$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft File: iP8qX1-BdhNDU35LVLXmoW8gfqk.mft (raw, json) Hash identifier: D3/SGYnigp7/Ew7t803DmzPjV4gBczBGbmtZKnioerQ= Subject key identifier: A9:76:E3:65:B4:A3:F0:DF:0B:B7:88:20:89:CC:9E:C7:80:7E:A0:40 Authority key identifier: 88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 Certificate issuer: /CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft Manifest number: 017E Signing time: Wed 17 Sep 2025 04:10:43 +0000 Manifest this update: Wed 17 Sep 2025 04:10:43 +0000 Manifest next update: Wed 24 Sep 2025 04:10:43 +0000 Files and hashes: 1: iP8qX1-BdhNDU35LVLXmoW8gfqk.crl (hash: 1fxmtdE+fGUfRXAZiNKs21ku/pg9ZpdXU2fdHEKHXn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:10:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF1E7, serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Validity Not Before: Sep 17 04:10:43 2025 GMT Not After : Sep 24 04:10:43 2025 GMT Subject: CN=68ca34c3-857e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b9:87:73:31:95:d0:bd:e0:88:54:fb:aa:d2: dc:f6:f6:4b:b8:11:de:7a:8d:9f:0b:40:8a:e6:ff: 89:52:1e:40:ad:e1:37:9e:26:0f:59:86:4f:56:fc: f1:5b:63:ac:14:55:a1:80:de:3a:a2:60:e3:ce:c8: a8:fc:70:ac:30:a3:0a:e2:09:56:c6:18:e7:5e:08: 6d:a1:83:b1:2f:a6:a6:6a:37:69:23:3e:f2:f2:da: 2c:b0:e5:52:9f:c6:cc:38:bd:6a:5f:0e:26:d9:ed: c2:9a:a4:1f:d5:e1:58:d0:ea:0e:99:42:31:6b:52: ab:22:a4:7f:3d:5a:ac:ec:2f:6e:d8:45:f5:6d:0b: 32:59:b4:82:c4:2d:64:ca:70:c1:44:3b:4d:9a:60: b8:84:f5:74:57:12:f3:8a:40:7c:94:07:d4:78:16: 53:12:16:48:69:de:5d:b4:ba:ff:9e:bb:a7:8b:50: 56:45:c9:fc:87:15:a3:fb:d8:c6:49:67:00:67:79: 34:cf:f4:23:c3:15:73:16:3e:36:2d:cd:14:3a:90: 97:be:49:41:1c:ef:73:c1:ea:ed:5e:a5:ea:78:fe: 3d:45:c0:08:85:2c:a2:03:72:0b:d1:e2:67:38:ef: 32:1f:fb:c3:c2:ee:59:67:73:94:75:7a:91:71:cd: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:76:E3:65:B4:A3:F0:DF:0B:B7:88:20:89:CC:9E:C7:80:7E:A0:40 X509v3 Authority Key Identifier: keyid:88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:1f:1f:be:a7:87:20:3d:31:10:3a:e2:3f:84:50:24:a9:17: 90:f3:b9:f3:1d:9a:fc:6a:52:66:16:db:74:63:23:10:b3:1c: 6a:14:96:f7:0d:e3:5e:7d:b3:f3:07:d1:be:d8:94:3b:73:21: a6:d5:f0:ac:49:90:ed:7b:0e:c0:8b:09:b0:73:02:be:54:4e: 1c:95:72:b4:2d:fa:b9:74:a5:74:11:ac:6d:c9:94:da:30:44: 1f:7c:ea:7b:86:08:66:e2:32:4f:a4:46:84:6e:8f:0d:6c:63: c0:08:12:ab:ff:74:aa:de:52:3e:bb:28:be:15:ab:00:2e:b8: 3a:39:4d:e6:fa:bd:92:e0:18:7c:76:b1:d1:bf:c8:85:70:05: 9b:c1:1f:eb:09:3e:37:ae:0d:0e:d3:2f:5e:ea:ee:77:ad:e1: 8b:c4:b2:5b:dd:ae:50:78:d7:73:4f:af:a3:06:a2:1b:cc:28: ce:dc:74:21:62:6b:bf:f5:bd:f9:6d:1e:52:db:cf:f5:74:50: 9f:44:c4:50:80:48:3b:5c:79:3e:1c:41:0e:b1:40:80:f7:a2: 97:b1:bf:49:22:27:27:fb:0e:61:97:95:55:35:2e:fe:3e:0c: 2e:95:58:b0:42:02:fe:fd:24:c6:28:e6:78:16:02:17:27:a2: 97:55:ff:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YxRTcxMTAvBgNVBAUTKDg4RkYyQTVGNUY4MTc2MTM0MzUzN0U0QjU0QjVFNkEx NkYyMDdFQTkwHhcNMjUwOTE3MDQxMDQzWhcNMjUwOTI0MDQxMDQzWjAYMRYwFAYD VQQDEw02OGNhMzRjMy04NTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5LmHczGV0L3giFT7qtLc9vZLuBHeeo2fC0CK5v+JUh5AreE3niYPWYZPVvzx W2OsFFWhgN46omDjzsio/HCsMKMK4glWxhjnXghtoYOxL6amajdpIz7y8tossOVS n8bMOL1qXw4m2e3CmqQf1eFY0OoOmUIxa1KrIqR/PVqs7C9u2EX1bQsyWbSCxC1k ynDBRDtNmmC4hPV0VxLzikB8lAfUeBZTEhZIad5dtLr/nruni1BWRcn8hxWj+9jG SWcAZ3k0z/QjwxVzFj42Lc0UOpCXvklBHO9zwertXqXqeP49RcAIhSyiA3IL0eJn OO8yH/vDwu5ZZ3OUdXqRcc1xnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKl242W0 o/DfC7eIIInMnseAfqBAMB8GA1UdIwQYMBaAFIj/Kl9fgXYTQ1N+S1S15qFvIH6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjFFNy8xREJFMUEzMjQ3 QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRoTkRVMzVMVkxYbW9XOGdm cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lQOHFYMS1CZGhORFUzNUxWTFhtb1c4Z2Zxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjFFNy8xREJFMUEzMjQ3QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRo TkRVMzVMVkxYbW9XOGdmcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwHx++p4cgPTEQOuI/hFAkqReQ87nzHZr8alJmFtt0YyMQsxxqFJb3 DeNefbPzB9G+2JQ7cyGm1fCsSZDtew7AiwmwcwK+VE4clXK0Lfq5dKV0EaxtyZTa MEQffOp7hghm4jJPpEaEbo8NbGPACBKr/3Sq3lI+uyi+FasALrg6OU3m+r2S4Bh8 drHRv8iFcAWbwR/rCT43rg0O0y9e6u53reGLxLJb3a5QeNdzT6+jBqIbzCjO3HQh Ymu/9b35bR5S28/1dFCfRMRQgEg7XHk+HEEOsUCA96KXsb9JIicn+w5hl5VVNS7+ PgwulViwQgL+/STGKOZ4FgIXJ6KXVf84 -----END CERTIFICATE-----Generated at Fri Sep 19 00:40:17 2025 by rpki-client