$ rpki-client -vvf rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft File: iB8oqx80yszxJe2ul-HgEGBYI0k.mft (raw, json) Hash identifier: h+cgWebLkRAulnEFpmpWb1+AFuVfK1vDakL0Derr3GY= Subject key identifier: 13:E1:BE:B9:E8:05:C1:85:65:1D:63:A7:A1:4F:FE:44:E9:64:3D:87 Authority key identifier: 88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49 Certificate issuer: /CN=A91D342A/serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft Manifest number: 05 Signing time: Wed 17 Sep 2025 08:55:00 +0000 Manifest this update: Wed 17 Sep 2025 08:55:00 +0000 Manifest next update: Wed 24 Sep 2025 08:55:00 +0000 Files and hashes: 1: iB8oqx80yszxJe2ul-HgEGBYI0k.crl (hash: hSNKi88dv8lI8IhLghH45wrjBAwx6Z3x5cfMcOcyj1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D342A, serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349 Validity Not Before: Sep 17 08:55:00 2025 GMT Not After : Sep 24 08:55:00 2025 GMT Subject: CN=68ca7764-ef46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a6:34:6a:67:37:fa:50:f9:a1:94:af:0e:99: 2d:6b:50:55:cc:eb:6f:5a:a6:a1:43:8a:75:e0:d7: 62:43:93:29:0e:fa:0a:f1:1e:34:5e:c9:46:56:4c: e7:76:17:b2:59:3d:c8:1e:73:2c:0b:4f:1a:db:22: 2f:20:4d:ab:f7:6b:2b:28:bb:67:50:5b:9f:48:fa: 16:19:5d:e9:37:59:c1:64:2e:49:4d:87:f2:b7:29: 2b:16:2a:a1:37:81:50:f5:e1:19:77:bf:4b:79:1b: cf:92:57:58:7e:19:07:7f:b7:5a:69:12:5c:50:de: 1d:0c:2e:83:ce:de:00:eb:3d:0b:99:d2:ac:9d:2b: b8:2d:e4:99:d6:8a:b7:44:ae:23:4d:8d:41:d4:8e: 3f:36:88:52:58:b4:11:b3:68:5f:fe:6e:bf:0b:2a: 4d:55:32:4f:6d:c3:a5:53:7f:d0:4e:1d:eb:a3:31: 93:e1:7b:bc:54:4c:21:b5:6a:5a:77:88:84:6d:fd: ac:76:4a:29:98:97:cc:f6:79:ef:8f:b4:a3:74:ca: 78:98:e4:61:63:19:27:17:fc:7c:c2:77:26:01:b5: 0e:70:cb:7e:ea:6c:a2:ec:a6:23:3b:48:ee:78:a0: 9d:4c:54:23:6a:94:36:eb:2e:da:58:df:f6:7a:ee: 14:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E1:BE:B9:E8:05:C1:85:65:1D:63:A7:A1:4F:FE:44:E9:64:3D:87 X509v3 Authority Key Identifier: keyid:88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:da:08:60:da:37:3e:67:7b:b0:a4:5a:c0:bc:88:4a:d2:4b: c6:4d:84:95:59:d3:4b:ef:9d:e4:fc:79:0d:7e:9c:28:90:6b: c4:b0:11:52:c2:d6:63:47:b6:69:03:e6:27:aa:5b:35:6d:af: 18:19:d7:74:4c:cb:a1:67:19:cb:ac:4f:c4:4c:a7:f8:a2:a6: 9c:90:1c:56:8c:cd:06:d3:64:bb:03:fc:da:97:9f:cc:d0:53: 38:7a:6e:2e:c9:8e:aa:c5:66:a7:1e:e0:d6:1d:14:27:6b:b7: 6a:d9:48:da:34:1f:14:3b:c8:fc:b8:de:b8:32:d1:d7:4c:9a: 8b:58:bd:27:3c:dc:89:44:23:07:a7:e4:de:43:7d:92:8c:bc: 00:5c:c6:45:44:f6:3b:1a:49:8b:33:a7:0e:b1:b7:4e:66:6c: 1e:cc:04:9a:a4:f8:ac:99:14:f0:51:ae:5c:90:5c:2a:24:0e: 19:8f:9b:c9:cf:e4:a7:9b:34:ea:4c:70:53:e2:7b:b3:c6:55: f1:cc:f6:3e:25:de:b2:39:5b:ec:ad:25:a1:08:58:af:2d:14: 1d:fc:c0:71:bf:1c:9f:f1:92:62:7c:5e:2b:f8:22:b9:65:2d: 77:6f:14:fb:ce:d9:f5:51:2d:89:68:ae:56:15:6a:4d:90:cd: 35:8f:5d:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MzQyQTExMC8GA1UEBRMoODgxRjI4QUIxRjM0Q0FDQ0YxMjVFREFFOTdFMUUwMTA2 MDU4MjM0OTAeFw0yNTA5MTcwODU1MDBaFw0yNTA5MjQwODU1MDBaMBgxFjAUBgNV BAMTDTY4Y2E3NzY0LWVmNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDApjRqZzf6UPmhlK8OmS1rUFXM629apqFDinXg12JDkykO+grxHjReyUZWTOd2 F7JZPcgecywLTxrbIi8gTav3aysou2dQW59I+hYZXek3WcFkLklNh/K3KSsWKqE3 gVD14Rl3v0t5G8+SV1h+GQd/t1ppElxQ3h0MLoPO3gDrPQuZ0qydK7gt5JnWirdE riNNjUHUjj82iFJYtBGzaF/+br8LKk1VMk9tw6VTf9BOHeujMZPhe7xUTCG1alp3 iIRt/ax2SimYl8z2ee+PtKN0yniY5GFjGScX/HzCdyYBtQ5wy37qbKLspiM7SO54 oJ1MVCNqlDbrLtpY3/Z67hSDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE+G+uegF wYVlHWOnoU/+ROlkPYcwHwYDVR0jBBgwFoAUiB8oqx80yszxJe2ul+HgEGBYI0kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzNDJBLzE3NzhCNzBDOEVD NzExRjBCQjEyODUzQ0M0RjlBRTAyL2lCOG9xeDgweXN6eEplMnVsLUhnRUdCWUkw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUI4b3F4ODB5c3p4SmUydWwtSGdFR0JZSTBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz NDJBLzE3NzhCNzBDOEVDNzExRjBCQjEyODUzQ0M0RjlBRTAyL2lCOG9xeDgweXN6 eEplMnVsLUhnRUdCWUkway5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE3aCGDaNz5ne7CkWsC8iErSS8ZNhJVZ00vvneT8eQ1+nCiQa8SwEVLC 1mNHtmkD5ieqWzVtrxgZ13RMy6FnGcusT8RMp/iippyQHFaMzQbTZLsD/NqXn8zQ Uzh6bi7JjqrFZqce4NYdFCdrt2rZSNo0HxQ7yPy43rgy0ddMmotYvSc83IlEIwen 5N5DfZKMvABcxkVE9jsaSYszpw6xt05mbB7MBJqk+KyZFPBRrlyQXCokDhmPm8nP 5KebNOpMcFPie7PGVfHM9j4l3rI5W+ytJaEIWK8tFB38wHG/HJ/xkmJ8Xiv4Irll LXdvFPvO2fVRLYlorlYVak2QzTWPXf4= -----END CERTIFICATE-----Generated at Thu Sep 18 21:43:20 2025 by rpki-client