$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft File: Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft (raw, json) Hash identifier: hf2lJmj1jBubuH4l6CbxIe8WvXTz1l2eFwnuAKOuWqY= Subject key identifier: C4:7D:4D:99:A6:35:A7:DA:D7:2B:5E:AA:E2:37:5C:49:99:FF:42:20 Authority key identifier: 21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 Certificate issuer: /CN=A9171BF0/serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft Manifest number: B5 Signing time: Wed 05 Nov 2025 06:15:06 +0000 Manifest this update: Wed 05 Nov 2025 06:15:05 +0000 Manifest next update: Wed 12 Nov 2025 06:15:05 +0000 Files and hashes: 1: Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl (hash: D4wfM9iQANFAOPI2D/EfApWxTE1LMtwcG5qnM3NYsJk=) 2: 115BD35AA41611EFA0D7CD42C4F9AE02.roa (hash: gEbj+lO4aYDwjrfL1QJi0wu8U7VQFh/BgCCzbNzGNWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=21CFCE81D875D5CF8F596ADBFCC3601961C441E7 Validity Not Before: Nov 5 06:15:05 2025 GMT Not After : Nov 12 06:15:05 2025 GMT Subject: CN=690aeb69-3eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:5c:14:eb:a7:6a:bd:14:38:22:88:29:6b: 07:c1:ac:1c:20:0b:87:88:c7:c3:7f:48:96:d3:8c: 12:9a:d2:c1:b5:3e:de:22:a1:03:28:26:64:06:a8: 94:8d:17:0d:4d:63:d4:34:0b:29:98:e5:fa:7b:79: 8e:e7:da:67:c9:b6:8f:d1:fb:26:02:ae:c4:58:22: d3:57:08:db:75:61:15:9c:bf:3d:37:56:00:60:ad: 31:ef:2f:d4:72:9c:9b:bd:c4:55:e9:0e:94:cc:0e: de:dc:3f:2e:95:48:2c:19:fc:97:8c:5c:04:f2:ba: 32:c5:9a:19:c6:60:bd:4c:6a:f5:f6:6b:28:5f:8a: 06:fb:cc:5e:39:7a:a8:10:4c:5a:88:52:09:23:67: 7e:a9:ea:6d:db:09:96:4f:b5:87:b0:bf:fc:a4:5e: 51:71:fd:82:1c:40:b6:fe:57:b4:46:5e:af:d7:2c: 75:c0:a4:7e:50:bf:99:7f:47:b2:f3:43:91:0a:c6: dd:3a:d8:1e:8f:e0:61:30:29:ce:52:f0:79:27:39: 67:9d:54:f2:b4:67:df:50:a4:1b:48:30:1a:de:f2: 32:f3:96:24:24:35:dd:ef:cf:9f:37:63:55:65:84: b8:03:01:8e:b4:4f:7d:af:cd:33:ad:fa:f8:30:4f: ce:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7D:4D:99:A6:35:A7:DA:D7:2B:5E:AA:E2:37:5C:49:99:FF:42:20 X509v3 Authority Key Identifier: keyid:21:CF:CE:81:D8:75:D5:CF:8F:59:6A:DB:FC:C3:60:19:61:C4:41:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ic_Ogdh11c-PWWrb_MNgGWHEQec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/9F591E8EA41511EFA14FBD3FC4F9AE02/Ic_Ogdh11c-PWWrb_MNgGWHEQec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:0a:be:23:da:1a:6b:5e:6c:33:58:4c:3c:2c:ca:9c:dd:62: 