$ rpki-client -vvf rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft File: iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft (raw, json) Hash identifier: MBGUsgvUXYayyOW5rLPsbk6HlrWc/y/lBaGWP7UlC08= Subject key identifier: A5:01:E1:C0:FE:C2:30:37:0C:C3:50:56:D4:30:5E:E5:CF:CC:63:4A Authority key identifier: 88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93 Certificate issuer: /CN=A919821D/serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft Manifest number: 016E Signing time: Mon 03 Nov 2025 03:53:25 +0000 Manifest this update: Mon 03 Nov 2025 03:53:24 +0000 Manifest next update: Mon 10 Nov 2025 03:53:24 +0000 Files and hashes: 1: iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl (hash: jaz2ntQW/3J+nhq2aeDW7GN5BCJ3G967yVyobk10YrA=) 2: 51D4585A89B211EE9ADA615EC4F9AE02.roa (hash: B/rfYP/MowjVXl2cDvVI2OTc/iqkJEyxJCeVC3c1JPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919821D, serialNumber=88C1544D7E67BCD91D48DF5D11FCD1021F853993 Validity Not Before: Nov 3 03:53:24 2025 GMT Not After : Nov 10 03:53:24 2025 GMT Subject: CN=69082734-0b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5c:75:a1:4f:d9:f7:2a:5c:c0:ca:96:6e:73: 6b:3c:d8:c2:fb:a8:5e:16:c6:3b:9c:02:f4:6c:54: 10:75:ef:53:3f:71:e0:4b:74:f0:2e:05:73:5e:4a: 17:43:a9:07:e6:97:4d:cd:43:94:f0:91:cf:7b:5c: 52:6d:c6:47:b6:32:16:1b:b0:ee:d4:ac:80:8e:d7: 35:80:ba:31:92:c7:2c:d4:87:96:70:fd:a8:e1:e8: 39:40:2e:09:75:8b:6a:8a:15:46:0c:81:ec:ab:81: f4:65:d6:33:be:3f:b6:d3:a5:b5:ce:99:c9:a6:b1: af:5e:d2:96:ed:d8:81:8d:a9:88:01:1d:97:b4:9b: 29:2a:81:1d:11:6d:36:d2:9b:f6:25:4d:4a:90:70: 43:c5:a2:15:80:49:d5:44:c9:94:c9:11:bc:dd:1b: 5a:8b:b2:e8:11:de:69:d9:46:30:a1:f3:bd:31:09: 2f:dc:1c:2e:64:5f:49:7e:a1:15:61:e9:91:fe:3e: bd:9c:e4:a4:bf:4f:85:78:bb:21:f0:97:0c:d1:23: 6a:a1:8a:a8:03:c1:12:43:2e:58:fc:76:cc:52:9c: ba:3a:59:bb:a7:0c:d0:41:41:9a:47:ca:8f:5c:ab: 0b:74:b1:6f:ac:25:92:ec:9e:5d:bb:06:3f:54:69: f2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:01:E1:C0:FE:C2:30:37:0C:C3:50:56:D4:30:5E:E5:CF:CC:63:4A X509v3 Authority Key Identifier: keyid:88:C1:54:4D:7E:67:BC:D9:1D:48:DF:5D:11:FC:D1:02:1F:85:39:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iMFUTX5nvNkdSN9dEfzRAh-FOZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919821D/B2A074EE89B111EE986CA65CC4F9AE02/iMFUTX5nvNkdSN9dEfzRAh-FOZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:12:58:72:4f:84:06:6d:84:68:7f:58:45:ec:9e:a7:28:7e: 