$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.mft File: itYQrIti8qb8qCWJVdXxJJJ7OgA.mft (raw, json) Hash identifier: rqvkBEbSi/r3n4MtFouYfxV6k53gSd0VDTBfkFFVebg= Subject key identifier: 80:DA:B9:86:A5:BC:7D:DF:3F:CE:7D:57:97:E0:D5:51:0D:0A:53:7A Authority key identifier: 8A:D6:10:AC:8B:62:F2:A6:FC:A8:25:89:55:D5:F1:24:92:7B:3A:00 Certificate issuer: /CN=A91BEE1D/serialNumber=8AD610AC8B62F2A6FCA8258955D5F124927B3A00 Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/itYQrIti8qb8qCWJVdXxJJJ7OgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.mft Manifest number: 87 Signing time: Fri 19 Sep 2025 07:17:28 +0000 Manifest this update: Fri 19 Sep 2025 07:17:28 +0000 Manifest next update: Fri 26 Sep 2025 07:17:28 +0000 Files and hashes: 1: itYQrIti8qb8qCWJVdXxJJJ7OgA.crl (hash: 7bL772xSd7gx7QJ1FmPSdXwsOkekk8bVFGKVEeM/+6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.crl rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/itYQrIti8qb8qCWJVdXxJJJ7OgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 07:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEE1D, serialNumber=8AD610AC8B62F2A6FCA8258955D5F124927B3A00 Validity Not Before: Sep 19 07:17:28 2025 GMT Not After : Sep 26 07:17:28 2025 GMT Subject: CN=68cd0388-acf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cb:47:68:27:71:07:40:61:b9:ff:33:58:e2: 63:f6:a0:53:81:05:ca:dc:dd:a5:89:6a:4f:dc:95: b2:61:69:a8:d6:13:c8:cc:f5:56:19:e0:5c:66:1f: 04:7a:15:9b:66:77:0b:30:da:44:f4:3c:b1:61:29: 9f:b0:e5:bc:10:57:77:2e:2e:c5:b5:05:bb:4f:d3: b4:b0:dc:1a:0b:88:75:b8:27:33:d3:dc:7c:73:57: 58:1a:12:96:b5:d4:2e:87:00:7e:76:ea:d5:d8:d8: 0c:ae:bb:79:0e:43:23:83:3f:16:0a:96:63:aa:26: 38:f6:86:5a:99:ef:7a:2f:e0:bc:fa:8c:d5:0d:97: 00:11:c3:d6:bd:9e:ab:8c:f6:53:31:98:fc:d2:e9: 3d:98:89:a7:7b:ec:65:17:c1:0f:06:a8:7a:e9:8f: 86:04:3f:27:b2:eb:1b:25:96:81:66:76:64:94:06: b3:03:c3:5b:9a:01:63:18:c2:93:6c:4f:66:a2:3c: 33:7d:67:e9:50:3f:29:71:d9:42:b2:0e:38:80:97: d1:5b:02:c1:1f:e2:50:22:e9:77:59:df:5b:c6:40: 5c:64:d1:d4:b0:12:29:3d:c1:ee:2d:5c:1d:f8:3d: c4:e1:35:80:04:9a:a4:ea:21:32:65:04:df:91:c0: 21:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DA:B9:86:A5:BC:7D:DF:3F:CE:7D:57:97:E0:D5:51:0D:0A:53:7A X509v3 Authority Key Identifier: keyid:8A:D6:10:AC:8B:62:F2:A6:FC:A8:25:89:55:D5:F1:24:92:7B:3A:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/itYQrIti8qb8qCWJVdXxJJJ7OgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEE1D/9ADADADEC70E11EF8067C466C4F9AE02/itYQrIti8qb8qCWJVdXxJJJ7OgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:02:93:89:10:47:cd:f3:88:8f:91:7f:bb:80:b4:e6:df:da: 