$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft File: iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft (raw, json) Hash identifier: gBy8OeHI2T3eeeHl38AJJNGiqiojdjzLn9QhxXdF/sA= Subject key identifier: 12:5C:54:E2:17:43:EA:60:96:F5:1C:FD:4F:72:E7:EC:22:42:B8:6F Authority key identifier: 89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 Certificate issuer: /CN=A91D8185/serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft Manifest number: 0A Signing time: Tue 09 Sep 2025 08:15:41 +0000 Manifest this update: Tue 09 Sep 2025 08:15:40 +0000 Manifest next update: Tue 16 Sep 2025 08:15:40 +0000 Files and hashes: 1: iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl (hash: raGNddScCZKb51zOzDbI9X0gSH2uh0+HgtqboaDO5AY=) 2: CC2C3CB684AC11F0B7B8977DC4F9AE02.roa (hash: Iyg31gxgmZNKpKPcyuwxT2WShJvbdC1BGcvDKYneqcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 08:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8185, serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Validity Not Before: Sep 9 08:15:40 2025 GMT Not After : Sep 16 08:15:40 2025 GMT Subject: CN=68bfe22c-cfb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:54:97:4e:63:2f:82:e6:22:e1:fe:c7:bf:9e: d0:e4:67:b9:bc:d8:d6:46:18:26:52:d2:c8:12:db: bd:e9:76:4d:57:1a:aa:43:2b:6e:33:9d:a4:31:c8: 82:87:13:03:b9:e6:16:15:50:18:6e:0f:85:71:a4: 6b:ff:e3:11:32:46:d6:08:4c:c4:7f:b2:91:bb:ef: 6c:7c:bf:cf:13:c7:87:6c:93:4b:ac:42:0c:bb:45: 3a:0b:dc:51:59:71:77:2a:05:6d:d8:f0:73:17:1f: 9c:d1:fa:4e:22:29:69:b7:92:96:86:59:ac:12:1a: 4f:b0:9d:7d:66:f4:9b:aa:e8:18:84:e0:e0:cc:b3: 20:04:3a:b1:a4:78:8b:55:a0:b3:af:87:2b:0d:76: 69:6f:3b:db:e0:60:86:6a:a5:62:85:a3:ee:8f:12: 58:fa:1d:17:bf:d8:b9:01:c8:6c:2e:f0:a1:c2:a8: 9b:3c:66:b4:5b:8d:6e:6f:7c:a9:8b:59:11:70:bd: 1c:b7:ff:f7:4f:ba:cc:49:6f:57:28:e6:ed:97:5e: 67:77:87:b3:49:43:4a:73:40:ef:3c:d3:ce:4b:c1: bc:b9:1d:fb:6b:7c:64:b8:ca:71:66:4c:6f:52:2d: db:a8:38:5b:d1:c4:b7:f2:9f:dd:49:44:e0:99:75: 78:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5C:54:E2:17:43:EA:60:96:F5:1C:FD:4F:72:E7:EC:22:42:B8:6F X509v3 Authority Key Identifier: keyid:89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ba:f8:9e:80:2d:2b:01:29:eb:65:19:4d:fa:65:9b:79:9b: c3:99:f3:2d:26:90:8c:b0:38:3b:99:db:84:8d:d7:c9:4d:08: f9:26:1a:b6:da:7d:47:3d:dc:07:38:17:77:00:f1:58:6f:a7: 3c:42:39:3d:b1:ca:a4:69:f5:1a:b4:d9:a0:e8:ee:e0:38:09: c7:44:bc:ad:e1:98:c1:95:27:fc:ed:b9:72:0f:cb:d9:de:cf: e0:64:10:08:71:c2:1a:f7:c9:ad:6d:67:65:2d:b4:31:66:6f: b8:e7:ec:cc:87:96:f2:fb:95:36:e5:8d:63:8f:0b:fc:d9:d7: 46:c9:eb:a0:5a:78:b1:fa:08:21:b5:be:a1:a6:bc:b7:fb:9b: 7b:58:b5:29:fb:4e:f2:1d:30:d0:b9:59:5e:ee:1e:98:d2:17: ed:e6:ac:21:12:e5:38:3f:13:76:c1:d6:f4:a6:1b:d6:f9:5b: 8e:56:49:1f:db:c7:91:f3:82:c3:19:b8:f7:97:8b:58:9d:99: a0:8b:88:ea:82:74:5e:68:09:0b:6f:0a:d2:1f:f5:dd:cd:a0: a3:e9:e4:80:69:0f:72:1e:5b:f4:d7:9c:18:bd:6c:b4:2f:e8: d0:bf:f3:0e:22:73:e1:e3:39:17:9d:01:dc:2d:20:4e:68:bc: 20:ab:73:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODE4NTExMC8GA1UEBRMoODk3ODRENkQ5MzhCMDVDQzNCN0I2NjZFNUU3QUVFOTIy M0RFNEQ3MDAeFw0yNTA5MDkwODE1NDBaFw0yNTA5MTYwODE1NDBaMBgxFjAUBgNV BAMTDTY4YmZlMjJjLWNmYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKVJdOYy+C5iLh/se/ntDkZ7m82NZGGCZS0sgS273pdk1XGqpDK24znaQxyIKH EwO55hYVUBhuD4VxpGv/4xEyRtYITMR/spG772x8v88Tx4dsk0usQgy7RToL3FFZ cXcqBW3Y8HMXH5zR+k4iKWm3kpaGWawSGk+wnX1m9Juq6BiE4ODMsyAEOrGkeItV oLOvhysNdmlvO9vgYIZqpWKFo+6PElj6HRe/2LkByGwu8KHCqJs8ZrRbjW5vfKmL WRFwvRy3//dPusxJb1co5u2XXmd3h7NJQ0pzQO88085Lwby5HftrfGS4ynFmTG9S LduoOFvRxLfyn91JROCZdXg/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUElxU4hdD 6mCW9Rz9T3Ln7CJCuG8wHwYDVR0jBBgwFoAUiXhNbZOLBcw7e2ZuXnrukiPeTXAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MTg1Lzg1MDExNTMyODRB QzExRjA4RDNBQjk3OUM0RjlBRTAyL2lYaE5iWk9MQmN3N2UyWnVYbnJ1a2lQZVRY QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVhoTmJaT0xCY3c3ZTJadVhucnVraVBlVFhBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MTg1Lzg1MDExNTMyODRBQzExRjA4RDNBQjk3OUM0RjlBRTAyL2lYaE5iWk9MQmN3 N2UyWnVYbnJ1a2lQZVRYQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI26+J6ALSsBKetlGU36ZZt5m8OZ8y0mkIywODuZ24SN18lNCPkmGrba fUc93Ac4F3cA8VhvpzxCOT2xyqRp9Rq02aDo7uA4CcdEvK3hmMGVJ/ztuXIPy9ne z+BkEAhxwhr3ya1tZ2UttDFmb7jn7MyHlvL7lTbljWOPC/zZ10bJ66BaeLH6CCG1 vqGmvLf7m3tYtSn7TvIdMNC5WV7uHpjSF+3mrCES5Tg/E3bB1vSmG9b5W45WSR/b x5HzgsMZuPeXi1idmaCLiOqCdF5oCQtvCtIf9d3NoKPp5IBpD3IeW/TXnBi9bLQv 6NC/8w4ic+HjORedAdwtIE5ovCCrc2k= -----END CERTIFICATE-----Generated at Tue Sep 9 13:35:04 2025 by rpki-client