$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft File: rsioMoH-iyda7gQb4zzN2Ek7rAA.mft (raw, json) Hash identifier: pfimf1rqdrsaeCDp1CIfCanrTXurFpNBxdc03588Oec= Subject key identifier: 54:34:85:07:5E:07:A9:08:D0:C5:62:F9:45:71:4E:E4:D7:A2:D2:3A Authority key identifier: AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00 Certificate issuer: /CN=A91E6D5D/serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00 Certificate serial: 2B32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft Manifest number: 9FEC Signing time: Fri 22 Aug 2025 14:30:31 +0000 Manifest this update: Fri 22 Aug 2025 14:30:30 +0000 Manifest next update: Fri 29 Aug 2025 14:30:30 +0000 Files and hashes: 1: rsioMoH-iyda7gQb4zzN2Ek7rAA.crl (hash: mzDGFvOy79YMqvrsq3ANvBwBjorNmf+N1ykn9M2QOzE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11058 (0x2b32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00 Validity Not Before: Aug 22 14:30:30 2025 GMT Not After : Aug 29 14:30:30 2025 GMT Subject: CN=68a87f07-ccc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:22:e1:00:9c:79:76:3d:ff:30:82:15:dc:b8: a9:ae:ef:f7:31:a0:f6:e5:00:ce:b6:f4:2b:c8:13: c0:77:60:47:7c:d3:de:e5:6a:a3:88:c0:bd:f4:58: 04:8e:0c:a8:b5:ab:fc:09:3d:bb:b2:3e:93:0d:3a: 35:39:67:95:d9:6b:39:2a:6b:9e:a8:1a:4e:61:cd: 17:ea:90:f6:16:f1:ce:06:57:d6:6e:95:fd:94:3a: 7f:59:47:17:80:6f:6d:e8:d0:f2:cd:99:b6:93:a0: 98:61:d8:5d:0e:4a:59:ff:1f:eb:b9:67:d2:a4:92: f4:4c:ad:07:7b:fe:ec:81:c8:67:69:51:5f:3a:11: 10:99:7f:e5:b3:80:b9:16:cc:15:79:75:be:2d:3a: 87:e4:26:a9:0d:08:f1:b5:8f:1a:34:21:3d:82:77: c5:bd:c4:dc:92:6b:42:2c:b8:c8:30:ea:3e:dd:40: 2d:ce:7f:22:ed:02:47:2a:93:60:15:4e:7b:ce:89: 3d:13:78:de:ad:73:d3:7e:d7:33:9a:07:4e:51:27: 3e:ee:fc:70:fd:8a:c3:d3:2a:16:e4:e7:22:20:e8: 0a:0b:3a:20:dd:96:a0:1b:6c:42:9f:6d:34:cc:4d: 85:6e:29:4d:11:64:93:e9:17:18:0c:ae:f5:8f:e3: 71:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:34:85:07:5E:07:A9:08:D0:C5:62:F9:45:71:4E:E4:D7:A2:D2:3A X509v3 Authority Key Identifier: keyid:AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:0b:85:16:3f:60:7e:79:3a:5c:0b:de:89:db:9c:f8:17:d4: e8:6d:b3:45:79:97:15:6b:91:f6:76:54:3f:44:ce:88:0d:b7: d7:76:23:5e:87:58:cf:9d:4c:6d:ac:c6:c2:dd:4f:76:e0:1a: 9a:a1:59:7d:46:bc:33:1e:39:3f:c7:d1:79:ce:5e:7b:8a:a2: 33:bb:66:89:24:b9:c4:90:cc:76:f0:65:ec:1a:8a:07:19:ca: d1:2f:c6:37:03:14:74:bd:0e:35:60:19:6b:f1:4d:b1:f4:63: b0:c5:db:81:83:4b:05:52:38:d4:ae:8d:3f:91:12:52:a2:06: 01:39:15:ef:88:00:9b:c5:05:01:c0:9e:58:f4:68:65:fc:bb: 72:52:a4:3e:4d:63:32:9c:0b:c5:e6:62:90:6c:b9:a4:e6:ea: e3:d7:5a:22:bb:57:81:ca:ee:d8:93:b7:2f:1f:1d:aa:53:eb: 43:9a:fc:37:c0:ed:5c:3e:fa:8e:f8:6e:97:6e:83:24:02:a0: c1:65:4e:a6:36:27:4f:0c:af:d9:b2:4c:9e:a1:05:4a:d6:d9: fc:09:15:ff:93:76:ab:80:1f:7e:dc:41:26:62:f0:6f:9b:97: bb:a3:ad:cf:60:55:e3:cd:f2:20:63:ba:36:48:00:50:fa:ab: f1:98:d2:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKEFFQzhBODMyODFGRThCMjc1QUVFMDQxQkUzM0NDREQ4 NDkzQkFDMDAwHhcNMjUwODIyMTQzMDMwWhcNMjUwODI5MTQzMDMwWjAYMRYwFAYD VQQDEw02OGE4N2YwNy1jY2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmSLhAJx5dj3/MIIV3Lipru/3MaD25QDOtvQryBPAd2BHfNPe5WqjiMC99FgE jgyotav8CT27sj6TDTo1OWeV2Ws5KmueqBpOYc0X6pD2FvHOBlfWbpX9lDp/WUcX gG9t6NDyzZm2k6CYYdhdDkpZ/x/ruWfSpJL0TK0He/7sgchnaVFfOhEQmX/ls4C5 FswVeXW+LTqH5CapDQjxtY8aNCE9gnfFvcTckmtCLLjIMOo+3UAtzn8i7QJHKpNg FU57zok9E3jerXPTftczmgdOUSc+7vxw/YrD0yoW5OciIOgKCzog3ZagG2xCn200 zE2FbilNEWST6RcYDK71j+NxsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQ0hQde B6kI0MVi+UVxTuTXotI6MB8GA1UdIwQYMBaAFK7IqDKB/osnWu4EG+M8zdhJO6wA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9yc2lvTW9ILWl5ZGE3Z1FiNHp6TjJFazdy QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JzaW9Nb0gtaXlkYTdnUWI0enpOMkVrN3JBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9yc2lvTW9ILWl5 ZGE3Z1FiNHp6TjJFazdyQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6C4UWP2B+eTpcC96J25z4F9TobbNFeZcVa5H2dlQ/RM6IDbfXdiNe h1jPnUxtrMbC3U924BqaoVl9RrwzHjk/x9F5zl57iqIzu2aJJLnEkMx28GXsGooH GcrRL8Y3AxR0vQ41YBlr8U2x9GOwxduBg0sFUjjUro0/kRJSogYBORXviACbxQUB wJ5Y9Ghl/LtyUqQ+TWMynAvF5mKQbLmk5urj11oiu1eByu7Yk7cvHx2qU+tDmvw3 wO1cPvqO+G6XboMkAqDBZU6mNidPDK/ZskyeoQVK1tn8CRX/k3argB9+3EEmYvBv m5e7o63PYFXjzfIgY7o2SABQ+qvxmNK+ -----END CERTIFICATE-----Generated at Sun Aug 24 03:03:28 2025 by rpki-client