$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft File: IohtF2pzwL483ViJwqizI-O5QSw.mft (raw, json) Hash identifier: fesqktfkEkRdXoKuUPogtGHNcyM8J6+2tWvZ+oaMJHM= Subject key identifier: 38:97:42:AF:C8:4C:B3:7B:DE:44:3D:57:8A:88:A3:39:C0:D4:44:DE Authority key identifier: 22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C Certificate issuer: /CN=A91658EF/serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C Certificate serial: 1553 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft Manifest number: 2C60 Signing time: Sat 18 Oct 2025 17:14:06 +0000 Manifest this update: Sat 18 Oct 2025 17:14:05 +0000 Manifest next update: Sat 25 Oct 2025 17:14:05 +0000 Files and hashes: 1: IohtF2pzwL483ViJwqizI-O5QSw.crl (hash: qrKdJ4VfGHpicvwBU3PepMfx1xkPUsjQB8vPcdtw1QU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5459 (0x1553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91658EF, serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C Validity Not Before: Oct 18 17:14:05 2025 GMT Not After : Oct 25 17:14:05 2025 GMT Subject: CN=68f3cade-c712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cb:a6:0d:d7:d5:f3:c0:fb:68:df:be:7c:68: 5f:2d:45:db:14:b2:6f:fd:0b:3d:c1:b8:5c:f0:5c: 9a:33:02:5c:86:1c:e5:0d:69:0c:3a:fa:a0:68:b0: 6d:e8:f5:21:19:cd:7e:7c:0a:f8:85:75:14:96:21: 8d:25:44:74:5b:d2:14:dd:2b:f8:0e:a5:c2:ff:f6: a3:ab:58:02:81:0d:60:59:b8:9b:f9:11:75:19:c2: 43:71:24:97:b9:ef:22:29:6d:1d:4d:63:aa:4f:6a: 88:45:24:2c:10:15:ae:29:2b:31:04:5f:d9:73:d8: 68:ef:ae:a6:89:8e:c9:b5:9b:f5:77:ec:10:42:31: a7:95:6f:e1:ec:9e:94:60:8a:73:0b:1c:a7:45:82: 7b:90:62:4f:c2:c3:e7:29:04:ac:1a:75:03:b8:25: cf:a6:ef:22:ac:88:43:84:4c:45:89:ce:1e:ab:95: aa:18:52:80:58:3d:0d:fe:b3:f3:d4:e8:39:a4:59: f8:04:b7:4c:d6:bb:db:22:03:0f:7a:ca:4f:50:b4: 79:6c:84:4f:77:49:d9:52:9c:2d:a7:69:3e:d0:0f: 6d:1d:6c:f3:fb:d1:fe:49:1d:4c:15:48:4b:73:9f: cb:8f:b3:94:da:e5:5f:82:91:46:02:b6:40:33:5d: 43:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:97:42:AF:C8:4C:B3:7B:DE:44:3D:57:8A:88:A3:39:C0:D4:44:DE X509v3 Authority Key Identifier: keyid:22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:10:b3:2d:af:b0:ec:b8:82:97:8a:81:5d:77:62:98:00:c3: d1:ae:3f:d1:57:e5:ee:fb:91:20:84:f2:7f:b9:cb:ef:5d:e1: da:20:3a:b1:42:df:f8:b1:27:e1:ce:3b:0c:b0:00:8a:ff:2e: 4f:fd:54:bc:0b:16:1a:f4:ae:5e:90:df:40:02:bc:89:cb:f8: cb:e4:10:bc:fc:fc:1f:86:4d:9b:f1:60:31:ea:7a:fd:54:64: b0:42:03:66:7f:13:19:9e:6c:af:1b:8c:30:d7:a6:f7:40:78: 83:21:df:d2:9f:59:c3:ce:45:7d:00:d1:bb:f9:4e:b7:fb:64: 3e:36:0a:c5:cc:63:a2:cd:5f:81:5c:18:0b:24:ca:02:90:83: 29:4f:fc:8a:55:a3:fa:6e:7b:9a:e8:25:ad:58:00:4d:90:87: 0e:1b:8d:45:00:b3:07:f8:26:a8:8b:24:7a:83:db:ee:f2:c4: 48:d2:b5:35:7c:8c:53:a1:cc:88:3f:19:05:3b:d2:08:cb:54: 03:cd:ae:13:2e:8e:e1:16:cc:26:5b:6b:6b:04:a1:ed:77:9d: 3d:2c:01:a0:8d:fc:78:62:4e:29:0e:7e:11:42:33:cc:43:d4: 33:d8:47:84:c1:e8:7e:22:ac:68:9a:79:c9:23:65:88:c9:cf: db:cd:f0:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4RUYxMTAvBgNVBAUTKDIyODg2RDE3NkE3M0MwQkUzQ0RENTg4OUMyQThCMzIz RTNCOTQxMkMwHhcNMjUxMDE4MTcxNDA1WhcNMjUxMDI1MTcxNDA1WjAYMRYwFAYD VQQDEw02OGYzY2FkZS1jNzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcumDdfV88D7aN++fGhfLUXbFLJv/Qs9wbhc8FyaMwJchhzlDWkMOvqgaLBt 6PUhGc1+fAr4hXUUliGNJUR0W9IU3Sv4DqXC//ajq1gCgQ1gWbib+RF1GcJDcSSX ue8iKW0dTWOqT2qIRSQsEBWuKSsxBF/Zc9ho766miY7JtZv1d+wQQjGnlW/h7J6U YIpzCxynRYJ7kGJPwsPnKQSsGnUDuCXPpu8irIhDhExFic4eq5WqGFKAWD0N/rPz 1Og5pFn4BLdM1rvbIgMPespPULR5bIRPd0nZUpwtp2k+0A9tHWzz+9H+SR1MFUhL c5/Lj7OU2uVfgpFGArZAM11DHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDiXQq/I TLN73kQ9V4qIoznA1ETeMB8GA1UdIwQYMBaAFCKIbRdqc8C+PN1YicKosyPjuUEs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi9Jb2h0RjJwendMNDgzVmlKd3FpekktTzVR U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvaHRGMnB6d0w0ODNWaUp3cWl6SS1PNVFTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NThFRi9EMjQzMzc5NjRBRUMxMUU4ODQxN0YzNEFDNEY5QUUwMi9Jb2h0RjJwendM NDgzVmlKd3FpekktTzVRU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvELMtr7DsuIKXioFdd2KYAMPRrj/RV+Xu+5EghPJ/ucvvXeHaIDqx Qt/4sSfhzjsMsACK/y5P/VS8CxYa9K5ekN9AAryJy/jL5BC8/Pwfhk2b8WAx6nr9 VGSwQgNmfxMZnmyvG4ww16b3QHiDId/Sn1nDzkV9ANG7+U63+2Q+NgrFzGOizV+B XBgLJMoCkIMpT/yKVaP6bnua6CWtWABNkIcOG41FALMH+CaoiyR6g9vu8sRI0rU1 fIxTocyIPxkFO9IIy1QDza4TLo7hFswmW2trBKHtd509LAGgjfx4Yk4pDn4RQjPM Q9Qz2EeEweh+IqxomnnJI2WIyc/bzfBa -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:25 2025 by rpki-client