$ rpki-client -vvf rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft File: iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft (raw, json) Hash identifier: CfhGKQksxihgYoOi4XPGUDA11HSoo8bBR5Dom5uzS2s= Subject key identifier: FA:E8:B4:80:B1:5B:3D:6D:B4:B3:4F:20:DF:6D:BC:18:E9:3A:41:40 Authority key identifier: 88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A Certificate issuer: /CN=A91376FB/serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Certificate serial: 041D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft Manifest number: 0416 Signing time: Wed 17 Sep 2025 00:50:37 +0000 Manifest this update: Wed 17 Sep 2025 00:50:36 +0000 Manifest next update: Wed 24 Sep 2025 00:50:36 +0000 Files and hashes: 1: iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl (hash: qrYo3DWC8T64Mygpsk96C2L5WcUPStWeLp8P0/Q3O9Q=) 2: 25C61AECB7ED11ED9CF6A63EC4F9AE02.roa (hash: Yv9ClrwAFACGSqITuh9ooZXNuE+9WgMW5OezB268l+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1053 (0x41d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91376FB, serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Validity Not Before: Sep 17 00:50:36 2025 GMT Not After : Sep 24 00:50:36 2025 GMT Subject: CN=68ca05dd-f2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c6:d3:ee:4c:5a:04:64:bf:e7:43:51:f9:24: 50:29:34:ba:51:6f:6f:ec:72:bf:cd:9e:1f:dd:9d: 6b:ad:6f:20:be:25:b9:48:f7:f4:a7:23:3c:f8:7e: 13:0f:1c:00:3f:10:dc:47:6f:f0:cb:f8:3e:8d:d6: 4f:c1:07:f1:f2:7b:f7:48:4c:4e:c7:77:c5:07:b7: eb:c2:96:8b:0f:e9:48:c5:5a:1d:ea:3f:4d:da:87: cf:6b:b7:d0:0d:f1:56:d9:57:4a:c8:1e:4d:d1:eb: d7:ea:ea:9b:60:09:33:2f:0c:11:26:12:cf:45:ed: f7:aa:60:56:4e:7b:56:8a:71:ca:61:c0:1a:29:a2: 0d:e8:74:5c:11:fb:ae:44:a1:6c:3b:bb:3d:1c:30: 01:9c:3a:3a:65:29:f8:62:10:47:13:c0:b1:f9:a3: bf:a0:ea:0b:4d:79:93:fa:3b:fc:3b:60:ba:5d:61: 9c:ad:95:89:de:85:fb:cd:c6:64:4f:6a:aa:e2:78: da:48:bb:56:d0:72:b2:7a:ab:7e:ac:55:9c:8b:3a: fc:ab:bc:be:64:e4:0c:45:2a:7d:9f:1f:fa:f6:d4: 86:38:f9:91:ac:04:c2:ff:1b:78:ea:52:87:70:f5: 11:c1:6d:7a:9d:5c:84:39:f9:87:90:45:f0:db:fe: 13:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E8:B4:80:B1:5B:3D:6D:B4:B3:4F:20:DF:6D:BC:18:E9:3A:41:40 X509v3 Authority Key Identifier: keyid:88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:04:cc:03:c8:0d:29:c2:d9:f2:f1:7d:d3:b2:17:58:38:2c: a3:41:12:67:d0:f7:f2:aa:78:73:ad:46:e4:02:c9:22:f8:63: e2:e3:aa:25:b1:0d:f7:94:e1:6b:0f:25:d7:54:81:b2:fd:58: 5e:81:49:12:33:ba:d6:63:42:3b:09:5e:50:92:b1:26:6e:96: ca:41:c8:84:fd:e6:e8:14:90:92:f5:6b:5c:66:94:5f:c6:5d: 8c:5f:41:2e:90:86:9a:e0:43:9e:a3:08:ed:5f:14:b9:b8:78: f8:f9:bd:20:7d:0a:ab:e2:2d:f4:56:81:e3:4d:ce:86:8b:4b: 83:6c:56:cd:3c:97:cc:8e:46:8f:29:4e:2c:dc:08:82:9d:16: e7:b4:ae:be:e4:2b:14:b5:ec:81:e5:1e:41:1c:c2:16:7a:7a: 71:c9:72:90:78:fa:86:9d:3b:9f:49:de:35:9b:19:97:fb:5b: e7:63:6e:20:b4:4c:98:de:cf:b2:14:ef:1f:0a:02:3c:9c:b9: 6d:9f:53:1e:61:75:ee:18:95:11:0a:31:3c:26:8b:9d:04:13: f9:42:71:72:b6:dc:bf:56:54:e0:a2:d4:cf:f5:3c:c9:b1:aa: 2d:e8:7a:04:9e:97:fa:e8:57:8d:a9:2d:01:7e:c9:5c:c2:f0: 13:5e:6d:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2RkIxMTAvBgNVBAUTKDg4NkEwRUU2QkM3QUJEQzA5RkE4MjJFMTE0REY0MzVG MEIwRTg2NUEwHhcNMjUwOTE3MDA1MDM2WhcNMjUwOTI0MDA1MDM2WjAYMRYwFAYD VQQDEw02OGNhMDVkZC1mMmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8bT7kxaBGS/50NR+SRQKTS6UW9v7HK/zZ4f3Z1rrW8gviW5SPf0pyM8+H4T DxwAPxDcR2/wy/g+jdZPwQfx8nv3SExOx3fFB7frwpaLD+lIxVod6j9N2ofPa7fQ DfFW2VdKyB5N0evX6uqbYAkzLwwRJhLPRe33qmBWTntWinHKYcAaKaIN6HRcEfuu RKFsO7s9HDABnDo6ZSn4YhBHE8Cx+aO/oOoLTXmT+jv8O2C6XWGcrZWJ3oX7zcZk T2qq4njaSLtW0HKyeqt+rFWcizr8q7y+ZOQMRSp9nx/69tSGOPmRrATC/xt46lKH cPURwW16nVyEOfmHkEXw2/4T9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFProtICx Wz1ttLNPIN9tvBjpOkFAMB8GA1UdIwQYMBaAFIhqDua8er3An6gi4RTfQ18LDoZa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzZGQi85MkZCNzFBMDgz RjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZjQ2ZxQ0xoRk45RFh3c09o bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lHb081cng2dmNDZnFDTGhGTjlEWHdzT2hsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzZGQi85MkZCNzFBMDgzRjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZj Q2ZxQ0xoRk45RFh3c09obG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdBMwDyA0pwtny8X3TshdYOCyjQRJn0PfyqnhzrUbkAski+GPi46ol sQ33lOFrDyXXVIGy/VhegUkSM7rWY0I7CV5QkrEmbpbKQciE/eboFJCS9WtcZpRf xl2MX0EukIaa4EOeowjtXxS5uHj4+b0gfQqr4i30VoHjTc6Gi0uDbFbNPJfMjkaP KU4s3AiCnRbntK6+5CsUteyB5R5BHMIWenpxyXKQePqGnTufSd41mxmX+1vnY24g tEyY3s+yFO8fCgI8nLltn1MeYXXuGJURCjE8JoudBBP5QnFytty/VlTgotTP9TzJ saot6HoEnpf66FeNqS0BfslcwvATXm2q -----END CERTIFICATE-----Generated at Thu Sep 18 23:28:10 2025 by rpki-client