$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft File: xQo91YIWmexaCS_v5V5AfVvQy6U.mft (raw, json) Hash identifier: R9QMjbPEXpHAoRyRuEZygdtBIavKC84Q9+odbMQk1tc= Subject key identifier: 37:21:B7:4D:2A:17:AA:F3:40:2E:85:C6:93:D0:1B:78:95:4E:1B:01 Authority key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 Certificate issuer: /CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Certificate serial: 34BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft Manifest number: 34B8 Signing time: Thu 18 Sep 2025 15:12:50 +0000 Manifest this update: Thu 18 Sep 2025 15:12:50 +0000 Manifest next update: Thu 25 Sep 2025 15:12:50 +0000 Files and hashes: 1: xQo91YIWmexaCS_v5V5AfVvQy6U.crl (hash: CJ+dh4nDfn7hYVuhY7LDEbZbFhSnxhyvtqMg+vFFG50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13498 (0x34ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E41, serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Validity Not Before: Sep 18 15:12:50 2025 GMT Not After : Sep 25 15:12:50 2025 GMT Subject: CN=68cc2172-03eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d2:c9:d8:f0:3b:78:32:8b:2d:39:32:96:32: 06:ec:e6:6b:14:6b:d1:3a:3a:99:c4:7e:1a:a3:97: 41:d7:da:f7:27:42:fd:93:9a:4f:d5:af:65:9d:cb: 16:61:e0:63:d7:cc:3c:33:97:18:8a:92:7e:ad:ec: fc:c1:ff:4a:c9:93:f8:6d:da:7f:4d:93:3c:6d:fa: 00:e3:fa:bc:da:43:b6:a9:49:45:8e:5c:2e:a7:42: ee:1b:23:66:19:9a:2c:91:bb:e5:dc:57:75:13:0b: 5e:d2:31:40:a2:7e:07:fd:44:7b:c9:8a:f9:33:42: 12:76:4c:75:54:38:e2:93:15:70:87:9a:ab:4c:40: 98:23:15:7c:1b:e9:b6:22:68:11:a1:d8:ef:94:14: 93:71:c9:cd:a6:fe:7b:c2:b3:c0:41:45:a1:bd:ca: 4e:bd:9e:2a:61:29:b1:2c:97:a5:92:16:fa:13:db: 93:1a:37:e6:a5:6e:89:eb:0d:80:f0:8d:7c:87:ed: 98:5a:85:73:53:f5:c8:85:b8:64:34:c2:25:e1:c9: e0:e9:57:d4:66:23:1c:42:fe:b8:27:e5:48:c4:d9: d2:cf:b2:e9:7f:74:09:b1:01:8d:07:e8:98:26:6e: 03:e1:3c:9a:4b:2a:e8:38:a7:53:e9:ce:63:9f:62: f1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:21:B7:4D:2A:17:AA:F3:40:2E:85:C6:93:D0:1B:78:95:4E:1B:01 X509v3 Authority Key Identifier: keyid:C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:5a:ce:b3:9a:e0:c4:27:70:c1:8d:06:36:e2:f6:d4:9d:92: a7:8e:1c:cb:c0:57:91:b7:68:7b:ff:21:b5:3e:74:e1:b4:8c: 42:c8:fb:fc:1b:d3:cb:b2:35:09:ad:9c:00:fd:cd:28:c0:ea: c3:3d:15:2b:ef:97:3b:19:9c:d5:3f:61:ec:cb:96:91:11:7e: 90:55:c8:36:cc:96:e2:9f:70:9f:f8:3b:ae:88:70:19:ad:00: d2:6b:e2:fb:f4:13:6c:c4:96:b8:52:28:99:32:c7:ec:3e:c2: c1:59:d9:c2:f9:df:a3:1f:70:27:bd:d9:b4:8e:cb:db:b8:0a: 36:46:d0:87:12:ee:7e:ba:81:f1:64:37:bf:c7:7c:19:9c:a2: df:fc:df:a3:ae:20:8a:99:b7:c2:3e:80:f0:4c:20:30:e5:fa: a6:3e:8d:e8:f5:c8:2d:5d:70:f1:c0:6b:69:87:cc:6f:5e:95: bd:4a:91:b2:4f:e9:28:76:42:bc:a0:4f:a6:6c:76:5d:b2:76: 71:00:31:59:fc:7b:fe:1f:67:07:f9:5e:eb:b4:92:a2:32:6d: 6f:07:88:a0:30:52:10:17:14:16:1d:56:29:d0:f8:a5:c0:0f: 62:7f:ef:d4:3e:b0:8a:78:98:41:6e:c8:a9:b0:29:97:cf:b5: 73:31:51:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFNDExMTAvBgNVBAUTKEM1MEEzREQ1ODIxNjk5RUM1QTA5MkZFRkU1NUU0MDdE NUJEMENCQTUwHhcNMjUwOTE4MTUxMjUwWhcNMjUwOTI1MTUxMjUwWjAYMRYwFAYD VQQDEw02OGNjMjE3Mi0wM2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA49LJ2PA7eDKLLTkyljIG7OZrFGvROjqZxH4ao5dB19r3J0L9k5pP1a9lncsW YeBj18w8M5cYipJ+rez8wf9KyZP4bdp/TZM8bfoA4/q82kO2qUlFjlwup0LuGyNm GZoskbvl3Fd1Ewte0jFAon4H/UR7yYr5M0ISdkx1VDjikxVwh5qrTECYIxV8G+m2 ImgRodjvlBSTccnNpv57wrPAQUWhvcpOvZ4qYSmxLJelkhb6E9uTGjfmpW6J6w2A 8I18h+2YWoVzU/XIhbhkNMIl4cng6VfUZiMcQv64J+VIxNnSz7Lpf3QJsQGNB+iY Jm4D4TyaSyroOKdT6c5jn2LxxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcht00q F6rzQC6FxpPQG3iVThsBMB8GA1UdIwQYMBaAFMUKPdWCFpnsWgkv7+VeQH1b0Mul MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU0MS84NzU3NTE4RTFE QTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21leGFDU192NVY1QWZWdlF5 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRbzkxWUlXbWV4YUNTX3Y1VjVBZlZ2UXk2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU0MS84NzU3NTE4RTFEQTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21l eGFDU192NVY1QWZWdlF5NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0Ws6zmuDEJ3DBjQY24vbUnZKnjhzLwFeRt2h7/yG1PnThtIxCyPv8 G9PLsjUJrZwA/c0owOrDPRUr75c7GZzVP2Hsy5aREX6QVcg2zJbin3Cf+DuuiHAZ rQDSa+L79BNsxJa4UiiZMsfsPsLBWdnC+d+jH3Anvdm0jsvbuAo2RtCHEu5+uoHx ZDe/x3wZnKLf/N+jriCKmbfCPoDwTCAw5fqmPo3o9cgtXXDxwGtph8xvXpW9SpGy T+kodkK8oE+mbHZdsnZxADFZ/Hv+H2cH+V7rtJKiMm1vB4igMFIQFxQWHVYp0Pil wA9if+/UPrCKeJhBbsipsCmXz7VzMVEG -----END CERTIFICATE-----Generated at Fri Sep 19 00:59:38 2025 by rpki-client