$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft File: g1sFZ9k-rArjJOofFrPDnLGzOI4.mft (raw, json) Hash identifier: uvowp87zHsd/SZSw5Wv59+jGfgWrSkmFR0lRmVD1Gno= Subject key identifier: FB:A0:20:AC:2B:4E:FE:9C:06:BF:1A:8D:46:1C:83:63:D8:BC:04:D6 Authority key identifier: 83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E Certificate issuer: /CN=A911F5B7/serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Certificate serial: 0B10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft Manifest number: 0CD2 Signing time: Sat 18 Oct 2025 20:15:56 +0000 Manifest this update: Sat 18 Oct 2025 20:15:56 +0000 Manifest next update: Sat 25 Oct 2025 20:15:56 +0000 Files and hashes: 1: g1sFZ9k-rArjJOofFrPDnLGzOI4.crl (hash: F6S/v/iIK13yvMENEwu79M+LCYlXFtTURfWjzTyLECk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2832 (0xb10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Validity Not Before: Oct 18 20:15:56 2025 GMT Not After : Oct 25 20:15:56 2025 GMT Subject: CN=68f3f57c-8e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c6:4c:93:09:3c:1d:cd:ff:f7:53:73:ea:39: fa:ee:1b:03:ac:09:d0:6b:1c:26:24:e4:42:2b:97: 99:b0:43:1a:00:87:8a:47:68:43:77:e5:c2:fe:66: 6e:8c:a3:de:f7:4b:0a:e0:25:bd:9b:92:77:88:f5: 0b:92:ee:19:40:3e:b2:2e:e5:5d:16:e6:67:49:5e: ba:07:1c:b2:94:da:4a:c7:73:1c:99:ad:5d:9a:8c: bd:71:3e:5e:60:29:8f:2f:b8:a4:8e:1e:af:6d:99: db:ab:47:f5:67:2f:f7:bc:15:51:ec:a2:75:14:90: 40:7d:46:86:93:bd:ce:0d:ff:2c:53:b6:ff:bd:b2: 99:c7:93:17:0e:df:57:db:d3:8c:7e:48:d7:44:1b: f0:45:7b:06:c4:b8:f3:d5:fa:87:3e:f3:12:57:31: 87:2c:81:90:69:33:bd:86:82:ce:6f:bd:f6:56:3e: 5b:ca:1f:7f:0a:31:2b:27:7b:73:d1:99:2f:1a:c7: bc:ff:06:75:e5:f2:c6:ee:32:96:90:41:1b:f7:7b: fc:2e:8e:ab:66:2e:b2:c3:43:f8:2c:01:1b:37:ac: 24:46:5f:88:06:76:cc:f6:e3:4a:73:67:42:5a:84: 02:b2:c4:40:d7:7e:46:c8:d8:9d:ed:a7:9d:72:e4: ba:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A0:20:AC:2B:4E:FE:9C:06:BF:1A:8D:46:1C:83:63:D8:BC:04:D6 X509v3 Authority Key Identifier: keyid:83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:3d:55:33:67:b2:74:4a:5e:71:97:c6:e5:b5:26:10:e1:a9: 5e:b9:02:b3:6b:8d:29:c2:2a:05:5b:8b:86:d8:cb:55:48:e2: 70:03:60:ab:34:81:cb:48:79:5f:82:c9:9c:60:62:26:cf:60: d7:b1:c5:5a:7a:22:77:5f:a5:b0:dc:51:b4:1f:0a:8f:ed:39: ff:4a:ac:e1:87:8d:df:41:02:ef:4e:2c:f8:ae:9e:91:69:64: c6:11:95:91:37:db:3e:e6:08:ca:f4:31:6f:9d:d8:2b:18:59: fe:9f:15:7f:2b:00:7f:e0:aa:a8:a0:6c:ee:2c:00:74:e5:e3: 1c:97:6e:8a:11:09:43:4d:fd:ef:b3:41:f9:d6:5c:6a:ab:08: dd:7e:8a:c4:22:98:ae:f8:5a:71:cf:2f:b3:07:d7:6d:43:50: e5:65:87:af:3c:c1:1d:10:c0:b5:e7:46:a0:aa:30:37:68:d8: f8:65:4c:d1:cd:e7:52:4c:50:04:18:fc:46:cd:fb:d8:08:25: 44:3b:22:8e:64:02:80:d6:75:b4:01:33:75:b8:0f:7b:51:d2: e9:97:89:26:36:63:f8:49:18:24:b5:6b:88:36:8b:c3:84:e7: db:23:93:0a:5f:36:51:0e:1a:b1:b5:14:97:52:71:d5:7a:1a: dd:9b:6c:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKDgzNUIwNTY3RDkzRUFDMEFFMzI0RUExRjE2QjNDMzlD QjFCMzM4OEUwHhcNMjUxMDE4MjAxNTU2WhcNMjUxMDI1MjAxNTU2WjAYMRYwFAYD VQQDEw02OGYzZjU3Yy04ZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcZMkwk8Hc3/91Nz6jn67hsDrAnQaxwmJORCK5eZsEMaAIeKR2hDd+XC/mZu jKPe90sK4CW9m5J3iPULku4ZQD6yLuVdFuZnSV66BxyylNpKx3Mcma1dmoy9cT5e YCmPL7ikjh6vbZnbq0f1Zy/3vBVR7KJ1FJBAfUaGk73ODf8sU7b/vbKZx5MXDt9X 29OMfkjXRBvwRXsGxLjz1fqHPvMSVzGHLIGQaTO9hoLOb732Vj5byh9/CjErJ3tz 0ZkvGse8/wZ15fLG7jKWkEEb93v8Lo6rZi6yw0P4LAEbN6wkRl+IBnbM9uNKc2dC WoQCssRA135GyNid7aedcuS60QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPugIKwr Tv6cBr8ajUYcg2PYvATWMB8GA1UdIwQYMBaAFINbBWfZPqwK4yTqHxazw5yxsziO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJBcmpKT29mRnJQRG5MR3pP STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxc0ZaOWstckFyakpPb2ZGclBEbkxHek9JNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJB cmpKT29mRnJQRG5MR3pPSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdPVUzZ7J0Sl5xl8bltSYQ4aleuQKza40pwioFW4uG2MtVSOJwA2Cr NIHLSHlfgsmcYGImz2DXscVaeiJ3X6Ww3FG0HwqP7Tn/Sqzhh43fQQLvTiz4rp6R aWTGEZWRN9s+5gjK9DFvndgrGFn+nxV/KwB/4KqooGzuLAB05eMcl26KEQlDTf3v s0H51lxqqwjdforEIpiu+Fpxzy+zB9dtQ1DlZYevPMEdEMC150agqjA3aNj4ZUzR zedSTFAEGPxGzfvYCCVEOyKOZAKA1nW0ATN1uA97UdLpl4kmNmP4SRgktWuINovD hOfbI5MKXzZRDhqxtRSXUnHVehrdm2yU -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:17 2025 by rpki-client