$ rpki-client -vvf rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft File: C0io-y5r59-P7QejyRmyPKQL3so.mft (raw, json) Hash identifier: BKYw9FZdS5JWjToZeNOo48W2PaewWyxZpoTXd/ATmaU= Subject key identifier: 28:27:46:A8:3B:4F:C4:FA:55:64:AF:56:42:54:4F:1F:20:64:61:C3 Authority key identifier: 0B:48:A8:FB:2E:6B:E7:DF:8F:ED:07:A3:C9:19:B2:3C:A4:0B:DE:CA Certificate issuer: /CN=A91442B0/serialNumber=0B48A8FB2E6BE7DF8FED07A3C919B23CA40BDECA Certificate serial: 0B02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft Manifest number: 0AF2 Signing time: Thu 18 Sep 2025 19:39:30 +0000 Manifest this update: Thu 18 Sep 2025 19:39:29 +0000 Manifest next update: Thu 25 Sep 2025 19:39:29 +0000 Files and hashes: 1: C0io-y5r59-P7QejyRmyPKQL3so.crl (hash: VlEWMTwbid3hZ/gAF8sJNc7zPhlsOxoe1K4r9klD7KI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.crl rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2818 (0xb02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91442B0, serialNumber=0B48A8FB2E6BE7DF8FED07A3C919B23CA40BDECA Validity Not Before: Sep 18 19:39:29 2025 GMT Not After : Sep 25 19:39:29 2025 GMT Subject: CN=68cc5ff1-c13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d2:2d:ce:a9:3b:4f:63:8d:84:f7:3a:85:1e: 59:ef:69:82:39:95:79:88:77:33:05:b7:c5:95:80: 89:77:fe:68:f3:aa:94:3a:29:91:71:6d:4b:ed:c6: 41:91:9c:04:6d:4f:6e:82:fe:cb:98:c1:06:d9:47: 85:f4:cf:a6:32:3b:07:f2:ea:eb:4d:bf:02:eb:ab: 56:2a:97:ab:00:5a:82:2b:fc:3a:d6:56:aa:e0:d4: 2a:42:d3:1d:e6:08:50:ca:84:6c:2d:84:9b:e8:e7: cf:30:2f:e8:46:17:b5:b7:40:a8:53:7a:0b:93:9c: 14:ae:a0:00:3b:34:9f:7c:9e:6e:59:09:9f:76:eb: d0:a7:62:86:68:ed:32:47:01:dd:d9:79:59:2a:7e: 4c:e4:4a:f5:fb:d0:16:4d:15:43:ee:d2:f2:e2:a8: d8:a2:21:90:dc:59:3c:7f:b5:9d:05:70:cd:96:02: d9:0e:21:99:04:02:a0:61:a4:4f:24:fc:93:bf:0e: cf:b9:f3:12:f1:28:42:e0:85:6a:4e:15:58:b5:cc: 0c:f3:c1:68:e9:9c:9d:7e:ee:45:e2:e6:9f:1e:5e: 85:4f:dd:ef:71:42:8f:59:a9:42:61:d3:73:7f:98: 9b:b2:d5:34:f3:f5:bc:f6:6c:5e:0f:68:d9:f3:76: b3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:27:46:A8:3B:4F:C4:FA:55:64:AF:56:42:54:4F:1F:20:64:61:C3 X509v3 Authority Key Identifier: keyid:0B:48:A8:FB:2E:6B:E7:DF:8F:ED:07:A3:C9:19:B2:3C:A4:0B:DE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:6d:66:f4:bd:89:99:b3:4f:e4:e5:eb:d1:3a:ec:43:79:e7: 