$ rpki-client -vvf rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft File: InkscMmJR76K9PSj51Wu3nlZ0ng.mft (raw, json) Hash identifier: DoOqXYN6DL1nx0H/6tCQkuYcOR7Q9fDnBx+KYxU4Gm0= Subject key identifier: 5C:ED:73:1F:D7:54:B8:31:68:54:88:D6:14:DA:5B:92:83:BA:80:83 Authority key identifier: 22:79:2C:70:C9:89:47:BE:8A:F4:F4:A3:E7:55:AE:DE:79:59:D2:78 Certificate issuer: /CN=A9166708/serialNumber=22792C70C98947BE8AF4F4A3E755AEDE7959D278 Certificate serial: 0FEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft Manifest number: 0FE4 Signing time: Thu 18 Sep 2025 17:38:45 +0000 Manifest this update: Thu 18 Sep 2025 17:38:45 +0000 Manifest next update: Thu 25 Sep 2025 17:38:45 +0000 Files and hashes: 1: InkscMmJR76K9PSj51Wu3nlZ0ng.crl (hash: 240Dr75lkBiAxQXePin2lhb1+SSCVxSoxkM5wOik8qM=) 2: C3417AA6593611E98E4C8C44C4F9AE02.roa (hash: CPG724JKOro03lp9kH78JPks3F1iBFJ6IMMveDvmHaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.crl rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4076 (0xfec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166708, serialNumber=22792C70C98947BE8AF4F4A3E755AEDE7959D278 Validity Not Before: Sep 18 17:38:45 2025 GMT Not After : Sep 25 17:38:45 2025 GMT Subject: CN=68cc43a5-a27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e0:a8:e5:bc:33:0e:e3:4c:4c:81:a5:c3:a2: 7a:94:31:57:80:e2:e1:eb:f9:c0:c5:cb:58:f7:57: 6d:47:f0:f4:9a:0a:c8:64:40:b1:58:29:01:bf:64: 1a:11:b0:1e:0f:3b:5a:7a:34:b7:7b:a8:2a:a7:92: 12:f7:7f:89:01:43:a4:81:6d:19:46:89:56:82:12: 42:66:07:5a:38:30:6d:28:00:10:bd:ce:38:d6:48: 29:d9:ac:16:d1:f5:58:49:ec:a6:44:7e:94:c2:c7: b1:29:07:f5:c2:2f:04:77:ee:79:b3:5a:22:7d:c8: 71:ac:bc:6f:e9:28:36:b4:09:fc:37:64:10:da:4f: 92:1c:6c:ee:76:e7:3f:74:7f:82:40:cf:43:de:07: e9:90:92:cd:0b:d9:f4:54:0b:da:40:c0:a3:a2:30: 58:b7:2c:79:f5:29:94:5a:e5:a9:f0:48:52:0d:c2: 35:31:a3:4a:34:6a:e8:88:a3:b8:bd:23:a7:81:73: 65:ef:1e:40:8f:91:99:32:23:ce:ee:f7:dd:ff:93: ea:43:6c:64:0d:35:1b:43:e2:3d:c0:f2:71:2b:0d: 52:77:66:f7:6e:d0:60:36:4a:7e:02:58:3f:df:d3: fa:80:d6:a2:da:9b:9e:be:c5:d5:c4:81:05:9d:55: ee:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:ED:73:1F:D7:54:B8:31:68:54:88:D6:14:DA:5B:92:83:BA:80:83 X509v3 Authority Key Identifier: keyid:22:79:2C:70:C9:89:47:BE:8A:F4:F4:A3:E7:55:AE:DE:79:59:D2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/InkscMmJR76K9PSj51Wu3nlZ0ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166708/FA526B50593511E98B54BC43C4F9AE02/InkscMmJR76K9PSj51Wu3nlZ0ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:13:de:99:67:26:c2:46:e6:3f:84:e2:9d:90:88:1a:ea:15: 