$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft File: Iin2usLWDFC9Hk9Y9CwMobD4m28.mft (raw, json) Hash identifier: FtgGxVD8maEz/eUyuChninKJKdB9X5BUAIReWwHP5PM= Subject key identifier: 42:46:4E:46:01:A1:1E:2F:34:46:26:56:10:71:CF:21:3F:A8:6A:6E Authority key identifier: 22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F Certificate issuer: /CN=A91B8C13/serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F Certificate serial: 34CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft Manifest number: 34CB Signing time: Thu 18 Sep 2025 15:21:07 +0000 Manifest this update: Thu 18 Sep 2025 15:21:06 +0000 Manifest next update: Thu 25 Sep 2025 15:21:06 +0000 Files and hashes: 1: Iin2usLWDFC9Hk9Y9CwMobD4m28.crl (hash: aTFgfdO/QRtZT8SM5pvkCVofODp/mP7JbO/Mf54/xrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13515 (0x34cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C13, serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F Validity Not Before: Sep 18 15:21:06 2025 GMT Not After : Sep 25 15:21:06 2025 GMT Subject: CN=68cc2362-d78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:19:32:18:0c:4c:17:bd:d9:52:55:33:7f: eb:99:2a:bd:50:7d:71:c7:7d:0f:5f:59:5b:d6:14: 94:04:a4:c8:7e:cb:15:19:65:8e:70:cd:34:a5:aa: 44:d5:13:b2:2a:ea:b4:85:b9:14:a0:95:bb:9b:5f: 69:f0:41:d7:46:07:a7:40:7f:38:6f:7b:35:cf:ef: 35:4b:e5:4e:b8:8c:89:75:73:a4:a9:5c:5e:c9:c2: 09:7d:6a:bb:4a:c7:47:19:19:06:da:27:b7:11:1a: 49:63:57:1a:65:72:8d:8b:d4:7b:1c:ed:5b:cf:a4: 4a:15:4d:6f:2e:fc:75:ff:12:82:39:30:68:c6:b3: 80:75:30:8f:70:eb:e9:e6:d6:e5:c1:a9:14:34:77: e0:72:bd:69:60:c4:61:e9:47:b5:8a:dd:0f:96:51: 48:d6:dd:9a:3b:fb:7a:fb:37:ae:7d:7d:59:0b:1d: 15:95:b2:54:f0:27:62:18:fa:fb:6a:00:e2:c6:e7: 7b:f7:a7:23:5e:60:84:82:a1:8b:eb:dc:32:1f:2a: 35:98:b5:10:da:c5:1e:d5:8f:ce:e7:2d:48:35:6a: 1e:19:74:12:e8:4b:ca:4d:d3:df:4f:16:b9:a4:08: fa:1e:11:c5:c2:8b:9a:8d:d0:22:05:4e:52:71:78: ae:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:46:4E:46:01:A1:1E:2F:34:46:26:56:10:71:CF:21:3F:A8:6A:6E X509v3 Authority Key Identifier: keyid:22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:c4:a9:86:5e:ed:b7:2a:65:15:44:ae:85:45:b1:97:50:59: 9b:bb:eb:56:5d:7a:54:a6:4c:f2:ce:36:49:4b:5b:6d:a7:0c: 97:b5:fa:61:a0:fa:60:2b:f4:60:3e:38:c2:77:b3:fd:20:1c: b7:82:59:f2:e6:fc:bd:88:20:59:73:c1:ad:79:ac:2d:85:1e: f7:d5:1b:66:5d:93:b6:7e:d4:f1:a9:5b:b8:31:a4:9e:c8:d0: 8f:93:92:44:08:57:a3:29:3e:11:1f:9a:8c:5b:64:72:f9:20: ef:1f:ab:13:4a:7f:02:b9:9e:38:6a:7b:f6:81:c6:8e:e6:88: c4:e8:1f:82:c9:66:c4:5e:bd:51:6b:03:ce:73:ab:0b:bb:22: 44:f9:97:27:a8:92:c7:61:30:62:79:e6:19:e2:6c:28:d3:15: f9:ae:8b:38:ea:34:d4:29:2c:90:f9:78:ed:bd:2a:d8:a5:4e: 87:a9:21:b9:1a:9d:0a:90:20:0a:3b:1d:cf:3e:1e:2a:38:c2: 59:ba:3e:2e:75:cf:da:23:ef:b0:f5:20:fc:ce:25:60:db:25: 2c:91:2a:44:b7:2d:91:06:a4:55:95:16:15:9e:52:a9:3b:27: d1:f7:a2:40:97:eb:89:a3:43:24:f4:3e:75:87:14:3c:7c:f3: 78:70:ff:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTMxMTAvBgNVBAUTKDIyMjlGNkJBQzJENjBDNTBCRDFFNEY1OEY0MkMwQ0Ex QjBGODlCNkYwHhcNMjUwOTE4MTUyMTA2WhcNMjUwOTI1MTUyMTA2WjAYMRYwFAYD VQQDEw02OGNjMjM2Mi1kNzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFoZMhgMTBe92VJVM3/rmSq9UH1xx30PX1lb1hSUBKTIfssVGWWOcM00papE 1ROyKuq0hbkUoJW7m19p8EHXRgenQH84b3s1z+81S+VOuIyJdXOkqVxeycIJfWq7 SsdHGRkG2ie3ERpJY1caZXKNi9R7HO1bz6RKFU1vLvx1/xKCOTBoxrOAdTCPcOvp 5tblwakUNHfgcr1pYMRh6Ue1it0PllFI1t2aO/t6+zeufX1ZCx0VlbJU8CdiGPr7 agDixud796cjXmCEgqGL69wyHyo1mLUQ2sUe1Y/O5y1INWoeGXQS6EvKTdPfTxa5 pAj6HhHFwouajdAiBU5ScXiuCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJGTkYB oR4vNEYmVhBxzyE/qGpuMB8GA1UdIwQYMBaAFCIp9rrC1gxQvR5PWPQsDKGw+Jtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy82RkE5NUI1ODFE QUExMUUyODVDMjFDQTYwOEIwMkNEMi9JaW4ydXNMV0RGQzlIazlZOUN3TW9iRDRt MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpbjJ1c0xXREZDOUhrOVk5Q3dNb2JENG0yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEMxMy82RkE5NUI1ODFEQUExMUUyODVDMjFDQTYwOEIwMkNEMi9JaW4ydXNMV0RG QzlIazlZOUN3TW9iRDRtMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQxKmGXu23KmUVRK6FRbGXUFmbu+tWXXpUpkzyzjZJS1ttpwyXtfph oPpgK/RgPjjCd7P9IBy3glny5vy9iCBZc8GteawthR731RtmXZO2ftTxqVu4MaSe yNCPk5JECFejKT4RH5qMW2Ry+SDvH6sTSn8CuZ44anv2gcaO5ojE6B+CyWbEXr1R awPOc6sLuyJE+ZcnqJLHYTBieeYZ4mwo0xX5ros46jTUKSyQ+XjtvSrYpU6HqSG5 Gp0KkCAKOx3PPh4qOMJZuj4udc/aI++w9SD8ziVg2yUskSpEty2RBqRVlRYVnlKp OyfR96JAl+uJo0Mk9D51hxQ8fPN4cP8i -----END CERTIFICATE-----Generated at Fri Sep 19 12:11:59 2025 by rpki-client