$ rpki-client -vvf rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft File: I3Q0S3Gynw44NSDK_GyINQw1YWg.mft (raw, json) Hash identifier: csEpDhQKb0g+ksJBImrkDPLskILM8pB2E9cBMoOoip0= Subject key identifier: BB:72:45:AC:44:BB:EF:63:8A:FF:F3:E2:13:74:15:44:FF:22:FF:40 Authority key identifier: 23:74:34:4B:71:B2:9F:0E:38:35:20:CA:FC:6C:88:35:0C:35:61:68 Certificate issuer: /CN=A91A58AA/serialNumber=2374344B71B29F0E383520CAFC6C88350C356168 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3Q0S3Gynw44NSDK_GyINQw1YWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft Manifest number: 4A Signing time: Fri 19 Sep 2025 08:05:06 +0000 Manifest this update: Fri 19 Sep 2025 08:05:06 +0000 Manifest next update: Fri 26 Sep 2025 08:05:06 +0000 Files and hashes: 1: I3Q0S3Gynw44NSDK_GyINQw1YWg.crl (hash: PizqrTvFsmbvscB2nEZinrur7PtMO2laKSySHg+hs5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.crl rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3Q0S3Gynw44NSDK_GyINQw1YWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 07:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A58AA, serialNumber=2374344B71B29F0E383520CAFC6C88350C356168 Validity Not Before: Sep 19 08:05:06 2025 GMT Not After : Sep 26 08:05:06 2025 GMT Subject: CN=68cd0eb2-aaa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:63:62:21:38:cb:b8:40:43:83:a0:b6:43:0f: b6:cd:d8:18:58:02:ea:66:d6:5a:b8:97:b3:74:89: 10:dc:54:b4:0b:80:1d:d7:f5:c5:5b:a1:87:2f:ef: 7c:b5:9b:47:06:15:08:ba:42:c2:da:f7:d3:92:eb: ec:f3:68:cc:26:4c:9e:67:35:da:34:22:5e:54:4a: 77:29:4f:27:64:49:4c:94:c1:cb:e5:77:ef:9a:86: b3:d7:81:37:42:eb:78:36:5c:8e:a5:a9:d0:3e:02: 40:6f:98:f2:f4:06:66:3c:57:43:2e:ec:68:3a:e1: 92:52:54:52:fb:2e:34:f5:44:18:c0:b5:9b:7f:ba: 78:58:22:ae:f9:1b:35:11:bf:f0:ba:a2:2a:f7:7b: b4:f7:85:18:90:c2:b9:b7:3b:64:3f:8c:44:ac:e6: a5:51:59:58:bf:8e:bc:73:64:88:13:24:b5:50:f8: fa:93:e6:49:8b:29:3f:67:a9:a2:ab:f3:35:33:8c: fd:17:a8:fd:55:c6:24:ac:67:94:66:8f:22:21:9c: 3e:ac:1b:4c:be:d9:72:7a:8f:1f:23:a1:2b:e0:2c: 08:8c:eb:ca:b9:30:93:3c:31:90:6b:d4:11:6a:98: 45:f0:f8:80:93:d5:ac:21:aa:60:93:87:37:34:70: 49:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:72:45:AC:44:BB:EF:63:8A:FF:F3:E2:13:74:15:44:FF:22:FF:40 X509v3 Authority Key Identifier: keyid:23:74:34:4B:71:B2:9F:0E:38:35:20:CA:FC:6C:88:35:0C:35:61:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3Q0S3Gynw44NSDK_GyINQw1YWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A58AA/CA50C926240211F0961B646DC4F9AE02/I3Q0S3Gynw44NSDK_GyINQw1YWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c9:d0:91:f6:dc:ef:fb:6c:1e:f0:71:57:e0:84:51:b6:6e: