$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft File: x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft (raw, json) Hash identifier: Lt4s3cKxTApQyT2L6cFyJPoiJ/vDR3x5O/KzZUulJGA= Subject key identifier: FA:26:6E:BF:61:CC:8F:39:82:8B:2E:61:69:D5:8D:96:56:2D:5D:CD Authority key identifier: C7:AD:63:B1:47:E4:99:54:D6:57:51:EF:FC:62:73:F1:C7:70:52:CD Certificate issuer: /CN=A912434D/serialNumber=C7AD63B147E49954D65751EFFC6273F1C77052CD Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x61jsUfkmVTWV1Hv_GJz8cdwUs0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft Manifest number: 39 Signing time: Sun 19 Oct 2025 11:00:27 +0000 Manifest this update: Sun 19 Oct 2025 11:00:27 +0000 Manifest next update: Sun 26 Oct 2025 11:00:27 +0000 Files and hashes: 1: x61jsUfkmVTWV1Hv_GJz8cdwUs0.crl (hash: L++5vaSA/pwmIFJA8AjthgG21C0yXVW9JiPxJrnj2yo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.crl rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x61jsUfkmVTWV1Hv_GJz8cdwUs0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912434D, serialNumber=C7AD63B147E49954D65751EFFC6273F1C77052CD Validity Not Before: Oct 19 11:00:27 2025 GMT Not After : Oct 26 11:00:27 2025 GMT Subject: CN=68f4c4cb-5120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ad:2b:24:4a:13:31:90:6b:97:0b:8f:06:96: 5c:78:c7:ba:be:0c:50:e4:e0:41:dd:42:ca:ca:03: 41:b1:84:1e:75:09:fa:aa:a6:d7:46:af:d1:ff:f5: 12:e8:7d:ea:22:31:7e:90:e1:f3:1e:08:1a:7c:e4: 9b:6f:dc:71:22:e9:ff:7d:b3:4f:72:0d:2c:8d:f3: ed:ae:2c:09:72:ff:a4:ab:98:be:72:91:b4:66:d0: 65:dc:07:89:48:0a:be:14:3f:06:9e:7c:0e:33:19: 1d:af:51:b4:0f:57:69:85:05:d3:3d:fd:98:d8:76: 45:73:0b:07:76:9d:21:6d:10:3a:a8:2c:f3:eb:68: da:c2:6c:11:bf:02:cb:b7:c6:bf:72:4d:51:c5:5b: b2:f0:e1:ee:61:94:2c:c8:a5:a5:8c:46:b2:7d:ff: 70:8c:a7:c0:c7:37:df:86:73:c1:fd:ef:2d:de:2e: 10:c3:ca:ff:85:fc:73:fa:18:93:7f:dc:e5:f1:52: 23:72:fd:5b:d4:5d:b6:d8:b3:8f:a5:97:2b:77:c3: ef:4e:a6:52:7e:a0:b0:78:12:b6:37:ec:c8:a6:0b: c4:a5:bf:b5:09:66:9b:5a:ba:ed:ac:e2:28:e1:e4: 2e:11:db:84:c6:60:1e:0c:b3:c3:63:92:a6:08:99: a2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:26:6E:BF:61:CC:8F:39:82:8B:2E:61:69:D5:8D:96:56:2D:5D:CD X509v3 Authority Key Identifier: keyid:C7:AD:63:B1:47:E4:99:54:D6:57:51:EF:FC:62:73:F1:C7:70:52:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x61jsUfkmVTWV1Hv_GJz8cdwUs0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/04B731C658DE11F08FAADE66C4F9AE02/x61jsUfkmVTWV1Hv_GJz8cdwUs0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c6:b7:e0:bc:7a:bd:04:b5:46:7f:b1:1c:e3:ab:c0:04:83: 