65:73:55:3a:51:1c:4e:ac: 29:19:75:18:c1:94:73:aa:43:e3:98:7f:0d:8f:ea: 10:77:79:5c:6f:81:d1:73:ba:e9:1a:b6:de:da:93: ba:94:94:35:d6:1d:f8:81:c2:e2:43:5d:fe:5f:d1: b3:38:eb:f0:7c:3e:12:52:4f:1a:bd:d3:6d:6f:05: 18:76:49:78:b2:3d:65:d6:44:e5:36:48:5b:e3:f2: a1:8b:d4:a0:93:0c:55:82:fa:14:d9:f9:ee:0e:5b: db:1c:19:b8:20:0e:ec:0f:28:a5:86:04:7d:97:be: 23:19:75:65:eb:a2:04:ce:c1:ae:22:58:e1:02:1e: a0:bf:79:5f:33:a5:51:cc:59:c0:6a:48:05:8e:a2: 76:f7:bb:48:ba:59:e2:2b:08:41:28:a3:e5:c5:62: 03:53:ec:28:e2:ee:25:88:d7:43:82:4a:f1:f4:d9: 3c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DB:14:FB:22:72:23:EA:F5:AB:E2:6A:0F:70:DD:A4:8E:55:18:88 X509v3 Authority Key Identifier: keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:59:a4:b5:0b:05:bc:c4:99:5a:86:6a:99:76:50:82:7a:65: 81:c6:bb:78:1b:da:e6:c5:b9:c8:6d:37:9f:d9:22:16:ce:52: 4e:27:6b:56:4a:27:93:92:95:70:22:90:06:e8:5b:b7:a9:ca: 50:ba:9a:8e:e4:be:23:30:e2:eb:14:cd:5d:6b:0d:bb:36:d3: 21:50:15:d3:54:1a:84:85:28:1b:e0:a7:a6:0d:be:ea:9b:a6: 02:37:10:c6:c4:a9:94:9a:66:33:70:20:a2:36:6d:53:ae:19: 89:3c:05:4c:a9:60:85:a5:ec:e1:a3:f5:26:43:40:20:63:da: 41:90:7f:a3:4a:9c:3d:b7:df:f1:7d:5a:ae:db:bc:68:29:88: 2b:c9:e6:d1:40:25:b9:ab:88:75:09:b2:5e:a6:c3:28:68:b7: f8:2f:75:4f:88:1a:b2:12:b0:09:c4:1b:75:44:6e:48:1b:de: cb:69:d9:7e:74:fd:e6:6e:67:0e:46:fe:06:29:62:0d:14:29: 5c:a4:d0:3e:c3:49:e2:59:bd:d6:49:47:77:f4:0b:5c:18:dc: 38:14:49:7e:7e:a5:2e:e6:ea:4e:5a:c0:66:8f:7a:08:0b:29: 13:d4:d5:46:e9:0b:be:e4:68:0e:ab:5a:ff:03:0e:7d:3f:91: de:f4:bb:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY5MzcxMTAvBgNVBAUTKDg4QTJDQjQ2MjQ4MDFCQzlDN0FEQTIyMzgzOUZDM0M1 MzZDN0ZCMjYwHhcNMjUxMDIzMDUxNzExWhcNMjUxMDMwMDUxNzExWjAYMRYwFAYD VQQDEw02OGY5YmE1Ny1lODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbEhscCW7lKtshuWHwsOjVO+3RsnEIxSHSLl1lZJAptLJWKQRUwZjINX9J7I U5Ol+fwcXHF+MHlfH+X6Y5J3E8aIXh129FClcbDfrGj6bp/VZXNVOlEcTqwpGXUY wZRzqkPjmH8Nj+oQd3lcb4HRc7rpGrbe2pO6lJQ11h34gcLiQ13+X9GzOOvwfD4S Uk8avdNtbwUYdkl4sj1l1kTlNkhb4/Khi9SgkwxVgvoU2fnuDlvbHBm4IA7sDyil hgR9l74jGXVl66IEzsGuIljhAh6gv3lfM6VRzFnAakgFjqJ297tIulniKwhBKKPl xWIDU+wo4u4liNdDgkrx9Nk8LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjbFPsi ciPq9aviag9w3aSOVRiIMB8GA1UdIwQYMBaAFIiiy0YkgBvJx62iI4Ofw8U2x/sm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjkzNy8yNkI0OTgxRTVC MjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4bkhyYUlqZzVfRHhUYkgt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lLTExSaVNBRzhuSHJhSWpnNV9EeFRiSC15WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjkzNy8yNkI0OTgxRTVCMjMxMUVFQjg3NzNGNzBDNEY5QUUwMi9pS0xMUmlTQUc4 bkhyYUlqZzVfRHhUYkgteVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQWaS1CwW8xJlahmqZdlCCemWBxrt4G9rmxbnIbTef2SIWzlJOJ2tW SieTkpVwIpAG6Fu3qcpQupqO5L4jMOLrFM1daw27NtMhUBXTVBqEhSgb4KemDb7q m6YCNxDGxKmUmmYzcCCiNm1TrhmJPAVMqWCFpezho/UmQ0AgY9pBkH+jSpw9t9/x fVqu27xoKYgryebRQCW5q4h1CbJepsMoaLf4L3VPiBqyErAJxBt1RG5IG97Ladl+ dP3mbmcORv4GKWINFClcpNA+w0niWb3WSUd39AtcGNw4FEl+fqUu5upOWsBmj3oI CykT1NVG6Qu+5GgOq1r/Aw59P5He9LvB -----END CERTIFICATE-----Generated at Thu Oct 23 11:21:51 2025 by rpki-client