$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft File: d_7bUqwSiVBJ40An4RJqb9FRHu8.mft (raw, json) Hash identifier: kPaT/gtojqiF1pClAIGOKAf/sFr0Vl3OcX9eKieTnYM= Subject key identifier: A8:6F:CC:54:81:2E:B4:A7:A5:04:D7:53:41:EE:74:E9:30:F9:0E:AA Authority key identifier: 77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF Certificate issuer: /CN=A9114D23/serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF Certificate serial: 34CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft Manifest number: 34CA Signing time: Sat 18 Oct 2025 15:12:56 +0000 Manifest this update: Sat 18 Oct 2025 15:12:55 +0000 Manifest next update: Sat 25 Oct 2025 15:12:55 +0000 Files and hashes: 1: d_7bUqwSiVBJ40An4RJqb9FRHu8.crl (hash: QWqTOesoRZq4Q6YbnA9cDrE0v0LlAbcD+22ZA+odoCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13514 (0x34ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D23, serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF Validity Not Before: Oct 18 15:12:55 2025 GMT Not After : Oct 25 15:12:55 2025 GMT Subject: CN=68f3ae78-b5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b8:87:17:54:ca:72:a6:61:62:2a:fa:99:2d: a2:c8:ea:33:f4:6b:f2:ad:45:08:70:2c:63:94:f0: 85:f2:08:4b:fc:0c:34:32:4c:0f:de:78:c8:d0:41: 70:d5:5f:e1:05:b2:a9:48:f8:23:d4:03:54:42:be: d8:6e:98:28:52:da:2b:2e:53:d2:4f:47:f3:0b:44: 75:26:b7:33:35:4d:53:17:49:e5:88:63:43:9a:44: 92:c2:7a:56:82:95:0f:0b:a4:7a:84:b1:24:1c:4b: f3:09:2a:ca:e0:ab:9f:96:19:07:e0:d2:a6:e8:47: c6:a1:b8:ed:77:2c:66:81:0a:30:24:0b:ba:f2:95: e4:e0:f9:74:5d:f6:1b:64:b2:0b:ee:fb:ce:d5:a4: f6:c2:31:22:69:3a:52:ab:ba:2e:5f:d0:ad:08:38: 90:a0:89:b0:ee:e6:5e:bb:72:c4:8d:30:d0:54:b0: be:59:ff:1c:72:f0:33:16:01:f4:47:23:34:14:1b: 5a:c4:b6:c0:f3:ed:c6:75:97:30:70:59:dd:3b:1f: dd:a6:af:53:17:11:8d:d3:b9:29:79:00:1b:81:4e: 0c:f4:29:84:c1:76:d7:d2:e2:40:d7:96:42:fb:19: 59:89:f9:c8:66:95:eb:82:3c:69:20:d7:f6:84:b7: 80:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6F:CC:54:81:2E:B4:A7:A5:04:D7:53:41:EE:74:E9:30:F9:0E:AA X509v3 Authority Key Identifier: keyid:77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:2b:36:c0:c4:d3:be:63:83:e7:be:33:1f:bb:0a:2b:b8:3e: 54:60:3a:80:0d:1e:4d:00:ca:39:e8:b2:ab:99:b0:36:b9:06: e3:d4:cc:34:e3:b3:76:74:c8:66:94:ae:8c:34:a9:ca:bf:1f: 28:fa:98:cc:cf:8a:14:67:68:e9:70:f9:e3:9b:b6:7a:b5:c9: 5f:71:dd:1f:c1:0c:b5:62:22:83:44:45:7a:86:59:74:4c:88: f1:0d:ee:61:50:50:d3:95:6a:66:5a:c2:de:33:b1:9b:98:bd: 33:93:82:84:c3:0a:e6:e6:6b:6a:c3:ba:fc:dd:85:21:49:af: af:25:18:16:54:0a:65:ea:f9:ac:e9:a1:43:a8:9f:18:db:c8: 36:1f:ad:3f:3c:0c:2f:d3:22:fe:0e:73:dd:c1:1d:e5:b6:9c: 57:98:83:53:1b:0c:45:70:7f:14:86:b9:78:fc:08:f5:ee:8e: df:fe:6e:0a:fe:c2:ef:27:29:79:a0:d9:3c:ad:65:63:11:43: 7a:2f:d2:47:56:bc:b3:43:31:62:c4:86:64:bf:81:93:90:61: 96:26:99:77:48:16:54:28:9b:08:8a:74:72:ad:c5:f0:9e:f5: 3a:26:c9:ce:9b:38:33:bc:bd:52:66:6e:4b:fc:fc:10:d3:32: 4a:88:e6:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMjMxMTAvBgNVBAUTKDc3RkVEQjUyQUMxMjg5NTA0OUUzNDAyN0UxMTI2QTZG RDE1MTFFRUYwHhcNMjUxMDE4MTUxMjU1WhcNMjUxMDI1MTUxMjU1WjAYMRYwFAYD VQQDEw02OGYzYWU3OC1iNWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy7iHF1TKcqZhYir6mS2iyOoz9GvyrUUIcCxjlPCF8ghL/Aw0MkwP3njI0EFw 1V/hBbKpSPgj1ANUQr7YbpgoUtorLlPST0fzC0R1JrczNU1TF0nliGNDmkSSwnpW gpUPC6R6hLEkHEvzCSrK4KuflhkH4NKm6EfGobjtdyxmgQowJAu68pXk4Pl0XfYb ZLIL7vvO1aT2wjEiaTpSq7ouX9CtCDiQoImw7uZeu3LEjTDQVLC+Wf8ccvAzFgH0 RyM0FBtaxLbA8+3GdZcwcFndOx/dpq9TFxGN07kpeQAbgU4M9CmEwXbX0uJA15ZC +xlZifnIZpXrgjxpINf2hLeAOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhvzFSB LrSnpQTXU0HudOkw+Q6qMB8GA1UdIwQYMBaAFHf+21KsEolQSeNAJ+ESam/RUR7v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyMy8wNDY5MDk3ODFE QTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lWQko0MEFuNFJKcWI5RlJI dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RfN2JVcXdTaVZCSjQwQW40UkpxYjlGUkh1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyMy8wNDY5MDk3ODFEQTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lW Qko0MEFuNFJKcWI5RlJIdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEKzbAxNO+Y4PnvjMfuworuD5UYDqADR5NAMo56LKrmbA2uQbj1Mw0 47N2dMhmlK6MNKnKvx8o+pjMz4oUZ2jpcPnjm7Z6tclfcd0fwQy1YiKDREV6hll0 TIjxDe5hUFDTlWpmWsLeM7GbmL0zk4KEwwrm5mtqw7r83YUhSa+vJRgWVApl6vms 6aFDqJ8Y28g2H60/PAwv0yL+DnPdwR3ltpxXmINTGwxFcH8Uhrl4/Aj17o7f/m4K /sLvJyl5oNk8rWVjEUN6L9JHVryzQzFixIZkv4GTkGGWJpl3SBZUKJsIinRyrcXw nvU6JsnOmzgzvL1SZm5L/PwQ0zJKiOZS -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:13 2025 by rpki-client