$ rpki-client -vvf rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft File: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft (raw, json) Hash identifier: bMWRdwqx+UystJwTUei3o98dOCdIKwe/+xc3YQUGKk4= Subject key identifier: 6A:2E:6E:9A:60:A9:CB:30:F9:70:25:B2:3D:75:8D:EE:2B:B9:57:43 Authority key identifier: 94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8 Certificate issuer: /CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8 Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft Manifest number: 0170 Signing time: Mon 03 Nov 2025 03:53:50 +0000 Manifest this update: Mon 03 Nov 2025 03:53:49 +0000 Manifest next update: Mon 10 Nov 2025 03:53:49 +0000 Files and hashes: 1: lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl (hash: 5Va6c8kIE4Kf2WwZXqG2ZlrXavDHVO2H2ewwCU2Ds1U=) 2: F7C7803489F311EE9AD0D13CC4F9AE02.roa (hash: OYcqPPoNzZ0mU98SLaUwZKPqGtyytHy4I1e+KVz3rEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174F24, serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8 Validity Not Before: Nov 3 03:53:49 2025 GMT Not After : Nov 10 03:53:49 2025 GMT Subject: CN=6908274d-6b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ba:15:68:6f:34:f7:e4:38:c2:b3:1f:56:30: a2:21:07:2f:55:f0:94:66:5c:36:5a:77:91:6a:a5: 64:58:ef:01:1b:af:5e:04:1d:10:63:d9:a5:ca:e8: 81:2b:1b:e7:9c:c2:bb:52:61:71:ee:3f:9c:21:65: 88:6c:37:f2:89:d7:b8:86:bf:6c:e5:8a:13:e3:1f: 79:17:ab:23:4e:a6:51:de:48:64:0c:f7:c4:76:b7: 7d:ab:1b:d0:2a:77:8f:53:9d:80:7f:c1:90:f3:54: b1:ad:41:21:48:14:c3:04:80:55:f1:fc:2c:bf:b8: 2f:33:aa:5c:02:b4:69:d6:8f:2a:17:27:c0:04:b9: 70:bb:c9:e3:1d:8b:60:6d:c9:6a:69:f2:3f:57:d2: 90:86:08:f0:ca:d6:e1:60:7d:76:00:c5:ba:3b:8f: 8f:4e:f4:83:e0:6a:87:44:b2:39:85:e2:6e:29:87: 1f:43:5a:95:d8:36:ff:92:ee:50:21:30:03:e7:fb: 0e:c2:34:a1:d2:f9:91:59:0f:61:c5:ff:cf:3f:81: 92:cd:a2:ba:7d:99:b4:b6:44:b7:9e:34:96:db:c1: b0:21:dd:64:35:19:c1:27:0b:df:36:fe:c9:90:62: 43:c0:b8:5b:93:23:50:af:f3:e2:33:b6:1c:70:10: 51:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:2E:6E:9A:60:A9:CB:30:F9:70:25:B2:3D:75:8D:EE:2B:B9:57:43 X509v3 Authority Key Identifier: keyid:94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:fd:34:d4:f1:23:25:ec:35:f6:b0:a1:14:84:c8:fe:56:36: cb:4f:b0:54:c4:1c:a6:25:58:ba:0b:3e:c5:8f:59:f1:62:5b: 54:c4:9e:07:5a:ad:bb:96:26:b2:3a:44:56:0a:2c:b9:23:f1: 79:79:3f:59:f9:63:fb:27:5c:99:53:c7:71:ae:ed:d0:4b:81: fc:3e:d5:bf:08:bc:e8:7b:5b:3b:a6:d8:65:65:c0:e3:8c:16: e0:02:a9:8f:38:b2:25:b9:04:94:83:e0:0d:6e:a6:3e:e6:ce: fc:ce:9d:06:da:eb:0f:71:5e:99:56:57:8a:24:91:3a:3e:cf: f0:e8:39:25:fb:44:94:00:0e:37:25:90:05:87:86:8a:5d:0f: f2:34:49:06:ca:d2:61:fe:02:af:fd:8c:ae:c6:bb:ee:ab:84: 00:46:52:43:da:c3:a6:21:1a:ce:77:17:eb:43:0f:e8:07:36: 29:1c:8e:f5:0b:25:12:4f:25:e2:c0:28:7d:5d:3f:17:a0:9f: ce:5d:24:dc:65:8e:15:b1:4c:cc:79:c4:44:c7:89:ae:6f:44: 4a:21:0f:9d:3c:64:4b:63:09:fd:ef:aa:e6:36:78:49:f4:4e: a7:a4:b6:22:63:04:9b:37:05:b9:d2:5c:36:b2:06:b0:52:fa: c4:17:80:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGMjQxMTAvBgNVBAUTKDk0QzQxRjFBQTYwRUQ2NTBFMEZEN0E3QThEMjM3QTJE NDZCMUIxRjgwHhcNMjUxMTAzMDM1MzQ5WhcNMjUxMTEwMDM1MzQ5WjAYMRYwFAYD VQQDEw02OTA4Mjc0ZC02YjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47oVaG809+Q4wrMfVjCiIQcvVfCUZlw2WneRaqVkWO8BG69eBB0QY9mlyuiB KxvnnMK7UmFx7j+cIWWIbDfyide4hr9s5YoT4x95F6sjTqZR3khkDPfEdrd9qxvQ KnePU52Af8GQ81SxrUEhSBTDBIBV8fwsv7gvM6pcArRp1o8qFyfABLlwu8njHYtg bclqafI/V9KQhgjwytbhYH12AMW6O4+PTvSD4GqHRLI5heJuKYcfQ1qV2Db/ku5Q ITAD5/sOwjSh0vmRWQ9hxf/PP4GSzaK6fZm0tkS3njSW28GwId1kNRnBJwvfNv7J kGJDwLhbkyNQr/PiM7YccBBRvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoubppg qcsw+XAlsj11je4ruVdDMB8GA1UdIwQYMBaAFJTEHxqmDtZQ4P16eo0jei1GsbH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEYyNC82RkQ3RUJGMDg5 RjMxMUVFQkY3RkM0MUZDNEY5QUUwMi9sTVFmR3FZTzFsRGdfWHA2alNONkxVYXhz ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNUWZHcVlPMWxEZ19YcDZqU042TFVheHNmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEYyNC82RkQ3RUJGMDg5RjMxMUVFQkY3RkM0MUZDNEY5QUUwMi9sTVFmR3FZTzFs RGdfWHA2alNONkxVYXhzZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW/TTU8SMl7DX2sKEUhMj+VjbLT7BUxBymJVi6Cz7Fj1nxYltUxJ4H Wq27liayOkRWCiy5I/F5eT9Z+WP7J1yZU8dxru3QS4H8PtW/CLzoe1s7pthlZcDj jBbgAqmPOLIluQSUg+ANbqY+5s78zp0G2usPcV6ZVleKJJE6Ps/w6Dkl+0SUAA43 JZAFh4aKXQ/yNEkGytJh/gKv/Yyuxrvuq4QARlJD2sOmIRrOdxfrQw/oBzYpHI71 CyUSTyXiwCh9XT8XoJ/OXSTcZY4VsUzMecREx4mub0RKIQ+dPGRLYwn976rmNnhJ 9E6npLYiYwSbNwW50lw2sgawUvrEF4C0 -----END CERTIFICATE-----Generated at Tue Nov 4 16:33:31 2025 by rpki-client