$ rpki-client -vvf rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft File: iB8oqx80yszxJe2ul-HgEGBYI0k.mft (raw, json) Hash identifier: j5hD5TQvbQK666ffPI5e7yD+JzxjLEWcaqvpxCl34hg= Subject key identifier: 5C:9F:CE:82:0F:72:95:FD:77:44:2A:22:1D:00:B6:FB:CE:22:A5:85 Authority key identifier: 88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49 Certificate issuer: /CN=A91D342A/serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft Manifest number: 14 Signing time: Sun 19 Oct 2025 11:28:00 +0000 Manifest this update: Sun 19 Oct 2025 11:27:59 +0000 Manifest next update: Sun 26 Oct 2025 11:27:59 +0000 Files and hashes: 1: iB8oqx80yszxJe2ul-HgEGBYI0k.crl (hash: UiVPlQBzuLjkde5Ru4MVv7muXmPIAFDDeGwaMYygGxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D342A, serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349 Validity Not Before: Oct 19 11:27:59 2025 GMT Not After : Oct 26 11:27:59 2025 GMT Subject: CN=68f4cb3f-51e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f3:c5:07:da:d7:dc:42:40:82:b2:c9:01:98: 43:a0:1b:40:a6:19:50:43:96:77:e9:26:49:31:36: fb:0c:47:84:9e:ac:87:06:c2:23:5c:ed:4b:7e:a1: 7d:50:a5:32:7b:a4:07:72:4b:4d:fc:19:25:dc:56: 06:ee:d9:ca:12:11:7b:e3:a2:65:fd:d0:67:88:ec: 70:cc:31:32:30:2e:55:5e:18:45:bc:f6:65:4f:47: 60:ff:17:b9:d0:17:d9:ce:09:58:bc:ad:48:22:30: b1:ee:72:0f:92:51:10:54:9c:bd:21:df:77:7c:f7: f9:aa:a3:ae:47:84:c9:2b:53:38:68:b9:64:98:9b: 0a:11:d5:7a:0b:54:9d:df:29:f9:32:29:c7:25:be: 6f:24:1d:65:20:03:0f:48:86:d9:2a:e8:92:b9:4a: e2:d9:d5:e5:89:d0:8a:9e:1a:82:2f:fb:5f:5d:d8: 28:31:a7:3b:f5:a7:99:f5:42:1f:67:44:e0:bf:47: 9b:2a:65:e9:e5:8a:18:c9:e2:d5:15:3e:fd:b3:2b: 02:a7:b8:dc:42:b9:a9:85:7a:6c:05:5c:17:3c:e2: 9b:ec:61:9d:df:4d:ca:2d:b0:7b:f1:df:30:58:a4: 88:ad:aa:8b:2f:31:dc:08:c2:a2:7b:21:ed:22:b9: 39:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9F:CE:82:0F:72:95:FD:77:44:2A:22:1D:00:B6:FB:CE:22:A5:85 X509v3 Authority Key Identifier: keyid:88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:73:d1:00:65:49:b5:b2:ed:7e:9f:d5:b0:e4:5c:d6:98:2b: 7c:a8:0c:ab:f0:95:f2:a8:6e:fe:65:b4:fb:c4:f6:67:02:7b: a1:4e:56:43:8f:d8:4a:ea:ff:d2:57:54:de:e6:10:b7:38:68: 68:a0:72:2e:be:d9:69:a3:ad:2e:7e:7b:02:d0:4c:93:11:7c: cc:7c:9d:bd:19:0d:57:58:11:fa:8f:3a:0c:9c:6c:56:d7:28: f9:20:f6:85:d3:c6:cf:2d:c7:03:f4:3f:28:c8:fa:8f:31:ae: 08:15:4c:44:1a:d1:f5:88:4e:ca:c8:fb:d6:b3:74:99:62:95: 9a:b5:2e:08:2e:05:c7:e9:c6:9f:53:c7:1c:aa:ff:a8:fe:62: 82:a8:9e:bf:97:d1:f2:12:c1:65:30:6a:3a:b3:c8:ba:9f:f2: 24:d6:21:57:ca:22:33:fb:b4:39:dd:19:28:bc:a2:c2:6a:8b: 35:79:b6:b7:c1:21:2b:c7:36:16:b2:d8:68:e5:83:8f:8c:40: 63:33:1f:90:35:d7:5f:bb:cc:e1:36:e8:b4:c7:ee:4e:29:1b: cc:83:0c:cb:fa:06:79:40:21:dc:68:31:3e:48:29:6b:b8:78: 45:f2:a9:75:33:3e:b9:70:bc:14:f8:ef:f8:8f:00:04:47:8f: 27:07:c0:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MzQyQTExMC8GA1UEBRMoODgxRjI4QUIxRjM0Q0FDQ0YxMjVFREFFOTdFMUUwMTA2 MDU4MjM0OTAeFw0yNTEwMTkxMTI3NTlaFw0yNTEwMjYxMTI3NTlaMBgxFjAUBgNV BAMTDTY4ZjRjYjNmLTUxZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC188UH2tfcQkCCsskBmEOgG0CmGVBDlnfpJkkxNvsMR4SerIcGwiNc7Ut+oX1Q pTJ7pAdyS038GSXcVgbu2coSEXvjomX90GeI7HDMMTIwLlVeGEW89mVPR2D/F7nQ F9nOCVi8rUgiMLHucg+SURBUnL0h33d89/mqo65HhMkrUzhouWSYmwoR1XoLVJ3f KfkyKcclvm8kHWUgAw9Ihtkq6JK5SuLZ1eWJ0IqeGoIv+19d2Cgxpzv1p5n1Qh9n ROC/R5sqZenlihjJ4tUVPv2zKwKnuNxCuamFemwFXBc84pvsYZ3fTcotsHvx3zBY pIitqosvMdwIwqJ7Ie0iuTndAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXJ/Ogg9y lf13RCoiHQC2+84ipYUwHwYDVR0jBBgwFoAUiB8oqx80yszxJe2ul+HgEGBYI0kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzNDJBLzE3NzhCNzBDOEVD NzExRjBCQjEyODUzQ0M0RjlBRTAyL2lCOG9xeDgweXN6eEplMnVsLUhnRUdCWUkw ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaUI4b3F4ODB5c3p4SmUydWwtSGdFR0JZSTBrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz NDJBLzE3NzhCNzBDOEVDNzExRjBCQjEyODUzQ0M0RjlBRTAyL2lCOG9xeDgweXN6 eEplMnVsLUhnRUdCWUkway5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIJz0QBlSbWy7X6f1bDkXNaYK3yoDKvwlfKobv5ltPvE9mcCe6FOVkOP 2Erq/9JXVN7mELc4aGigci6+2WmjrS5+ewLQTJMRfMx8nb0ZDVdYEfqPOgycbFbX KPkg9oXTxs8txwP0PyjI+o8xrggVTEQa0fWITsrI+9azdJlilZq1LgguBcfpxp9T xxyq/6j+YoKonr+X0fISwWUwajqzyLqf8iTWIVfKIjP7tDndGSi8osJqizV5trfB ISvHNhay2Gjlg4+MQGMzH5A111+7zOE26LTH7k4pG8yDDMv6BnlAIdxoMT5IKWu4 eEXyqXUzPrlwvBT47/iPAARHjycHwM8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:22:27 2025 by rpki-client