$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft File: 0I2GgcK-TUfCopBV9m5olVhGF_c.mft (raw, json) Hash identifier: fcOMJ8x4aLSF1BC3t8XQC2W/hm5LGEhr6oqXTVYDOz8= Subject key identifier: 08:65:AF:E1:E5:5F:34:4E:39:09:AC:6D:AD:D2:D5:34:74:CD:D0:2A Authority key identifier: D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7 Certificate issuer: /CN=A91FCEB1/serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7 Certificate serial: 1AC2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft Manifest number: 220C Signing time: Fri 24 Oct 2025 16:14:03 +0000 Manifest this update: Fri 24 Oct 2025 16:14:02 +0000 Manifest next update: Fri 31 Oct 2025 16:14:02 +0000 Files and hashes: 1: 0I2GgcK-TUfCopBV9m5olVhGF_c.crl (hash: ajjbWxgHDiFfaQTWQUMHuBi+P4P/WPmwoaJxKhS0Jws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 16:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6850 (0x1ac2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7 Validity Not Before: Oct 24 16:14:02 2025 GMT Not After : Oct 31 16:14:02 2025 GMT Subject: CN=68fba5cb-818c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:15:19:57:2d:c1:a3:ce:f0:96:41:ee:ea:d8: 2c:c6:3f:78:28:1a:d4:eb:ef:fd:f6:24:d8:b8:91: d0:d2:81:60:f9:e0:27:b2:86:77:53:7d:50:c9:43: 95:9e:ab:1c:3b:66:aa:fc:1a:72:fd:e4:00:f1:d4: d4:1b:2a:f6:30:a3:c4:aa:0b:d2:09:2b:6f:28:2e: 2c:06:6a:ad:b2:97:6d:1c:ca:a9:8e:2a:8c:ce:cf: 97:98:1a:34:86:e7:eb:f3:d5:20:01:c9:7b:cb:8a: 57:20:ee:2f:ac:00:2b:98:b3:af:6a:61:34:31:00: 8a:b3:9a:c3:40:99:a2:6d:e3:a9:fd:a7:85:72:5e: 1b:74:9d:c9:69:83:75:72:3a:f8:e0:c7:0d:58:44: d5:6f:d0:8e:aa:8c:a5:3f:d2:98:56:3a:7d:35:fc: cf:92:0e:51:35:99:7a:22:ac:22:24:81:61:bd:bf: 9f:6d:04:9f:6c:b9:0f:b3:7e:c2:f3:05:a7:77:a3: f8:7a:a0:a4:0f:c3:43:69:e8:2f:f7:f5:31:09:64: 3d:fd:8f:04:15:63:cd:4d:23:97:cc:2a:bd:f9:2b: bb:2a:78:f2:de:7e:5d:aa:61:ce:48:9d:74:70:2f: 9b:17:f2:f8:6e:c8:c7:a0:8c:7f:74:15:f7:ec:c7: 16:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:65:AF:E1:E5:5F:34:4E:39:09:AC:6D:AD:D2:D5:34:74:CD:D0:2A X509v3 Authority Key Identifier: keyid:D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:58:de:70:51:28:dd:0c:fd:f9:8d:72:78:f7:c0:f9:e3:c1: 8e:63:15:8f:55:a6:2a:c8:0a:04:25:47:e7:4d:5a:8f:f0:e9: 88:ce:bc:07:c9:80:70:89:b4:45:74:f6:42:e3:4b:6a:8b:3a: 41:9a:3a:9c:e8:4d:25:b6:be:35:1a:59:77:77:48:86:ea:85: 6f:8b:7b:6f:b2:70:89:b4:ce:86:09:38:7e:51:b6:0b:92:3b: 54:48:cd:7d:f4:f0:8d:fb:58:0a:83:f4:46:6c:33:95:e0:02: 8a:45:95:f2:da:8a:ca:e3:39:72:66:a1:0a:3d:6f:c2:4a:11: 38:fb:00:f3:95:96:20:06:58:ad:28:69:4d:c2:54:79:a0:d2: c2:46:bd:3a:89:ad:63:65:eb:b4:12:e6:be:50:c8:8b:19:08: 37:6c:40:e0:a2:e1:ce:00:56:2c:f7:04:67:24:d8:1e:f8:fa: 22:d8:ae:f5:4f:4b:82:76:05:c8:cc:9e:d5:d6:61:78:b1:22: 13:4a:1e:08:63:98:3c:1d:26:29:82:1a:70:d1:ca:17:e2:2a: 8b:62:68:86:e5:55:25:fe:c6:45:5e:d2:45:9d:f3:65:71:b6: 82:4b:76:45:43:2b:c7:3f:9f:9d:9f:af:8d:e7:ac:34:76:3b: 8c:55:b0:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKEQwOEQ4NjgxQzJCRTRENDdDMkEyOTA1NUY2NkU2ODk1 NTg0NjE3RjcwHhcNMjUxMDI0MTYxNDAyWhcNMjUxMDMxMTYxNDAyWjAYMRYwFAYD VQQDEw02OGZiYTVjYi04MThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BUZVy3Bo87wlkHu6tgsxj94KBrU6+/99iTYuJHQ0oFg+eAnsoZ3U31QyUOV nqscO2aq/Bpy/eQA8dTUGyr2MKPEqgvSCStvKC4sBmqtspdtHMqpjiqMzs+XmBo0 hufr89UgAcl7y4pXIO4vrAArmLOvamE0MQCKs5rDQJmibeOp/aeFcl4bdJ3JaYN1 cjr44McNWETVb9COqoylP9KYVjp9NfzPkg5RNZl6IqwiJIFhvb+fbQSfbLkPs37C 8wWnd6P4eqCkD8NDaegv9/UxCWQ9/Y8EFWPNTSOXzCq9+Su7Knjy3n5dqmHOSJ10 cC+bF/L4bsjHoIx/dBX37McWWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhlr+Hl XzROOQmsba3S1TR0zdAqMB8GA1UdIwQYMBaAFNCNhoHCvk1HwqKQVfZuaJVYRhf3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS85QzE0QjQwNjNB MjExMUU3OUFBMEQ1MUNDNEY5QUUwMi8wSTJHZ2NLLVRVZkNvcEJWOW01b2xWaEdG X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBJMkdnY0stVFVmQ29wQlY5bTVvbFZoR0ZfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS85QzE0QjQwNjNBMjExMUU3OUFBMEQ1MUNDNEY5QUUwMi8wSTJHZ2NLLVRV ZkNvcEJWOW01b2xWaEdGX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtWN5wUSjdDP35jXJ498D548GOYxWPVaYqyAoEJUfnTVqP8OmIzrwH yYBwibRFdPZC40tqizpBmjqc6E0ltr41Gll3d0iG6oVvi3tvsnCJtM6GCTh+UbYL kjtUSM199PCN+1gKg/RGbDOV4AKKRZXy2orK4zlyZqEKPW/CShE4+wDzlZYgBlit KGlNwlR5oNLCRr06ia1jZeu0Eua+UMiLGQg3bEDgouHOAFYs9wRnJNge+Poi2K71 T0uCdgXIzJ7V1mF4sSITSh4IY5g8HSYpghpw0coX4iqLYmiG5VUl/sZFXtJFnfNl cbaCS3ZFQyvHP5+dn6+N56w0djuMVbCV -----END CERTIFICATE-----Generated at Sat Oct 25 09:37:35 2025 by rpki-client