$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft File: i_fikwz8buuRbnOQ-JPgEAupOzI.mft (raw, json) Hash identifier: JWv2Gv2mghnMRp1co+Hcj8szfrSIAOUOxTzfLMGlm9A= Subject key identifier: 61:2C:65:87:50:D0:0A:2B:1B:50:F9:F0:65:30:C7:6B:35:F3:7C:C9 Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 0A57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft Manifest number: 0A2D Signing time: Wed 22 Oct 2025 20:30:31 +0000 Manifest this update: Wed 22 Oct 2025 20:30:31 +0000 Manifest next update: Wed 29 Oct 2025 20:30:31 +0000 Files and hashes: 1: i_fikwz8buuRbnOQ-JPgEAupOzI.crl (hash: P7S0x6M/5XTcSHWnx+jcUalZiZFGnIn+ZalbVWmVI+o=) 2: 794C43721A5F11F080409056C4F9AE02.roa (hash: tliF6bTq6KTU3ampYuLl3Y31z/FfmmETEltl1u+bSdc=) 3: 4A68B404EF5A11EEB09CEA53C4F9AE02.roa (hash: oIJ5W3QVIa4YGr8FBNUGRHva+x5HF8Vbb7EeJPMTI4k=) 4: 44CA8E9C7A2811EFA43D2558C4F9AE02.roa (hash: 8Cc+PLs+/tx+lp1/rLLPaUvNT8vXFRU1NrLduLeiq2w=) 5: C654C6869F1C11EEB377E239C4F9AE02.roa (hash: 5GewRvUgDB6rcXNpXbxI+RsMmEZ6AmWtSegm+so4e0M=) 6: 493CABD04FEE11F0B866DF81C4F9AE02.roa (hash: CpOxmpHFMzljYWx1tmf9sr/C/j2WdjltGmwOj4BHMOc=) 7: 3130A9B4681011EEB552C65BC4F9AE02.roa (hash: dXngOtAcFhvArc3Tgv9HMRYfy3lpLyOKuQ2Q99Bv4cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 20:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2647 (0xa57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: Oct 22 20:30:31 2025 GMT Not After : Oct 29 20:30:31 2025 GMT Subject: CN=68f93ee7-04e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:34:e7:2c:d3:55:e9:a4:50:f5:27:3d:fc:50: 5e:0d:b6:e9:0d:26:a7:71:63:4a:b3:9d:b1:17:48: 24:14:2e:6f:8a:cd:75:94:30:34:c5:3b:ae:ee:51: fc:b2:9a:a9:01:ae:07:f1:58:10:56:21:16:fd:96: b1:0b:ee:21:09:cf:6c:e2:11:e0:f2:38:20:53:c6: 36:58:64:49:de:ba:2b:7b:c2:0f:84:38:2a:83:6f: 0c:f8:fd:09:b0:d6:7e:96:d5:a3:ef:89:0e:80:00: 7c:2a:3c:da:ff:d3:c5:c8:ab:14:4c:80:f7:17:e3: e3:3b:70:31:45:07:d6:7a:70:c0:7c:8d:b5:85:0f: 14:17:c7:31:7a:17:55:75:ee:41:4b:76:6d:cd:0b: 55:bf:c9:fb:3c:f0:67:e8:73:a5:c6:da:6e:e8:2d: 16:c3:dc:bb:da:1e:02:7b:95:4c:5d:ad:b0:c9:e8: 00:5f:08:63:3c:ef:75:70:93:97:c9:19:d5:e7:71: 21:07:8a:13:c9:7c:a4:78:1c:ea:4c:71:d6:f6:bd: c0:ee:89:6a:97:3b:8c:35:4b:da:2b:80:db:59:22: 62:b5:23:a8:42:7f:dc:10:80:4f:55:4a:dd:97:de: 