$ rpki-client -vvf rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft File: iB8oqx80yszxJe2ul-HgEGBYI0k.mft (raw, json) Hash identifier: /rtEyICsWgXovuFcrQC94hH+H0U7IQL4iXgiSPPejK4= Subject key identifier: E0:DA:DA:0E:07:48:3C:BD:E5:20:7B:26:F2:35:79:8F:2C:EB:37:A8 Authority key identifier: 88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49 Certificate issuer: /CN=A91D342A/serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft Manifest number: 1D Signing time: Wed 05 Nov 2025 07:59:51 +0000 Manifest this update: Wed 05 Nov 2025 07:59:51 +0000 Manifest next update: Wed 12 Nov 2025 07:59:51 +0000 Files and hashes: 1: iB8oqx80yszxJe2ul-HgEGBYI0k.crl (hash: opotj9P8F0k7KG9OiaSAaUWqJ2K3V1Mu2zrkqQHMGHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:59:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D342A, serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349 Validity Not Before: Nov 5 07:59:51 2025 GMT Not After : Nov 12 07:59:51 2025 GMT Subject: CN=690b03f7-e518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:df:ce:62:8b:25:a6:ef:74:ff:f8:fc:7f:c0: a8:cc:d8:3b:06:6e:72:66:19:3d:e8:cc:73:f4:44: 79:65:50:0a:59:d4:d0:38:a4:0c:c7:17:a2:ee:b4: c1:26:3a:97:3e:43:e8:4a:0f:0a:97:ca:c6:03:6f: 72:63:4d:2a:7c:a2:9d:b3:92:4d:6c:63:6e:7d:db: b6:c2:37:ba:6b:5e:ba:c2:d5:bd:ab:7c:8f:09:20: a9:28:70:d9:67:36:ba:a5:bb:de:fb:de:8d:8c:fc: a6:ff:8d:50:66:7a:34:1b:f0:d5:97:55:87:7f:c4: b1:49:3f:44:91:cb:be:d9:9a:0e:9b:84:f0:3b:70: 13:1b:a6:3e:64:f8:35:40:16:da:b3:75:dd:30:fb: 1c:0d:44:98:54:1a:c9:18:44:84:2b:ed:f9:b9:95: eb:c3:ab:ba:80:d1:ec:cd:1f:57:24:c1:da:cc:4d: 13:bc:b0:d9:fd:60:5f:2c:93:16:25:f7:ab:c8:92: e5:1d:db:08:61:a6:1b:a1:a6:c1:1b:e5:9e:ac:44: d8:0c:d8:16:7d:58:2a:e2:01:4b:7b:b9:c1:b7:84: 1e:be:4b:eb:29:c7:ae:45:b0:52:b2:60:51:83:ea: ed:35:91:24:2d:59:d5:1c:a1:de:60:6d:e6:ba:c9: f2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DA:DA:0E:07:48:3C:BD:E5:20:7B:26:F2:35:79:8F:2C:EB:37:A8 X509v3 Authority Key Identifier: keyid:88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:11:c0:f0:9f:c4:0e:65:22:35:ca:a8:c4:b5:63:f2:77:aa: 66:03:7f:1d:6b:4e:64:81:f1:2b:32:fd:06:16:ac:50:bb:84: 82:c0:d2:94:63:5a:d1:4a:8a:53:ce:0f:53:ed:7a:78:51:cc: 91:0e:6a:ba:83:0d:09:8c:2b:eb:59:26:61:fc:f9:6b:05:ec: 96:a8:2f:d8:44:d0:ec:54:fa:af:51:03:1d:7f:64:ce:be:3d: 18:6c:18:c6:76:a2:68:fb:66:e6:c0:31:4c:c8:e5:57:bc:c7: 97:39:77:36:f2:a6:c6:61:da:fe:ab:3d:cb:35:67:2c:82:90: d8:59:5e:16:42:b4:fb:7a:18:a8:a4:bb:a7:2d:23:6c:bd:7e: af:b9:1c:e3:e8:56:93:d3:9a:9b:f5:0b:93:b1:2c:c5:4a:fe: 59:54:21:8b:6a:f7:75:85:ba:87:ad:5d:e5:9c:74:4d:09:c5: 61:53:99:28:f1:b0:aa:1d:56:fb:e2:cd:2f:8e:bf:05:34:91: de:39:7e:2e:79:11:9d:af:08:fa:34:11:39:8c:30:ed:8c:98: 4a:89:ed:86:21:80:49:83:a6:3e:66:8c:65:59:a1:2b:e6:6f: 8a:10:e2:f5:80:dc:f3:42:c2:87:ab:b4:04:1d:11:e6:0f:d4: 32:77:78:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MzQyQTExMC8GA1UEBRMoODgxRjI4QUIxRjM0Q0FDQ0YxMjVFREFFOTdFMUUwMTA2 MDU4MjM0OTAeFw0yNTExMDUwNzU5NTFaFw0yNTExMTIwNzU5NTFaMBgxFjAUBgNV BAMTDTY5MGIwM2Y3LWU1MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC385iiyWm73T/+Px/wKjM2DsGbnJmGT3ozHP0RHllUApZ1NA4pAzHF6LutMEm Opc+Q+hKDwqXysYDb3JjTSp8op2zkk1sY25927bCN7prXrrC1b2rfI8JIKkocNln Nrqlu9773o2M/Kb/jVBmejQb8NWXVYd/xLFJP0SRy77Zmg6bhPA7cBMbpj5k+DVA Ftqzdd0w+xwNRJhUGskYRIQr7fm5levDq7qA0ezNH1ckwdrMTRO8sNn9YF8skxYl 96vIkuUd2whhphuhpsEb5Z6sRNgM2BZ9WCriAUt7ucG3hB6+S+spx65FsFKyYFGD 6u01kSQtWdUcod5gbea6yfJNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4NraDgdI PL3lIHsm8jV5jyzrN6gwHwYDVR0jBBgwFoAUiB8oqx80yszxJe2ul+HgEGBYI0kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzNDJBLzE3NzhCNzBDOEVD NzExRjBCQjEyODUzQ0M0RjlBRTAyL2lCOG9xeDgweXN6eEplMnVsLUhnRUdCWUkw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUI4b3F4ODB5c3p4SmUydWwtSGdFR0JZSTBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz NDJBLzE3NzhCNzBDOEVDNzExRjBCQjEyODUzQ0M0RjlBRTAyL2lCOG9xeDgweXN6 eEplMnVsLUhnRUdCWUkway5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABYRwPCfxA5lIjXKqMS1Y/J3qmYDfx1rTmSB8Ssy/QYWrFC7hILA0pRj WtFKilPOD1PtenhRzJEOarqDDQmMK+tZJmH8+WsF7JaoL9hE0OxU+q9RAx1/ZM6+ PRhsGMZ2omj7ZubAMUzI5Ve8x5c5dzbypsZh2v6rPcs1ZyyCkNhZXhZCtPt6GKik u6ctI2y9fq+5HOPoVpPTmpv1C5OxLMVK/llUIYtq93WFuoetXeWcdE0JxWFTmSjx sKodVvvizS+OvwU0kd45fi55EZ2vCPo0ETmMMO2MmEqJ7YYhgEmDpj5mjGVZoSvm b4oQ4vWA3PNCwoertAQdEeYP1DJ3eN0= -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:32 2025 by rpki-client