$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft File: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft (raw, json) Hash identifier: YSzxe6Qe1buixWch2nK+SqMSvoM/HwFN4/8KKeEcfL4= Subject key identifier: 46:FB:21:C0:FC:45:84:E5:EA:B3:A1:9B:F7:DA:2B:F6:69:7D:F0:9C Authority key identifier: 2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3 Certificate issuer: /CN=A912B75A/serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft Manifest number: DE Signing time: Sun 19 Oct 2025 08:31:11 +0000 Manifest this update: Sun 19 Oct 2025 08:31:11 +0000 Manifest next update: Sun 26 Oct 2025 08:31:11 +0000 Files and hashes: 1: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl (hash: ti7nU0zmpecvnpY1JxtbnTURshearHTOdiq9kifDHiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B75A, serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3 Validity Not Before: Oct 19 08:31:11 2025 GMT Not After : Oct 26 08:31:11 2025 GMT Subject: CN=68f4a1cf-fdf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5f:28:20:0c:99:7c:6a:91:6c:7b:da:cc:84: 9c:29:08:3a:50:34:6f:06:7e:5b:96:82:5e:33:5c: 31:ac:a6:98:c5:66:ef:0b:94:16:2a:a6:d9:65:33: a3:7c:d6:41:4a:d1:b3:2d:a3:d2:7d:21:1e:86:67: 7b:13:51:6e:2c:bb:8a:7e:65:59:77:41:4e:c2:2e: 31:46:7a:42:f6:d9:e4:f2:62:3e:51:84:99:55:5b: ed:bb:0d:1a:ac:44:0e:90:c1:d1:d4:0f:be:11:a1: fd:e4:f3:71:67:ae:33:c6:f3:9d:7b:ad:44:b9:1c: 47:0a:ea:c7:2e:cd:e8:c8:9b:22:fe:2d:57:77:1c: de:a9:7b:1d:c2:15:b9:47:72:65:ac:38:ec:f1:c9: 52:06:86:f9:96:ca:97:d8:46:70:02:59:c6:e0:29: f0:d7:66:49:2a:ca:12:68:37:99:e1:1b:70:e3:d0: 02:30:c6:44:dd:53:5d:a8:b2:4f:e0:09:25:33:cc: 71:83:d1:c7:87:c4:14:7f:94:c6:aa:89:53:38:40: 90:5e:49:b3:5a:72:21:28:cb:b3:fd:87:12:aa:44: 1e:e5:b8:44:e1:9b:4f:5e:29:a6:61:56:c8:5e:1c: f1:e8:9f:62:7c:08:0f:66:1c:bf:eb:26:87:e7:79: e2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FB:21:C0:FC:45:84:E5:EA:B3:A1:9B:F7:DA:2B:F6:69:7D:F0:9C X509v3 Authority Key Identifier: keyid:2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:81:1e:fb:ec:56:78:94:6c:d9:41:9b:59:8d:8d:a6:b4:5d: a8:ae:8c:79:65:da:f6:a5:4c:d2:07:61:09:a5:d9:d6:3b:a4: 60:19:7b:88:23:e5:65:21:d2:aa:39:8b:ba:95:41:d7:56:b0: ef:51:2e:58:aa:8e:ad:b6:61:2b:5e:8f:21:c4:d2:f1:0a:a0: 9e:66:94:2c:c0:ee:eb:d5:08:87:f7:e4:da:50:cb:dc:d5:9a: 7e:79:34:36:3b:f1:b0:58:b9:02:a0:03:b6:c6:46:c5:95:f8: cb:fb:2d:6f:8f:ba:ec:2a:11:c7:47:a3:c9:ad:2c:e4:21:79: bc:24:45:08:b9:bf:f8:dd:03:e0:c9:e3:08:67:12:96:df:a1: d3:e8:62:1e:b7:1c:aa:50:3e:a3:ff:e5:b3:59:0c:44:a4:a2: ab:ab:9e:34:da:94:87:3f:bc:9a:a7:5f:77:ef:22:06:83:a1: c9:0b:18:50:3a:41:bf:c6:1a:79:3b:dd:ef:4c:b6:02:ae:45: ef:46:d6:55:17:aa:9e:a7:ba:73:cb:48:bd:69:73:38:b0:27: 19:9e:6f:0c:bf:05:71:f5:64:af:e7:4b:60:8f:80:80:74:ef: 9e:73:33:b9:f5:8f:41:2b:01:02:22:38:98:b1:47:f3:b4:9a: c5:eb:45:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI3NUExMTAvBgNVBAUTKDJCM0QyMTFGQzk5OThERjIwMzVFMjBEOTFBQTU1RURF QzYyOEYwQTMwHhcNMjUxMDE5MDgzMTExWhcNMjUxMDI2MDgzMTExWjAYMRYwFAYD VQQDEw02OGY0YTFjZi1mZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxF8oIAyZfGqRbHvazIScKQg6UDRvBn5bloJeM1wxrKaYxWbvC5QWKqbZZTOj fNZBStGzLaPSfSEehmd7E1FuLLuKfmVZd0FOwi4xRnpC9tnk8mI+UYSZVVvtuw0a rEQOkMHR1A++EaH95PNxZ64zxvOde61EuRxHCurHLs3oyJsi/i1XdxzeqXsdwhW5 R3JlrDjs8clSBob5lsqX2EZwAlnG4Cnw12ZJKsoSaDeZ4Rtw49ACMMZE3VNdqLJP 4AklM8xxg9HHh8QUf5TGqolTOECQXkmzWnIhKMuz/YcSqkQe5bhE4ZtPXimmYVbI Xhzx6J9ifAgPZhy/6yaH53ni0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEb7IcD8 RYTl6rOhm/faK/ZpffCcMB8GA1UdIwQYMBaAFCs9IR/JmY3yA14g2RqlXt7GKPCj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjc1QS8xQjIyRTFGRTVC OUExMUVGODIwMjc2NDBDNEY5QUUwMi9LejBoSDhtWmpmSURYaURaR3FWZTNzWW84 S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t6MGhIOG1aamZJRFhpRFpHcVZlM3NZbzhLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjc1QS8xQjIyRTFGRTVCOUExMUVGODIwMjc2NDBDNEY5QUUwMi9LejBoSDhtWmpm SURYaURaR3FWZTNzWW84S00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHgR777FZ4lGzZQZtZjY2mtF2orox5Zdr2pUzSB2EJpdnWO6RgGXuI I+VlIdKqOYu6lUHXVrDvUS5Yqo6ttmErXo8hxNLxCqCeZpQswO7r1QiH9+TaUMvc 1Zp+eTQ2O/GwWLkCoAO2xkbFlfjL+y1vj7rsKhHHR6PJrSzkIXm8JEUIub/43QPg yeMIZxKW36HT6GIetxyqUD6j/+WzWQxEpKKrq5402pSHP7yap1937yIGg6HJCxhQ OkG/xhp5O93vTLYCrkXvRtZVF6qep7pzy0i9aXM4sCcZnm8MvwVx9WSv50tgj4CA dO+eczO59Y9BKwECIjiYsUfztJrF60VD -----END CERTIFICATE-----Generated at Mon Oct 20 16:04:51 2025 by rpki-client