$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft File: I8MbHNaMzE0c6105mlAbYFD9HUY.mft (raw, json) Hash identifier: U+tmb58HTSc0xtxvE2imj5JueQcBJlhRofBu8cuFn8A= Subject key identifier: C9:2A:C3:72:E3:C1:8C:34:AF:A1:3B:F6:7A:51:0A:13:58:A5:56:93 Authority key identifier: 23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46 Certificate issuer: /CN=A91A0FC0/serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46 Certificate serial: 03E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft Manifest number: 04E2 Signing time: Fri 19 Sep 2025 00:56:09 +0000 Manifest this update: Fri 19 Sep 2025 00:56:09 +0000 Manifest next update: Fri 26 Sep 2025 00:56:09 +0000 Files and hashes: 1: I8MbHNaMzE0c6105mlAbYFD9HUY.crl (hash: SNYvH2C14SmTPFtNWZ4wPWk9NYnCMZu4GJkj4fZE70Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1001 (0x3e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0, serialNumber=23C31B1CD68CCC4D1CEB5D399A501B6050FD1D46 Validity Not Before: Sep 19 00:56:09 2025 GMT Not After : Sep 26 00:56:09 2025 GMT Subject: CN=68ccaa29-69b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:41:1e:32:e2:36:86:76:9d:e0:dc:87:e8:fe: 5f:7b:3e:65:ad:42:0d:e0:b2:9e:83:c1:50:26:04: 83:82:6f:10:27:ee:83:7c:21:92:4f:7d:bf:9f:b2: 5d:5f:99:1e:af:77:2d:72:d8:11:b1:d2:a9:cd:47: 0e:4b:78:60:2d:19:eb:8f:c3:0c:d0:ab:41:55:2b: 13:f0:dd:7f:63:a5:6e:bf:28:66:ed:7e:54:41:81: a6:10:32:20:0e:3c:90:31:49:c8:6d:d0:1e:f5:ea: 4f:fe:33:71:29:9a:23:aa:de:c7:6f:32:19:19:71: fb:c7:46:41:95:9c:2d:50:fd:9e:83:3a:59:18:89: 03:39:b5:18:01:07:5a:ea:e2:ea:c7:1f:f9:ae:b5: 81:85:85:27:ab:4c:53:35:d6:12:c3:1e:ea:b2:e1: e6:67:4e:b7:c2:6e:5f:17:5a:8d:68:73:64:ec:c7: eb:5e:2e:13:d0:bc:87:84:0e:a3:51:f3:c5:75:82: 97:cb:7e:ae:22:d3:34:dd:35:79:a8:1e:b8:a2:e9: 09:49:83:30:9c:f7:1d:b2:b4:72:b4:c3:91:e1:fd: f9:4a:6d:bb:5f:2d:70:64:0d:db:e5:91:35:bf:7a: 8c:e5:5d:32:0f:30:8d:fa:a9:a6:d5:a4:6a:fc:a8: 5a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2A:C3:72:E3:C1:8C:34:AF:A1:3B:F6:7A:51:0A:13:58:A5:56:93 X509v3 Authority Key Identifier: keyid:23:C3:1B:1C:D6:8C:CC:4D:1C:EB:5D:39:9A:50:1B:60:50:FD:1D:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8MbHNaMzE0c6105mlAbYFD9HUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/I8MbHNaMzE0c6105mlAbYFD9HUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:61:36:d7:c9:67:7b:89:0d:fe:49:06:80:f7:92:39:f4:63: 65:5a:6d:9c:8d:7d:05:17:1f:30:f1:7c:72:35:cc:35:67:7d: 9a:40:53:ff:19:b1:8c:a1:d6:69:69:da:63:64:d2:13:4c:81: 1d:d8:db:f0:5d:24:07:58:c2:4e:a9:c9:82:7c:cb:f4:46:93: 3b:8b:5e:3f:d2:45:4a:f9:61:b3:47:63:bc:de:4c:0a:ba:52: c6:62:d4:2c:7d:07:5b:8a:c7:db:f9:2e:2a:c7:47:7c:4d:f9: d7:bf:7a:74:94:5a:ab:44:4a:f8:81:30:60:4c:2e:59:fe:a1: 4f:92:98:72:fd:44:e2:0c:26:c9:98:d4:f2:f5:7e:af:20:40: f0:51:a4:d5:10:51:7e:69:9d:ed:37:a1:49:62:17:53:ea:46: 17:e3:33:b4:0a:a8:bb:d2:08:8a:83:2e:55:98:3d:e4:25:c2: 82:62:5c:c6:ea:0d:8a:91:fe:26:3e:a2:d7:ed:74:a9:a6:88: c3:a6:09:21:d0:34:c0:72:66:1f:2f:33:c7:64:7f:1f:3c:bc: ec:29:6e:d8:c7:6c:13:89:72:1b:94:5f:27:e9:5f:a0:c2:e4: 98:6b:8d:20:98:b4:88:53:5c:ae:a0:ea:6d:de:44:bf:b0:6d: 9d:e2:8f:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQzAxMTAvBgNVBAUTKDIzQzMxQjFDRDY4Q0NDNEQxQ0VCNUQzOTlBNTAxQjYw NTBGRDFENDYwHhcNMjUwOTE5MDA1NjA5WhcNMjUwOTI2MDA1NjA5WjAYMRYwFAYD VQQDEw02OGNjYWEyOS02OWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEEeMuI2hnad4NyH6P5fez5lrUIN4LKeg8FQJgSDgm8QJ+6DfCGST32/n7Jd X5ker3ctctgRsdKpzUcOS3hgLRnrj8MM0KtBVSsT8N1/Y6Vuvyhm7X5UQYGmEDIg DjyQMUnIbdAe9epP/jNxKZojqt7HbzIZGXH7x0ZBlZwtUP2egzpZGIkDObUYAQda 6uLqxx/5rrWBhYUnq0xTNdYSwx7qsuHmZ063wm5fF1qNaHNk7MfrXi4T0LyHhA6j UfPFdYKXy36uItM03TV5qB64oukJSYMwnPcdsrRytMOR4f35Sm27Xy1wZA3b5ZE1 v3qM5V0yDzCN+qmm1aRq/KhaywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkqw3Lj wYw0r6E79npRChNYpVaTMB8GA1UdIwQYMBaAFCPDGxzWjMxNHOtdOZpQG2BQ/R1G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1 NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpFMGM2MTA1bWxBYllGRDlI VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k4TWJITmFNekUwYzYxMDVtbEFiWUZEOUhVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEZDMC9DREUwOTg3Njk1NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9JOE1iSE5hTXpF MGM2MTA1bWxBYllGRDlIVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkYTbXyWd7iQ3+SQaA95I59GNlWm2cjX0FFx8w8XxyNcw1Z32aQFP/ GbGModZpadpjZNITTIEd2NvwXSQHWMJOqcmCfMv0RpM7i14/0kVK+WGzR2O83kwK ulLGYtQsfQdbisfb+S4qx0d8TfnXv3p0lFqrREr4gTBgTC5Z/qFPkphy/UTiDCbJ mNTy9X6vIEDwUaTVEFF+aZ3tN6FJYhdT6kYX4zO0Cqi70giKgy5VmD3kJcKCYlzG 6g2Kkf4mPqLX7XSppojDpgkh0DTAcmYfLzPHZH8fPLzsKW7Yx2wTiXIblF8n6V+g wuSYa40gmLSIU1yuoOpt3kS/sG2d4o9x -----END CERTIFICATE-----Generated at Fri Sep 19 03:44:48 2025 by rpki-client