$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft File: IqYsFNK9MuPlltij5iu8MnRGj5k.mft (raw, json) Hash identifier: RUPSAwn4+MIHKOehonXtQly4BVFNthva6lGoWOr0m7w= Subject key identifier: B1:85:FD:B4:20:A4:55:8D:26:58:36:9C:1B:8A:6A:F8:53:C9:89:53 Authority key identifier: 22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99 Certificate issuer: /CN=A9178EA7/serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99 Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft Manifest number: F7 Signing time: Thu 23 Oct 2025 07:08:11 +0000 Manifest this update: Thu 23 Oct 2025 07:08:11 +0000 Manifest next update: Thu 30 Oct 2025 07:08:11 +0000 Files and hashes: 1: IqYsFNK9MuPlltij5iu8MnRGj5k.crl (hash: dBynZ7tadHJpYcQaeaMbCxwtcvN2PYl1Ut8cUJd8k4c=) 2: 1DD85DA2386311EFB10A6A1CC4F9AE02.roa (hash: wZz+OlqUMy/mBTlpV+JPL6/+u7+0FBG8gjwEC4u2wAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 07:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EA7, serialNumber=22A62C14D2BD32E3E596D8A3E62BBC3274468F99 Validity Not Before: Oct 23 07:08:11 2025 GMT Not After : Oct 30 07:08:11 2025 GMT Subject: CN=68f9d45b-b251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a2:f7:90:1a:fb:29:87:9d:96:6b:c5:06:d5: 90:a8:12:23:88:96:89:4e:dc:a0:6a:4a:c4:a1:90: e1:3a:d1:b7:e3:27:7f:75:de:e6:07:36:7e:81:bd: 0b:7b:07:8e:b6:06:2c:46:e8:04:56:f4:c1:29:7d: 4d:34:00:4c:49:60:85:67:54:5c:ad:f2:90:5c:6d: f6:9c:38:e2:a0:fa:81:9f:67:8c:bd:da:dd:b3:4b: e0:7b:ed:23:f9:df:ed:be:cf:f8:b6:c3:71:cf:0a: 8f:97:83:b4:4d:5d:1e:24:a5:df:31:13:cc:db:2a: ef:4c:7f:c4:9d:96:0b:31:c3:3c:34:d5:3e:ee:99: b9:31:95:88:90:45:cf:62:0f:d7:3d:c1:bb:4f:d4: a2:46:93:71:cc:67:73:6e:b3:cc:96:e0:64:02:17: 9a:5c:f9:f9:39:96:9d:aa:36:31:96:43:61:e8:99: da:f6:52:4d:d1:37:2b:74:ca:a7:05:45:b1:ac:86: f5:1e:28:71:28:8b:dc:87:b6:60:26:f6:a6:d5:b8: 54:f1:18:b4:e4:b2:18:2d:84:88:8b:7a:fe:eb:2e: 95:73:56:d6:94:91:c1:38:50:71:b0:33:f8:b0:bc: 90:47:be:4b:7f:7b:98:a0:89:bd:4d:1a:01:da:8a: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:85:FD:B4:20:A4:55:8D:26:58:36:9C:1B:8A:6A:F8:53:C9:89:53 X509v3 Authority Key Identifier: keyid:22:A6:2C:14:D2:BD:32:E3:E5:96:D8:A3:E6:2B:BC:32:74:46:8F:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IqYsFNK9MuPlltij5iu8MnRGj5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EA7/B1B3E2D6386211EF9E17E86FC4F9AE02/IqYsFNK9MuPlltij5iu8MnRGj5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:60:b3:16:0a:28:90:26:41:c1:00:07:30:c9:a1:ba:92:da: 