$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft File: mIulA6dlHjJofEyW9u3hh8c9BDg.mft (raw, json) Hash identifier: h/EjVn2kx3ykzV/mP9ezSKJN4iCt+e53iraYRYwwoFQ= Subject key identifier: 0C:B5:D2:51:63:E6:A1:64:AE:88:41:45:92:8E:73:A6:F5:0C:CB:60 Authority key identifier: 98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 Certificate issuer: /CN=A91E923A/serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Certificate serial: 0D10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft Manifest number: 0E80 Signing time: Thu 18 Sep 2025 18:15:21 +0000 Manifest this update: Thu 18 Sep 2025 18:15:20 +0000 Manifest next update: Thu 25 Sep 2025 18:15:20 +0000 Files and hashes: 1: mIulA6dlHjJofEyW9u3hh8c9BDg.crl (hash: px8xPp1rT92COMcG0TO1qFZtkf4+iLgG32lyjBv4wIY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3344 (0xd10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A, serialNumber=988BA503A7651E32687C4C96F6EDE187C73D0438 Validity Not Before: Sep 18 18:15:20 2025 GMT Not After : Sep 25 18:15:20 2025 GMT Subject: CN=68cc4c38-713d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:31:0d:d2:76:68:07:1b:d0:55:47:fd:03:aa: 30:a4:b2:42:20:94:bf:3b:43:48:d1:cc:52:c2:42: ba:2a:97:34:4a:85:af:91:44:6c:04:1c:6a:20:47: 6d:03:ee:91:6b:83:98:0b:8b:08:0b:5c:6b:1c:4a: 4b:9b:36:9f:c9:a4:bb:10:33:24:07:31:33:f0:13: 6c:49:e4:57:15:a3:e1:49:9f:3d:ec:a0:e3:06:35: 5a:cd:aa:02:ea:ea:cd:8c:8b:4b:31:37:df:a3:9f: b2:ad:c8:fd:82:52:bb:83:dd:1f:c5:f2:bd:34:e2: 2f:66:7c:5d:bc:d4:07:ed:b6:87:b2:fb:24:5a:a6: 8d:d1:14:dc:0b:41:80:aa:39:67:d8:54:b4:91:33: e0:a1:82:25:74:cc:f0:ea:be:f8:c3:28:7e:16:4b: aa:7f:d6:d4:80:db:e7:4c:94:7c:20:6b:8b:92:cd: 40:8d:27:87:f0:d2:ee:e2:3e:8f:34:41:43:40:3f: 13:e4:9e:70:56:87:f8:09:bd:9a:9d:a3:e3:f1:c9: 31:74:05:b8:1c:b8:38:42:99:54:88:3e:0d:d6:37: 9f:b5:45:04:1e:8e:48:b4:8c:0b:5e:d2:8e:c5:23: f2:ae:40:47:84:b0:fa:68:b6:ac:ab:2d:0d:7c:92: b1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B5:D2:51:63:E6:A1:64:AE:88:41:45:92:8E:73:A6:F5:0C:CB:60 X509v3 Authority Key Identifier: keyid:98:8B:A5:03:A7:65:1E:32:68:7C:4C:96:F6:ED:E1:87:C7:3D:04:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mIulA6dlHjJofEyW9u3hh8c9BDg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/mIulA6dlHjJofEyW9u3hh8c9BDg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8c:45:00:6c:d8:43:3f:23:58:21:d6:3f:f3:58:d1:6f:60: 1c:3b:82:6c:91:7f:54:5f:59:02:7d:83:d4:65:cb:ce:23:13: c8:da:95:9e:fe:5e:7f:2e:c9:48:a8:5b:1f:fc:0b:7f:94:19: ed:3e:b6:08:1f:fd:4e:24:9c:85:f5:39:2f:c6:72:39:aa:07: f8:2e:f7:bb:8c:4e:63:54:cb:6b:bc:aa:82:0a:93:7e:dc:77: 29:9f:62:b3:7d:c3:fa:d3:26:fc:b6:81:1d:99:5f:02:a0:50: a3:6a:29:c5:74:0f:d0:cb:17:c1:19:fc:32:25:09:1b:98:5b: ea:6c:ec:82:b1:c4:09:b2:b6:2f:54:9b:89:fe:20:74:1c:45: 75:99:8c:49:9c:fd:d8:b2:6c:8f:45:b4:50:55:3f:1a:b4:d5: 05:2a:94:96:10:60:77:a7:1e:76:9b:66:71:9f:a2:93:1d:36: 01:d7:dc:19:da:a7:38:84:3f:a7:56:39:21:df:17:d4:56:12: ae:fb:85:48:43:51:f6:84:f0:2e:59:95:9b:94:23:1e:8a:e5: 24:da:f4:ea:1d:b3:a4:e7:7c:96:7c:03:6e:96:c5:9a:07:3f: 7e:d0:6e:b8:ec:1a:2b:a6:48:14:a1:fb:43:d0:17:ac:4d:6b: dd:c6:4c:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkyM0ExMTAvBgNVBAUTKDk4OEJBNTAzQTc2NTFFMzI2ODdDNEM5NkY2RURFMTg3 QzczRDA0MzgwHhcNMjUwOTE4MTgxNTIwWhcNMjUwOTI1MTgxNTIwWjAYMRYwFAYD VQQDEw02OGNjNGMzOC03MTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjEN0nZoBxvQVUf9A6owpLJCIJS/O0NI0cxSwkK6Kpc0SoWvkURsBBxqIEdt A+6Ra4OYC4sIC1xrHEpLmzafyaS7EDMkBzEz8BNsSeRXFaPhSZ897KDjBjVazaoC 6urNjItLMTffo5+yrcj9glK7g90fxfK9NOIvZnxdvNQH7baHsvskWqaN0RTcC0GA qjln2FS0kTPgoYIldMzw6r74wyh+Fkuqf9bUgNvnTJR8IGuLks1AjSeH8NLu4j6P NEFDQD8T5J5wVof4Cb2anaPj8ckxdAW4HLg4QplUiD4N1jeftUUEHo5ItIwLXtKO xSPyrkBHhLD6aLasqy0NfJKxpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAy10lFj 5qFkrohBRZKOc6b1DMtgMB8GA1UdIwQYMBaAFJiLpQOnZR4yaHxMlvbt4YfHPQQ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTIzQS9DOUIzQ0M1NEVD MTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhqSm9mRXlXOXUzaGg4YzlC RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21JdWxBNmRsSGpKb2ZFeVc5dTNoaDhjOUJEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi9tSXVsQTZkbEhq Sm9mRXlXOXUzaGg4YzlCRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBajEUAbNhDPyNYIdY/81jRb2AcO4JskX9UX1kCfYPUZcvOIxPI2pWe /l5/LslIqFsf/At/lBntPrYIH/1OJJyF9TkvxnI5qgf4Lve7jE5jVMtrvKqCCpN+ 3Hcpn2KzfcP60yb8toEdmV8CoFCjainFdA/QyxfBGfwyJQkbmFvqbOyCscQJsrYv VJuJ/iB0HEV1mYxJnP3YsmyPRbRQVT8atNUFKpSWEGB3px52m2Zxn6KTHTYB19wZ 2qc4hD+nVjkh3xfUVhKu+4VIQ1H2hPAuWZWblCMeiuUk2vTqHbOk53yWfANulsWa Bz9+0G647BorpkgUoftD0BesTWvdxkwy -----END CERTIFICATE-----Generated at Fri Sep 19 08:52:14 2025 by rpki-client