$ rpki-client -vvf rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft File: stpsovF-3e60xFAzYfTYgigLyog.mft (raw, json) Hash identifier: cfqxybx1vbRXzyiS8T6D1fO6oyl65z50f8wKw4fwriw= Subject key identifier: 83:3F:BF:EA:E1:B7:6B:5A:C9:16:61:B3:6D:A3:3A:47:91:01:F6:93 Authority key identifier: B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88 Certificate issuer: /CN=A9122FD2/serialNumber=B2DA6CA2F17EDDEEB4C4503361F4D882280BCA88 Certificate serial: 0832 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft Manifest number: 0832 Signing time: Sat 18 Oct 2025 21:56:55 +0000 Manifest this update: Sat 18 Oct 2025 21:56:55 +0000 Manifest next update: Sat 25 Oct 2025 21:56:55 +0000 Files and hashes: 1: stpsovF-3e60xFAzYfTYgigLyog.crl (hash: 7kZUeCPr2170PxETPHsg4W9h2We+dGDyO8euWneTxeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.crl rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2098 (0x832) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122FD2, serialNumber=B2DA6CA2F17EDDEEB4C4503361F4D882280BCA88 Validity Not Before: Oct 18 21:56:55 2025 GMT Not After : Oct 25 21:56:55 2025 GMT Subject: CN=68f40d27-2868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b9:b7:55:79:ae:6b:d8:cf:8b:ce:f8:42:cf: 52:35:de:37:9d:b1:5b:32:a4:9d:e2:32:14:ac:d3: 5b:fb:66:a8:b7:05:1c:cb:8e:19:a5:3f:fa:b2:de: 90:f7:c4:7b:bf:83:5b:5f:85:8e:c6:bf:f7:37:2d: b6:b4:d3:66:1d:cc:4e:e9:ff:e1:e5:d3:16:d0:a0: e8:e5:7c:55:4a:74:06:e9:db:3f:76:e8:d8:ed:88: 1a:ea:19:5f:c0:83:44:36:2f:83:5f:86:74:f9:3a: 8f:46:15:2f:f7:a7:d6:c9:08:a9:dc:88:11:9f:c8: d5:63:bc:22:4a:e6:66:74:30:7f:37:ad:3c:d8:2b: f7:dc:ae:0b:0f:49:4b:49:03:cd:e0:96:57:f4:96: c6:f8:22:cf:92:f3:7b:d4:48:92:12:5a:28:c0:6a: 85:b3:e9:18:2f:12:1e:6a:18:3c:29:8b:76:49:ef: 71:84:f3:94:b9:da:9c:f5:0c:90:9a:f2:63:62:16: 9b:ec:e7:d9:d2:98:74:6b:6e:b3:95:e8:25:9d:9a: 8f:c0:1f:ad:b9:87:54:77:b6:25:54:74:3a:0a:7e: 48:01:e0:2f:2e:96:10:44:e8:3c:45:2c:47:98:27: 37:d9:06:c3:5d:2c:50:75:a0:e8:2a:02:18:a5:75: 4f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3F:BF:EA:E1:B7:6B:5A:C9:16:61:B3:6D:A3:3A:47:91:01:F6:93 X509v3 Authority Key Identifier: keyid:B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:1e:d5:e3:9f:98:06:fa:c8:f2:2c:be:df:45:b4:ee:58:c8: 2d:b8:18:57:6d:48:0f:43:73:88:64:f3:2e:4d:15:e3:d3:09: 