$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft File: rsioMoH-iyda7gQb4zzN2Ek7rAA.mft (raw, json) Hash identifier: WvqXbIpxIoI20yVQZHMtBca7CeoK06XCJ3ZiupYidWg= Subject key identifier: C2:62:8F:EB:67:87:9B:20:60:FD:17:F0:55:8C:34:A0:FB:B6:38:8C Authority key identifier: AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00 Certificate issuer: /CN=A91E6D5D/serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00 Certificate serial: 2B50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft Manifest number: A064 Signing time: Mon 20 Oct 2025 14:32:17 +0000 Manifest this update: Mon 20 Oct 2025 14:32:16 +0000 Manifest next update: Mon 27 Oct 2025 14:32:16 +0000 Files and hashes: 1: rsioMoH-iyda7gQb4zzN2Ek7rAA.crl (hash: cqUpmKDtEowrgqkbIlTmQN+oDK8fDnp7ffJ1vZe57I0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11088 (0x2b50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00 Validity Not Before: Oct 20 14:32:16 2025 GMT Not After : Oct 27 14:32:16 2025 GMT Subject: CN=68f647f1-6f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0a:f7:b2:6e:2b:82:a0:7f:ab:f7:7a:cf:ff: ce:96:fd:86:ea:11:c7:20:97:e9:5f:00:51:64:56: 92:0c:da:bb:59:0f:71:ee:74:fd:e9:e0:6d:13:28: 54:29:e5:69:44:71:65:a2:fc:52:8f:51:17:1a:95: 1c:30:76:fa:48:62:9a:3e:b4:02:69:90:54:64:87: a4:42:e9:79:0a:66:07:bf:c2:0c:73:42:f5:c7:ac: 32:04:8e:6c:89:4d:c6:4b:d1:f1:70:e3:1f:3c:07: b6:b9:ed:c9:84:2a:88:ce:61:0e:fe:0e:fe:aa:ed: 6f:72:33:30:17:66:fc:bb:e3:81:bd:e7:c0:53:b9: d1:bd:c3:a3:b0:14:eb:fb:7e:15:02:7c:5d:f6:76: 10:a5:2d:71:94:bd:26:cf:61:94:48:8b:dd:65:a7: 1d:3a:c5:38:ee:18:32:57:2c:88:d7:19:33:77:83: 5d:48:37:e7:d0:cd:d7:6a:1c:f1:a9:6f:53:86:b9: 0e:3f:e2:69:b8:dc:51:98:55:16:1a:ac:0d:77:ee: 37:25:2a:cc:e9:3e:0b:34:a1:3b:8b:5b:c0:e6:22: 06:81:5b:95:fa:a1:ce:35:2a:19:de:aa:45:69:fb: 29:ee:4d:73:96:27:98:c4:7e:1b:f5:c6:9d:5f:9f: 2e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:62:8F:EB:67:87:9B:20:60:FD:17:F0:55:8C:34:A0:FB:B6:38:8C X509v3 Authority Key Identifier: keyid:AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:7c:65:ec:c7:c7:a7:76:fa:27:ef:c0:f0:6f:9d:f3:d3:8d: 24:00:0e:b2:83:1e:e8:1d:20:82:7b:97:bc:3a:ff:06:2c:a1: 3e:fd:6c:93:f6:2b:bb:a8:62:b5:5b:aa:3c:f0:f2:43:99:b0: e6:74:e8:15:e2:1e:a1:60:11:6d:9e:d0:a8:2f:39:31:a4:9e: 57:5b:0f:e8:d7:7f:e7:79:22:78:14:cf:df:96:b1:c0:87:c9: 11:fd:3f:91:7f:26:ed:56:0a:88:26:95:9f:1d:73:be:fb:c1: 44:ab:18:21:b2:04:26:69:5b:7e:9a:fa:9b:bc:0e:68:dc:27: c6:91:7b:54:bc:b1:f8:89:60:1e:f6:b1:d4:d4:9b:92:6b:b5: 10:6a:a9:ad:a6:ad:f9:2e:8d:a0:36:3b:c3:f8:05:91:93:56: 42:58:17:60:8e:81:2f:d3:4f:57:22:4b:ce:04:57:8c:6f:23: 25:9e:d8:b9:8b:7b:1e:71:55:3b:0b:2b:da:8a:ae:ca:8e:24: 6f:e0:92:2e:52:6b:f7:a1:7c:c6:82:77:a6:4d:70:6d:6a:d5: 25:0a:d7:5d:f3:61:02:e1:09:f0:ee:38:24:8d:71:68:b7:05: 08:a5:16:3e:8b:c4:2f:f7:6b:f5:ce:f8:23:2e:cb:26:2f:52: fe:2f:34:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKEFFQzhBODMyODFGRThCMjc1QUVFMDQxQkUzM0NDREQ4 NDkzQkFDMDAwHhcNMjUxMDIwMTQzMjE2WhcNMjUxMDI3MTQzMjE2WjAYMRYwFAYD VQQDEw02OGY2NDdmMS02ZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ar3sm4rgqB/q/d6z//Olv2G6hHHIJfpXwBRZFaSDNq7WQ9x7nT96eBtEyhU KeVpRHFlovxSj1EXGpUcMHb6SGKaPrQCaZBUZIekQul5CmYHv8IMc0L1x6wyBI5s iU3GS9HxcOMfPAe2ue3JhCqIzmEO/g7+qu1vcjMwF2b8u+OBvefAU7nRvcOjsBTr +34VAnxd9nYQpS1xlL0mz2GUSIvdZacdOsU47hgyVyyI1xkzd4NdSDfn0M3Xahzx qW9ThrkOP+JpuNxRmFUWGqwNd+43JSrM6T4LNKE7i1vA5iIGgVuV+qHONSoZ3qpF afsp7k1zlieYxH4b9cadX58uEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJij+tn h5sgYP0X8FWMNKD7tjiMMB8GA1UdIwQYMBaAFK7IqDKB/osnWu4EG+M8zdhJO6wA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9yc2lvTW9ILWl5ZGE3Z1FiNHp6TjJFazdy QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JzaW9Nb0gtaXlkYTdnUWI0enpOMkVrN3JBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9yc2lvTW9ILWl5 ZGE3Z1FiNHp6TjJFazdyQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbfGXsx8endvon78Dwb53z040kAA6ygx7oHSCCe5e8Ov8GLKE+/WyT 9iu7qGK1W6o88PJDmbDmdOgV4h6hYBFtntCoLzkxpJ5XWw/o13/neSJ4FM/flrHA h8kR/T+RfybtVgqIJpWfHXO++8FEqxghsgQmaVt+mvqbvA5o3CfGkXtUvLH4iWAe 9rHU1JuSa7UQaqmtpq35Lo2gNjvD+AWRk1ZCWBdgjoEv009XIkvOBFeMbyMlnti5 i3secVU7Cyvaiq7KjiRv4JIuUmv3oXzGgnemTXBtatUlCtdd82EC4Qnw7jgkjXFo twUIpRY+i8Qv92v1zvgjLssmL1L+LzSe -----END CERTIFICATE-----Generated at Mon Oct 20 17:25:19 2025 by rpki-client