$ rpki-client -vvf rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft File: CkIqY5fY62yzV3UpfOtVpeGP4eI.mft (raw, json) Hash identifier: AbRHb4S3s8LI9CPM/siSHU1sZJUGAbQASE/+bFq5MUQ= Subject key identifier: AD:9C:17:58:B1:81:F2:17:33:20:72:3C:73:9F:77:63:23:B3:2E:4A Authority key identifier: 0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2 Certificate issuer: /CN=A9176AFD/serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2 Certificate serial: 1908 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft Manifest number: 18F6 Signing time: Mon 08 Sep 2025 16:28:06 +0000 Manifest this update: Mon 08 Sep 2025 16:28:05 +0000 Manifest next update: Mon 15 Sep 2025 16:28:05 +0000 Files and hashes: 1: CkIqY5fY62yzV3UpfOtVpeGP4eI.crl (hash: NyfVLtfMB717Q/U4dcBEpNrDfzxvCz8aaZAmh6sXDZI=) 2: D6D99A3EBE3711EDA6617C5DC4F9AE02.roa (hash: LY7vLpDfVXZjs8mY5Lmcq8YY4mbx+XwbeXcZe9sNvfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6408 (0x1908) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176AFD, serialNumber=0A422A6397D8EB6CB35775297CEB55A5E18FE1E2 Validity Not Before: Sep 8 16:28:05 2025 GMT Not After : Sep 15 16:28:05 2025 GMT Subject: CN=68bf0416-05fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7c:cf:39:b5:d8:54:d9:a2:ff:22:6e:85:1b: 14:6f:44:f9:63:a2:8e:06:79:9d:35:ed:98:7a:64: 47:63:14:97:4e:0f:84:4e:0d:7d:b3:4a:01:69:41: f9:7b:35:dc:87:7c:ea:f1:8d:e0:12:3b:ed:14:2d: e1:ed:bf:50:50:02:45:8d:fb:c6:ef:52:7d:9f:07: 70:01:a2:83:b1:63:72:bb:30:ae:d2:fa:fb:b7:00: e3:23:41:79:4c:55:36:14:9a:13:2b:6c:e6:04:4c: 95:c0:4b:2a:05:d4:26:2b:81:2d:54:f3:06:5e:42: d8:2f:cf:e0:57:fb:df:1e:0c:1f:d3:3e:2b:99:a1: e2:a6:b1:67:96:f8:d2:2b:9b:ca:1d:d6:61:e9:e0: fb:14:21:6e:bf:c7:e5:8a:e2:a0:cc:d9:98:55:db: 8e:2e:ca:fa:dc:71:10:a0:f7:1e:89:7a:65:06:2f: f4:ba:2f:39:b3:15:ca:37:b7:ce:88:18:79:5b:95: f0:8b:04:27:4a:3a:cd:70:cb:17:90:01:d4:77:c8: 6c:f8:2c:8d:38:5a:13:31:38:a2:25:3f:18:0c:2a: 7d:91:3d:8b:3d:31:c9:27:21:b1:0b:20:eb:c3:af: 3b:51:52:f0:cd:bf:f8:57:07:f3:c8:30:6a:29:df: 78:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9C:17:58:B1:81:F2:17:33:20:72:3C:73:9F:77:63:23:B3:2E:4A X509v3 Authority Key Identifier: keyid:0A:42:2A:63:97:D8:EB:6C:B3:57:75:29:7C:EB:55:A5:E1:8F:E1:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkIqY5fY62yzV3UpfOtVpeGP4eI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176AFD/5BB2230A92F811E784CA0E5CC4F9AE02/CkIqY5fY62yzV3UpfOtVpeGP4eI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:3a:31:12:13:54:55:35:54:bf:aa:ef:55:d5:46:ba:5a:4e: 