1a:ab:a1:db:b4:8d:2e:90:c0:97:96:ed:f4:b9:c5:bd:17:1b: 2a:d8:0c:e0:e3:15:f7:c4:84:7a:de:d9:a6:ac:e1:e5:bb:07: 87:27:b0:52:30:be:8e:ed:2a:e4:a6:96:94:ab:65:eb:a6:a3: d2:a0:37:39:ab:0c:f5:af:d1:8f:f7:47:86:d5:3a:74:27:1d: 57:2a:10:98:49:db:5d:4c:fe:25:b6:6d:a4:a7:4c:93:2c:f4: d4:ee:67:b4:75:f1:06:a7:b4:ef:1f:11:8d:02:bc:c8:4b:cf: 6e:dc:7c:ee:a7:cc:2b:5f:0d:9c:0b:e1:bc:e8:1a:5e:32:12: 2c:54:5c:ce:55:eb:3f:c3:57:92:01:71:0e:3c:aa:2e:fa:b3: 67:37:ea:be:42:e1:95:58:cd:f9:26:fa:9b:2b:d8:ca:77:c3: d2:d9:e8:62:d7:5e:64:8a:d4:b1:c7:75:5e:c8:02:85:0a:3e: 70:37:b4:0c:a3:7a:55:74:ce:55:67:97:bc:92:f1:a7:34:b3: 72:4d:c8:87:09:71:8c:85:81:7c:e9:49:7e:74:70:ca:cf:17: d0:6b:1a:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJGRDIxMTAvBgNVBAUTKEIyREE2Q0EyRjE3RURERUVCNEM0NTAzMzYxRjREODgy MjgwQkNBODgwHhcNMjUxMDE4MjE1NjU1WhcNMjUxMDI1MjE1NjU1WjAYMRYwFAYD VQQDEw02OGY0MGQyNy0yODY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbm3VXmua9jPi874Qs9SNd43nbFbMqSd4jIUrNNb+2aotwUcy44ZpT/6st6Q 98R7v4NbX4WOxr/3Ny22tNNmHcxO6f/h5dMW0KDo5XxVSnQG6ds/dujY7Yga6hlf wINENi+DX4Z0+TqPRhUv96fWyQip3IgRn8jVY7wiSuZmdDB/N6082Cv33K4LD0lL SQPN4JZX9JbG+CLPkvN71EiSEloowGqFs+kYLxIeahg8KYt2Se9xhPOUudqc9QyQ mvJjYhab7OfZ0ph0a26zleglnZqPwB+tuYdUd7YlVHQ6Cn5IAeAvLpYQROg8RSxH mCc32QbDXSxQdaDoKgIYpXVPhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIM/v+rh t2tayRZhs22jOkeRAfaTMB8GA1UdIwQYMBaAFLLabKLxft3utMRQM2H02IIoC8qI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkZEMi9DODFCMjYyOEU1 RkIxMUVBODQ1NDRBNzRDNEY5QUUwMi9zdHBzb3ZGLTNlNjB4RkF6WWZUWWdpZ0x5 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N0cHNvdkYtM2U2MHhGQXpZZlRZZ2lnTHlvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkZEMi9DODFCMjYyOEU1RkIxMUVBODQ1NDRBNzRDNEY5QUUwMi9zdHBzb3ZGLTNl NjB4RkF6WWZUWWdpZ0x5b2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUHtXjn5gG+sjyLL7fRbTuWMgtuBhXbUgPQ3OIZPMuTRXj0wkaq6Hb tI0ukMCXlu30ucW9Fxsq2Azg4xX3xIR63tmmrOHluweHJ7BSML6O7SrkppaUq2Xr pqPSoDc5qwz1r9GP90eG1Tp0Jx1XKhCYSdtdTP4ltm2kp0yTLPTU7me0dfEGp7Tv HxGNArzIS89u3Hzup8wrXw2cC+G86BpeMhIsVFzOVes/w1eSAXEOPKou+rNnN+q+ QuGVWM35JvqbK9jKd8PS2ehi115kitSxx3VeyAKFCj5wN7QMo3pVdM5VZ5e8kvGn NLNyTciHCXGMhYF86Ul+dHDKzxfQaxqQ -----END CERTIFICATE-----Generated at Mon Oct 20 06:53:41 2025 by rpki-client