$ rpki-client -vvf rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft File: iB8oqx80yszxJe2ul-HgEGBYI0k.mft (raw, json) Hash identifier: 0Cu28bzOf+Du3y3eoUycSE0WS+uGRxh5Fw3ZWHrvWs4= Subject key identifier: 2F:35:54:65:AE:0D:BE:48:39:52:01:FD:BD:E2:CA:59:98:EA:1A:38 Authority key identifier: 88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49 Certificate issuer: /CN=A91D342A/serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft Manifest number: 1C Signing time: Mon 03 Nov 2025 07:48:19 +0000 Manifest this update: Mon 03 Nov 2025 07:48:18 +0000 Manifest next update: Mon 10 Nov 2025 07:48:18 +0000 Files and hashes: 1: iB8oqx80yszxJe2ul-HgEGBYI0k.crl (hash: CrSiHid2dT+zfl6UIWNtk39dYkGNoWngScygwmLv/EE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D342A, serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349 Validity Not Before: Nov 3 07:48:18 2025 GMT Not After : Nov 10 07:48:18 2025 GMT Subject: CN=69085e42-2953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8a:bc:d7:09:85:ba:68:8e:7b:3b:87:fe:45: 28:36:e0:90:15:1b:f7:92:12:42:b8:2f:6f:ea:51: 2e:97:04:1d:12:17:61:70:4c:cc:17:bb:2c:25:17: 32:76:eb:fd:8b:59:8e:e7:fa:f5:f9:54:f9:6c:b9: 2c:c9:96:17:1c:f1:7f:18:95:16:c7:bd:9e:07:6d: e8:10:f6:f0:ff:0e:18:f0:d1:a1:d0:b1:f3:df:59: 94:4e:fa:43:17:3b:63:03:f7:4d:e4:51:42:ef:57: ab:33:db:16:a6:ca:2d:37:64:ff:39:7b:05:92:72: a6:7a:6b:a8:b1:98:aa:b3:34:fa:83:f4:b3:0a:cb: 43:d4:bb:29:d4:8b:4c:f9:d4:ce:bd:96:1d:16:d7: ae:eb:7b:67:f9:4b:fb:ee:60:ce:86:27:06:cd:8e: cb:dc:1e:85:43:3c:dc:37:80:a5:8e:21:e6:8c:62: e1:58:51:e1:41:3f:9c:ef:e6:8c:c0:3f:89:33:18: b9:9c:39:6e:e8:c9:77:d9:13:4f:f8:3b:9a:3c:61: 15:1d:01:53:fa:69:65:f6:9c:d6:09:bd:a8:e8:12: cc:14:fb:a8:bb:8e:19:8b:59:b0:02:03:8d:9f:5a: 5d:e6:50:af:27:88:72:40:54:6b:da:2d:56:6b:5f: 40:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:35:54:65:AE:0D:BE:48:39:52:01:FD:BD:E2:CA:59:98:EA:1A:38 X509v3 Authority Key Identifier: keyid:88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:ea:af:b1:f0:d6:8f:4b:f5:97:f4:fe:d7:2e:e1:bf:bc:fc: 6e:3a:5b:7b:e5:09:4e:fd:f6:75:45:b7:3c:61:b6:af:ad:37: e5:9c:a9:17:c1:6f:03:df:dc:34:bb:12:90:a9:bc:04:fc:66: 66:a9:ea:a4:04:d7:45:96:75:a0:1d:2c:e3:87:72:44:04:fa: 38:d7:f7:42:51:74:2d:5c:54:38:d7:8e:c6:38:a3:97:99:8a: 06:20:5a:52:e7:99:60:5b:b0:99:4d:d9:89:5b:a3:45:27:8d: 92:44:b7:1c:7a:8e:92:0b:44:f1:c4:07:d5:c1:5e:a2:05:e2: c5:3e:be:79:aa:57:ba:2c:32:9e:36:30:30:09:e3:a6:6f:29: 98:7a:ef:cc:8f:e3:fe:03:be:a7:1e:0c:87:c1:d2:89:2e:7c: 0f:2b:89:bc:a3:24:f8:cb:a2:27:f1:cc:08:9b:b0:3e:6d:d3: 27:c7:d4:75:f7:0a:ec:ec:6b:6c:4d:11:66:7f:c2:a5:24:67: 58:b8:9a:9f:7d:4a:76:9b:dd:9f:25:af:0f:ab:56:69:d8:f2: fa:2f:4c:25:ce:62:2c:c2:76:10:b1:4a:c5:19:e7:a5:92:6f: 12:6f:a3:cc:27:f0:d2:63:5d:06:da:cf:94:0d:4e:bc:4a:3c: 7b:bf:42:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MzQyQTExMC8GA1UEBRMoODgxRjI4QUIxRjM0Q0FDQ0YxMjVFREFFOTdFMUUwMTA2 MDU4MjM0OTAeFw0yNTExMDMwNzQ4MThaFw0yNTExMTAwNzQ4MThaMBgxFjAUBgNV BAMTDTY5MDg1ZTQyLTI5NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdirzXCYW6aI57O4f+RSg24JAVG/eSEkK4L2/qUS6XBB0SF2FwTMwXuywlFzJ2 6/2LWY7n+vX5VPlsuSzJlhcc8X8YlRbHvZ4HbegQ9vD/Dhjw0aHQsfPfWZRO+kMX O2MD903kUULvV6sz2xamyi03ZP85ewWScqZ6a6ixmKqzNPqD9LMKy0PUuynUi0z5 1M69lh0W167re2f5S/vuYM6GJwbNjsvcHoVDPNw3gKWOIeaMYuFYUeFBP5zv5ozA P4kzGLmcOW7oyXfZE0/4O5o8YRUdAVP6aWX2nNYJvajoEswU+6i7jhmLWbACA42f Wl3mUK8niHJAVGvaLVZrX0BTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULzVUZa4N vkg5UgH9veLKWZjqGjgwHwYDVR0jBBgwFoAUiB8oqx80yszxJe2ul+HgEGBYI0kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzNDJBLzE3NzhCNzBDOEVD NzExRjBCQjEyODUzQ0M0RjlBRTAyL2lCOG9xeDgweXN6eEplMnVsLUhnRUdCWUkw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUI4b3F4ODB5c3p4SmUydWwtSGdFR0JZSTBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz NDJBLzE3NzhCNzBDOEVDNzExRjBCQjEyODUzQ0M0RjlBRTAyL2lCOG9xeDgweXN6 eEplMnVsLUhnRUdCWUkway5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEXqr7Hw1o9L9Zf0/tcu4b+8/G46W3vlCU799nVFtzxhtq+tN+WcqRfB bwPf3DS7EpCpvAT8Zmap6qQE10WWdaAdLOOHckQE+jjX90JRdC1cVDjXjsY4o5eZ igYgWlLnmWBbsJlN2Ylbo0UnjZJEtxx6jpILRPHEB9XBXqIF4sU+vnmqV7osMp42 MDAJ46ZvKZh678yP4/4DvqceDIfB0okufA8ribyjJPjLoifxzAibsD5t0yfH1HX3 Cuzsa2xNEWZ/wqUkZ1i4mp99Snab3Z8lrw+rVmnY8vovTCXOYizCdhCxSsUZ56WS bxJvo8wn8NJjXQbaz5QNTrxKPHu/Qhg= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:20 2025 by rpki-client