$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft File: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft (raw, json) Hash identifier: IN3QJ4TDZ1z2+cSQwQsEXiFvV7H4AbdsAAF8KGNnOyI= Subject key identifier: 2C:07:0C:64:CD:D3:B8:DA:37:F7:44:93:D1:43:3C:B1:48:48:00:09 Authority key identifier: 21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4 Certificate issuer: /CN=A9176302/serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft Manifest number: E5 Signing time: Mon 15 Sep 2025 05:51:09 +0000 Manifest this update: Mon 15 Sep 2025 05:51:09 +0000 Manifest next update: Mon 22 Sep 2025 05:51:09 +0000 Files and hashes: 1: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl (hash: cFvqwi8Lxoljx2k38ZaK3WqKvTIYFYVTk7jTeYqAf7g=) 2: 0EE57B38378F11EF88F9BF5AC4F9AE02.roa (hash: J7/kiN3L5QvG4wInB+6wlLOPrN0QJOnlQzSphywWm/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Sep 2025 05:51:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176302, serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4 Validity Not Before: Sep 15 05:51:09 2025 GMT Not After : Sep 22 05:51:09 2025 GMT Subject: CN=68c7a94d-ed3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:67:b0:4d:8c:dc:7c:e3:1b:78:6f:c8:a0:21: b2:cd:70:bd:a2:e9:a3:21:f5:b3:38:d5:2d:55:9f: 38:9c:df:3c:f5:1b:b7:44:02:e2:c5:b8:e6:fd:3c: 7b:52:de:ae:1c:b0:00:ad:d7:e0:04:77:b8:e6:2a: 15:85:85:cf:10:17:d6:c4:b4:d7:5b:c6:a5:b5:41: 79:02:6b:58:df:f5:ab:1e:de:48:a1:75:7c:a8:34: 60:02:7b:4d:e4:0d:1d:1c:6a:e1:30:73:d4:23:11: c2:14:b6:bb:69:15:aa:28:03:ef:5d:ef:ae:36:ff: 99:89:70:31:9f:0a:37:c3:0a:03:c3:70:51:2c:fc: 16:8d:91:67:be:22:cf:2d:d0:b4:d9:f6:08:66:cf: 9f:b4:ba:0f:a6:ab:6f:f5:7d:8e:3e:04:eb:f2:88: f7:50:9d:7e:c8:01:59:7a:68:20:b4:5d:9c:1d:ca: 9f:f1:d9:80:b2:17:86:22:ec:c9:22:c7:9d:17:f8: b6:6e:7d:de:86:18:3b:28:89:f9:9b:ae:43:d2:78: 47:bf:c4:e6:34:cc:13:4e:53:5a:ca:c3:2d:70:5e: d0:8e:96:01:5f:b3:67:82:52:27:f7:5a:98:72:a1: b6:0a:0e:37:fc:3d:0c:99:84:af:9d:01:15:58:6e: 2d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:07:0C:64:CD:D3:B8:DA:37:F7:44:93:D1:43:3C:B1:48:48:00:09 X509v3 Authority Key Identifier: keyid:21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:b5:9d:f7:06:bb:8f:8d:40:44:93:8f:cd:65:4a:a4:d1:67: de:ce:29:c7:fa:f1:05:90:7e:98:49:8b:dd:5a:e1:cc:ac:ac: 0d:67:eb:46:8d:1f:90:df:c3:1f:74:b7:1a:84:51:f8:b4:99: 16:34:0b:ab:eb:85:a7:76:77:10:68:e2:ee:93:18:be:bb:7c: d8:56:3e:5b:8a:76:90:b3:28:bc:c5:f3:05:44:fa:c5:ac:db: 59:5d:f5:7f:ee:ab:2b:45:16:a6:9d:70:93:64:d4:24:bf:4b: 78:2a:96:35:9e:4a:0c:1c:5b:0f:fa:17:f1:b2:a8:4f:d6:32: 9f:66:62:c0:58:a7:9d:1c:8d:16:d3:e2:e4:3b:36:47:4c:62: cb:3a:f3:39:56:d6:b7:7d:6d:4e:a5:1f:91:db:67:59:ac:f1: 25:7a:9b:50:4c:4e:f0:73:bf:8f:a8:74:55:36:fe:7b:aa:15: 64:9c:bd:b5:94:25:9a:3d:63:06:ed:d2:b8:d4:f4:ee:42:bf: 4d:d1:a8:ca:90:1c:e1:7a:d1:d6:44:c3:40:90:6d:3f:03:7c: d1:1e:f9:8a:11:60:7f:37:b7:58:48:fb:be:75:22:6b:ac:ee: 4b:41:bf:33:17:c6:f2:6b:ee:57:94:58:81:15:cd:65:2b:20: 42:3a:d4:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzYzMDIxMTAvBgNVBAUTKDIxQkU4QzhGRTk1M0Y2RUM5N0I3RjEyMTYxN0VEOTEw NDdEQUE1QTQwHhcNMjUwOTE1MDU1MTA5WhcNMjUwOTIyMDU1MTA5WjAYMRYwFAYD VQQDEw02OGM3YTk0ZC1lZDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mewTYzcfOMbeG/IoCGyzXC9oumjIfWzONUtVZ84nN889Ru3RALixbjm/Tx7 Ut6uHLAArdfgBHe45ioVhYXPEBfWxLTXW8altUF5AmtY3/WrHt5IoXV8qDRgAntN 5A0dHGrhMHPUIxHCFLa7aRWqKAPvXe+uNv+ZiXAxnwo3wwoDw3BRLPwWjZFnviLP LdC02fYIZs+ftLoPpqtv9X2OPgTr8oj3UJ1+yAFZemggtF2cHcqf8dmAsheGIuzJ IsedF/i2bn3ehhg7KIn5m65D0nhHv8TmNMwTTlNaysMtcF7QjpYBX7NnglIn91qY cqG2Cg43/D0MmYSvnQEVWG4t6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwHDGTN 07jaN/dEk9FDPLFISAAJMB8GA1UdIwQYMBaAFCG+jI/pU/bsl7fxIWF+2RBH2qWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjMwMi9BMzJGREZERTM3 NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1eVh0X0VoWVg3WkVFZmFw YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0liNk1qLWxUOXV5WHRfRWhZWDdaRUVmYXBhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjMwMi9BMzJGREZERTM3NDYxMUVGOTY2NTMzMjZDNEY5QUUwMi9JYjZNai1sVDl1 eVh0X0VoWVg3WkVFZmFwYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjtZ33BruPjUBEk4/NZUqk0WfezinH+vEFkH6YSYvdWuHMrKwNZ+tG jR+Q38MfdLcahFH4tJkWNAur64WndncQaOLukxi+u3zYVj5binaQsyi8xfMFRPrF rNtZXfV/7qsrRRamnXCTZNQkv0t4KpY1nkoMHFsP+hfxsqhP1jKfZmLAWKedHI0W 0+LkOzZHTGLLOvM5Vta3fW1OpR+R22dZrPEleptQTE7wc7+PqHRVNv57qhVknL21 lCWaPWMG7dK41PTuQr9N0ajKkBzhetHWRMNAkG0/A3zRHvmKEWB/N7dYSPu+dSJr rO5LQb8zF8bya+5XlFiBFc1lKyBCOtR/ -----END CERTIFICATE-----Generated at Tue Sep 16 08:32:02 2025 by rpki-client