$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft File: Iin2usLWDFC9Hk9Y9CwMobD4m28.mft (raw, json) Hash identifier: t6+wAkeCDO/D05u4omix7wXXsFLHW/PTDHFYTuKEDNM= Subject key identifier: 73:5F:FC:0C:30:5B:78:B0:A4:AF:44:A5:A8:19:4B:6A:0B:9C:78:07 Authority key identifier: 22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F Certificate issuer: /CN=A91B8C13/serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F Certificate serial: 34DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft Manifest number: 34DB Signing time: Mon 20 Oct 2025 15:25:46 +0000 Manifest this update: Mon 20 Oct 2025 15:25:45 +0000 Manifest next update: Mon 27 Oct 2025 15:25:45 +0000 Files and hashes: 1: Iin2usLWDFC9Hk9Y9CwMobD4m28.crl (hash: 1ulLbaIFqJp7fVK024ejUjX5tgkrHIBoY/Pk2fF7l1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13531 (0x34db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C13, serialNumber=2229F6BAC2D60C50BD1E4F58F42C0CA1B0F89B6F Validity Not Before: Oct 20 15:25:45 2025 GMT Not After : Oct 27 15:25:45 2025 GMT Subject: CN=68f6547a-6b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cf:d3:44:60:21:a3:d5:49:fd:c2:a9:51:54: 54:d5:b3:91:4b:09:2b:07:17:d0:6f:15:9a:26:55: 07:e9:70:2c:de:41:81:4d:4b:89:df:98:c3:57:6f: 8f:ee:7f:04:b1:4e:2b:fa:8f:fd:11:dc:b2:07:9e: dd:e5:3d:d2:83:57:09:7b:e5:84:7d:9b:58:09:40: 31:41:85:79:c0:79:94:cd:08:35:97:f6:4c:9e:c9: 38:ec:ab:b3:e7:cb:26:05:db:f9:9d:5c:27:58:5e: 88:58:ad:e3:02:79:10:6e:ef:51:cd:0f:a7:42:6c: 49:4e:96:58:b3:87:72:79:c1:e4:bd:47:21:58:02: d7:c9:4b:05:12:9b:a1:84:c4:c4:2f:c9:d1:29:0a: 65:d0:75:da:8f:fa:40:20:dc:96:51:64:86:a4:6c: ee:c1:30:03:23:dd:70:98:b1:2e:56:04:34:9e:15: e3:bc:05:9c:1b:34:57:61:59:87:90:92:3c:57:fd: 40:2a:bf:55:02:4a:3a:8c:9e:72:01:83:30:2c:69: ff:32:b9:79:d2:b6:78:82:69:f9:0e:05:dd:ff:20: ee:c8:25:08:c1:66:cc:e1:35:d2:5b:f5:83:8f:d4: 15:19:ec:6c:d4:16:fb:a1:86:4e:07:2d:ad:6b:fb: 27:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:5F:FC:0C:30:5B:78:B0:A4:AF:44:A5:A8:19:4B:6A:0B:9C:78:07 X509v3 Authority Key Identifier: keyid:22:29:F6:BA:C2:D6:0C:50:BD:1E:4F:58:F4:2C:0C:A1:B0:F8:9B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iin2usLWDFC9Hk9Y9CwMobD4m28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/6FA95B581DAA11E285C21CA608B02CD2/Iin2usLWDFC9Hk9Y9CwMobD4m28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:70:28:2a:ef:05:60:f9:b8:da:37:0f:8c:cb:53:85:d8:aa: 