8c:e5:7a:11:cd:d3:16:86:e8:a1:b3:93:02:d8:23:43:45:ff: 8a:88:b4:73:39:1e:a4:a9:b2:de:ad:de:fd:1e:d7:0a:ff:76: f2:67:c8:5c:00:6c:83:da:ce:f7:9f:ec:19:6b:d1:0d:cc:e6: 91:a9:fc:e5:82:d5:fb:43:b2:4f:47:85:13:f7:b7:84:a7:1b: b4:12:07:6f:d2:b2:52:ac:ee:62:29:b2:46:83:4b:46:e5:3c: 62:3a:7a:62:95:4c:4c:79:64:81:00:14:02:14:d1:1f:cf:b1: dc:35:b6:bf:f8:b9:9c:90:6f:c0:96:04:7c:a1:9f:b2:89:83: c6:07:f7:91:18:e4:8a:9d:d2:82:6f:69:cc:3c:0d:7a:11:94: cb:3a:ba:f7:66:b1:dc:06:44:84:1a:fd:10:83:6d:01:b9:e3: 63:5f:91:ec:a1:db:c3:5c:74:3e:77:d8:71:29:07:59:0a:f0: 5c:0e:e1:b6:68:16:40:43:4a:82:c6:f6:52:f2:7f:64:9e:ca: d2:5a:41:b4:b9:6f:cf:ce:62:34:c6:97:fb:d1:2b:fa:a5:e0: 58:b8:83:a9:31:81:be:e4:74:02:ab:b7:24:6c:7a:ac:be:df: 79:ad:d8:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQTcxMTAvBgNVBAUTKDIyQTYyQzE0RDJCRDMyRTNFNTk2RDhBM0U2MkJCQzMy NzQ0NjhGOTkwHhcNMjUxMDIzMDcwODExWhcNMjUxMDMwMDcwODExWjAYMRYwFAYD VQQDEw02OGY5ZDQ1Yi1iMjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA36L3kBr7KYedlmvFBtWQqBIjiJaJTtygakrEoZDhOtG34yd/dd7mBzZ+gb0L eweOtgYsRugEVvTBKX1NNABMSWCFZ1RcrfKQXG32nDjioPqBn2eMvdrds0vge+0j +d/tvs/4tsNxzwqPl4O0TV0eJKXfMRPM2yrvTH/EnZYLMcM8NNU+7pm5MZWIkEXP Yg/XPcG7T9SiRpNxzGdzbrPMluBkAheaXPn5OZadqjYxlkNh6Jna9lJN0TcrdMqn BUWxrIb1HihxKIvch7ZgJvam1bhU8Ri05LIYLYSIi3r+6y6Vc1bWlJHBOFBxsDP4 sLyQR75Lf3uYoIm9TRoB2opfTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGF/bQg pFWNJlg2nBuKavhTyYlTMB8GA1UdIwQYMBaAFCKmLBTSvTLj5ZbYo+YrvDJ0Ro+Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVBNy9CMUIzRTJENjM4 NjIxMUVGOUUxN0U4NkZDNEY5QUUwMi9JcVlzRk5LOU11UGxsdGlqNWl1OE1uUkdq NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lxWXNGTks5TXVQbGx0aWo1aXU4TW5SR2o1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEVBNy9CMUIzRTJENjM4NjIxMUVGOUUxN0U4NkZDNEY5QUUwMi9JcVlzRk5LOU11 UGxsdGlqNWl1OE1uUkdqNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeYLMWCiiQJkHBAAcwyaG6ktqM5XoRzdMWhuihs5MC2CNDRf+KiLRz OR6kqbLerd79HtcK/3byZ8hcAGyD2s73n+wZa9ENzOaRqfzlgtX7Q7JPR4UT97eE pxu0Egdv0rJSrO5iKbJGg0tG5TxiOnpilUxMeWSBABQCFNEfz7HcNba/+LmckG/A lgR8oZ+yiYPGB/eRGOSKndKCb2nMPA16EZTLOrr3ZrHcBkSEGv0Qg20BueNjX5Hs odvDXHQ+d9hxKQdZCvBcDuG2aBZAQ0qCxvZS8n9knsrSWkG0uW/PzmI0xpf70Sv6 peBYuIOpMYG+5HQCq7ckbHqsvt95rdiX -----END CERTIFICATE-----Generated at Thu Oct 23 20:02:24 2025 by rpki-client