e6:8f:64:ad:1e:18:35:ad:d0:d7:6e:83:61:ed:2a:94:2f:23: be:f9:dd:cc:79:fa:e6:c4:9f:8c:a7:bf:f8:d3:76:05:aa:4a: 25:49:9b:57:7d:5c:5d:e9:13:cd:d6:c8:25:75:37:8b:a9:f6: 6e:61:60:dc:48:27:40:b1:6e:11:7e:2c:ea:e8:eb:d8:ab:79: 07:01:1e:6e:b1:3a:5b:b2:14:79:e5:22:54:26:c9:44:a6:99: 4b:de:0d:19:fb:21:34:e9:cf:93:4b:30:8a:c2:a4:81:60:05: 17:b6:eb:fd:3f:bd:bc:71:b0:1a:a0:82:61:55:82:be:04:e1: d6:95:7c:02:d4:0f:a3:8b:d6:79:2b:8d:dd:a7:fd:1b:39:51: d3:4c:ac:d8:b1:c9:2c:bb:27:09:76:ed:41:ae:25:ce:05:b1: 95:6b:9b:d7:44:9c:a4:c5:b3:da:70:58:38:74:7b:ad:69:a3: 5b:ed:32:aa:3b:04:93:8c:e0:69:cb:66:e1:4f:c3:dd:9e:a3: 17:85:1e:ac:5b:24:f6:61:ee:6c:b4:71:a4:a6:78:b3:0f:95: c3:20:74:77:d9:37:b9:a6:06:e0:87:b5:17:b5:bd:68:82:85: 1a:64:10:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NThBQTExMC8GA1UEBRMoMjM3NDM0NEI3MUIyOUYwRTM4MzUyMENBRkM2Qzg4MzUw QzM1NjE2ODAeFw0yNTA5MTkwODA1MDZaFw0yNTA5MjYwODA1MDZaMBgxFjAUBgNV BAMTDTY4Y2QwZWIyLWFhYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyY2IhOMu4QEODoLZDD7bN2BhYAupm1lq4l7N0iRDcVLQLgB3X9cVboYcv73y1 m0cGFQi6QsLa99OS6+zzaMwmTJ5nNdo0Il5USncpTydkSUyUwcvld++ahrPXgTdC 63g2XI6lqdA+AkBvmPL0BmY8V0Mu7Gg64ZJSVFL7LjT1RBjAtZt/unhYIq75GzUR v/C6oir3e7T3hRiQwrm3O2Q/jESs5qVRWVi/jrxzZIgTJLVQ+PqT5kmLKT9nqaKr 8zUzjP0XqP1VxiSsZ5RmjyIhnD6sG0y+2XJ6jx8joSvgLAiM68q5MJM8MZBr1BFq mEXw+ICT1awhqmCThzc0cEkZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu3JFrES7 72OK//PiE3QVRP8i/0AwHwYDVR0jBBgwFoAUI3Q0S3Gynw44NSDK/GyINQw1YWgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1OEFBL0NBNTBDOTI2MjQw MjExRjA5NjFCNjQ2REM0RjlBRTAyL0kzUTBTM0d5bnc0NE5TREtfR3lJTlF3MVlX Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSTNRMFMzR3ludzQ0TlNES19HeUlOUXcxWVdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 OEFBL0NBNTBDOTI2MjQwMjExRjA5NjFCNjQ2REM0RjlBRTAyL0kzUTBTM0d5bnc0 NE5TREtfR3lJTlF3MVlXZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGvJ0JH23O/7bB7wcVfghFG2buaPZK0eGDWt0Ndug2HtKpQvI7753cx5 +ubEn4ynv/jTdgWqSiVJm1d9XF3pE83WyCV1N4up9m5hYNxIJ0CxbhF+LOro69ir eQcBHm6xOluyFHnlIlQmyUSmmUveDRn7ITTpz5NLMIrCpIFgBRe26/0/vbxxsBqg gmFVgr4E4daVfALUD6OL1nkrjd2n/Rs5UdNMrNixySy7Jwl27UGuJc4FsZVrm9dE nKTFs9pwWDh0e61po1vtMqo7BJOM4GnLZuFPw92eoxeFHqxbJPZh7my0caSmeLMP lcMgdHfZN7mmBuCHtRe1vWiChRpkEMw= -----END CERTIFICATE-----Generated at Fri Sep 19 11:11:25 2025 by rpki-client