$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft File: 0I2GgcK-TUfCopBV9m5olVhGF_c.mft (raw, json) Hash identifier: Eg4kFEoOcCZaWHAskT2WqWZPtpTMo9DZM6V/AeQp2kI= Subject key identifier: 66:03:21:CF:A3:C1:D3:49:E1:2B:5C:3A:C4:A5:82:D4:48:22:3D:BF Authority key identifier: D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7 Certificate issuer: /CN=A91FCEB1/serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7 Certificate serial: 1AC8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft Manifest number: 2218 Signing time: Tue 04 Nov 2025 16:02:56 +0000 Manifest this update: Tue 04 Nov 2025 16:02:56 +0000 Manifest next update: Tue 11 Nov 2025 16:02:56 +0000 Files and hashes: 1: 0I2GgcK-TUfCopBV9m5olVhGF_c.crl (hash: 3RelHbtJ504FW6CKZKOEd33WHY+46iJjkXUTonChVoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6856 (0x1ac8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7 Validity Not Before: Nov 4 16:02:56 2025 GMT Not After : Nov 11 16:02:56 2025 GMT Subject: CN=690a23b0-b760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a2:f9:e6:db:37:7a:62:37:e0:f2:98:c6:a3: 58:8e:0c:4d:89:0f:c9:e7:7f:fa:3b:0d:92:a9:91: 76:8b:e8:44:85:09:0b:be:c2:95:cc:69:6e:5c:32: 58:bd:6e:41:df:37:e3:a4:73:d3:33:28:40:a0:46: 3c:f3:69:dc:1e:de:19:c6:65:28:fe:13:f2:4d:0d: b0:58:e2:0c:b2:62:c5:61:8c:75:b7:66:0c:ad:c5: 6a:c5:fd:03:e2:a1:99:00:2c:f5:48:d3:cf:d4:64: 18:c6:b3:e8:2b:f5:15:bd:c9:cf:da:ac:53:42:fe: 7a:8c:a3:a7:b2:9b:2a:bc:3b:b6:8b:b5:49:4b:37: af:79:77:88:09:8a:0a:05:e4:a0:99:d7:38:9b:49: 4a:81:c4:08:fe:4b:55:05:e0:3e:31:c6:bd:a7:d4: e4:e8:ed:d2:0d:e8:60:55:63:31:8a:5f:a3:c8:97: f8:7c:2b:46:ad:d0:41:d9:cf:29:74:7c:ff:93:aa: 8a:7c:bc:90:11:12:13:8d:64:e6:e6:d1:ba:03:a9: c8:ca:43:7c:cc:0a:97:29:77:bd:7c:2c:6e:e3:98: a2:60:26:fe:b6:24:e6:5d:1d:c6:36:aa:87:df:a0: 9e:d7:de:62:fe:fe:9d:02:ec:1f:10:bf:2f:1e:f8: 0a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:03:21:CF:A3:C1:D3:49:E1:2B:5C:3A:C4:A5:82:D4:48:22:3D:BF X509v3 Authority Key Identifier: keyid:D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:4f:6a:3f:e1:0e:7f:d2:70:6b:ad:aa:97:12:6d:c7:14:82: cc:69:f2:13:1b:34:6e:f6:f0:83:d4:41:ec:d6:e3:88:61:82: d3:99:f6:fe:40:e5:5d:9d:30:dc:da:d0:9c:59:05:55:15:1c: 00:d8:f7:bb:1b:b9:78:c1:4c:dd:75:d2:1c:09:35:fa:04:2a: 33:61:b0:50:a2:db:a8:4a:e2:50:bb:1d:0d:b7:a2:25:fb:e9: 88:f2:c3:7f:9e:f7:35:dc:2e:b2:ea:5a:ee:d3:75:30:77:0c: e8:3b:83:6e:5e:9d:e0:59:41:ff:06:f2:01:b7:5c:0d:b3:df: ea:b1:0b:bf:88:1c:71:a4:d4:54:b0:da:59:69:60:02:d0:b7: ee:bd:0f:cf:07:e4:13:5c:b3:bd:b7:ee:0e:19:9d:75:2f:07: 03:b3:c9:36:b2:ea:92:3b:04:3b:9b:74:28:88:92:54:e6:ed: 2e:7c:5e:db:ca:dc:c7:2d:d4:dc:68:2c:f9:05:a5:4e:db:10: e5:e6:81:14:8a:69:6c:38:90:df:e0:ed:92:30:ab:70:30:f2: a0:06:8b:c1:79:55:7e:ad:f9:03:a6:07:18:5c:80:82:6d:63: 54:3c:a7:36:73:1c:62:ef:46:ee:1f:ab:43:c2:74:7c:05:0c: 44:72:5b:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKEQwOEQ4NjgxQzJCRTRENDdDMkEyOTA1NUY2NkU2ODk1 NTg0NjE3RjcwHhcNMjUxMTA0MTYwMjU2WhcNMjUxMTExMTYwMjU2WjAYMRYwFAYD VQQDEw02OTBhMjNiMC1iNzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qL55ts3emI34PKYxqNYjgxNiQ/J53/6Ow2SqZF2i+hEhQkLvsKVzGluXDJY vW5B3zfjpHPTMyhAoEY882ncHt4ZxmUo/hPyTQ2wWOIMsmLFYYx1t2YMrcVqxf0D 4qGZACz1SNPP1GQYxrPoK/UVvcnP2qxTQv56jKOnspsqvDu2i7VJSzeveXeICYoK BeSgmdc4m0lKgcQI/ktVBeA+Mca9p9Tk6O3SDehgVWMxil+jyJf4fCtGrdBB2c8p dHz/k6qKfLyQERITjWTm5tG6A6nIykN8zAqXKXe9fCxu45iiYCb+tiTmXR3GNqqH 36Ce195i/v6dAuwfEL8vHvgKnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYDIc+j wdNJ4StcOsSlgtRIIj2/MB8GA1UdIwQYMBaAFNCNhoHCvk1HwqKQVfZuaJVYRhf3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS85QzE0QjQwNjNB MjExMUU3OUFBMEQ1MUNDNEY5QUUwMi8wSTJHZ2NLLVRVZkNvcEJWOW01b2xWaEdG X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBJMkdnY0stVFVmQ29wQlY5bTVvbFZoR0ZfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS85QzE0QjQwNjNBMjExMUU3OUFBMEQ1MUNDNEY5QUUwMi8wSTJHZ2NLLVRV ZkNvcEJWOW01b2xWaEdGX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgT2o/4Q5/0nBrraqXEm3HFILMafITGzRu9vCD1EHs1uOIYYLTmfb+ QOVdnTDc2tCcWQVVFRwA2Pe7G7l4wUzdddIcCTX6BCozYbBQotuoSuJQux0Nt6Il ++mI8sN/nvc13C6y6lru03UwdwzoO4NuXp3gWUH/BvIBt1wNs9/qsQu/iBxxpNRU sNpZaWAC0LfuvQ/PB+QTXLO9t+4OGZ11LwcDs8k2suqSOwQ7m3QoiJJU5u0ufF7b ytzHLdTcaCz5BaVO2xDl5oEUimlsOJDf4O2SMKtwMPKgBovBeVV+rfkDpgcYXICC bWNUPKc2cxxi70buH6tDwnR8BQxEcluG -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:47 2025 by rpki-client