$ rpki-client -vvf rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft File: u-IzVg79QJs4zbgKAFdaN7qJZDU.mft (raw, json) Hash identifier: 8890yeqKcuFLv8BOp88KKO51eYPLBRjVjUFwYIE+cuU= Subject key identifier: 65:4C:EA:2B:CD:7C:64:47:C2:A7:D2:EA:A7:E4:59:99:63:18:97:C0 Authority key identifier: BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 Certificate issuer: /CN=A911ABF4/serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Certificate serial: 0863 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft Manifest number: 18F4 Signing time: Sat 18 Oct 2025 18:09:56 +0000 Manifest this update: Sat 18 Oct 2025 18:09:56 +0000 Manifest next update: Sat 25 Oct 2025 18:09:56 +0000 Files and hashes: 1: u-IzVg79QJs4zbgKAFdaN7qJZDU.crl (hash: iGY+MiBFfm/RCLMeQwJEv1JDhjLxKnbgKKQk0o4ymDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2147 (0x863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ABF4, serialNumber=BBE233560EFD409B38CDB80A00575A37BA896435 Validity Not Before: Oct 18 18:09:56 2025 GMT Not After : Oct 25 18:09:56 2025 GMT Subject: CN=68f3d7f4-2b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ab:d8:38:2f:2e:7b:da:49:05:a6:73:41:8b: b6:8f:ad:2f:2e:f6:73:6d:75:68:77:4a:3c:2b:fb: e5:d4:b7:4a:44:05:b1:12:b2:e8:c6:70:52:fb:51: b8:d9:ca:6a:11:09:e5:44:eb:1b:87:00:8c:20:bd: b1:57:b3:5e:43:f7:78:c4:70:0b:b4:ea:e5:68:61: 37:fb:23:e5:61:2c:9b:a0:b2:7c:a4:ed:5c:2f:50: 4b:83:e3:03:cd:c4:b8:a2:69:89:16:e5:fe:fd:30: b5:be:2c:08:8a:8a:7f:95:ff:fd:7b:c0:68:d9:8c: da:dd:b4:c9:40:2d:6b:a4:77:3d:14:d5:ab:73:d4: 70:f2:f2:65:39:9e:cf:c0:35:18:39:21:a4:19:1e: fc:dd:70:13:a2:f9:9c:70:20:1b:61:48:41:0e:aa: 9f:07:9a:3d:30:4c:64:cc:0f:ec:50:a7:72:23:d9: 74:a1:af:1e:5d:dc:7a:55:71:08:e0:55:0d:10:dc: b0:76:c3:d2:1c:0e:7f:95:8b:2d:6f:d9:a3:27:41: e4:cd:73:52:4a:79:6d:ff:cf:ff:ea:e1:63:9e:67: 0b:25:3c:15:ea:3f:4d:66:93:33:c5:d4:24:ee:df: 27:e7:22:83:a6:a7:97:03:f3:fa:9f:be:6f:44:52: 2d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:4C:EA:2B:CD:7C:64:47:C2:A7:D2:EA:A7:E4:59:99:63:18:97:C0 X509v3 Authority Key Identifier: keyid:BB:E2:33:56:0E:FD:40:9B:38:CD:B8:0A:00:57:5A:37:BA:89:64:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-IzVg79QJs4zbgKAFdaN7qJZDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABF4/EA87185C721B11E9BB748150C4F9AE02/u-IzVg79QJs4zbgKAFdaN7qJZDU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2a:df:42:82:c2:9c:46:65:5b:32:0b:c2:c9:1a:36:e4:2b: