$ rpki-client -vvf rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft File: 0_p517hB6Lp5mOoihhupD7llH2Q.mft (raw, json) Hash identifier: N4lnw5Wlt1XoCpoUyqrKt7yjXUtU0/JMgqoj4WPaqMU= Subject key identifier: 7E:4A:A6:91:38:AC:B9:A1:ED:AA:95:92:8C:2A:D8:21:2D:87:A8:9F Authority key identifier: D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64 Certificate issuer: /CN=A9189346/serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64 Certificate serial: 1C30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft Manifest number: 1C24 Signing time: Tue 04 Nov 2025 16:18:14 +0000 Manifest this update: Tue 04 Nov 2025 16:18:13 +0000 Manifest next update: Tue 11 Nov 2025 16:18:13 +0000 Files and hashes: 1: 0_p517hB6Lp5mOoihhupD7llH2Q.crl (hash: Nb4xeiOXzJb1324oUibql6D75nahGa5hNb1BAX1r4wQ=) 2: 082ADE2CF72411E6BA654B38C4F9AE02.roa (hash: IUcoRHe1SU3qiEDcCn613MUCKIsCGyKLZbPsU64+ZDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7216 (0x1c30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189346, serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64 Validity Not Before: Nov 4 16:18:13 2025 GMT Not After : Nov 11 16:18:13 2025 GMT Subject: CN=690a2746-bdc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:17:21:d5:7b:94:6a:78:1e:ab:e6:ab:75:67: e6:de:3e:eb:7c:43:71:6c:0f:a1:9c:46:05:2f:1a: ba:45:12:dc:14:db:ff:f1:99:48:48:6c:27:8f:cb: c2:7e:17:8a:05:5e:41:0c:de:8d:69:0c:09:28:b2: fc:63:dd:51:3a:ee:ff:68:56:3b:a6:9d:9b:56:4a: 78:56:84:14:59:ad:62:08:68:f0:ed:40:75:94:2e: 2f:fa:ca:cc:26:36:ce:59:76:aa:55:c7:7a:85:e5: 16:2e:3d:fd:e5:62:62:21:22:25:93:d2:d9:c6:15: 45:c1:db:a2:bf:9a:7d:e8:f4:d3:d1:ed:7a:3d:2b: 3d:5f:9d:58:f2:05:93:cc:96:2f:8a:62:91:a0:ce: e1:40:97:d3:ee:c3:7c:e4:ca:25:7e:5e:d0:3f:4e: e6:c9:71:8f:ca:56:a8:e7:a7:13:03:7d:bf:bd:2e: dc:69:3f:65:d3:02:7a:2e:fb:8d:e4:16:aa:8a:11: 3b:d3:68:2e:9b:75:ca:2f:3e:46:4c:32:36:c5:18: 46:78:e4:94:7c:28:1a:86:e5:16:e6:80:dd:87:76: 73:bc:a1:90:0c:03:13:57:90:c6:d0:0f:44:06:d8: 49:97:b7:53:ee:af:a4:c8:18:5e:b0:49:03:36:fa: 42:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4A:A6:91:38:AC:B9:A1:ED:AA:95:92:8C:2A:D8:21:2D:87:A8:9F X509v3 Authority Key Identifier: keyid:D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:a9:8e:4b:6b:22:d2:bb:8c:c2:3a:b9:8c:23:82:a8:a5:2f: 88:98:10:28:f5:8b:cd:11:ce:b5:3a:63:71:3f:1c:f6:42:e3: b7:51:2b:1d:a2:6c:22:0f:5b:db:c3:68:41:ef:84:b1:12:4d: e4:af:e5:fd:32:81:bf:24:00:37:f9:81:f3:1b:af:c0:eb:b3: 0e:d6:5c:dc:43:97:70:9f:c2:55:fe:e2:0b:5d:88:d1:d2:ed: 51:97:80:54:ae:6f:d6:89:f7:eb:1a:d3:72:93:37:e8:8a:22: d1:50:c2:31:4d:13:7f:61:85:04:77:fb:3e:c4:2b:3e:ff:8e: 82:f2:14:37:42:a8:17:a9:a1:cd:12:9f:7c:9e:be:27:4f:a1: b8:83:a8:a6:79:88:23:d4:6f:4b:e3:d0:8e:0f:a3:56:33:dc: e0:0c:61:f9:01:a0:46:2b:6d:e3:e4:2d:46:6f:29:3a:8e:03: ce:95:d5:69:1e:3e:33:75:75:f6:f7:24:c5:de:24:f8:da:d3: dd:f0:df:17:4b:d1:23:e5:43:d4:b6:15:e4:ae:45:cd:cb:bb: 4a:18:dc:d4:67:83:47:41:47:81:bf:57:0b:59:70:f3:3f:75: 10:c4:37:22:0d:d4:59:c4:08:4b:2f:09:ce:12:23:81:17:a7: f3:20:e9:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkzNDYxMTAvBgNVBAUTKEQzRkE3OUQ3Qjg0MUU4QkE3OTk4RUEyMjg2MUJBOTBG Qjk2NTFGNjQwHhcNMjUxMTA0MTYxODEzWhcNMjUxMTExMTYxODEzWjAYMRYwFAYD VQQDEw02OTBhMjc0Ni1iZGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBch1XuUangeq+ardWfm3j7rfENxbA+hnEYFLxq6RRLcFNv/8ZlISGwnj8vC fheKBV5BDN6NaQwJKLL8Y91ROu7/aFY7pp2bVkp4VoQUWa1iCGjw7UB1lC4v+srM JjbOWXaqVcd6heUWLj395WJiISIlk9LZxhVFwduiv5p96PTT0e16PSs9X51Y8gWT zJYvimKRoM7hQJfT7sN85Molfl7QP07myXGPylao56cTA32/vS7caT9l0wJ6LvuN 5BaqihE702gum3XKLz5GTDI2xRhGeOSUfCgahuUW5oDdh3ZzvKGQDAMTV5DG0A9E BthJl7dT7q+kyBhesEkDNvpC5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5KppE4 rLmh7aqVkowq2CEth6ifMB8GA1UdIwQYMBaAFNP6ede4Qei6eZjqIoYbqQ+5ZR9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTM0Ni84QzY1QjZFNkY3 MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZMcDVtT29paGh1cEQ3bGxI MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBfcDUxN2hCNkxwNW1Pb2loaHVwRDdsbEgyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTM0Ni84QzY1QjZFNkY3MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZM cDVtT29paGh1cEQ3bGxIMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/qY5LayLSu4zCOrmMI4KopS+ImBAo9YvNEc61OmNxPxz2QuO3USsd omwiD1vbw2hB74SxEk3kr+X9MoG/JAA3+YHzG6/A67MO1lzcQ5dwn8JV/uILXYjR 0u1Rl4BUrm/WiffrGtNykzfoiiLRUMIxTRN/YYUEd/s+xCs+/46C8hQ3QqgXqaHN Ep98nr4nT6G4g6imeYgj1G9L49COD6NWM9zgDGH5AaBGK23j5C1Gbyk6jgPOldVp Hj4zdXX29yTF3iT42tPd8N8XS9Ej5UPUthXkrkXNy7tKGNzUZ4NHQUeBv1cLWXDz P3UQxDciDdRZxAhLLwnOEiOBF6fzIOlK -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:04 2025 by rpki-client