10:ad:28:3b:d2:50:9f:24:a6:79:9b:6e:6c:25:68:c0:d3:d0: 12:74:bb:93:dc:82:bb:2e:37:7d:07:a4:0b:fd:f3:2a:63:ad: 5a:82:9a:ca:51:36:b7:fb:d8:b6:61:06:31:dd:26:74:36:62: 4a:d2:d7:06:07:5b:0d:0e:3d:a4:61:5d:ff:96:cc:f0:29:70: d7:06:ab:06:64:7a:59:2b:d2:5e:ed:dd:61:9f:9c:69:12:19: a9:6c:ef:04:ac:55:f5:70:4f:3c:18:ca:5e:1c:39:f7:bb:1f: f4:94:0a:47:1d:55:eb:4e:b0:3a:63:01:fa:a1:b0:62:97:6f: 00:1f:b0:cd:34:1a:b9:5e:4a:ad:d9:da:b3:86:0e:34:3c:37: de:93:59:35:a1:86:9f:2b:c2:23:87:a6:65:3c:59:a3:85:7c: 5b:1d:65:2f:17:14:eb:6f:98:6c:a5:a9:e3:18:90:f5:30:a5: ff:a4:3d:31:39:85:e3:70:69:2b:b1:33:d7:87:fb:83:5e:1a: 29:55:94:ba:fa:d4:7b:6a:ef:ac:1d:3d:fb:e0:6b:74:af:c6: 2c:e4:3f:29:18:b6:b9:9e:f4:46:c2:ef:ac:c8:2e:4e:50:23: 52:ee:d7:ef -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDM0RDExMC8GA1UEBRMoQzdBRDYzQjE0N0U0OTk1NEQ2NTc1MUVGRkM2MjczRjFD NzcwNTJDRDAeFw0yNTEwMTkxMTAwMjdaFw0yNTEwMjYxMTAwMjdaMBgxFjAUBgNV BAMTDTY4ZjRjNGNiLTUxMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+rSskShMxkGuXC48Gllx4x7q+DFDk4EHdQsrKA0GxhB51CfqqptdGr9H/9RLo feoiMX6Q4fMeCBp85Jtv3HEi6f99s09yDSyN8+2uLAly/6SrmL5ykbRm0GXcB4lI Cr4UPwaefA4zGR2vUbQPV2mFBdM9/ZjYdkVzCwd2nSFtEDqoLPPraNrCbBG/Asu3 xr9yTVHFW7Lw4e5hlCzIpaWMRrJ9/3CMp8DHN9+Gc8H97y3eLhDDyv+F/HP6GJN/ 3OXxUiNy/VvUXbbYs4+llyt3w+9OplJ+oLB4ErY37MimC8Slv7UJZptauu2s4ijh 5C4R24TGYB4Ms8NjkqYImaIHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+iZuv2HM jzmCiy5hadWNllYtXc0wHwYDVR0jBBgwFoAUx61jsUfkmVTWV1Hv/GJz8cdwUs0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0MzRELzA0QjczMUM2NThE RTExRjA4RkFBREU2NkM0RjlBRTAyL3g2MWpzVWZrbVZUV1YxSHZfR0p6OGNkd1Vz MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDYxanNVZmttVlRXVjFIdl9HSno4Y2R3VXMwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0 MzRELzA0QjczMUM2NThERTExRjA4RkFBREU2NkM0RjlBRTAyL3g2MWpzVWZrbVZU V1YxSHZfR0p6OGNkd1VzMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ3Gt+C8er0EtUZ/sRzjq8AEgxCtKDvSUJ8kpnmbbmwlaMDT0BJ0u5Pc grsuN30HpAv98ypjrVqCmspRNrf72LZhBjHdJnQ2YkrS1wYHWw0OPaRhXf+WzPAp cNcGqwZkelkr0l7t3WGfnGkSGals7wSsVfVwTzwYyl4cOfe7H/SUCkcdVetOsDpj AfqhsGKXbwAfsM00GrleSq3Z2rOGDjQ8N96TWTWhhp8rwiOHpmU8WaOFfFsdZS8X FOtvmGylqeMYkPUwpf+kPTE5heNwaSuxM9eH+4NeGilVlLr61Htq76wdPfvga3Sv xizkPykYtrme9EbC76zILk5QI1Lu1+8= -----END CERTIFICATE-----Generated at Mon Oct 20 09:30:14 2025 by rpki-client