$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft File: rsioMoH-iyda7gQb4zzN2Ek7rAA.mft (raw, json) Hash identifier: D1hDHeNyawgSaNRBJe8MQlzHHVWlU4jLVoqp7+ATy0o= Subject key identifier: 76:E3:B4:9A:11:76:B0:9B:CA:48:CB:0D:E7:1B:C5:CE:F3:51:57:93 Authority key identifier: AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00 Certificate issuer: /CN=A91E6D5D/serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00 Certificate serial: 2B33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft Manifest number: 9FF0 Signing time: Sun 24 Aug 2025 14:30:18 +0000 Manifest this update: Sun 24 Aug 2025 14:30:18 +0000 Manifest next update: Sun 31 Aug 2025 14:30:18 +0000 Files and hashes: 1: rsioMoH-iyda7gQb4zzN2Ek7rAA.crl (hash: HDVWn4eSDU1f2AxPElY6QTYx/2Qi78Xpt6Rq7b/jYdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11059 (0x2b33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00 Validity Not Before: Aug 24 14:30:18 2025 GMT Not After : Aug 31 14:30:18 2025 GMT Subject: CN=68ab21fa-e39f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c9:b8:cf:fd:38:00:f2:8e:d2:31:b2:aa:c5: f2:72:be:44:2b:75:83:e7:7d:36:00:b4:d5:82:39: 51:df:45:c7:49:f8:9f:2e:1d:6c:7c:d9:0b:79:ee: 9d:84:8a:2c:b8:f5:83:77:a9:95:04:db:87:49:dc: 68:d8:a0:37:34:9c:b8:11:18:37:91:04:d1:cf:fd: 22:89:8a:a9:6d:b5:f7:4d:92:c0:f5:6b:ae:f9:61: ec:ff:62:0f:34:60:56:97:dd:31:45:c5:66:2a:3b: 81:83:49:be:91:69:0e:c0:14:e8:81:eb:06:0f:70: 28:fb:76:a9:75:50:d5:85:c9:5c:a8:29:a5:31:ac: a5:ed:cb:cb:b3:43:81:3a:2f:e2:6a:98:5b:38:46: b0:20:4b:41:16:27:c0:f2:f8:ac:8e:25:35:07:b2: da:f9:30:ac:be:29:ab:63:d7:0f:b7:ff:80:0b:59: 6a:e9:d1:ac:82:2d:c3:ce:bb:d0:b3:69:c2:82:b4: 9e:7c:87:ca:ab:86:7d:31:01:27:ce:a5:1d:b6:4c: a0:ec:d1:a4:69:dd:27:be:eb:1c:d1:e4:26:eb:5b: d2:2d:ae:02:04:70:56:e6:95:8c:43:93:e1:f9:b2: 1b:75:8c:77:34:fe:0c:65:7c:50:00:e3:7e:70:b4: dd:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E3:B4:9A:11:76:B0:9B:CA:48:CB:0D:E7:1B:C5:CE:F3:51:57:93 X509v3 Authority Key Identifier: keyid:AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:eb:8b:7e:66:89:ea:8a:b5:1b:e1:1a:b1:6d:34:e4:65:7f: 70:6c:54:f9:c7:dd:81:ec:52:3b:90:44:41:4c:b1:a0:18:cb: 0d:5a:25:49:dc:6b:c2:1f:39:12:0d:1a:44:0f:0f:73:2d:61: 2c:65:7f:20:59:75:0d:03:f9:84:73:36:be:fb:62:ba:04:90: c1:63:dc:cb:7c:74:54:f3:9f:3b:69:2b:49:2c:dc:f4:7b:dc: 81:07:7e:41:5c:11:c7:ce:11:a0:e4:1e:dc:be:0d:50:43:97: 34:b4:30:87:5f:24:dd:ea:12:f9:7a:d0:a1:66:90:d7:b0:7e: bd:00:75:97:13:56:5c:dd:cf:58:b5:5e:f3:d5:c0:2f:aa:b6: d9:a1:0d:fc:36:b8:75:28:81:d5:ae:60:10:85:15:05:ff:44: 18:97:69:e1:ae:2e:0c:d7:b2:74:6e:e0:7b:92:96:64:83:fd: 38:26:73:5a:00:16:66:d4:b5:ed:3a:67:60:84:2c:c1:5d:54: 7a:01:4b:0b:d1:5f:9c:f1:df:2b:5a:c8:c5:49:94:5c:ac:fb: 9f:26:55:77:42:34:35:8e:2e:a1:b9:c6:be:d5:66:91:a1:1d: c0:3d:0c:f9:57:f3:32:4a:41:5f:7e:2c:1c:b4:d7:72:0d:4b: 8f:e8:47:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKEFFQzhBODMyODFGRThCMjc1QUVFMDQxQkUzM0NDREQ4 NDkzQkFDMDAwHhcNMjUwODI0MTQzMDE4WhcNMjUwODMxMTQzMDE4WjAYMRYwFAYD VQQDEw02OGFiMjFmYS1lMzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4cm4z/04APKO0jGyqsXycr5EK3WD5302ALTVgjlR30XHSfifLh1sfNkLee6d hIosuPWDd6mVBNuHSdxo2KA3NJy4ERg3kQTRz/0iiYqpbbX3TZLA9Wuu+WHs/2IP NGBWl90xRcVmKjuBg0m+kWkOwBTogesGD3Ao+3apdVDVhclcqCmlMayl7cvLs0OB Oi/iaphbOEawIEtBFifA8visjiU1B7La+TCsvimrY9cPt/+AC1lq6dGsgi3DzrvQ s2nCgrSefIfKq4Z9MQEnzqUdtkyg7NGkad0nvusc0eQm61vSLa4CBHBW5pWMQ5Ph +bIbdYx3NP4MZXxQAON+cLTd9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbjtJoR drCbykjLDecbxc7zUVeTMB8GA1UdIwQYMBaAFK7IqDKB/osnWu4EG+M8zdhJO6wA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9yc2lvTW9ILWl5ZGE3Z1FiNHp6TjJFazdy QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JzaW9Nb0gtaXlkYTdnUWI0enpOMkVrN3JBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9yc2lvTW9ILWl5 ZGE3Z1FiNHp6TjJFazdyQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK64t+ZonqirUb4RqxbTTkZX9wbFT5x92B7FI7kERBTLGgGMsNWiVJ 3GvCHzkSDRpEDw9zLWEsZX8gWXUNA/mEcza++2K6BJDBY9zLfHRU8587aStJLNz0 e9yBB35BXBHHzhGg5B7cvg1QQ5c0tDCHXyTd6hL5etChZpDXsH69AHWXE1Zc3c9Y tV7z1cAvqrbZoQ38Nrh1KIHVrmAQhRUF/0QYl2nhri4M17J0buB7kpZkg/04JnNa ABZm1LXtOmdghCzBXVR6AUsL0V+c8d8rWsjFSZRcrPufJlV3QjQ1ji6huca+1WaR oR3APQz5V/MySkFffiwctNdyDUuP6Ec9 -----END CERTIFICATE-----Generated at Sun Aug 24 22:04:57 2025 by rpki-client