$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft File: iP8qX1-BdhNDU35LVLXmoW8gfqk.mft (raw, json) Hash identifier: rfQfLquw3QeTzj95gyErd1JB+TU3HHuPn4NGEdFGkM8= Subject key identifier: FA:E8:AB:16:06:93:00:80:10:18:41:54:73:C3:8C:D1:61:1A:A6:EA Authority key identifier: 88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 Certificate issuer: /CN=A91CF1E7/serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft Manifest number: 0196 Signing time: Wed 05 Nov 2025 03:31:11 +0000 Manifest this update: Wed 05 Nov 2025 03:31:10 +0000 Manifest next update: Wed 12 Nov 2025 03:31:10 +0000 Files and hashes: 1: iP8qX1-BdhNDU35LVLXmoW8gfqk.crl (hash: juc6WI+HQWTNayIMp4kWhPUQtcPnXxv3kD/uMxX7nKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF1E7, serialNumber=88FF2A5F5F81761343537E4B54B5E6A16F207EA9 Validity Not Before: Nov 5 03:31:10 2025 GMT Not After : Nov 12 03:31:10 2025 GMT Subject: CN=690ac4ff-35b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:66:84:a9:2c:3c:a8:96:56:04:bb:3d:6c:00: 88:bd:46:e7:80:dd:8c:9f:cf:56:0c:7d:df:f5:a9: 89:1e:e0:51:10:96:81:a8:fe:5c:a1:47:cc:d8:9e: 65:d5:96:8e:34:0f:85:db:47:4a:04:e8:7e:7a:a4: e4:18:93:34:40:1b:02:e3:3d:48:e9:b2:4b:2f:21: f2:2e:0c:bb:18:74:a4:78:2e:1c:8b:a8:83:3e:16: 28:c5:d2:c1:02:fe:43:3e:c2:1b:29:dd:a9:89:4e: 81:28:c9:b1:54:06:38:c8:d3:40:05:a9:44:82:70: f2:64:30:b5:19:1c:58:fb:f9:e5:be:d4:71:12:47: 6e:f5:84:94:2f:fe:62:52:61:6a:76:85:5b:b6:37: 08:22:ec:c5:d6:01:24:3b:d3:85:43:31:39:be:16: 3b:75:92:f9:72:40:95:41:94:79:c0:0b:28:35:37: 41:00:5c:d8:37:81:0a:df:7f:51:a3:77:bd:bf:98: 48:bf:57:2f:23:dd:33:63:49:8a:09:f4:1c:b3:f6: da:06:9e:9a:6f:84:f7:90:e6:5b:f6:3d:ca:c0:3c: 63:1f:9b:c2:3f:a9:04:b4:9e:8f:e2:4d:6a:c3:4e: f3:91:f2:a6:4a:2d:f9:43:94:10:85:f6:9a:6b:1c: 27:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E8:AB:16:06:93:00:80:10:18:41:54:73:C3:8C:D1:61:1A:A6:EA X509v3 Authority Key Identifier: keyid:88:FF:2A:5F:5F:81:76:13:43:53:7E:4B:54:B5:E6:A1:6F:20:7E:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iP8qX1-BdhNDU35LVLXmoW8gfqk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF1E7/1DBE1A3247B911EEAAD3DB4AC4F9AE02/iP8qX1-BdhNDU35LVLXmoW8gfqk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:ae:11:07:de:0e:e4:14:51:f8:7f:91:8f:4c:17:d2:cc:df: cd:36:11:7c:41:51:12:96:54:a2:85:77:e1:4c:8e:83:9e:ea: fa:1c:9d:a8:37:6a:7b:a8:e1:a8:11:88:74:14:af:31:a1:63: fb:0e:1c:b1:93:40:b2:22:65:67:0a:2c:00:c1:27:37:c0:9e: 76:25:b4:da:e5:d2:66:a5:2f:82:94:4d:7e:53:d5:c1:7b:4e: c9:7f:38:b2:dc:77:c6:c7:9d:3d:44:72:89:c9:9b:5a:06:e2: 54:20:e8:db:48:02:1f:b3:06:e7:2d:91:d8:19:e2:63:55:35: 92:ac:ec:e5:44:37:2d:d2:30:f3:8d:36:9a:b2:30:e9:cd:35: 46:94:d7:da:e0:29:7e:9d:39:aa:01:48:28:6f:06:b9:43:bb: d3:d7:7d:78:93:93:4e:e2:52:46:d3:12:ee:b3:89:87:b6:51: fe:6e:83:bf:c6:15:16:b6:a9:71:b6:3e:a3:55:da:80:d8:50: 29:03:c3:df:7b:bf:31:9b:a3:a6:1d:93:ca:50:7e:b5:9a:35: 73:5a:4c:0b:b1:b7:64:b2:5a:ef:69:22:92:11:4b:60:ce:29: 35:98:b4:dd:78:62:8a:89:eb:9a:38:c9:65:55:6e:a8:57:4d: 0f:fc:db:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YxRTcxMTAvBgNVBAUTKDg4RkYyQTVGNUY4MTc2MTM0MzUzN0U0QjU0QjVFNkEx NkYyMDdFQTkwHhcNMjUxMTA1MDMzMTEwWhcNMjUxMTEyMDMzMTEwWjAYMRYwFAYD VQQDEw02OTBhYzRmZi0zNWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4WaEqSw8qJZWBLs9bACIvUbngN2Mn89WDH3f9amJHuBREJaBqP5coUfM2J5l 1ZaONA+F20dKBOh+eqTkGJM0QBsC4z1I6bJLLyHyLgy7GHSkeC4ci6iDPhYoxdLB Av5DPsIbKd2piU6BKMmxVAY4yNNABalEgnDyZDC1GRxY+/nlvtRxEkdu9YSUL/5i UmFqdoVbtjcIIuzF1gEkO9OFQzE5vhY7dZL5ckCVQZR5wAsoNTdBAFzYN4EK339R o3e9v5hIv1cvI90zY0mKCfQcs/baBp6ab4T3kOZb9j3KwDxjH5vCP6kEtJ6P4k1q w07zkfKmSi35Q5QQhfaaaxwnowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFProqxYG kwCAEBhBVHPDjNFhGqbqMB8GA1UdIwQYMBaAFIj/Kl9fgXYTQ1N+S1S15qFvIH6p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjFFNy8xREJFMUEzMjQ3 QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRoTkRVMzVMVkxYbW9XOGdm cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lQOHFYMS1CZGhORFUzNUxWTFhtb1c4Z2Zxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjFFNy8xREJFMUEzMjQ3QjkxMUVFQUFEM0RCNEFDNEY5QUUwMi9pUDhxWDEtQmRo TkRVMzVMVkxYbW9XOGdmcWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCorhEH3g7kFFH4f5GPTBfSzN/NNhF8QVESllSihXfhTI6Dnur6HJ2o N2p7qOGoEYh0FK8xoWP7Dhyxk0CyImVnCiwAwSc3wJ52JbTa5dJmpS+ClE1+U9XB e07Jfziy3HfGx509RHKJyZtaBuJUIOjbSAIfswbnLZHYGeJjVTWSrOzlRDct0jDz jTaasjDpzTVGlNfa4Cl+nTmqAUgobwa5Q7vT1314k5NO4lJG0xLus4mHtlH+boO/ xhUWtqlxtj6jVdqA2FApA8Pfe78xm6OmHZPKUH61mjVzWkwLsbdkslrvaSKSEUtg zik1mLTdeGKKieuaOMllVW6oV00P/Nu+ -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:09 2025 by rpki-client