$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft File: iQoeXMwexsfOHqcfSRKRH1mShrI.mft (raw, json) Hash identifier: diH+lrP902M4Qts346Otc2AZuGGCJlT9YplPX3i4z2Q= Subject key identifier: EE:FA:6D:E3:7E:5C:DC:26:AC:F1:D4:F9:26:0E:7B:C2:18:1A:A5:FF Authority key identifier: 89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2 Certificate issuer: /CN=A91E2234/serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2 Certificate serial: 34AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft Manifest number: 34AB Signing time: Fri 22 Aug 2025 14:51:26 +0000 Manifest this update: Fri 22 Aug 2025 14:51:26 +0000 Manifest next update: Fri 29 Aug 2025 14:51:26 +0000 Files and hashes: 1: iQoeXMwexsfOHqcfSRKRH1mShrI.crl (hash: wP7Tn9opGHeJ2LfjSXVfNbjmKdPnslPybLujEBCBPHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13483 (0x34ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2234, serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2 Validity Not Before: Aug 22 14:51:26 2025 GMT Not After : Aug 29 14:51:26 2025 GMT Subject: CN=68a883ee-2321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:17:cf:15:20:15:9c:8c:ec:6c:fa:fa:10:8e: 4f:c2:d7:32:ec:7d:b8:e0:24:0c:67:8e:2f:12:03: 8b:98:05:38:36:4f:8b:89:75:92:f0:48:89:44:d8: 6a:7c:14:9d:4e:65:b6:ab:35:f6:69:00:8f:e5:d0: 84:65:b0:ec:3b:37:f2:09:8f:8d:be:1d:bc:8b:46: c6:de:6c:40:8a:fe:a8:0a:a5:6a:83:90:f7:ac:e4: 44:5f:81:a6:ff:db:82:9b:9c:91:6f:92:fb:84:c0: 45:28:6a:e5:43:1d:28:61:70:c7:67:02:4e:a9:d8: 33:6d:4b:a5:3a:8f:3c:dd:39:14:e2:ca:d5:fc:7c: bd:9f:1d:dd:df:c7:42:7e:85:ec:64:ea:50:80:44: f6:38:62:b4:7c:7e:e8:51:39:7b:df:bd:b5:4d:d9: 87:29:ad:15:f9:10:2b:c3:4f:c2:c6:8d:92:e0:e5: 65:37:1a:b9:42:94:40:db:5a:48:f5:8d:20:29:5e: d1:90:03:31:9b:d5:9a:f2:12:e5:3b:b6:5f:2d:39: 7d:ac:f3:b8:58:aa:9d:15:86:c8:8b:78:3f:2b:13: 6b:c0:77:0e:f9:15:47:27:d1:78:b6:dd:f8:e9:59: 30:f1:56:ee:59:8a:50:b4:b0:1d:42:9d:46:19:f1: 61:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FA:6D:E3:7E:5C:DC:26:AC:F1:D4:F9:26:0E:7B:C2:18:1A:A5:FF X509v3 Authority Key Identifier: keyid:89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4b:3e:05:30:35:ca:ba:06:7a:2d:cb:a3:96:cf:40:39:86: 44:c3:c6:07:ad:67:77:46:5f:07:8b:43:a8:32:0b:96:b4:c3: df:69:f3:dc:4b:ab:20:de:21:c3:2b:5d:5d:79:2a:a6:d9:ab: ce:aa:8e:80:ef:3e:d8:32:4f:f5:57:be:9b:59:34:a9:8d:60: 33:00:fb:a9:11:dc:8b:2d:02:bd:75:8e:33:a6:fe:b5:ae:d3: c5:1d:c3:dd:85:87:e8:42:56:95:ba:c5:cf:6d:94:d1:7a:95: ff:e8:0a:88:25:b0:ed:10:ab:c9:86:8d:41:64:95:44:e7:54: a4:44:71:41:6a:b4:17:6f:ad:13:25:98:5a:5d:54:45:6e:96: a9:c5:41:41:d8:f0:23:c9:cb:7b:04:37:f6:33:04:e5:d4:c6: bf:39:89:52:e5:97:62:54:cc:9b:cb:7f:40:6e:64:8b:7b:c2: 92:ed:b6:e4:f6:76:d4:fe:21:bb:c3:89:68:d6:c1:20:5d:d3: 61:c9:30:6a:66:40:66:36:2d:14:fb:9f:40:83:b2:ab:51:b5: 1e:d1:4e:bf:13:32:bc:d9:06:c2:fb:6f:e7:c6:fa:91:17:78: 25:92:33:14:ed:83:88:17:d9:9a:72:9f:98:ce:83:ff:86:24: 3e:80:2e:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyMzQxMTAvBgNVBAUTKDg5MEExRTVDQ0MxRUM2QzdDRTFFQTcxRjQ5MTI5MTFG NTk5Mjg2QjIwHhcNMjUwODIyMTQ1MTI2WhcNMjUwODI5MTQ1MTI2WjAYMRYwFAYD VQQDEw02OGE4ODNlZS0yMzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBfPFSAVnIzsbPr6EI5Pwtcy7H244CQMZ44vEgOLmAU4Nk+LiXWS8EiJRNhq fBSdTmW2qzX2aQCP5dCEZbDsOzfyCY+Nvh28i0bG3mxAiv6oCqVqg5D3rOREX4Gm /9uCm5yRb5L7hMBFKGrlQx0oYXDHZwJOqdgzbUulOo883TkU4srV/Hy9nx3d38dC foXsZOpQgET2OGK0fH7oUTl73721TdmHKa0V+RArw0/Cxo2S4OVlNxq5QpRA21pI 9Y0gKV7RkAMxm9Wa8hLlO7ZfLTl9rPO4WKqdFYbIi3g/KxNrwHcO+RVHJ9F4tt34 6Vkw8VbuWYpQtLAdQp1GGfFhMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO76beN+ XNwmrPHU+SYOe8IYGqX/MB8GA1UdIwQYMBaAFIkKHlzMHsbHzh6nH0kSkR9Zkoay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjIzNC81MjI1NjkxNDFE OTYxMUUyOUVFNUNCN0UwOEIwMkNEMi9pUW9lWE13ZXhzZk9IcWNmU1JLUkgxbVNo ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRb2VYTXdleHNmT0hxY2ZTUktSSDFtU2hySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjIzNC81MjI1NjkxNDFEOTYxMUUyOUVFNUNCN0UwOEIwMkNEMi9pUW9lWE13ZXhz Zk9IcWNmU1JLUkgxbVNockkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArSz4FMDXKugZ6Lcujls9AOYZEw8YHrWd3Rl8Hi0OoMguWtMPfafPc S6sg3iHDK11deSqm2avOqo6A7z7YMk/1V76bWTSpjWAzAPupEdyLLQK9dY4zpv61 rtPFHcPdhYfoQlaVusXPbZTRepX/6AqIJbDtEKvJho1BZJVE51SkRHFBarQXb60T JZhaXVRFbpapxUFB2PAjyct7BDf2MwTl1Ma/OYlS5ZdiVMyby39AbmSLe8KS7bbk 9nbU/iG7w4lo1sEgXdNhyTBqZkBmNi0U+59Ag7KrUbUe0U6/EzK82QbC+2/nxvqR F3glkjMU7YOIF9macp+YzoP/hiQ+gC4U -----END CERTIFICATE-----Generated at Sun Aug 24 09:22:29 2025 by rpki-client