$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft File: rsioMoH-iyda7gQb4zzN2Ek7rAA.mft (raw, json) Hash identifier: CHRkhPpL5PqxP9TpDCQS3lgscIBDw8kO3KOVaW7D6Cs= Subject key identifier: E2:B7:0C:4D:06:E3:13:51:4A:35:B5:70:E4:5A:ED:FF:2A:0B:96:C9 Authority key identifier: AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00 Certificate issuer: /CN=A91E6D5D/serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00 Certificate serial: 2B2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft Manifest number: 9FD0 Signing time: Fri 08 Aug 2025 14:31:32 +0000 Manifest this update: Fri 08 Aug 2025 14:31:31 +0000 Manifest next update: Fri 15 Aug 2025 14:31:31 +0000 Files and hashes: 1: rsioMoH-iyda7gQb4zzN2Ek7rAA.crl (hash: Notd/Kg21C92Thfmg+CO/foNoRfbTP6HrVzb913SZqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11051 (0x2b2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00 Validity Not Before: Aug 8 14:31:31 2025 GMT Not After : Aug 15 14:31:31 2025 GMT Subject: CN=68960a44-f2ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6c:63:7a:22:44:b6:55:a8:25:0b:53:d0:68: 58:5f:ae:38:21:ee:09:94:e0:ca:72:86:7e:bd:5e: a2:bb:23:ea:6e:26:4e:7f:e1:b5:d7:6d:22:d0:82: 5d:01:79:c2:e8:51:c2:6b:6c:62:51:6a:08:a0:bf: 94:d0:45:4c:62:47:01:c9:13:03:0e:e1:58:8d:0b: 1c:f6:f3:3b:b1:d5:9a:5b:c2:60:5c:64:d3:cf:06: 8d:cb:8f:14:83:98:5e:be:98:bb:1f:fb:6f:06:18: f0:2b:26:f1:0f:5e:a6:3c:99:e4:72:6b:d4:20:2e: db:b0:2b:c7:7d:88:a1:65:46:68:ed:a1:7c:7f:14: 80:d0:b3:8c:de:fa:41:67:5a:aa:d9:a0:43:0b:1c: bc:76:6b:20:ee:fa:39:58:2f:e8:12:a5:e5:70:ed: a4:07:f8:7c:b6:d5:11:e6:d9:d7:4a:a0:fc:0c:56: ab:af:b4:66:c1:82:7d:12:c5:8a:31:9f:6d:eb:a7: 61:62:1e:4d:25:97:6b:7b:62:6a:42:cb:f7:4c:77: b8:89:8f:02:e2:2b:90:37:e3:25:45:84:b8:3c:72: 01:25:00:05:4f:30:9b:a1:8f:96:27:bd:21:c4:f2: 8f:5e:d8:35:4e:1c:46:52:3f:58:56:cd:30:fe:50: 7d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B7:0C:4D:06:E3:13:51:4A:35:B5:70:E4:5A:ED:FF:2A:0B:96:C9 X509v3 Authority Key Identifier: keyid:AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:fb:41:15:26:82:30:3c:35:b6:f7:4f:fb:da:2d:2b:57:91: 69:89:69:cd:3d:b9:ec:e9:15:22:77:b1:3a:bd:df:dd:06:b3: b8:fe:f1:fc:e3:ce:ed:f2:2a:52:07:cb:4d:41:29:17:3c:cc: c9:e7:18:07:04:22:9d:c6:d9:44:a4:29:4a:e6:c6:6d:f0:6c: 54:20:63:49:04:89:71:2b:06:f1:8e:bd:9c:12:b9:35:55:2f: 35:a0:c8:a0:84:dc:fc:c5:27:bb:e8:6c:22:82:2e:54:c0:39: 5d:32:f3:a7:e6:9e:dc:0c:a2:28:7b:57:ad:84:ed:a8:f4:ea: ab:1b:ae:29:2c:7b:f0:7c:11:cd:5b:f7:d7:3b:ed:54:e0:8a: 55:0a:78:c8:8a:c6:f4:de:c6:2d:11:25:15:4c:ed:3a:3f:9b: 3d:65:0b:8c:8f:dc:9a:94:11:fc:01:92:b8:0e:aa:a6:89:8e: a7:ab:23:40:da:bf:5c:16:99:e5:42:0a:5b:98:5a:7e:d8:0f: e7:b8:a3:48:e0:96:8f:db:3a:42:e5:71:5e:ff:20:b4:cb:41: e9:1a:90:bc:e5:b7:01:93:47:91:e1:ea:ee:c8:4f:bd:70:7a: 86:af:3e:a2:f9:df:22:1f:09:ff:e1:45:25:46:0c:76:b4:f1: 37:cc:7b:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKEFFQzhBODMyODFGRThCMjc1QUVFMDQxQkUzM0NDREQ4 NDkzQkFDMDAwHhcNMjUwODA4MTQzMTMxWhcNMjUwODE1MTQzMTMxWjAYMRYwFAYD VQQDEw02ODk2MGE0NC1mMmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mxjeiJEtlWoJQtT0GhYX644Ie4JlODKcoZ+vV6iuyPqbiZOf+G1120i0IJd AXnC6FHCa2xiUWoIoL+U0EVMYkcByRMDDuFYjQsc9vM7sdWaW8JgXGTTzwaNy48U g5hevpi7H/tvBhjwKybxD16mPJnkcmvUIC7bsCvHfYihZUZo7aF8fxSA0LOM3vpB Z1qq2aBDCxy8dmsg7vo5WC/oEqXlcO2kB/h8ttUR5tnXSqD8DFarr7RmwYJ9EsWK MZ9t66dhYh5NJZdre2JqQsv3THe4iY8C4iuQN+MlRYS4PHIBJQAFTzCboY+WJ70h xPKPXtg1ThxGUj9YVs0w/lB95QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOK3DE0G 4xNRSjW1cORa7f8qC5bJMB8GA1UdIwQYMBaAFK7IqDKB/osnWu4EG+M8zdhJO6wA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9yc2lvTW9ILWl5ZGE3Z1FiNHp6TjJFazdy QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JzaW9Nb0gtaXlkYTdnUWI0enpOMkVrN3JBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9yc2lvTW9ILWl5 ZGE3Z1FiNHp6TjJFazdyQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB+0EVJoIwPDW290/72i0rV5FpiWnNPbns6RUid7E6vd/dBrO4/vH8 487t8ipSB8tNQSkXPMzJ5xgHBCKdxtlEpClK5sZt8GxUIGNJBIlxKwbxjr2cErk1 VS81oMighNz8xSe76Gwigi5UwDldMvOn5p7cDKIoe1ethO2o9OqrG64pLHvwfBHN W/fXO+1U4IpVCnjIisb03sYtESUVTO06P5s9ZQuMj9yalBH8AZK4DqqmiY6nqyNA 2r9cFpnlQgpbmFp+2A/nuKNI4JaP2zpC5XFe/yC0y0HpGpC85bcBk0eR4eruyE+9 cHqGrz6i+d8iHwn/4UUlRgx2tPE3zHs0 -----END CERTIFICATE-----Generated at Sun Aug 10 10:46:16 2025 by rpki-client