24:42:65:5b:20:a3:0d:a3:ad:52:55:9e:9f:b2:1b: f0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2C:65:87:50:D0:0A:2B:1B:50:F9:F0:65:30:C7:6B:35:F3:7C:C9 X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:8f:03:f4:62:6c:1f:b6:47:17:6a:7c:d8:bc:28:7b:e0:cb: 90:76:0c:32:35:81:1b:3b:54:2f:ff:7f:32:08:89:7b:9a:2a: 79:31:ff:c7:b2:a2:da:f1:e4:44:c9:c9:93:5f:82:0b:d8:4c: 3a:c4:1b:57:06:d7:59:c9:27:93:c4:9e:c5:6e:c5:29:20:3a: cb:06:66:49:32:c4:6e:00:14:e9:85:df:be:45:62:26:5e:bd: ef:05:18:dd:e5:3c:5c:7d:0c:21:36:10:71:21:05:90:83:91: ff:fa:3a:d0:f8:3e:96:aa:74:f4:ac:ed:41:59:f6:3e:2a:7a: 8f:3d:42:58:a4:a4:f2:60:4a:58:8a:6a:b5:1c:ae:d3:34:43: 29:55:5b:6e:52:17:0c:dc:73:7f:e3:05:85:5f:73:9a:66:5e: 95:c3:40:89:e6:09:2a:ed:1a:b2:dd:65:cc:0b:1e:84:00:d1: 8b:af:c4:01:d7:4f:43:5a:3d:50:e1:d0:b3:0a:fa:aa:46:fb: be:09:f3:55:01:3c:d9:03:1f:d5:54:b0:10:ab:4b:51:28:c0: e7:4b:0a:d7:36:77:f8:e0:7c:81:ff:b9:39:66:e7:64:ed:eb: f2:3a:7a:4f:e6:1c:cc:dd:0c:e8:7a:1d:a4:c9:d9:2e:ec:f4: 60:3f:21:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjUxMDIyMjAzMDMxWhcNMjUxMDI5MjAzMDMxWjAYMRYwFAYD VQQDEw02OGY5M2VlNy0wNGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DTnLNNV6aRQ9Sc9/FBeDbbpDSancWNKs52xF0gkFC5vis11lDA0xTuu7lH8 spqpAa4H8VgQViEW/ZaxC+4hCc9s4hHg8jggU8Y2WGRJ3rore8IPhDgqg28M+P0J sNZ+ltWj74kOgAB8Kjza/9PFyKsUTID3F+PjO3AxRQfWenDAfI21hQ8UF8cxehdV de5BS3ZtzQtVv8n7PPBn6HOlxtpu6C0Ww9y72h4Ce5VMXa2wyegAXwhjPO91cJOX yRnV53EhB4oTyXykeBzqTHHW9r3A7olqlzuMNUvaK4DbWSJitSOoQn/cEIBPVUrd l94kQmVbIKMNo61SVZ6fshvwgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEsZYdQ 0AorG1D58GUwx2s183zJMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wNEFBQjI5RTgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1 dVJibk9RLUpQZ0VBdXBPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGjwP0YmwftkcXanzYvCh74MuQdgwyNYEbO1Qv/38yCIl7mip5Mf/H sqLa8eREycmTX4IL2Ew6xBtXBtdZySeTxJ7FbsUpIDrLBmZJMsRuABTphd++RWIm Xr3vBRjd5TxcfQwhNhBxIQWQg5H/+jrQ+D6WqnT0rO1BWfY+KnqPPUJYpKTyYEpY imq1HK7TNEMpVVtuUhcM3HN/4wWFX3OaZl6Vw0CJ5gkq7Rqy3WXMCx6EANGLr8QB 109DWj1Q4dCzCvqqRvu+CfNVATzZAx/VVLAQq0tRKMDnSwrXNnf44HyB/7k5Zudk 7evyOnpP5hzM3Qzoeh2kydku7PRgPyFu -----END CERTIFICATE-----Generated at Fri Oct 24 20:49:49 2025 by rpki-client