6d:15:47:14:50:2a:a4:87:7b:52:c9:eb:28:9c:34:99:2d:52: d4:02:e5:ef:e2:5c:51:5b:3c:bf:cb:59:88:60:f3:2a:7d:d6: a1:29:ae:ac:f8:24:55:da:46:9f:9d:c5:79:92:76:d8:d0:48: 6a:cf:ee:7a:73:94:24:39:35:8f:42:1f:6f:f0:46:6f:d3:10: ba:4a:7a:e4:4d:c1:9d:81:b2:05:ab:cf:b6:1c:1b:da:fe:80: c6:10:9b:4b:28:aa:56:6f:7b:d8:09:6a:28:9a:6a:18:4f:08: 68:c5:16:55:5a:5b:3b:43:44:79:d0:64:6a:c6:30:94:29:a1: dc:96:27:a8:eb:7a:8d:fe:59:14:b3:29:20:14:58:95:65:70: cf:ba:50:98:48:c3:b0:32:8c:77:03:95:c1:68:d1:8a:3a:c6: 3e:c1:11:2a:c9:23:dd:81:7d:60:7b:28:dc:4b:fc:1a:60:49: 96:85:6e:86:ba:29:1e:20:47:2e:15:7c:f0:77:f5:3d:9d:db: a3:c6:f4:df:2e:5c:65:39:d3:b1:00:8f:d1:bc:91:b2:eb:3f: d5:2a:97:6e:96:04:57:ae:36:48:1c:aa:b4:29:78:fe:56:de: bf:7f:03:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyQjAxMTAvBgNVBAUTKDBCNDhBOEZCMkU2QkU3REY4RkVEMDdBM0M5MTlCMjND QTQwQkRFQ0EwHhcNMjUwOTE4MTkzOTI5WhcNMjUwOTI1MTkzOTI5WjAYMRYwFAYD VQQDEw02OGNjNWZmMS1jMTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dItzqk7T2ONhPc6hR5Z72mCOZV5iHczBbfFlYCJd/5o86qUOimRcW1L7cZB kZwEbU9ugv7LmMEG2UeF9M+mMjsH8urrTb8C66tWKperAFqCK/w61laq4NQqQtMd 5ghQyoRsLYSb6OfPMC/oRhe1t0CoU3oLk5wUrqAAOzSffJ5uWQmfduvQp2KGaO0y RwHd2XlZKn5M5Er1+9AWTRVD7tLy4qjYoiGQ3Fk8f7WdBXDNlgLZDiGZBAKgYaRP JPyTvw7PufMS8ShC4IVqThVYtcwM88Fo6Zydfu5F4uafHl6FT93vcUKPWalCYdNz f5ibstU08/W89mxeD2jZ83azbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgnRqg7 T8T6VWSvVkJUTx8gZGHDMB8GA1UdIwQYMBaAFAtIqPsua+ffj+0Ho8kZsjykC97K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDJCMC82NkUwQ0FENjU2 RUQxMUVBQTc0N0MyMzdDNEY5QUUwMi9DMGlvLXk1cjU5LVA3UWVqeVJteVBLUUwz c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MwaW8teTVyNTktUDdRZWp5Um15UEtRTDNzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDJCMC82NkUwQ0FENjU2RUQxMUVBQTc0N0MyMzdDNEY5QUUwMi9DMGlvLXk1cjU5 LVA3UWVqeVJteVBLUUwzc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChbWb0vYmZs0/k5evROuxDeedtFUcUUCqkh3tSyesonDSZLVLUAuXv 4lxRWzy/y1mIYPMqfdahKa6s+CRV2kafncV5knbY0Ehqz+56c5QkOTWPQh9v8EZv 0xC6SnrkTcGdgbIFq8+2HBva/oDGEJtLKKpWb3vYCWoommoYTwhoxRZVWls7Q0R5 0GRqxjCUKaHclieo63qN/lkUsykgFFiVZXDPulCYSMOwMox3A5XBaNGKOsY+wREq ySPdgX1geyjcS/waYEmWhW6GuikeIEcuFXzwd/U9ndujxvTfLlxlOdOxAI/RvJGy 6z/VKpdulgRXrjZIHKq0KXj+Vt6/fwOM -----END CERTIFICATE-----Generated at Fri Sep 19 02:50:11 2025 by rpki-client