$ rpki-client -vvf rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft File: Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft (raw, json) Hash identifier: hRzyogcq0ydmJ16ipicwnDKsf7Hde71+ycZNY5xPPz4= Subject key identifier: F8:85:BE:EB:E2:F5:8B:98:8D:EF:AF:B6:CE:C0:09:AA:EC:C4:52:73 Authority key identifier: 57:1E:D2:56:D5:8F:85:C6:00:C6:4A:59:EE:7B:1D:36:AE:3C:B0:9B Certificate issuer: /CN=A9123059/serialNumber=571ED256D58F85C600C64A59EE7B1D36AE3CB09B Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft Manifest number: 23 Signing time: Sun 19 Oct 2025 11:18:29 +0000 Manifest this update: Sun 19 Oct 2025 11:18:29 +0000 Manifest next update: Sun 26 Oct 2025 11:18:29 +0000 Files and hashes: 1: Vx7SVtWPhcYAxkpZ7nsdNq48sJs.crl (hash: q/KrEzB3BL6HYLFubtqz0K9PbAdBoj17XTnnGxMSV/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.crl rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123059, serialNumber=571ED256D58F85C600C64A59EE7B1D36AE3CB09B Validity Not Before: Oct 19 11:18:29 2025 GMT Not After : Oct 26 11:18:29 2025 GMT Subject: CN=68f4c905-209d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b2:78:74:6f:ba:f6:c1:50:1b:ab:16:82:53: 3c:ad:6d:f4:24:af:4a:02:70:4d:38:77:3d:be:08: e4:bb:11:83:c7:cf:b5:c2:a7:a6:6f:92:76:4a:59: d5:31:be:63:33:85:94:1a:0f:d8:82:6c:fb:1e:b4: 82:03:ec:fe:3c:9e:46:e7:17:1b:e0:e0:f7:06:86: 70:45:0c:8a:77:45:50:40:79:30:a4:95:90:73:30: 7a:7b:d6:a1:31:fd:6e:59:9b:05:07:ec:07:37:2b: 47:46:3a:1f:5c:c8:39:ec:c8:af:b7:ad:fa:5c:1d: 23:56:8e:c8:76:40:d3:8f:ec:2c:0b:f5:d7:7f:16: 8b:8f:9a:97:a9:a9:1f:7e:55:0e:df:36:4c:f4:8e: b0:9a:86:17:59:44:02:14:5c:0e:1e:65:2e:3c:e2: 7e:45:45:bf:d9:eb:89:45:f3:8b:9c:50:51:08:1f: 03:1d:0c:83:9f:83:54:00:b7:85:1d:02:30:74:97: 00:76:9a:63:57:e4:a0:36:da:41:ae:29:05:03:7e: af:75:b8:52:b2:c3:81:12:8c:cc:8f:aa:21:ba:97: 45:98:ee:0e:f5:e0:e6:22:71:fd:e7:d8:26:da:fa: 88:24:2c:45:de:41:21:79:28:9c:ad:73:02:63:09: ad:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:85:BE:EB:E2:F5:8B:98:8D:EF:AF:B6:CE:C0:09:AA:EC:C4:52:73 X509v3 Authority Key Identifier: keyid:57:1E:D2:56:D5:8F:85:C6:00:C6:4A:59:EE:7B:1D:36:AE:3C:B0:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123059/BBBD802679F611F09CE9C328C4F9AE02/Vx7SVtWPhcYAxkpZ7nsdNq48sJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:0a:fe:67:17:f9:de:f0:ee:a8:a0:09:58:a1:45:94:b9:2a: 