$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft File: IohtF2pzwL483ViJwqizI-O5QSw.mft (raw, json) Hash identifier: atVR7F7iTcbVxDlSohPjQX/xJ151hnsgWWaLgeTKLLg= Subject key identifier: 2B:34:66:C5:67:3F:99:8A:93:0C:31:DE:97:63:A4:2F:8B:AD:BE:9A Authority key identifier: 22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C Certificate issuer: /CN=A91658EF/serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C Certificate serial: 1536 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft Manifest number: 2C09 Signing time: Fri 22 Aug 2025 16:54:47 +0000 Manifest this update: Fri 22 Aug 2025 16:54:47 +0000 Manifest next update: Fri 29 Aug 2025 16:54:47 +0000 Files and hashes: 1: IohtF2pzwL483ViJwqizI-O5QSw.crl (hash: 66Cy7sL005q0OEzx5ai3coBYEYVWDAyndbZtOhPrZWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5430 (0x1536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91658EF, serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C Validity Not Before: Aug 22 16:54:47 2025 GMT Not After : Aug 29 16:54:47 2025 GMT Subject: CN=68a8a0d7-9f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:33:7c:2f:5d:35:eb:5a:41:3a:ab:5e:89:4f: 4c:26:c5:1d:b4:21:3d:37:e3:ae:9a:6e:cb:1d:38: 87:43:c4:d8:a7:3c:ec:4d:80:f7:88:5c:e2:0b:3c: 92:32:e6:2b:20:26:87:35:8b:da:63:65:9c:d3:f9: 81:a4:26:8f:53:d2:87:b3:0d:41:94:7b:1a:12:58: e0:68:a6:43:56:3b:72:90:69:c5:67:e4:04:5d:71: ea:61:e1:0b:f7:79:33:d5:2a:30:f9:4a:0e:78:61: 86:af:7a:fe:2d:ef:b7:33:9c:81:3f:1c:a6:d7:e6: 5b:fd:db:66:ba:7e:6e:2a:1c:25:1c:c7:f4:32:23: 99:62:68:87:c9:0a:92:d3:99:1b:8b:8a:ef:04:75: f7:aa:13:75:52:e3:f2:2b:cb:19:2c:35:df:cf:d0: ab:ec:53:fd:66:ed:78:b4:38:ad:5a:fa:a9:97:59: 4b:cf:13:6c:8e:95:67:ee:00:58:55:ac:de:e2:cd: 41:54:c2:e1:ef:53:a2:54:56:2e:c5:38:3d:dc:88: f4:93:9a:5d:b5:89:f4:7c:b5:a1:36:7d:1a:17:89: 8a:74:a9:d7:7d:31:a1:79:84:c3:96:54:bf:1b:3a: 7b:9a:ba:44:92:42:8c:9a:95:ed:4c:f3:4e:88:fc: 14:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:34:66:C5:67:3F:99:8A:93:0C:31:DE:97:63:A4:2F:8B:AD:BE:9A X509v3 Authority Key Identifier: keyid:22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:50:cb:d8:14:63:9c:92:41:d8:8b:7a:6d:0f:fd:52:be:c6: cf:55:92:cf:2b:4c:9e:76:34:3b:b8:fc:04:84:37:48:d3:ce: 79:ff:65:e1:7e:11:e2:51:87:f0:36:f0:d8:ad:04:ea:0c:9f: 1b:e8:47:62:b2:41:0e:54:b5:6c:71:43:46:3d:c3:0a:9f:3f: 90:fd:b8:bd:95:fc:0b:48:c4:7f:f7:6c:a2:cb:b8:5b:f7:f6: 71:08:dc:75:0d:59:de:79:41:6c:10:d6:e5:ed:ee:73:c5:8e: ac:ba:1b:e4:57:2c:6a:37:c3:fd:00:e9:c5:69:4b:8a:88:46: e6:c2:47:e6:58:9f:3f:63:c8:a7:96:c4:71:31:83:ae:80:1d: 8c:b7:ab:96:5e:a4:18:3d:c1:ec:f0:71:49:fb:ab:00:76:21: aa:6f:a9:05:cc:77:8f:bc:3f:25:5f:8f:7a:35:87:86:3f:63: 95:7d:bc:70:5b:44:c3:79:b1:54:c1:1d:63:f3:c5:f2:cc:7f: 24:18:bd:ad:04:47:37:d4:0e:e6:b9:4d:45:de:31:d6:ce:0e: 9e:de:e0:c0:f9:9b:d6:0f:37:11:e0:e5:e3:c3:49:93:5a:21: 85:a4:44:af:65:2b:ff:ea:f4:17:ec:f5:fd:10:0f:e3:cc:2b: c0:e6:ed:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU4RUYxMTAvBgNVBAUTKDIyODg2RDE3NkE3M0MwQkUzQ0RENTg4OUMyQThCMzIz RTNCOTQxMkMwHhcNMjUwODIyMTY1NDQ3WhcNMjUwODI5MTY1NDQ3WjAYMRYwFAYD VQQDEw02OGE4YTBkNy05ZjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DN8L10161pBOqteiU9MJsUdtCE9N+Oumm7LHTiHQ8TYpzzsTYD3iFziCzyS MuYrICaHNYvaY2Wc0/mBpCaPU9KHsw1BlHsaEljgaKZDVjtykGnFZ+QEXXHqYeEL 93kz1Sow+UoOeGGGr3r+Le+3M5yBPxym1+Zb/dtmun5uKhwlHMf0MiOZYmiHyQqS 05kbi4rvBHX3qhN1UuPyK8sZLDXfz9Cr7FP9Zu14tDitWvqpl1lLzxNsjpVn7gBY Vaze4s1BVMLh71OiVFYuxTg93Ij0k5pdtYn0fLWhNn0aF4mKdKnXfTGheYTDllS/ Gzp7mrpEkkKMmpXtTPNOiPwUVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCs0ZsVn P5mKkwwx3pdjpC+Lrb6aMB8GA1UdIwQYMBaAFCKIbRdqc8C+PN1YicKosyPjuUEs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NThFRi9EMjQzMzc5NjRB RUMxMUU4ODQxN0YzNEFDNEY5QUUwMi9Jb2h0RjJwendMNDgzVmlKd3FpekktTzVR U3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lvaHRGMnB6d0w0ODNWaUp3cWl6SS1PNVFTdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NThFRi9EMjQzMzc5NjRBRUMxMUU4ODQxN0YzNEFDNEY5QUUwMi9Jb2h0RjJwendM NDgzVmlKd3FpekktTzVRU3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvUMvYFGOckkHYi3ptD/1SvsbPVZLPK0yedjQ7uPwEhDdI0855/2Xh fhHiUYfwNvDYrQTqDJ8b6EdiskEOVLVscUNGPcMKnz+Q/bi9lfwLSMR/92yiy7hb 9/ZxCNx1DVneeUFsENbl7e5zxY6suhvkVyxqN8P9AOnFaUuKiEbmwkfmWJ8/Y8in lsRxMYOugB2Mt6uWXqQYPcHs8HFJ+6sAdiGqb6kFzHePvD8lX496NYeGP2OVfbxw W0TDebFUwR1j88XyzH8kGL2tBEc31A7muU1F3jHWzg6e3uDA+ZvWDzcR4OXjw0mT WiGFpESvZSv/6vQX7PX9EA/jzCvA5u3O -----END CERTIFICATE-----Generated at Sun Aug 24 03:15:52 2025 by rpki-client