6a:67:1b:4b:06:84:bb:01:d8:2c:10:d9:41:d9:07:d1:cf:9b: 10:37:4a:17:f9:29:6c:a0:91:97:56:f1:1c:a4:64:8d:c8:a5: 3e:84:94:c4:43:b8:8c:9e:9a:15:71:52:28:2d:44:d2:eb:13: 1f:fe:87:81:f4:75:57:81:8f:0d:c0:f5:0a:7c:51:eb:80:91: 26:e4:57:54:f2:10:4c:7f:68:ac:fe:e0:c7:48:76:25:41:48: d3:85:48:33:23:fd:06:03:f1:ca:30:fc:54:b9:5c:3b:c4:1f: 65:01:e9:2b:6c:16:75:98:66:a5:1b:b6:ab:33:42:62:cd:c4: 85:f7:76:aa:45:fd:e5:89:a7:2d:2a:08:0a:d4:66:91:6c:4f: fa:c4:b4:6f:c8:e2:4f:cc:67:0c:d3:ff:4e:12:15:6d:5a:dd: 70:07:91:c0:e7:5b:b7:2d:19:43:52:3a:99:de:77:78:14:ba: 50:23:00:5d:85:b3:84:c4:d6:2a:ba:d2:d9:0b:a5:70:59:df: 5a:8c:d3:84:b8:20:01:d3:d2:f1:64:c7:b0:45:dd:39:d4:2b: ae:4d:eb:67:46:91:5b:33:fc:2e:66:23:84:62:84:e2:3a:19: 68:9e:8a:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVFMUQxMTAvBgNVBAUTKDhBRDYxMEFDOEI2MkYyQTZGQ0E4MjU4OTU1RDVGMTI0 OTI3QjNBMDAwHhcNMjUwOTE5MDcxNzI4WhcNMjUwOTI2MDcxNzI4WjAYMRYwFAYD VQQDEw02OGNkMDM4OC1hY2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMtHaCdxB0Bhuf8zWOJj9qBTgQXK3N2liWpP3JWyYWmo1hPIzPVWGeBcZh8E ehWbZncLMNpE9DyxYSmfsOW8EFd3Li7FtQW7T9O0sNwaC4h1uCcz09x8c1dYGhKW tdQuhwB+durV2NgMrrt5DkMjgz8WCpZjqiY49oZame96L+C8+ozVDZcAEcPWvZ6r jPZTMZj80uk9mImne+xlF8EPBqh66Y+GBD8nsusbJZaBZnZklAazA8NbmgFjGMKT bE9mojwzfWfpUD8pcdlCsg44gJfRWwLBH+JQIul3Wd9bxkBcZNHUsBIpPcHuLVwd +D3E4TWABJqk6iEyZQTfkcAhEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDauYal vH3fP859V5fg1VENClN6MB8GA1UdIwQYMBaAFIrWEKyLYvKm/KgliVXV8SSSezoA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUUxRC85QURBREFERUM3 MEUxMUVGODA2N0M0NjZDNEY5QUUwMi9pdFlRckl0aThxYjhxQ1dKVmRYeEpKSjdP Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l0WVFySXRpOHFiOHFDV0pWZFh4SkpKN09nQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUUxRC85QURBREFERUM3MEUxMUVGODA2N0M0NjZDNEY5QUUwMi9pdFlRckl0aThx YjhxQ1dKVmRYeEpKSjdPZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeApOJEEfN84iPkX+7gLTm39pqZxtLBoS7AdgsENlB2QfRz5sQN0oX +SlsoJGXVvEcpGSNyKU+hJTEQ7iMnpoVcVIoLUTS6xMf/oeB9HVXgY8NwPUKfFHr gJEm5FdU8hBMf2is/uDHSHYlQUjThUgzI/0GA/HKMPxUuVw7xB9lAekrbBZ1mGal G7arM0JizcSF93aqRf3liactKggK1GaRbE/6xLRvyOJPzGcM0/9OEhVtWt1wB5HA 51u3LRlDUjqZ3nd4FLpQIwBdhbOExNYqutLZC6VwWd9ajNOEuCAB09LxZMewRd05 1CuuTetnRpFbM/wuZiOEYoTiOhlonooO -----END CERTIFICATE-----Generated at Fri Sep 19 10:18:16 2025 by rpki-client