75:96:ea:9b:7c:9e:3d:93:ba:e6:8a:9c:e2:6b:26:2b:db:23: 68:82:fe:3f:13:35:ca:b1:25:cb:81:41:95:9b:e3:26:e2:1d: 66:3d:12:ef:ba:3a:1f:69:cb:4e:ab:f1:05:2d:c2:9a:88:22: eb:dd:fa:dd:6a:f2:bc:ed:07:85:3d:de:9a:83:3b:c8:a7:dc: f1:e6:63:bf:47:4c:0e:4a:e2:d8:9a:65:c3:fe:f4:ec:92:07: 76:ce:de:fc:75:ba:a5:2a:ae:50:91:fd:9d:96:64:b8:be:fa: 26:c1:8b:21:2c:d0:fb:08:93:38:92:5d:d9:30:a4:0a:9c:06: 2c:91:b9:be:d4:58:52:d1:ba:1a:68:04:84:78:c0:66:32:83: 14:b5:66:e2:8a:0c:2c:d2:3a:cb:79:cb:6e:af:fc:dc:50:51: 59:25:69:49:7a:7f:05:e5:42:56:cb:ce:6f:d9:b7:01:95:86: f2:f1:ec:c0:0e:46:8d:46:42:ec:36:fe:34:7a:4e:99:81:48: 3f:31:f0:07:5d:aa:64:ed:97:2d:91:d4:d4:6f:1a:5a:bf:f1: 20:ed:6c:c5:0e:d2:a7:4b:59:51:b0:da:25:47:71:d8:3e:73: 37:3b:3c:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzA1OTExMC8GA1UEBRMoNTcxRUQyNTZENThGODVDNjAwQzY0QTU5RUU3QjFEMzZB RTNDQjA5QjAeFw0yNTEwMTkxMTE4MjlaFw0yNTEwMjYxMTE4MjlaMBgxFjAUBgNV BAMTDTY4ZjRjOTA1LTIwOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2snh0b7r2wVAbqxaCUzytbfQkr0oCcE04dz2+COS7EYPHz7XCp6ZvknZKWdUx vmMzhZQaD9iCbPsetIID7P48nkbnFxvg4PcGhnBFDIp3RVBAeTCklZBzMHp71qEx /W5ZmwUH7Ac3K0dGOh9cyDnsyK+3rfpcHSNWjsh2QNOP7CwL9dd/FouPmpepqR9+ VQ7fNkz0jrCahhdZRAIUXA4eZS484n5FRb/Z64lF84ucUFEIHwMdDIOfg1QAt4Ud AjB0lwB2mmNX5KA22kGuKQUDfq91uFKyw4ESjMyPqiG6l0WY7g714OYicf3n2Cba +ogkLEXeQSF5KJytcwJjCa0BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+IW+6+L1 i5iN76+2zsAJquzEUnMwHwYDVR0jBBgwFoAUVx7SVtWPhcYAxkpZ7nsdNq48sJsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzMDU5L0JCQkQ4MDI2NzlG NjExRjA5Q0U5QzMyOEM0RjlBRTAyL1Z4N1NWdFdQaGNZQXhrcFo3bnNkTnE0OHNK cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVng3U1Z0V1BoY1lBeGtwWjduc2ROcTQ4c0pzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz MDU5L0JCQkQ4MDI2NzlGNjExRjA5Q0U5QzMyOEM0RjlBRTAyL1Z4N1NWdFdQaGNZ QXhrcFo3bnNkTnE0OHNKcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGcK/mcX+d7w7qigCVihRZS5KnWW6pt8nj2TuuaKnOJrJivbI2iC/j8T NcqxJcuBQZWb4ybiHWY9Eu+6Oh9py06r8QUtwpqIIuvd+t1q8rztB4U93pqDO8in 3PHmY79HTA5K4tiaZcP+9OySB3bO3vx1uqUqrlCR/Z2WZLi++ibBiyEs0PsIkziS XdkwpAqcBiyRub7UWFLRuhpoBIR4wGYygxS1ZuKKDCzSOst5y26v/NxQUVklaUl6 fwXlQlbLzm/ZtwGVhvLx7MAORo1GQuw2/jR6TpmBSD8x8AddqmTtly2R1NRvGlq/ 8SDtbMUO0qdLWVGw2iVHcdg+czc7PGg= -----END CERTIFICATE-----Generated at Mon Oct 20 15:43:11 2025 by rpki-client