$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft File: IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json) Hash identifier: AdHosWIQjO5c7YQdBK3hnm6MhojhjMocSFhM5Uia3Xo= Subject key identifier: 41:CF:FC:A6:E4:D8:AB:63:FA:8C:19:F8:AA:94:47:39:C3:5C:57:12 Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D Certificate issuer: /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft Manifest number: 3E Signing time: Tue 04 Nov 2025 22:44:34 +0000 Manifest this update: Tue 04 Nov 2025 22:44:33 +0000 Manifest next update: Tue 11 Nov 2025 22:44:33 +0000 Files and hashes: 1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: M35Ksw1zbLC9O7zJG1qwgjT3NbeGque4iRTco61sfnk=) 2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: tRrklyhCDRycwJaKFRwEZyyD1E5up+J5TjkxJCAvISc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Validity Not Before: Nov 4 22:44:33 2025 GMT Not After : Nov 11 22:44:33 2025 GMT Subject: CN=690a81d2-c220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:dc:ec:1f:c9:c3:86:75:de:40:37:01:bc:6e: 9d:8d:55:40:b5:76:c7:e9:5c:0d:a6:e7:0e:51:83: fd:ef:69:57:3e:e6:c6:e4:98:55:9c:c4:81:63:08: 60:13:ca:c9:c4:a9:a0:f3:3a:54:d1:a3:21:d7:cd: 17:ea:79:20:84:de:7e:26:74:8f:83:48:8b:27:47: 00:5b:d8:47:a8:1a:34:d8:ca:39:e7:76:d9:69:3b: 6c:47:41:d1:89:6a:60:43:98:d5:25:62:3e:ce:31: c9:80:90:34:18:e9:a5:ce:09:91:fb:92:f7:76:84: fd:c9:a9:b6:d4:d5:62:40:93:48:41:f1:6b:79:39: b8:2b:07:e3:5d:a8:80:b9:a4:4c:a6:35:95:09:df: 8a:0d:1f:66:bd:16:af:9e:f3:74:ec:78:74:2a:87: 0c:57:9d:7b:24:c2:78:9e:73:ba:85:0f:7f:f8:cc: a6:6a:d3:c6:14:f1:96:18:08:44:b5:58:62:27:19: a3:08:53:81:75:07:25:44:4a:13:ca:b9:20:69:56: c9:19:56:0d:3f:a8:a8:65:d6:5b:23:26:81:df:00: 1d:68:d2:62:0e:4c:0b:1e:0b:80:2b:19:d5:96:d5: c1:8e:07:3f:0e:f6:a6:e6:df:d6:7f:26:63:b2:a4: 06:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CF:FC:A6:E4:D8:AB:63:FA:8C:19:F8:AA:94:47:39:C3:5C:57:12 X509v3 Authority Key Identifier: keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:63:6e:2b:b3:f8:09:08:f7:8e:3c:cd:e9:d5:25:34:6b:95: 3f:44:9c:f9:c9:2e:1e:78:2d:32:bb:39:b4:08:0f:8c:54:0f: 0a:ef:d7:ab:40:1d:21:c7:e4:c2:90:3f:50:e0:1b:13:ba:bc: 89:4f:ac:44:be:da:2e:d2:77:31:51:bd:c4:f8:dc:ad:77:c0: 97:86:46:c4:65:51:d1:57:cb:c4:91:86:a4:39:79:c5:5b:29: 97:d8:11:b2:b2:40:09:84:7a:88:a5:ab:24:09:36:13:49:07: 37:22:99:d2:6d:28:0c:47:2a:b8:f4:25:3f:63:11:bc:2a:97: 35:c3:32:02:34:5e:e8:86:00:66:63:1e:4a:8e:b2:50:6a:b2: 09:ae:a2:0e:6e:5e:68:7e:bd:8d:39:3f:7d:eb:67:d2:ab:25: 59:eb:10:e3:0d:8d:74:8d:69:45:7f:61:d2:d1:1e:24:da:c0: 4a:f2:5c:78:fc:78:27:ac:4d:ac:07:8e:91:2a:8a:fc:2d:f9: 42:68:e9:de:57:76:ff:c4:d9:f8:88:61:9d:6b:19:53:b1:32: fb:70:54:61:71:4e:04:b2:fa:7e:ab:b5:42:e3:6a:5f:1b:54: a2:29:b8:3f:ae:44:ca:39:44:32:82:7a:6c:a8:9b:b4:b4:e4: e9:99:77:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OEQwMDExMC8GA1UEBRMoMjE0MjkzM0ZCRTZFN0M1RkI3NjdBODZBNUUyMURENjAx NzhFQTM5RDAeFw0yNTExMDQyMjQ0MzNaFw0yNTExMTEyMjQ0MzNaMBgxFjAUBgNV BAMTDTY5MGE4MWQyLWMyMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDT3OwfycOGdd5ANwG8bp2NVUC1dsfpXA2m5w5Rg/3vaVc+5sbkmFWcxIFjCGAT ysnEqaDzOlTRoyHXzRfqeSCE3n4mdI+DSIsnRwBb2EeoGjTYyjnndtlpO2xHQdGJ amBDmNUlYj7OMcmAkDQY6aXOCZH7kvd2hP3JqbbU1WJAk0hB8Wt5ObgrB+NdqIC5 pEymNZUJ34oNH2a9Fq+e83TseHQqhwxXnXskwniec7qFD3/4zKZq08YU8ZYYCES1 WGInGaMIU4F1ByVEShPKuSBpVskZVg0/qKhl1lsjJoHfAB1o0mIOTAseC4ArGdWW 1cGOBz8O9qbm39Z/JmOypAbFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQc/8puTY q2P6jBn4qpRHOcNcVxIwHwYDVR0jBBgwFoAUIUKTP75ufF+3Z6hqXiHdYBeOo50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4RDAwL0YxQUYxMDUyNjFE RjExRjBBNkY3NEQ3RkM0RjlBRTAyL0lVS1RQNzV1ZkYtM1o2aHFYaUhkWUJlT281 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSVVLVFA3NXVmRi0zWjZocVhpSGRZQmVPbzUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 RDAwL0YxQUYxMDUyNjFERjExRjBBNkY3NEQ3RkM0RjlBRTAyL0lVS1RQNzV1ZkYt M1o2aHFYaUhkWUJlT281MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJNjbiuz+AkI9448zenVJTRrlT9EnPnJLh54LTK7ObQID4xUDwrv16tA HSHH5MKQP1DgGxO6vIlPrES+2i7SdzFRvcT43K13wJeGRsRlUdFXy8SRhqQ5ecVb KZfYEbKyQAmEeoilqyQJNhNJBzcimdJtKAxHKrj0JT9jEbwqlzXDMgI0XuiGAGZj HkqOslBqsgmuog5uXmh+vY05P33rZ9KrJVnrEOMNjXSNaUV/YdLRHiTawEryXHj8 eCesTawHjpEqivwt+UJo6d5Xdv/E2fiIYZ1rGVOxMvtwVGFxTgSy+n6rtULjal8b VKIpuD+uRMo5RDKCemyom7S05OmZdwM= -----END CERTIFICATE-----Generated at Wed Nov 5 12:45:04 2025 by rpki-client