09:81:05:86:10:16:9d:37:33:33:66:3d:05:6c:1d:19:4b:55: 62:45:e4:4f:ae:29:99:cc:64:65:86:90:a7:5b:4a:de:e4:87: 66:05:c1:c9:e0:7a:fb:2a:11:16:5f:9d:27:a0:cd:a0:65:6b: 59:4b:e3:76:38:55:c2:2d:9c:fc:68:cc:f3:95:0a:ca:46:72: 2c:00:1c:74:54:12:b9:f2:9b:ab:36:b0:7f:a4:1f:38:68:ab: 65:b1:3f:be:66:7f:97:c1:a0:2b:c5:1f:53:bf:4a:bc:6b:90: f8:01:fb:a2:bd:4f:d8:d8:db:ce:f5:42:6e:ad:02:6d:c3:9a: 0f:c1:8e:7e:ee:18:2f:1c:55:e4:c0:95:35:b7:44:14:99:47: 1b:71:7c:80:b3:19:60:55:70:d8:d9:5f:7e:48:af:a2:f6:a9: 87:4c:db:99:07:f5:d7:44:74:1b:2b:8d:1c:05:9c:c7:d0:f0: f4:cd:13:87:24:7d:6e:6d:93:6e:90:ff:96:ef:5a:0a:1a:13: e3:08:8e:fa:df:b1:db:bd:39:97:1d:5b:5d:99:05:19:39:a6: 12:d0:01:e0:4f:be:7a:49:45:d5:34:53:3d:c2:0e:fe:a7:22: a5:da:ff:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCRjAxMTAvBgNVBAUTKDIxQ0ZDRTgxRDg3NUQ1Q0Y4RjU5NkFEQkZDQzM2MDE5 NjFDNDQxRTcwHhcNMjUxMTA1MDYxNTA1WhcNMjUxMTEyMDYxNTA1WjAYMRYwFAYD VQQDEw02OTBhZWI2OS0zZWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuedcFOunar0UOCKIKWsHwawcIAuHiMfDf0iW04wSmtLBtT7eIqEDKCZkBqiU jRcNTWPUNAspmOX6e3mO59pnybaP0fsmAq7EWCLTVwjbdWEVnL89N1YAYK0x7y/U cpybvcRV6Q6UzA7e3D8ulUgsGfyXjFwE8royxZoZxmC9TGr19msoX4oG+8xeOXqo EExaiFIJI2d+qept2wmWT7WHsL/8pF5Rcf2CHEC2/le0Rl6v1yx1wKR+UL+Zf0ey 80ORCsbdOtgej+BhMCnOUvB5JzlnnVTytGffUKQbSDAa3vIy85YkJDXd78+fN2NV ZYS4AwGOtE99r80zrfr4ME/OZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMR9TZmm Nafa1ytequI3XEmZ/0IgMB8GA1UdIwQYMBaAFCHPzoHYddXPj1lq2/zDYBlhxEHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUJGMC85RjU5MUU4RUE0 MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi9JY19PZ2RoMTFjLVBXV3JiX01OZ0dXSEVR ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ljX09nZGgxMWMtUFdXcmJfTU5nR1dIRVFlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUJGMC85RjU5MUU4RUE0MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi9JY19PZ2RoMTFj LVBXV3JiX01OZ0dXSEVRZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfCr4j2hprXmwzWEw8LMqc3WIJgQWGEBadNzMzZj0FbB0ZS1ViReRP rimZzGRlhpCnW0re5IdmBcHJ4Hr7KhEWX50noM2gZWtZS+N2OFXCLZz8aMzzlQrK RnIsABx0VBK58purNrB/pB84aKtlsT++Zn+XwaArxR9Tv0q8a5D4AfuivU/Y2NvO 9UJurQJtw5oPwY5+7hgvHFXkwJU1t0QUmUcbcXyAsxlgVXDY2V9+SK+i9qmHTNuZ B/XXRHQbK40cBZzH0PD0zROHJH1ubZNukP+W71oKGhPjCI7637HbvTmXHVtdmQUZ OaYS0AHgT756SUXVNFM9wg7+pyKl2v/z -----END CERTIFICATE-----Generated at Wed Nov 5 10:03:30 2025 by rpki-client