6c:31:e0:aa:11:45:70:ef:90:e6:c1:62:cd:e8:7c:eb:d0:4e: 87:c6:5f:18:97:70:fe:4d:f7:15:22:98:79:e9:92:02:27:fc: 62:05:f1:3d:89:80:b0:3e:ad:8b:dc:d5:e0:3b:10:b4:a8:a2: 16:bc:7f:19:70:e6:82:2c:85:24:bb:e2:84:23:7e:ef:39:f9: 4d:56:0e:a9:97:6d:b6:4a:f0:0e:ad:2e:cd:57:d8:7c:0f:ca: 37:cf:0e:61:51:a4:84:99:f5:4e:e0:db:1c:49:2b:bd:05:e2: 8f:bf:47:b3:e3:ba:a0:f8:d5:69:22:a4:b9:42:48:8e:9d:8a: ce:17:93:6e:1e:70:40:d5:d8:54:4f:8a:cc:f8:f2:99:ac:3c: 2d:f9:62:87:fb:eb:27:8c:07:12:71:ff:b3:1b:53:ca:a2:43: 86:f9:f2:2e:3e:12:3d:78:07:69:c5:c4:56:c8:78:87:97:b2: d4:c1:86:37:79:f0:4d:24:d7:f6:ca:d7:c7:f0:2c:7b:f1:c9: cf:16:10:59:e6:bc:d6:4a:7b:a9:37:28:ad:9c:8a:04:f5:0e: 70:14:d0:81:2e:5b:45:fe:a2:42:11:6b:77:51:23:bd:1d:4c: 15:94:09:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTMxMTAvBgNVBAUTKDIyMjlGNkJBQzJENjBDNTBCRDFFNEY1OEY0MkMwQ0Ex QjBGODlCNkYwHhcNMjUxMDIwMTUyNTQ1WhcNMjUxMDI3MTUyNTQ1WjAYMRYwFAYD VQQDEw02OGY2NTQ3YS02YjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyc/TRGAho9VJ/cKpUVRU1bORSwkrBxfQbxWaJlUH6XAs3kGBTUuJ35jDV2+P 7n8EsU4r+o/9EdyyB57d5T3Sg1cJe+WEfZtYCUAxQYV5wHmUzQg1l/ZMnsk47Kuz 58smBdv5nVwnWF6IWK3jAnkQbu9RzQ+nQmxJTpZYs4dyecHkvUchWALXyUsFEpuh hMTEL8nRKQpl0HXaj/pAINyWUWSGpGzuwTADI91wmLEuVgQ0nhXjvAWcGzRXYVmH kJI8V/1AKr9VAko6jJ5yAYMwLGn/Mrl50rZ4gmn5DgXd/yDuyCUIwWbM4TXSW/WD j9QVGexs1Bb7oYZOBy2ta/snDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNf/Aww W3iwpK9EpagZS2oLnHgHMB8GA1UdIwQYMBaAFCIp9rrC1gxQvR5PWPQsDKGw+Jtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy82RkE5NUI1ODFE QUExMUUyODVDMjFDQTYwOEIwMkNEMi9JaW4ydXNMV0RGQzlIazlZOUN3TW9iRDRt MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpbjJ1c0xXREZDOUhrOVk5Q3dNb2JENG0yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEMxMy82RkE5NUI1ODFEQUExMUUyODVDMjFDQTYwOEIwMkNEMi9JaW4ydXNMV0RG QzlIazlZOUN3TW9iRDRtMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAscCgq7wVg+bjaNw+My1OF2KpsMeCqEUVw75DmwWLN6Hzr0E6Hxl8Y l3D+TfcVIph56ZICJ/xiBfE9iYCwPq2L3NXgOxC0qKIWvH8ZcOaCLIUku+KEI37v OflNVg6pl222SvAOrS7NV9h8D8o3zw5hUaSEmfVO4NscSSu9BeKPv0ez47qg+NVp IqS5QkiOnYrOF5NuHnBA1dhUT4rM+PKZrDwt+WKH++snjAcScf+zG1PKokOG+fIu PhI9eAdpxcRWyHiHl7LUwYY3efBNJNf2ytfH8Cx78cnPFhBZ5rzWSnupNyitnIoE 9Q5wFNCBLltF/qJCEWt3USO9HUwVlAmK -----END CERTIFICATE-----Generated at Mon Oct 20 22:41:30 2025 by rpki-client