$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft File: iQoeXMwexsfOHqcfSRKRH1mShrI.mft (raw, json) Hash identifier: BiLz/31Mo1nIZZDJ+8XjvJDTanO2CVIHyy0ZdlrtFFk= Subject key identifier: B8:EE:55:6C:BE:C3:24:DD:CF:C6:FF:EA:E3:6A:7B:CA:87:F1:30:0E Authority key identifier: 89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2 Certificate issuer: /CN=A91E2234/serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2 Certificate serial: 34D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft Manifest number: 34D2 Signing time: Tue 04 Nov 2025 14:53:37 +0000 Manifest this update: Tue 04 Nov 2025 14:53:36 +0000 Manifest next update: Tue 11 Nov 2025 14:53:36 +0000 Files and hashes: 1: iQoeXMwexsfOHqcfSRKRH1mShrI.crl (hash: WKCwe1I09V82gxpEB+BRLOwOPcB1Co0G2MQrrXbx1zY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13522 (0x34d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2234, serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2 Validity Not Before: Nov 4 14:53:36 2025 GMT Not After : Nov 11 14:53:36 2025 GMT Subject: CN=690a1371-5062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:e9:b1:2f:02:39:af:88:1a:3c:90:f7:de: 72:b6:71:ab:a6:25:48:62:d0:d5:e3:42:00:c2:a6: 95:54:7a:fb:da:45:01:78:67:d0:07:a4:91:d0:fb: db:f7:3d:00:6b:11:ce:2a:30:f9:9f:55:4a:b7:80: a8:36:b1:b8:c3:a5:a2:bf:5b:53:97:6a:7a:33:08: ec:98:a9:6c:7d:65:d8:41:35:7f:72:1b:56:82:78: e4:fd:53:3f:3e:22:41:ed:3b:69:95:10:82:10:14: 09:89:31:de:17:7a:d0:af:41:47:bb:b7:0f:8e:eb: a6:db:78:38:19:cb:b9:09:01:3a:cd:ba:a1:c1:a5: e0:49:6d:4e:38:ac:5b:b8:6d:2e:0f:26:42:9f:2d: 34:33:7d:9b:c4:f8:3a:18:58:1c:a7:94:54:57:ad: 0d:58:b7:07:3b:b2:c3:71:c2:f0:5a:f1:ee:93:fc: 42:67:b0:d1:89:2e:1c:12:4a:2f:56:0f:d1:85:50: 9a:80:d0:0d:b6:35:75:9c:52:71:f6:b3:a1:74:14: 9c:cc:4b:ee:af:fc:11:d4:1a:b3:f8:fe:08:f6:94: 9c:5e:0d:85:79:8f:3f:24:c0:4b:81:57:28:79:ff: 78:c8:7c:a0:99:d9:0f:95:ea:24:ba:97:02:48:56: 1a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EE:55:6C:BE:C3:24:DD:CF:C6:FF:EA:E3:6A:7B:CA:87:F1:30:0E X509v3 Authority Key Identifier: keyid:89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:d1:6c:63:4b:ef:04:0f:0d:f3:ff:1b:9f:05:8b:ea:ff:55: 87:27:17:e4:df:70:0a:c2:fa:45:01:ed:87:7a:69:2a:e5:5d: b0:54:2c:d8:56:ce:9a:db:d1:0e:fe:ff:2e:af:12:05:b9:44: 9e:9f:15:2d:73:a8:8f:1d:36:96:30:49:7c:74:b9:34:b3:cb: f8:b4:6b:98:50:d7:1c:f9:c1:1c:da:58:b1:e2:47:ef:ae:e2: 45:fc:b9:c9:ba:0e:e3:d1:00:02:f7:7a:62:9a:a5:41:2e:1b: 80:a5:f1:a5:8c:15:61:9b:11:04:94:87:53:2a:5e:d5:6b:95: 0f:43:57:cd:4e:00:ef:df:22:ae:ea:7a:67:cc:cd:c4:3e:11: 7a:db:31:84:f3:04:4c:77:e7:f0:a6:8b:cf:f2:53:74:6b:75: a6:62:de:94:f0:0a:3a:a2:99:c2:f3:6b:0a:09:07:d3:0a:df: 4b:51:5e:36:d7:cd:b0:32:79:54:0b:89:14:48:55:d0:07:20: 2b:47:55:d9:5c:05:c8:0f:60:9d:97:40:ca:f2:30:2a:e9:8e: 37:bb:0e:46:d3:7a:1b:71:79:d7:ba:b8:a9:73:df:bb:07:50: ed:5f:ff:4d:82:3b:ba:0f:df:fc:57:01:80:50:17:b7:88:dd: 8b:a5:b6:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyMzQxMTAvBgNVBAUTKDg5MEExRTVDQ0MxRUM2QzdDRTFFQTcxRjQ5MTI5MTFG NTk5Mjg2QjIwHhcNMjUxMTA0MTQ1MzM2WhcNMjUxMTExMTQ1MzM2WjAYMRYwFAYD VQQDEw02OTBhMTM3MS01MDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmnpsS8COa+IGjyQ995ytnGrpiVIYtDV40IAwqaVVHr72kUBeGfQB6SR0Pvb 9z0AaxHOKjD5n1VKt4CoNrG4w6Wiv1tTl2p6MwjsmKlsfWXYQTV/chtWgnjk/VM/ PiJB7TtplRCCEBQJiTHeF3rQr0FHu7cPjuum23g4Gcu5CQE6zbqhwaXgSW1OOKxb uG0uDyZCny00M32bxPg6GFgcp5RUV60NWLcHO7LDccLwWvHuk/xCZ7DRiS4cEkov Vg/RhVCagNANtjV1nFJx9rOhdBSczEvur/wR1Bqz+P4I9pScXg2FeY8/JMBLgVco ef94yHygmdkPleokupcCSFYaLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjuVWy+ wyTdz8b/6uNqe8qH8TAOMB8GA1UdIwQYMBaAFIkKHlzMHsbHzh6nH0kSkR9Zkoay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjIzNC81MjI1NjkxNDFE OTYxMUUyOUVFNUNCN0UwOEIwMkNEMi9pUW9lWE13ZXhzZk9IcWNmU1JLUkgxbVNo ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRb2VYTXdleHNmT0hxY2ZTUktSSDFtU2hySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjIzNC81MjI1NjkxNDFEOTYxMUUyOUVFNUNCN0UwOEIwMkNEMi9pUW9lWE13ZXhz Zk9IcWNmU1JLUkgxbVNockkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA0WxjS+8EDw3z/xufBYvq/1WHJxfk33AKwvpFAe2Hemkq5V2wVCzY Vs6a29EO/v8urxIFuUSenxUtc6iPHTaWMEl8dLk0s8v4tGuYUNcc+cEc2lix4kfv ruJF/LnJug7j0QAC93pimqVBLhuApfGljBVhmxEElIdTKl7Va5UPQ1fNTgDv3yKu 6npnzM3EPhF62zGE8wRMd+fwpovP8lN0a3WmYt6U8Ao6opnC82sKCQfTCt9LUV42 182wMnlUC4kUSFXQByArR1XZXAXID2Cdl0DK8jAq6Y43uw5G03obcXnXuripc9+7 B1DtX/9Ngju6D9/8VwGAUBe3iN2LpbaR -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:24 2025 by rpki-client