03:d6:a6:a7:e1:cf:1d:ee:d0:e8:d4:47:45:e5:d5:45:12:fd: 4d:94:35:6c:9c:09:b1:2a:34:df:1a:4a:be:e9:64:8c:e5:9b: e4:b6:55:05:18:ae:67:95:3c:38:c7:dd:14:3e:63:82:84:a2: 95:8e:09:31:04:20:a9:7e:f5:1c:94:02:8e:0d:ad:d0:15:b9: cb:5c:c8:4c:41:1d:17:32:7c:ef:91:39:45:97:d3:d4:cc:6f: 1c:62:fd:4c:7d:79:e7:6f:5d:4e:75:d2:6d:cb:65:52:64:6e: e7:73:c0:69:e2:e3:d6:13:86:c2:e2:6a:de:52:80:f4:3c:ff: 71:19:38:78:b2:0d:96:f0:9d:3b:0e:66:66:4b:7a:78:48:65: f6:1f:83:fa:a7:1b:ca:00:50:63:9b:55:71:54:2e:ff:ce:9a: 63:f2:4a:62:20:bd:2e:55:1e:65:5f:ab:0e:a5:42:9b:6f:c1: 04:a1:77:fa:21:85:7a:a1:38:50:63:b6:b3:cc:82:03:72:31: 5f:8c:c7:97:ba:9c:8a:f4:19:cb:2d:95:7f:38:1b:1f:c3:f2: be:45:ed:b2:c2:a1:4f:d0:a6:80:21:74:5c:cd:f0:4f:28:8a: c3:33:a6:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZBRkQxMTAvBgNVBAUTKDBBNDIyQTYzOTdEOEVCNkNCMzU3NzUyOTdDRUI1NUE1 RTE4RkUxRTIwHhcNMjUwOTA4MTYyODA1WhcNMjUwOTE1MTYyODA1WjAYMRYwFAYD VQQDEw02OGJmMDQxNi0wNWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHzPObXYVNmi/yJuhRsUb0T5Y6KOBnmdNe2YemRHYxSXTg+ETg19s0oBaUH5 ezXch3zq8Y3gEjvtFC3h7b9QUAJFjfvG71J9nwdwAaKDsWNyuzCu0vr7twDjI0F5 TFU2FJoTK2zmBEyVwEsqBdQmK4EtVPMGXkLYL8/gV/vfHgwf0z4rmaHiprFnlvjS K5vKHdZh6eD7FCFuv8fliuKgzNmYVduOLsr63HEQoPceiXplBi/0ui85sxXKN7fO iBh5W5XwiwQnSjrNcMsXkAHUd8hs+CyNOFoTMTiiJT8YDCp9kT2LPTHJJyGxCyDr w687UVLwzb/4VwfzyDBqKd948wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2cF1ix gfIXMyByPHOfd2Mjsy5KMB8GA1UdIwQYMBaAFApCKmOX2Otss1d1KXzrVaXhj+Hi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkFGRC81QkIyMjMwQTky RjgxMUU3ODRDQTBFNUNDNEY5QUUwMi9Da0lxWTVmWTYyeXpWM1VwZk90VnBlR1A0 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrSXFZNWZZNjJ5elYzVXBmT3RWcGVHUDRlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkFGRC81QkIyMjMwQTkyRjgxMUU3ODRDQTBFNUNDNEY5QUUwMi9Da0lxWTVmWTYy eXpWM1VwZk90VnBlR1A0ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkOjESE1RVNVS/qu9V1Ua6Wk4D1qan4c8d7tDo1EdF5dVFEv1NlDVs nAmxKjTfGkq+6WSM5ZvktlUFGK5nlTw4x90UPmOChKKVjgkxBCCpfvUclAKODa3Q FbnLXMhMQR0XMnzvkTlFl9PUzG8cYv1MfXnnb11OddJty2VSZG7nc8Bp4uPWE4bC 4mreUoD0PP9xGTh4sg2W8J07DmZmS3p4SGX2H4P6pxvKAFBjm1VxVC7/zppj8kpi IL0uVR5lX6sOpUKbb8EEoXf6IYV6oThQY7azzIIDcjFfjMeXupyK9BnLLZV/OBsf w/K+Re2ywqFP0KaAIXRczfBPKIrDM6bT -----END CERTIFICATE-----Generated at Tue Sep 9 20:39:31 2025 by rpki-client