$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft File: iQoeXMwexsfOHqcfSRKRH1mShrI.mft (raw, json) Hash identifier: XmF08XbpPqj+gE43nk07QCP6NOeE+hE4vXdJOW5/EGk= Subject key identifier: DA:B9:DA:87:5D:6F:4E:F2:3A:9F:B2:9B:72:DE:B7:90:B7:AB:8C:CD Authority key identifier: 89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2 Certificate issuer: /CN=A91E2234/serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2 Certificate serial: 34A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft Manifest number: 34A5 Signing time: Sun 10 Aug 2025 14:49:00 +0000 Manifest this update: Sun 10 Aug 2025 14:49:00 +0000 Manifest next update: Sun 17 Aug 2025 14:49:00 +0000 Files and hashes: 1: iQoeXMwexsfOHqcfSRKRH1mShrI.crl (hash: oKXYo4py0pkI6IFnIlDAs1YblYn+FMmu134w5j9Rwx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13477 (0x34a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2234, serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2 Validity Not Before: Aug 10 14:49:00 2025 GMT Not After : Aug 17 14:49:00 2025 GMT Subject: CN=6898b15c-e8a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c3:42:4c:ce:37:ed:86:6c:96:13:31:ac:51: 02:d2:3b:a0:ea:e8:96:c3:55:a6:84:ce:7e:bf:58: 44:42:80:f7:c6:57:a4:33:ed:93:1e:af:a4:c2:06: a4:dd:03:91:1d:01:36:48:70:d8:12:39:f5:2f:ef: 8b:df:b0:3a:a7:7a:45:18:03:37:25:66:1c:13:e0: 88:6e:10:b2:9d:92:86:66:c8:a9:db:b9:85:ab:7c: 87:74:a0:9f:f6:9d:20:27:64:3b:4a:c0:eb:3a:6f: 55:51:07:22:df:b7:ac:e8:4a:ba:dc:84:1b:fd:31: 3c:de:07:4e:47:0d:66:76:b7:02:18:48:41:37:b0: 74:dc:ba:8b:c5:f5:e5:d6:b0:b0:a4:af:09:d7:62: 99:3e:39:fd:3a:c3:82:48:f2:a4:46:42:66:26:de: ea:6f:4b:75:87:12:43:cf:51:8d:67:5a:0b:80:f6: 63:6f:7f:99:4b:e4:1e:aa:9d:73:ea:3f:81:57:83: 61:9f:98:a4:48:16:e7:83:15:38:02:84:d5:0d:9c: 54:d3:68:da:79:5d:eb:34:a1:ef:e7:2b:1a:97:b3: 20:12:c1:11:c3:73:ee:07:6d:07:76:97:51:3e:bb: 8c:f9:8e:3b:38:be:e8:53:b4:4f:5b:9d:95:8e:07: ef:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B9:DA:87:5D:6F:4E:F2:3A:9F:B2:9B:72:DE:B7:90:B7:AB:8C:CD X509v3 Authority Key Identifier: keyid:89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:8f:00:d8:08:25:ac:e2:cb:ba:25:f5:18:ec:de:ba:80:9d: c3:42:d7:5c:cb:58:4f:ca:fa:05:f6:09:84:c6:eb:61:bb:3c: 5b:d9:66:5f:db:08:ce:90:05:37:e2:b3:ba:84:00:c2:87:92: 76:c4:1f:d3:0d:ca:c7:12:0b:0c:20:d0:99:35:46:07:8b:33: d5:00:91:45:90:8d:b9:ac:b5:52:82:91:4c:74:8d:a6:ce:fc: 23:41:d0:dd:7e:30:29:76:79:d3:5f:13:8a:b0:e3:85:4a:13: 42:70:fa:09:03:7b:06:7a:6f:1f:f4:cb:21:82:78:c0:73:79: 3f:dd:99:ec:55:e5:40:0d:a4:82:68:99:2f:cf:c6:b0:d4:75: f5:7e:0e:79:d7:fe:cb:82:05:24:da:d2:c3:07:4c:6c:ef:8d: 85:67:15:ec:8e:b3:d4:46:9e:04:8a:76:d6:6a:c9:8a:68:fe: 93:d9:9b:31:20:60:2f:61:28:24:e5:99:3c:b0:2d:ea:64:76: 14:73:20:7e:00:cf:e6:9e:28:9d:c9:e8:68:75:90:6f:ce:fc: d1:73:6e:35:4a:80:0a:bf:ef:61:26:76:a0:4d:c6:eb:5d:d2: 97:84:80:81:5c:e0:85:39:55:2a:07:6c:ca:a6:3e:e7:a8:4b: 7f:98:9a:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyMzQxMTAvBgNVBAUTKDg5MEExRTVDQ0MxRUM2QzdDRTFFQTcxRjQ5MTI5MTFG NTk5Mjg2QjIwHhcNMjUwODEwMTQ0OTAwWhcNMjUwODE3MTQ0OTAwWjAYMRYwFAYD VQQDEw02ODk4YjE1Yy1lOGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8NCTM437YZslhMxrFEC0jug6uiWw1WmhM5+v1hEQoD3xlekM+2THq+kwgak 3QORHQE2SHDYEjn1L++L37A6p3pFGAM3JWYcE+CIbhCynZKGZsip27mFq3yHdKCf 9p0gJ2Q7SsDrOm9VUQci37es6Eq63IQb/TE83gdORw1mdrcCGEhBN7B03LqLxfXl 1rCwpK8J12KZPjn9OsOCSPKkRkJmJt7qb0t1hxJDz1GNZ1oLgPZjb3+ZS+Qeqp1z 6j+BV4Nhn5ikSBbngxU4AoTVDZxU02jaeV3rNKHv5ysal7MgEsERw3PuB20HdpdR PruM+Y47OL7oU7RPW52VjgfvQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNq52odd b07yOp+ym3Let5C3q4zNMB8GA1UdIwQYMBaAFIkKHlzMHsbHzh6nH0kSkR9Zkoay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjIzNC81MjI1NjkxNDFE OTYxMUUyOUVFNUNCN0UwOEIwMkNEMi9pUW9lWE13ZXhzZk9IcWNmU1JLUkgxbVNo ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRb2VYTXdleHNmT0hxY2ZTUktSSDFtU2hySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjIzNC81MjI1NjkxNDFEOTYxMUUyOUVFNUNCN0UwOEIwMkNEMi9pUW9lWE13ZXhz Zk9IcWNmU1JLUkgxbVNockkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdjwDYCCWs4su6JfUY7N66gJ3DQtdcy1hPyvoF9gmExuthuzxb2WZf 2wjOkAU34rO6hADCh5J2xB/TDcrHEgsMINCZNUYHizPVAJFFkI25rLVSgpFMdI2m zvwjQdDdfjApdnnTXxOKsOOFShNCcPoJA3sGem8f9MshgnjAc3k/3ZnsVeVADaSC aJkvz8aw1HX1fg551/7LggUk2tLDB0xs742FZxXsjrPURp4EinbWasmKaP6T2Zsx IGAvYSgk5Zk8sC3qZHYUcyB+AM/mniidyehodZBvzvzRc241SoAKv+9hJnagTcbr XdKXhICBXOCFOVUqB2zKpj7nqEt/mJpD -----END CERTIFICATE-----Generated at Mon Aug 11 07:26:54 2025 by rpki-client