$ rpki-client -vvf rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft File: ijORleLOKXW194maPQLOYu-Rvzk.mft (raw, json) Hash identifier: LUZ/nSrQkGAJulio+GLFR58zlyUBCTxyemsbV6un5To= Subject key identifier: 79:12:F5:00:F3:4C:EF:A3:2A:50:C5:93:0C:06:B8:27:0A:D5:02:6D Authority key identifier: 8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39 Certificate issuer: /CN=A91183D4/serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39 Certificate serial: 02B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft Manifest number: 02AF Signing time: Sun 19 Oct 2025 03:41:44 +0000 Manifest this update: Sun 19 Oct 2025 03:41:43 +0000 Manifest next update: Sun 26 Oct 2025 03:41:43 +0000 Files and hashes: 1: ijORleLOKXW194maPQLOYu-Rvzk.crl (hash: mBayIFlFAHlw/8Q84NCywB7Nwra5E+ED0ZOPnNp+d6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 691 (0x2b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91183D4, serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39 Validity Not Before: Oct 19 03:41:43 2025 GMT Not After : Oct 26 03:41:43 2025 GMT Subject: CN=68f45df8-8fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:87:5b:53:89:7d:55:5c:2f:0a:b8:16:73:8c: cd:12:30:6e:2a:fb:e8:ef:39:21:c3:30:06:c3:f3: 24:7d:c3:a6:63:e4:49:9c:4d:5d:50:c4:91:df:73: b1:a0:a0:cd:9b:b8:70:cd:20:d5:a4:87:ac:ff:f0: 0c:08:2b:51:e5:c7:8e:e7:1f:3f:df:8c:ab:96:69: fa:c2:6e:57:15:53:7b:e9:9f:99:ec:b8:05:b8:99: 6c:74:c7:34:de:d2:e9:38:0c:36:d0:ba:2a:91:fc: 47:fe:e9:b7:e0:51:3d:b6:cb:be:a2:4b:5c:e9:cf: 23:05:e5:b8:39:0f:51:4b:08:29:0d:0e:62:c1:5e: 0c:f0:ca:c8:05:a4:22:aa:ed:be:63:87:56:f7:d4: 56:4a:b8:37:d4:43:b1:c6:f1:25:53:91:70:b6:16: ef:81:2c:f7:d4:ee:52:f8:05:0b:b5:38:25:c1:59: 6c:82:88:b7:e7:f7:06:24:e7:ab:a6:bc:79:16:2f: f4:4a:e5:e5:55:6e:96:00:2f:79:0a:bd:2e:bc:86: c2:d6:bc:f6:9e:94:92:25:12:87:be:22:21:19:06: bb:b3:c1:26:cd:30:fc:31:f0:5c:13:7b:4f:03:8c: 57:f5:95:21:46:d9:77:e1:49:63:fd:af:6a:4c:c6: 38:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:12:F5:00:F3:4C:EF:A3:2A:50:C5:93:0C:06:B8:27:0A:D5:02:6D X509v3 Authority Key Identifier: keyid:8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:8a:e9:de:76:eb:28:3c:91:89:71:87:6f:d7:69:b1:3a:fd: 18:d0:a1:fd:be:5a:da:c5:ab:be:6c:ac:a9:6a:4f:e3:53:27: 39:31:53:55:74:85:4b:78:ed:18:1b:ca:04:4e:cf:77:eb:84: 5a:d2:5c:a8:3c:cf:5a:7a:e1:5c:e1:c6:a6:1c:45:f5:75:79: e1:ec:1d:56:3a:4e:b8:77:19:0a:9e:14:88:b7:23:35:a5:8d: b4:dc:a3:36:9e:8b:21:89:c8:61:bd:76:c9:ae:75:ee:67:83: e0:a6:9d:69:e0:fc:a6:9e:be:76:dc:0e:b6:e5:8d:02:e2:27: 18:2c:cb:08:db:db:29:e4:d0:4d:ea:da:8a:e3:07:d1:78:16: ac:94:ee:84:bf:dd:0c:36:0a:b4:c7:d8:f3:c2:67:09:03:62: 7a:c3:00:cb:25:12:0e:40:8b:4d:9f:7f:23:5a:f6:0e:45:c1: 78:9f:01:1c:fc:4e:eb:28:47:a1:a6:55:1c:8b:66:c9:e4:e4: 5b:14:ab:92:cc:6d:f0:cf:ed:5e:6e:68:fd:cf:72:84:98:5a: 5e:7a:74:3d:2d:5c:c8:2b:eb:99:e1:74:8f:fe:51:fa:60:36: 8b:73:98:7b:49:38:5d:3f:c6:bc:53:9e:3a:21:1f:8a:a6:8a: 01:01:c3:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgzRDQxMTAvBgNVBAUTKDhBMzM5MTk1RTJDRTI5NzVCNUY3ODk5QTNEMDJDRTYy RUY5MUJGMzkwHhcNMjUxMDE5MDM0MTQzWhcNMjUxMDI2MDM0MTQzWjAYMRYwFAYD VQQDEw02OGY0NWRmOC04ZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YdbU4l9VVwvCrgWc4zNEjBuKvvo7zkhwzAGw/MkfcOmY+RJnE1dUMSR33Ox oKDNm7hwzSDVpIes//AMCCtR5ceO5x8/34yrlmn6wm5XFVN76Z+Z7LgFuJlsdMc0 3tLpOAw20LoqkfxH/um34FE9tsu+oktc6c8jBeW4OQ9RSwgpDQ5iwV4M8MrIBaQi qu2+Y4dW99RWSrg31EOxxvElU5FwthbvgSz31O5S+AULtTglwVlsgoi35/cGJOer prx5Fi/0SuXlVW6WAC95Cr0uvIbC1rz2npSSJRKHviIhGQa7s8EmzTD8MfBcE3tP A4xX9ZUhRtl34Ulj/a9qTMY4KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkS9QDz TO+jKlDFkwwGuCcK1QJtMB8GA1UdIwQYMBaAFIozkZXizil1tfeJmj0CzmLvkb85 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODNENC9GNkJFODY5NjE0 QUMxMUVEODNBNzZFNTlDNEY5QUUwMi9pak9SbGVMT0tYVzE5NG1hUFFMT1l1LVJ2 emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqT1JsZUxPS1hXMTk0bWFQUUxPWXUtUnZ6ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODNENC9GNkJFODY5NjE0QUMxMUVEODNBNzZFNTlDNEY5QUUwMi9pak9SbGVMT0tY VzE5NG1hUFFMT1l1LVJ2emsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXiunedusoPJGJcYdv12mxOv0Y0KH9vlraxau+bKypak/jUyc5MVNV dIVLeO0YG8oETs9364Ra0lyoPM9aeuFc4camHEX1dXnh7B1WOk64dxkKnhSItyM1 pY203KM2noshichhvXbJrnXuZ4Pgpp1p4Pymnr523A625Y0C4icYLMsI29sp5NBN 6tqK4wfReBaslO6Ev90MNgq0x9jzwmcJA2J6wwDLJRIOQItNn38jWvYORcF4nwEc /E7rKEehplUci2bJ5ORbFKuSzG3wz+1ebmj9z3KEmFpeenQ9LVzIK+uZ4XSP/lH6 YDaLc5h7SThdP8a8U546IR+KpooBAcNh -----END CERTIFICATE-----Generated at Sun Oct 19 23:27:59 2025 by rpki-client