$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft File: cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json) Hash identifier: dwzUyQDFZxnNJq5/cmLNm9NAJduDX92w/RwtbJODX68= Subject key identifier: A3:50:77:53:4D:05:BF:F3:3F:37:BA:0C:77:B9:47:7B:F8:99:B4:48 Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft Manifest number: 01AA Signing time: Sun 19 Oct 2025 05:43:18 +0000 Manifest this update: Sun 19 Oct 2025 05:43:17 +0000 Manifest next update: Sun 26 Oct 2025 05:43:17 +0000 Files and hashes: 1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: mYQvBCMelEjW8os6F1Pf6SFiLxG6gc90fJVxrUEG48I=) 2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: iHabIHEz/PTHKVI4qhPpj+ZDCYtCE+FTF89syGeIFww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F627, serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Validity Not Before: Oct 19 05:43:17 2025 GMT Not After : Oct 26 05:43:17 2025 GMT Subject: CN=68f47a75-1978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:75:13:f9:ed:ba:2f:11:bf:e9:48:94:54: 0a:df:08:5e:fd:a9:14:1c:d2:63:20:fe:54:34:aa: 3a:0c:9f:21:e5:0f:5d:58:cf:b3:90:c4:db:71:b2: 77:ab:16:0b:be:a3:4b:5e:a5:00:85:0a:02:ce:12: 6e:68:50:46:58:19:d0:7f:ce:66:6a:77:db:36:99: 5e:a7:65:fa:fe:85:5e:84:63:83:68:83:97:53:21: 82:51:d1:86:34:4d:22:f6:0e:f6:4c:ac:58:11:72: fc:3e:5d:e4:3a:ad:61:5b:dd:ba:c8:7a:8f:ca:4f: bd:db:61:38:5d:a3:db:6a:98:50:43:92:30:dc:87: 0e:8d:35:b5:31:4f:4f:aa:9b:1d:54:d9:c6:ca:0d: 5c:eb:e3:fe:70:b1:9a:8d:4c:01:7a:e6:72:54:3e: 6e:cf:da:d1:3e:1a:19:c0:3d:a3:97:4a:c3:4a:a5: 9e:a9:b9:bf:23:62:5b:a8:1a:ea:6e:8d:e2:c7:2d: ae:25:58:ba:a3:da:3f:b7:4e:47:27:83:30:a5:91: 9d:fe:ec:e5:c0:84:12:f0:33:b7:50:cb:fc:89:b0: c9:84:78:5b:26:e1:0b:7f:ca:7f:6e:ea:6d:f1:ec: 4f:08:0d:4b:e7:96:f7:1c:96:14:88:56:bc:2e:e5: 7c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:50:77:53:4D:05:BF:F3:3F:37:BA:0C:77:B9:47:7B:F8:99:B4:48 X509v3 Authority Key Identifier: keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:43:6c:c5:ee:df:3a:51:55:4b:7e:68:5a:95:7c:34:6b:05: ec:10:22:39:78:57:9d:db:c3:21:b0:b1:2e:73:c8:09:f9:9a: 8a:77:fe:0b:7e:0b:17:5e:1c:ee:d0:d0:eb:df:38:bb:20:b6: 82:99:aa:9f:ff:23:db:db:d4:fc:27:de:8c:fc:38:69:7a:d2: ee:ba:6b:e9:a1:dc:56:cb:47:f4:7a:74:b3:b7:2b:2d:95:dc: 5c:ae:07:14:0c:ad:c2:21:2e:da:2f:71:65:b0:ac:ba:3a:d5: 5a:1c:81:3f:32:06:33:c9:8e:04:6c:b0:a3:e9:e8:f5:47:25: f9:0a:f9:50:59:39:8a:b9:c9:9d:33:11:a5:d4:b9:76:00:5d: 9a:23:87:09:f5:76:ff:5a:0b:66:74:59:d4:d5:3f:db:d2:af: a2:f2:51:a6:27:bc:f0:88:77:7e:4d:e8:e9:8a:ee:03:10:a2: 65:93:90:c2:7b:f0:09:7a:f9:9e:a3:c6:eb:2f:1e:87:26:fb: cc:c3:72:ec:18:f2:8b:fc:15:ef:bb:f2:ea:c7:7c:52:62:d1: f1:00:99:60:58:fd:f6:ab:bd:12:99:a9:db:ce:4d:26:78:73: 7d:9d:31:95:6d:45:2a:00:31:f0:23:79:86:a2:ed:f4:fc:59: 47:b0:1b:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4 Qzc2NDBERjYwHhcNMjUxMDE5MDU0MzE3WhcNMjUxMDI2MDU0MzE3WjAYMRYwFAYD VQQDEw02OGY0N2E3NS0xOTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVN1E/ntui8Rv+lIlFQK3whe/akUHNJjIP5UNKo6DJ8h5Q9dWM+zkMTbcbJ3 qxYLvqNLXqUAhQoCzhJuaFBGWBnQf85manfbNplep2X6/oVehGODaIOXUyGCUdGG NE0i9g72TKxYEXL8Pl3kOq1hW926yHqPyk+922E4XaPbaphQQ5Iw3IcOjTW1MU9P qpsdVNnGyg1c6+P+cLGajUwBeuZyVD5uz9rRPhoZwD2jl0rDSqWeqbm/I2JbqBrq bo3ixy2uJVi6o9o/t05HJ4MwpZGd/uzlwIQS8DO3UMv8ibDJhHhbJuELf8p/bupt 8exPCA1L55b3HJYUiFa8LuV8rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNQd1NN Bb/zPze6DHe5R3v4mbRIMB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ MFF2WGpZT3BNdzZNZGtEZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgQ2zF7t86UVVLfmhalXw0awXsECI5eFed28MhsLEuc8gJ+ZqKd/4L fgsXXhzu0NDr3zi7ILaCmaqf/yPb29T8J96M/DhpetLuumvpodxWy0f0enSztyst ldxcrgcUDK3CIS7aL3FlsKy6OtVaHIE/MgYzyY4EbLCj6ej1RyX5CvlQWTmKucmd MxGl1Ll2AF2aI4cJ9Xb/WgtmdFnU1T/b0q+i8lGmJ7zwiHd+Tejpiu4DEKJlk5DC e/AJevmeo8brLx6HJvvMw3LsGPKL/BXvu/Lqx3xSYtHxAJlgWP32q70Smanbzk0m eHN9nTGVbUUqADHwI3mGou30/FlHsBvX -----END CERTIFICATE-----Generated at Mon Oct 20 11:36:24 2025 by rpki-client