3a:d5:49:9e:0b:20:1d:2c:51:7c:8b:a2:ad:93:50:95:cb:27: cc:5f:87:66:3b:88:f6:eb:7e:06:b9:16:cf:93:68:8e:c2:84: 0f:0d:8c:68:a6:01:33:fc:ce:ef:5e:58:47:73:99:0a:31:a2: 13:57:25:bd:04:03:a5:3b:4a:51:10:6e:2c:85:e1:de:48:5a: 07:6d:61:c7:11:f7:05:a4:b0:f2:e5:1b:68:4a:ca:63:0c:1a: 85:ac:fe:cb:82:c6:27:88:68:02:f9:73:39:04:a3:e0:93:e9: bf:3c:27:b6:a7:b4:ff:3c:c4:65:98:d8:ee:ae:bd:09:fb:21: b5:52:a8:5b:5b:e9:5f:6c:ac:a9:50:a2:93:f1:20:e1:61:63: 75:23:b7:12:af:0f:9b:ea:46:5b:37:85:6e:6f:db:43:87:c3: 1f:e4:a0:9e:c3:b9:a4:7a:9b:78:07:d0:e8:17:2c:61:bf:cc: 77:4b:c3:c4:80:03:55:7c:1f:16:6c:77:6c:ee:6e:ba:1c:d9: 21:ab:2e:e9:db:4e:0b:84:f2:7b:62:00:44:2f:93:e4:c2:6a: 11:8f:f7:b4:0c:f8:68:7b:49:7c:37:ee:41:df:fb:e8:b8:b9: 69:3e:7b:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjY3MDgxMTAvBgNVBAUTKDIyNzkyQzcwQzk4OTQ3QkU4QUY0RjRBM0U3NTVBRURF Nzk1OUQyNzgwHhcNMjUwOTE4MTczODQ1WhcNMjUwOTI1MTczODQ1WjAYMRYwFAYD VQQDEw02OGNjNDNhNS1hMjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+Co5bwzDuNMTIGlw6J6lDFXgOLh6/nAxctY91dtR/D0mgrIZECxWCkBv2Qa EbAeDztaejS3e6gqp5IS93+JAUOkgW0ZRolWghJCZgdaODBtKAAQvc441kgp2awW 0fVYSeymRH6UwsexKQf1wi8Ed+55s1oifchxrLxv6Sg2tAn8N2QQ2k+SHGzuduc/ dH+CQM9D3gfpkJLNC9n0VAvaQMCjojBYtyx59SmUWuWp8EhSDcI1MaNKNGroiKO4 vSOngXNl7x5Aj5GZMiPO7vfd/5PqQ2xkDTUbQ+I9wPJxKw1Sd2b3btBgNkp+Alg/ 39P6gNai2puevsXVxIEFnVXuEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFztcx/X VLgxaFSI1hTaW5KDuoCDMB8GA1UdIwQYMBaAFCJ5LHDJiUe+ivT0o+dVrt55WdJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjcwOC9GQTUyNkI1MDU5 MzUxMUU5OEI1NEJDNDNDNEY5QUUwMi9JbmtzY01tSlI3Nks5UFNqNTFXdTNubFow bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lua3NjTW1KUjc2SzlQU2o1MVd1M25sWjBuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NjcwOC9GQTUyNkI1MDU5MzUxMUU5OEI1NEJDNDNDNEY5QUUwMi9JbmtzY01tSlI3 Nks5UFNqNTFXdTNubFowbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVE96ZZybCRuY/hOKdkIga6hU61UmeCyAdLFF8i6Ktk1CVyyfMX4dm O4j2634GuRbPk2iOwoQPDYxopgEz/M7vXlhHc5kKMaITVyW9BAOlO0pREG4sheHe SFoHbWHHEfcFpLDy5RtoSspjDBqFrP7LgsYniGgC+XM5BKPgk+m/PCe2p7T/PMRl mNjurr0J+yG1UqhbW+lfbKypUKKT8SDhYWN1I7cSrw+b6kZbN4Vub9tDh8Mf5KCe w7mkept4B9DoFyxhv8x3S8PEgANVfB8WbHds7m66HNkhqy7p204LhPJ7YgBEL5Pk wmoRj/e0DPhoe0l8N+5B3/vouLlpPnvG -----END CERTIFICATE-----Generated at Thu Sep 18 19:12:39 2025 by rpki-client