04:7f:37:fb:aa:bd:8f:55:85:b3:8a:1b:0c:55:2a:30:64:4f: 6c:62:74:5f:6b:25:d5:e8:f3:32:68:1d:64:99:09:09:9b:85: 1d:c0:08:47:9c:db:5f:7e:3c:2b:98:1e:36:58:f8:b1:82:dc: d2:64:98:01:b0:89:fd:8a:1b:b8:d3:54:a4:b5:80:99:52:d4: 5e:92:12:31:35:97:f1:7f:5b:3a:92:4a:ff:30:ee:fa:f5:37: b9:d7:79:5e:81:ec:10:4c:6e:fb:d8:a1:39:3f:bd:ed:69:d4: c8:ee:9a:3c:90:ac:16:d9:dd:e3:d5:b1:c8:05:1b:8d:c4:86: 72:ce:03:bc:0d:b0:f4:16:f3:79:fc:a3:3e:c5:8a:4f:52:4b: 31:40:0c:2b:7c:f8:63:6c:ee:36:5c:10:3e:d9:ec:dd:98:ed: 27:9f:55:e9:82:ab:f6:c1:94:38:05:2e:ea:ac:9a:d0:c7:27: 2a:21:56:a8:e1:af:f0:c9:c1:5b:5c:18:c9:f4:db:2f:03:cd: 79:b0:e2:10:2b:09:5a:8a:88:e4:36:3b:43:a3:12:f8:87:ef: f0:27:33:5e:d9:4f:15:b4:d4:6d:f4:8a:46:9a:5d:e8:10:3f: a2:b2:23:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgyMUQxMTAvBgNVBAUTKDg4QzE1NDREN0U2N0JDRDkxRDQ4REY1RDExRkNEMTAy MUY4NTM5OTMwHhcNMjUxMTAzMDM1MzI0WhcNMjUxMTEwMDM1MzI0WjAYMRYwFAYD VQQDEw02OTA4MjczNC0wYjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Vx1oU/Z9ypcwMqWbnNrPNjC+6heFsY7nAL0bFQQde9TP3HgS3TwLgVzXkoX Q6kH5pdNzUOU8JHPe1xSbcZHtjIWG7Du1KyAjtc1gLoxkscs1IeWcP2o4eg5QC4J dYtqihVGDIHsq4H0ZdYzvj+206W1zpnJprGvXtKW7diBjamIAR2XtJspKoEdEW02 0pv2JU1KkHBDxaIVgEnVRMmUyRG83Rtai7LoEd5p2UYwofO9MQkv3BwuZF9JfqEV YemR/j69nOSkv0+FeLsh8JcM0SNqoYqoA8ESQy5Y/HbMUpy6Olm7pwzQQUGaR8qP XKsLdLFvrCWS7J5duwY/VGnyywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUB4cD+ wjA3DMNQVtQwXuXPzGNKMB8GA1UdIwQYMBaAFIjBVE1+Z7zZHUjfXRH80QIfhTmT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODIxRC9CMkEwNzRFRTg5 QjExMUVFOTg2Q0E2NUNDNEY5QUUwMi9pTUZVVFg1bnZOa2RTTjlkRWZ6UkFoLUZP Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lNRlVUWDVudk5rZFNOOWRFZnpSQWgtRk9aTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODIxRC9CMkEwNzRFRTg5QjExMUVFOTg2Q0E2NUNDNEY5QUUwMi9pTUZVVFg1bnZO a2RTTjlkRWZ6UkFoLUZPWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKElhyT4QGbYRof1hF7J6nKH4Efzf7qr2PVYWzihsMVSowZE9sYnRf ayXV6PMyaB1kmQkJm4UdwAhHnNtffjwrmB42WPixgtzSZJgBsIn9ihu401SktYCZ UtRekhIxNZfxf1s6kkr/MO769Te513legewQTG772KE5P73tadTI7po8kKwW2d3j 1bHIBRuNxIZyzgO8DbD0FvN5/KM+xYpPUksxQAwrfPhjbO42XBA+2ezdmO0nn1Xp gqv2wZQ4BS7qrJrQxycqIVao4a/wycFbXBjJ9NsvA815sOIQKwlaiojkNjtDoxL4 h+/wJzNe2U8VtNRt9IpGml3oED+isiMh -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:24 2025 by rpki-client