$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft File: iP8qX1-BdhNDU35LVLXmoW8gfqk.mft (raw, json) Hash identifier: Ng0ES7Dzx8ZeWiFPp3Wu9zQjRTpJ1V1mSEZttEk6GT4= Subject key identifier: 2D:4E:6B:22:85:A1:8C:33:18:EB:32:94:BF:FF:9A:DD:3A:78:66:04 Authority key identifier: 88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 Certificate issuer: /CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft Manifest number: 0195 Signing time: Mon 03 Nov 2025 03:23:21 +0000 Manifest this update: Mon 03 Nov 2025 03:23:21 +0000 Manifest next update: Mon 10 Nov 2025 03:23:21 +0000 Files and hashes: 1: iP8qX1-BdhNDU35LVLXmoW8gfqk.crl (hash: yuoMfD71jAqoO16U2GIxkOdMU9wXEvLq0ocBX2gnZtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF1E7, serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Validity Not Before: Nov 3 03:23:21 2025 GMT Not After : Nov 10 03:23:21 2025 GMT Subject: CN=69082029-21c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a0:93:8c:97:a9:e9:63:df:b4:a2:fb:6f:f9: cf:01:6c:c0:bc:66:26:a9:57:f9:d4:08:70:0f:fc: 8b:bd:05:43:0e:7d:db:6c:97:fe:34:c3:60:db:5d: d5:65:af:83:3c:aa:f7:f7:ed:e9:97:90:bb:9b:fd: 18:91:31:c2:b5:b3:18:70:17:2d:56:b6:1c:08:09: e2:50:ba:6a:27:d7:76:f6:40:7a:98:01:51:fe:e3: 0e:43:c8:a7:2a:69:98:0b:eb:90:18:88:d1:19:00: 59:86:7c:39:e4:4a:f4:3a:24:01:d8:16:a7:9d:0c: 06:87:2d:2e:1c:ce:82:95:bf:65:05:80:60:2b:db: 98:bf:b7:b9:7c:ca:69:75:83:01:32:98:4f:c5:89: 26:c8:38:96:de:0e:69:9d:cf:22:2d:94:e7:44:99: 87:31:5e:8c:c2:1d:6f:a8:8f:b1:e7:8c:86:6e:02: 53:ec:c7:bb:83:c6:61:78:9e:b4:a6:92:54:fa:f2: 0a:c2:94:36:86:b7:29:99:33:d9:31:f3:48:73:2b: 1c:ee:94:60:37:b7:a4:61:61:16:7f:02:69:15:82: f0:66:f6:7f:7c:48:a0:70:16:bc:7a:6c:33:46:c3: d2:b5:36:45:ef:39:a1:19:64:c9:29:30:03:bc:52: 6b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4E:6B:22:85:A1:8C:33:18:EB:32:94:BF:FF:9A:DD:3A:78:66:04 X509v3 Authority Key Identifier: keyid:88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:5e:20:b0:99:8c:f6:f8:33:64:07:b3:50:a1:39:90:af:0c: e4:d8:24:79:d6:14:87:6c:50:7a:7d:f5:20:f6:79:78:d0:5d: 09:51:3e:8a:18:eb:fe:17:d2:65:d3:c8:fd:e6:e5:1b:f3:28: 73:be:39:f7:2e:dd:61:a7:0a:02:a5:a0:f5:be:0f:9b:30:1c: 7f:c9:bd:6d:1e:bd:01:c1:25:62:0e:7e:1c:00:6b:7d:80:8f: cc:52:5d:a4:7e:be:b6:9a:51:6f:d7:2e:ec:d5:4e:64:12:2f: 62:1e:40:72:b5:da:95:b2:7f:7c:2c:37:33:c5:30:e4:cc:cf: 76:a8:e2:99:85:77:28:3c:c1:30:08:4c:88:2b:00:75:bf:1f: 9b:c1:d5:e0:90:4f:aa:39:1f:bb:61:d4:4e:1e:bc:9a:b4:ec: af:dc:39:86:c5:78:b8:84:4d:3e:d0:71:48:6e:d0:b6:1f:c9: 17:87:ed:aa:d5:92:8f:eb:c5:cf:b3:74:c4:e7:65:6a:7f:88: 55:40:d7:fb:3e:c9:5b:13:d6:b2:63:f5:d6:29:72:4d:3b:54: 4c:05:22:5a:05:69:fe:b2:6f:d4:78:13:0d:e8:37:19:02:08: 78:74:5c:86:64:9e:b8:1e:5e:b9:0f:94:ad:57:03:8d:ad:86: 3f:8c:48:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YxRTcxMTAvBgNVBAUTKDg4RkYyQTVGNUY4MTc2MTM0MzUzN0U0QjU0QjVFNkEx NkYyMDdFQTkwHhcNMjUxMTAzMDMyMzIxWhcNMjUxMTEwMDMyMzIxWjAYMRYwFAYD VQQDEw02OTA4MjAyOS0yMWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKCTjJep6WPftKL7b/nPAWzAvGYmqVf51AhwD/yLvQVDDn3bbJf+NMNg213V Za+DPKr39+3pl5C7m/0YkTHCtbMYcBctVrYcCAniULpqJ9d29kB6mAFR/uMOQ8in KmmYC+uQGIjRGQBZhnw55Er0OiQB2BannQwGhy0uHM6Clb9lBYBgK9uYv7e5fMpp dYMBMphPxYkmyDiW3g5pnc8iLZTnRJmHMV6Mwh1vqI+x54yGbgJT7Me7g8ZheJ60 ppJU+vIKwpQ2hrcpmTPZMfNIcysc7pRgN7ekYWEWfwJpFYLwZvZ/fEigcBa8emwz RsPStTZF7zmhGWTJKTADvFJrGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1OayKF oYwzGOsylL//mt06eGYEMB8GA1UdIwQYMBaAFIj/Kl9fgXYTQ1N+S1S15qFvIH6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjFFNy8xREJFMUEzMjQ3 QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRoTkRVMzVMVkxYbW9XOGdm cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lQOHFYMS1CZGhORFUzNUxWTFhtb1c4Z2Zxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjFFNy8xREJFMUEzMjQ3QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRo TkRVMzVMVkxYbW9XOGdmcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDXiCwmYz2+DNkB7NQoTmQrwzk2CR51hSHbFB6ffUg9nl40F0JUT6K GOv+F9Jl08j95uUb8yhzvjn3Lt1hpwoCpaD1vg+bMBx/yb1tHr0BwSViDn4cAGt9 gI/MUl2kfr62mlFv1y7s1U5kEi9iHkBytdqVsn98LDczxTDkzM92qOKZhXcoPMEw CEyIKwB1vx+bwdXgkE+qOR+7YdROHryatOyv3DmGxXi4hE0+0HFIbtC2H8kXh+2q 1ZKP68XPs3TE52Vqf4hVQNf7PslbE9ayY/XWKXJNO1RMBSJaBWn+sm/UeBMN6DcZ Agh4dFyGZJ64Hl65D5StVwONrYY/jEjm -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:51 2025 by rpki-client