$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft File: RuPL70om399mDjVsdEBr4caZKlE.mft (raw, json) Hash identifier: 7CmfjcPC25z/2NzcYb5m7oYT+EAG05A5XraF98djj4I= Subject key identifier: A0:71:87:EC:C3:36:A9:32:6D:82:E2:99:AC:85:E2:FC:18:69:68:E6 Authority key identifier: 46:E3:CB:EF:4A:26:DF:DF:66:0E:35:6C:74:40:6B:E1:C6:99:2A:51 Certificate issuer: /CN=A9113C02/serialNumber=46E3CBEF4A26DFDF660E356C74406BE1C6992A51 Certificate serial: 1AAD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft Manifest number: 25F3 Signing time: Sat 18 Oct 2025 16:39:50 +0000 Manifest this update: Sat 18 Oct 2025 16:39:49 +0000 Manifest next update: Sat 25 Oct 2025 16:39:49 +0000 Files and hashes: 1: RuPL70om399mDjVsdEBr4caZKlE.crl (hash: PQ/D5lqMObE3ewBw/n8BG+dWIf1VDJWL41dZGVbr60Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.crl rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:39:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6829 (0x1aad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113C02, serialNumber=46E3CBEF4A26DFDF660E356C74406BE1C6992A51 Validity Not Before: Oct 18 16:39:49 2025 GMT Not After : Oct 25 16:39:49 2025 GMT Subject: CN=68f3c2d5-d916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:e4:a2:87:cc:b6:f6:21:55:a3:07:77:34:a8: 13:ef:55:84:3f:de:8a:ce:7c:94:90:ee:a9:2c:28: 4b:63:2e:86:bf:d3:16:5d:4a:be:e0:2e:5e:be:6e: 5a:d4:b6:c5:9c:de:da:0f:40:c1:b6:3f:33:90:5b: ee:fa:43:d6:98:62:12:6c:ab:18:ee:6d:8c:d1:f0: c4:75:ed:0b:93:2e:5f:af:5e:d9:d2:88:fb:11:eb: 41:26:93:ad:82:d4:a5:66:a6:da:e7:5c:18:a1:e4: b4:3a:7d:4e:54:6e:41:03:5d:c8:15:50:30:88:1c: 68:72:6e:dc:a9:b9:aa:19:27:a0:19:c7:91:36:e6: 94:bd:5a:70:f4:e5:6d:d6:4b:3a:0c:83:f4:23:ae: 51:a1:3b:5b:a7:36:24:ae:f5:9f:d8:74:64:41:c8: d9:a9:5e:8f:08:f0:f2:65:a6:8d:65:e7:c0:e5:d3: 45:44:e8:8c:70:f2:b9:d5:7c:de:3a:11:f9:b0:c0: 4e:76:5c:0e:cc:8e:fa:d3:9f:3b:2f:f5:af:47:9d: 1d:8d:92:8c:ae:31:6f:85:ac:37:b3:5f:5f:37:78: 85:e1:a3:c6:38:89:0d:22:a7:32:9d:49:3c:29:a5: 53:87:4a:ae:6a:29:c6:84:d0:9f:d8:a9:0e:d6:4a: a2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:71:87:EC:C3:36:A9:32:6D:82:E2:99:AC:85:E2:FC:18:69:68:E6 X509v3 Authority Key Identifier: keyid:46:E3:CB:EF:4A:26:DF:DF:66:0E:35:6C:74:40:6B:E1:C6:99:2A:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:4a:70:ef:cc:d6:d3:7b:64:45:e7:a3:09:d5:82:0f:ae:60: 40:c2:ba:e2:a2:ea:38:8a:ea:46:f4:e6:3f:66:d7:cb:d1:cd: a7:ee:2d:54:98:97:2c:7e:19:02:5c:06:51:fd:c2:cb:c7:56: 22:ca:62:26:65:b0:54:1d:13:bc:2c:27:77:30:45:a8:7c:50: 90:be:5d:70:c4:2b:c2:a1:57:98:98:86:20:ff:b1:bc:d2:c5: 05:4c:2f:31:3a:1b:ca:62:ab:72:7f:ad:8d:bc:3a:12:02:ad: ad:ab:0a:ad:26:43:cc:75:86:20:81:e8:6a:28:f3:f8:47:f9: b0:fd:6b:99:12:ec:0c:ab:d2:63:7b:a2:f0:42:6e:8f:03:05: b3:37:0b:3a:0d:9a:de:61:54:b7:26:aa:f6:0b:cd:3b:d2:84: 79:f5:3b:36:49:3b:be:dc:c2:5f:97:97:aa:11:83:9c:66:ae: c4:19:91:0e:d7:20:cc:f2:30:01:db:cb:e9:70:fd:86:54:ec: ae:77:81:31:91:4b:7b:d6:1e:21:7b:ef:0f:27:12:cb:84:9f: b9:a4:5d:84:0f:45:ac:45:f2:2e:64:46:52:d5:10:ff:25:be: 9a:b4:d6:54:5f:db:e4:bd:c3:62:c7:12:c1:7d:06:88:fe:5b: ea:91:51:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNDMDIxMTAvBgNVBAUTKDQ2RTNDQkVGNEEyNkRGREY2NjBFMzU2Qzc0NDA2QkUx QzY5OTJBNTEwHhcNMjUxMDE4MTYzOTQ5WhcNMjUxMDI1MTYzOTQ5WjAYMRYwFAYD VQQDEw02OGYzYzJkNS1kOTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9eSih8y29iFVowd3NKgT71WEP96KznyUkO6pLChLYy6Gv9MWXUq+4C5evm5a 1LbFnN7aD0DBtj8zkFvu+kPWmGISbKsY7m2M0fDEde0Lky5fr17Z0oj7EetBJpOt gtSlZqba51wYoeS0On1OVG5BA13IFVAwiBxocm7cqbmqGSegGceRNuaUvVpw9OVt 1ks6DIP0I65RoTtbpzYkrvWf2HRkQcjZqV6PCPDyZaaNZefA5dNFROiMcPK51Xze OhH5sMBOdlwOzI760587L/WvR50djZKMrjFvhaw3s19fN3iF4aPGOIkNIqcynUk8 KaVTh0quainGhNCf2KkO1kqi1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBxh+zD NqkybYLimayF4vwYaWjmMB8GA1UdIwQYMBaAFEbjy+9KJt/fZg41bHRAa+HGmSpR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9SdVBMNzBvbTM5OW1EalZzZEVCcjRjYVpL bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J1UEw3MG9tMzk5bURqVnNkRUJyNGNhWktsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9SdVBMNzBvbTM5 OW1EalZzZEVCcjRjYVpLbEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdSnDvzNbTe2RF56MJ1YIPrmBAwrriouo4iupG9OY/ZtfL0c2n7i1U mJcsfhkCXAZR/cLLx1YiymImZbBUHRO8LCd3MEWofFCQvl1wxCvCoVeYmIYg/7G8 0sUFTC8xOhvKYqtyf62NvDoSAq2tqwqtJkPMdYYggehqKPP4R/mw/WuZEuwMq9Jj e6LwQm6PAwWzNws6DZreYVS3Jqr2C8070oR59Ts2STu+3MJfl5eqEYOcZq7EGZEO 1yDM8jAB28vpcP2GVOyud4ExkUt71h4he+8PJxLLhJ+5pF2ED0WsRfIuZEZS1RD/ Jb6atNZUX9vkvcNixxLBfQaI/lvqkVHD -----END CERTIFICATE-----Generated at Mon Oct 20 04:21:03 2025 by rpki-client