b1:17:c7:97:2c:fe:e4:1a:10:e7:19:55:c9:0d:9a:d7:9a:c0: e3:5b:89:9d:dc:d2:26:1c:30:e2:c9:16:aa:03:0c:c8:ea:7e: a0:65:4b:60:98:ba:18:be:f6:3f:2b:b6:7e:bf:0c:87:0c:44: 48:47:f1:e2:ed:69:17:68:aa:a6:5a:1a:a1:5f:a2:9c:33:c4: e6:f0:dd:22:92:1d:4e:78:0b:61:4b:f0:57:be:d5:fe:4d:d8: 64:43:c4:36:23:81:a8:87:10:1f:b8:e3:8e:b5:e5:a9:f8:0b: a6:db:94:04:68:46:1e:d9:9f:d0:e7:41:39:37:12:19:af:da: 6b:96:09:a4:5a:99:f8:99:d8:9f:a6:48:06:c1:8d:7d:3a:8b: 30:86:37:15:a1:a8:e1:55:2f:e3:c4:02:17:9f:b7:87:af:f1: f5:26:48:3b:d0:76:e5:c4:7b:62:8d:d8:4e:28:41:22:7d:1f: c0:a2:7d:39:ab:d0:bf:f8:d9:f6:35:9a:1c:d7:a8:e0:20:35: d8:dd:db:29:8d:87:aa:f6:b0:de:34:29:a5:be:40:f5:bd:d3: 55:55:dd:e3:81:e4:8e:db:50:95:e7:b3:55:7b:5e:bb:47:16: 32:cc:df:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFCRjQxMTAvBgNVBAUTKEJCRTIzMzU2MEVGRDQwOUIzOENEQjgwQTAwNTc1QTM3 QkE4OTY0MzUwHhcNMjUxMDE4MTgwOTU2WhcNMjUxMDI1MTgwOTU2WjAYMRYwFAYD VQQDEw02OGYzZDdmNC0yYjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqvYOC8ue9pJBaZzQYu2j60vLvZzbXVod0o8K/vl1LdKRAWxErLoxnBS+1G4 2cpqEQnlROsbhwCMIL2xV7NeQ/d4xHALtOrlaGE3+yPlYSyboLJ8pO1cL1BLg+MD zcS4ommJFuX+/TC1viwIiop/lf/9e8Bo2Yza3bTJQC1rpHc9FNWrc9Rw8vJlOZ7P wDUYOSGkGR783XATovmccCAbYUhBDqqfB5o9MExkzA/sUKdyI9l0oa8eXdx6VXEI 4FUNENywdsPSHA5/lYstb9mjJ0HkzXNSSnlt/8//6uFjnmcLJTwV6j9NZpMzxdQk 7t8n5yKDpqeXA/P6n75vRFIt+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVM6ivN fGRHwqfS6qfkWZljGJfAMB8GA1UdIwQYMBaAFLviM1YO/UCbOM24CgBXWje6iWQ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJGNC9FQTg3MTg1Qzcy MUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFKczR6YmdLQUZkYU43cUpa RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtSXpWZzc5UUpzNHpiZ0tBRmRhTjdxSlpEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUJGNC9FQTg3MTg1QzcyMUIxMUU5QkI3NDgxNTBDNEY5QUUwMi91LUl6Vmc3OVFK czR6YmdLQUZkYU43cUpaRFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7Kt9CgsKcRmVbMgvCyRo25CuxF8eXLP7kGhDnGVXJDZrXmsDjW4md 3NImHDDiyRaqAwzI6n6gZUtgmLoYvvY/K7Z+vwyHDERIR/Hi7WkXaKqmWhqhX6Kc M8Tm8N0ikh1OeAthS/BXvtX+TdhkQ8Q2I4GohxAfuOOOteWp+Aum25QEaEYe2Z/Q 50E5NxIZr9prlgmkWpn4mdifpkgGwY19OoswhjcVoajhVS/jxAIXn7eHr/H1Jkg7 0HblxHtijdhOKEEifR/Aon05q9C/+Nn2NZoc16jgIDXY3dspjYeq9rDeNCmlvkD1 vdNVVd3jgeSO21CV57NVe167RxYyzN8G -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:59 2025 by rpki-client