$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft File: IwN4FncHnC-7R0lkDwZXociO20Q.mft (raw, json) Hash identifier: BC0FYWD9+XdqNxVC/F+CELqEGD9aagp/4jFiPHfh1DI= Subject key identifier: FE:8D:6C:F1:22:AB:60:E0:6E:18:38:E3:6D:FD:51:11:92:64:BE:E3 Authority key identifier: 23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 Certificate issuer: /CN=A911E0B4/serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft Manifest number: 95 Signing time: Wed 17 Sep 2025 07:07:32 +0000 Manifest this update: Wed 17 Sep 2025 07:07:31 +0000 Manifest next update: Wed 24 Sep 2025 07:07:31 +0000 Files and hashes: 1: IwN4FncHnC-7R0lkDwZXociO20Q.crl (hash: 8q231b8mRdMdwNTob/P0pDnvpOaRv6u25xZoTKjQc3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E0B4, serialNumber=2303781677079C2FBB4749640F0657A1C88EDB44 Validity Not Before: Sep 17 07:07:31 2025 GMT Not After : Sep 24 07:07:31 2025 GMT Subject: CN=68ca5e34-2ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:10:36:11:71:53:e8:90:77:a4:5d:e4:1e:03: 33:d9:4c:17:a3:ff:15:3a:e0:29:29:6a:b4:a2:83: 37:a4:7b:a4:e5:cf:9a:c7:53:10:71:1f:c4:c4:28: 28:39:b0:fd:b4:c6:05:7a:ee:9e:29:39:f5:c7:57: db:30:32:7a:77:69:6a:2c:6e:00:cd:90:33:37:06: 60:d0:d8:5f:b7:88:e2:34:30:2a:71:e8:e3:c9:3d: e3:3a:63:c0:43:13:78:d3:db:8b:85:6e:dd:0d:a2: 08:80:c6:78:ea:84:16:c3:54:8d:a1:4b:48:ec:2f: 09:73:eb:d2:99:b6:35:21:b2:00:0a:29:f4:b2:66: bb:ee:69:c2:99:c6:53:bb:c6:a1:a9:c5:86:cb:15: 4f:31:7e:86:00:3d:a2:92:dd:6c:8e:ec:88:a9:81: 40:aa:c0:d1:00:ee:93:ca:b4:c0:7a:36:6e:6d:67: 82:b3:51:1c:f9:27:6d:cb:cb:ff:97:ea:b7:86:98: 80:b5:3a:69:f5:aa:cd:9b:ca:27:c7:50:b6:75:f5: c8:14:3b:6c:62:a0:7c:6d:02:5f:5c:2b:35:87:f1: bb:2c:f3:9f:7f:c1:d9:38:21:4f:d0:7a:fb:d3:3d: aa:0b:5a:de:a6:1b:e8:2b:f4:31:48:09:bb:e0:7e: 4b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8D:6C:F1:22:AB:60:E0:6E:18:38:E3:6D:FD:51:11:92:64:BE:E3 X509v3 Authority Key Identifier: keyid:23:03:78:16:77:07:9C:2F:BB:47:49:64:0F:06:57:A1:C8:8E:DB:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IwN4FncHnC-7R0lkDwZXociO20Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/F2231DE4AF3811EFA20DD013C4F9AE02/IwN4FncHnC-7R0lkDwZXociO20Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:f4:f1:04:b1:d0:f5:50:ee:42:7a:c2:9c:0b:2f:91:d3:a3: 