$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft File: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft (raw, json) Hash identifier: pogqMoPvFDhiHfAGl05hpesV4ACYUCKyUcJhcK+NtQw= Subject key identifier: 33:44:97:8C:3C:E7:BE:BC:63:09:4E:E2:63:52:54:A1:84:00:A0:4B Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 Certificate issuer: /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Certificate serial: 0854 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft Manifest number: 0843 Signing time: Fri 24 Oct 2025 21:34:43 +0000 Manifest this update: Fri 24 Oct 2025 21:34:42 +0000 Manifest next update: Fri 31 Oct 2025 21:34:42 +0000 Files and hashes: 1: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl (hash: ZYSOGmgwCLt45Ipgj5NtI0nwbwg5hxqyKWFdsULl/u0=) 2: 903E8812E38A11EAA3B8AE59C4F9AE02.roa (hash: HYLlaeYCfOhwQIw7Fb2O6gPao8D0dgK0DzH31riAA30=) 3: B94BEEA036D811ECB5BD1470C4F9AE02.roa (hash: CYIyqLTD/N7RHKkzVI9yCjfPCRo2bvj5EsxmVhBkQbM=) 4: DA0C233E3EE411ED905A3415C4F9AE02.roa (hash: EAWxypzDCQPQzqcMnvR1K/XDUjaENmu81MPhjQzqwkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 21:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2132 (0x854) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D539, serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Validity Not Before: Oct 24 21:34:42 2025 GMT Not After : Oct 31 21:34:42 2025 GMT Subject: CN=68fbf0f3-7c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0a:01:b8:3d:bc:76:6e:34:3e:0f:ce:51:da: 83:df:f8:54:70:49:a4:12:0b:eb:b4:36:13:84:fd: f2:a7:0b:0a:2b:a7:26:23:e4:80:9e:bd:1e:5d:d3: d6:d1:b7:85:17:8b:24:9a:5f:3d:55:20:bb:bf:0a: b7:65:5f:81:f1:98:e9:2c:e7:59:ed:c1:bd:dc:db: cb:b1:09:8a:85:11:15:d9:91:a9:00:da:c3:d5:6c: 99:1e:a8:fe:9f:d1:a1:01:0e:c9:16:96:c9:09:60: cd:56:c8:75:90:c6:5f:49:30:f0:a9:a1:04:02:e7: 0f:d3:55:bf:8f:4d:1d:e6:77:b0:06:44:32:78:bb: 06:ab:d9:ca:9b:24:2a:dc:02:b3:e0:7d:22:ed:fa: 80:25:e0:07:4b:d4:2c:ea:95:f6:b2:5a:b5:33:14: 4b:36:91:6f:e0:f1:37:38:1f:ae:92:f3:e4:06:be: f0:89:1c:5c:c7:2f:58:0f:21:2a:73:f4:d1:3d:1a: 99:95:a2:3c:51:93:87:26:09:7b:1e:60:cc:e3:eb: 27:ba:0b:91:f8:cf:ef:0a:25:9a:30:4a:ef:ee:d2: fa:1c:72:dd:5a:a8:c2:73:60:09:b1:50:3f:05:8a: 72:90:8f:32:26:ad:d4:34:e2:ff:f1:f2:a0:f6:cc: 78:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:44:97:8C:3C:E7:BE:BC:63:09:4E:E2:63:52:54:A1:84:00:A0:4B X509v3 Authority Key Identifier: keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f1:33:64:e6:31:32:f1:e2:45:3a:f5:1c:c0:1c:59:b3:f7: ab:66:a8:4d:68:d9:1c:72:d4:e8:9f:2c:5c:a0:fb:08:b5:4e: 77:8d:dd:0e:74:2b:0d:47:c8:b4:f6:7b:15:9f:c9:ad:3e:82: 1c:1e:04:21:a5:9e:7e:27:d8:0e:36:2f:12:76:ba:72:76:a1: c9:e6:f3:12:89:cd:f3:cd:cc:dd:b7:84:b1:21:4b:d5:ce:00: c7:cc:57:0d:ec:a3:fd:19:83:67:53:47:6f:e4:74:e6:10:99: ae:b7:f7:c6:fc:b3:e5:05:09:ed:e3:47:02:05:a2:15:4e:96: 61:d2:d5:1e:83:ff:1f:23:6d:ec:4e:3f:4c:84:6e:83:d4:01: 3b:dc:1f:31:2b:4c:8a:c2:07:55:be:c9:74:d3:f7:b7:bf:65: 5f:32:80:04:d7:74:06:6e:a0:97:57:fd:34:04:87:ea:a5:73: 6c:86:d2:b5:e1:74:81:7f:b6:16:3d:73:49:2e:f7:fe:9a:7a: 53:a3:73:8b:a7:7f:77:b1:76:8e:1b:51:f1:19:78:a1:05:e5: 0f:47:09:d8:19:22:5e:f3:12:c7:01:e9:5c:f0:e4:e1:13:3e: 7d:3e:8c:1a:e6:5f:bb:c2:72:80:9d:15:3a:83:58:b8:44:ba: 73:5a:fa:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1MzkxMTAvBgNVBAUTKDIyMUY1MDE0M0UxRDVGOTNDNENEMzFDOUZFRTdBMjRE RTgwMUYyRDcwHhcNMjUxMDI0MjEzNDQyWhcNMjUxMDMxMjEzNDQyWjAYMRYwFAYD VQQDEw02OGZiZjBmMy03YzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7QoBuD28dm40Pg/OUdqD3/hUcEmkEgvrtDYThP3ypwsKK6cmI+SAnr0eXdPW 0beFF4skml89VSC7vwq3ZV+B8ZjpLOdZ7cG93NvLsQmKhREV2ZGpANrD1WyZHqj+ n9GhAQ7JFpbJCWDNVsh1kMZfSTDwqaEEAucP01W/j00d5newBkQyeLsGq9nKmyQq 3AKz4H0i7fqAJeAHS9Qs6pX2slq1MxRLNpFv4PE3OB+ukvPkBr7wiRxcxy9YDyEq c/TRPRqZlaI8UZOHJgl7HmDM4+snuguR+M/vCiWaMErv7tL6HHLdWqjCc2AJsVA/ BYpykI8yJq3UNOL/8fKg9sx4wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNEl4w8 5768YwlO4mNSVKGEAKBLMB8GA1UdIwQYMBaAFCIfUBQ+HV+TxM0xyf7nok3oAfLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzOS9DMTI2NURDMEUz ODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1UEV6VEhKX3VlaVRlZ0I4 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0loOVFGRDRkWDVQRXpUSEpfdWVpVGVnQjh0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDUzOS9DMTI2NURDMEUzODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1 UEV6VEhKX3VlaVRlZ0I4dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs8TNk5jEy8eJFOvUcwBxZs/erZqhNaNkcctTonyxcoPsItU53jd0O dCsNR8i09nsVn8mtPoIcHgQhpZ5+J9gONi8SdrpydqHJ5vMSic3zzczdt4SxIUvV zgDHzFcN7KP9GYNnU0dv5HTmEJmut/fG/LPlBQnt40cCBaIVTpZh0tUeg/8fI23s Tj9MhG6D1AE73B8xK0yKwgdVvsl00/e3v2VfMoAE13QGbqCXV/00BIfqpXNshtK1 4XSBf7YWPXNJLvf+mnpTo3OLp393sXaOG1HxGXihBeUPRwnYGSJe8xLHAelc8OTh Ez59Powa5l+7wnKAnRU6g1i4RLpzWvrs -----END CERTIFICATE-----Generated at Sun Oct 26 06:46:20 2025 by rpki-client