79:b2:6f:fe:59:b6:49:8f:8a:b1:7c:84:2e:de:76:fe:34:83: c2:a1:36:79:3a:ec:bf:3a:ab:80:3f:e8:f7:a5:dd:34:3f:92: b4:3f:f8:a3:00:87:14:a4:12:c4:f2:c4:38:14:d2:a1:da:95: d6:3e:59:8a:56:2b:e4:bf:03:a2:6f:e7:c7:17:b0:0b:0a:8f: ca:b4:d7:48:5e:61:c8:1a:ac:6c:8f:04:d7:94:68:22:df:bd: 8f:e3:68:07:68:53:55:7f:91:7e:be:87:fb:5b:8c:98:a1:28: 1f:d2:5b:97:35:08:50:df:ad:5b:e7:06:13:25:84:b6:f9:fc: f7:43:30:40:5b:59:ae:39:75:e5:0f:42:07:b1:f5:a7:be:34: 51:11:88:6b:bc:63:1d:25:f5:25:78:ce:d7:a2:85:57:05:1a: 4c:55:34:89:6d:9d:fa:09:ed:d0:14:8a:73:fa:e6:5c:df:2b: 4b:24:78:9a:31:cd:45:12:a1:1c:ed:17:95:83:2f:6f:02:ab: a0:41:56:6f:d7:49:4f:a0:aa:7e:c0:aa:32:4d:8d:e4:c5:28: bf:9e:71:30:ef:82:83:80:8a:d0:c3:bc:c2:37:35:75:68:d4: 3f:80:df:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwQjQxMTAvBgNVBAUTKDIzMDM3ODE2NzcwNzlDMkZCQjQ3NDk2NDBGMDY1N0Ex Qzg4RURCNDQwHhcNMjUwOTE3MDcwNzMxWhcNMjUwOTI0MDcwNzMxWjAYMRYwFAYD VQQDEw02OGNhNWUzNC0yZWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBA2EXFT6JB3pF3kHgMz2UwXo/8VOuApKWq0ooM3pHuk5c+ax1MQcR/ExCgo ObD9tMYFeu6eKTn1x1fbMDJ6d2lqLG4AzZAzNwZg0Nhft4jiNDAqcejjyT3jOmPA QxN409uLhW7dDaIIgMZ46oQWw1SNoUtI7C8Jc+vSmbY1IbIACin0sma77mnCmcZT u8ahqcWGyxVPMX6GAD2ikt1sjuyIqYFAqsDRAO6TyrTAejZubWeCs1Ec+Sdty8v/ l+q3hpiAtTpp9arNm8onx1C2dfXIFDtsYqB8bQJfXCs1h/G7LPOff8HZOCFP0Hr7 0z2qC1rephvoK/QxSAm74H5LnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6NbPEi q2Dgbhg44239URGSZL7jMB8GA1UdIwQYMBaAFCMDeBZ3B5wvu0dJZA8GV6HIjttE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTBCNC9GMjIzMURFNEFG MzgxMUVGQTIwREQwMTNDNEY5QUUwMi9Jd040Rm5jSG5DLTdSMGxrRHdaWG9jaU8y MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l3TjRGbmNIbkMtN1IwbGtEd1pYb2NpTzIwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTBCNC9GMjIzMURFNEFGMzgxMUVGQTIwREQwMTNDNEY5QUUwMi9Jd040Rm5jSG5D LTdSMGxrRHdaWG9jaU8yMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA9PEEsdD1UO5CesKcCy+R06N5sm/+WbZJj4qxfIQu3nb+NIPCoTZ5 Ouy/OquAP+j3pd00P5K0P/ijAIcUpBLE8sQ4FNKh2pXWPlmKVivkvwOib+fHF7AL Co/KtNdIXmHIGqxsjwTXlGgi372P42gHaFNVf5F+vof7W4yYoSgf0luXNQhQ361b 5wYTJYS2+fz3QzBAW1muOXXlD0IHsfWnvjRREYhrvGMdJfUleM7XooVXBRpMVTSJ bZ36Ce3QFIpz+uZc3ytLJHiaMc1FEqEc7ReVgy9vAqugQVZv10lPoKp+wKoyTY3k xSi/nnEw74KDgIrQw7zCNzV1aNQ/gN+B -----END CERTIFICATE-----Generated at Thu Sep 18 23:13:31 2025 by rpki-client