$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft File: K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft (raw, json) Hash identifier: WZrsAsFCLACoKKVgtB4ceU7CZ9Mz+LeRdisucc9pWSA= Subject key identifier: 0F:31:06:EE:D0:05:91:93:44:E5:95:06:FD:42:AF:F2:7D:5D:11:58 Authority key identifier: 2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 Certificate issuer: /CN=A912F6E3/serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft Manifest number: A3 Signing time: Sun 19 Oct 2025 09:30:09 +0000 Manifest this update: Sun 19 Oct 2025 09:30:08 +0000 Manifest next update: Sun 26 Oct 2025 09:30:08 +0000 Files and hashes: 1: K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl (hash: AT7EU4DFNxOr8B/i3ipQbwwrXj99ZR7LfHeaokzfJr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F6E3, serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Validity Not Before: Oct 19 09:30:08 2025 GMT Not After : Oct 26 09:30:08 2025 GMT Subject: CN=68f4afa1-6bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e9:43:21:91:07:94:e9:a9:96:9a:16:0e:0b: bb:26:31:4a:3e:df:37:9c:7b:d3:39:10:98:d3:2c: df:6a:00:82:2d:25:76:ef:5e:3c:65:6c:fc:c1:fe: e7:18:0b:aa:ef:88:1a:0f:ab:52:18:a8:af:5c:69: a0:74:2d:cd:36:bf:5e:29:1c:56:c4:b7:b8:9d:b5: f7:0f:39:48:8c:60:3c:f4:ea:8a:af:fe:af:70:0b: 30:e7:f0:b5:3b:20:a2:d8:43:b8:6f:b4:42:bf:10: 62:a1:e2:5d:a1:90:57:56:f6:dd:c8:c8:53:2b:30: 7e:84:f3:18:ff:63:0b:a2:eb:70:37:bf:d8:66:10: 20:4a:bc:f2:3e:54:2d:d3:43:c6:9b:94:db:d7:18: 74:0d:46:73:a4:3b:1f:46:57:96:56:b9:b4:1e:f1: 46:13:36:b1:60:f1:61:8e:a0:0a:af:bc:72:69:2b: 68:c9:0f:32:a9:f7:db:36:ad:70:4f:c3:74:47:80: e7:92:d1:8a:8b:78:b6:38:d0:99:7a:67:b2:dc:22: 3d:ce:a1:38:a4:00:91:82:5d:d9:17:14:eb:48:78: ce:7b:b0:28:49:0e:81:b1:a5:e6:48:08:ea:2a:c9: b5:3f:16:31:81:e1:8e:c4:7f:7e:8c:72:88:d0:fd: 15:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:31:06:EE:D0:05:91:93:44:E5:95:06:FD:42:AF:F2:7D:5D:11:58 X509v3 Authority Key Identifier: keyid:2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:79:8b:49:84:36:c8:df:af:83:79:6a:2e:45:f9:10:4d:37: 3e:6a:ce:42:f9:7c:17:9f:7a:cf:ef:c9:a8:6b:d8:e7:99:18: c8:b1:71:e7:eb:14:ed:4a:20:fe:8c:e2:56:0d:f4:39:f3:e6: 7f:30:27:eb:1d:33:a4:2f:47:cc:44:81:29:c4:b5:f8:ec:c7: 53:9e:dd:db:d4:15:08:bc:0f:58:33:e5:c7:a6:47:dd:36:d0: 62:6b:49:00:3f:35:eb:0e:c5:a8:50:9b:b9:40:da:03:e2:44: 44:a6:c2:5c:bb:7f:dc:03:02:1b:b7:02:bd:f7:8b:d6:6c:cf: 02:5d:c2:07:fe:95:21:50:00:f5:f6:e5:49:1a:86:0e:53:df: c0:bb:2c:08:67:33:0f:c1:fd:fb:03:5a:ba:81:e5:0b:bb:fb: 34:53:f3:48:33:20:3d:71:df:88:2d:4f:72:85:02:4a:76:e3: c5:69:26:6c:70:79:71:29:0b:ae:e9:1e:ea:66:25:99:83:92: 06:f5:e6:52:52:b1:ff:81:26:17:6e:51:87:b7:18:7e:7f:b9: c5:3e:00:d0:48:2b:21:b8:8a:9f:ac:76:e0:e9:18:07:a4:85: d4:89:96:1d:6f:57:de:6b:81:58:06:54:6e:a7:7e:d8:fa:05: 18:ce:42:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY2RTMxMTAvBgNVBAUTKDJCRjBBRTY3OTBEMkYwMUREMURCNjczODMxMzJEQzQw M0I2NzQ1MjIwHhcNMjUxMDE5MDkzMDA4WhcNMjUxMDI2MDkzMDA4WjAYMRYwFAYD VQQDEw02OGY0YWZhMS02YmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOlDIZEHlOmplpoWDgu7JjFKPt83nHvTORCY0yzfagCCLSV27148ZWz8wf7n GAuq74gaD6tSGKivXGmgdC3NNr9eKRxWxLe4nbX3DzlIjGA89OqKr/6vcAsw5/C1 OyCi2EO4b7RCvxBioeJdoZBXVvbdyMhTKzB+hPMY/2MLoutwN7/YZhAgSrzyPlQt 00PGm5Tb1xh0DUZzpDsfRleWVrm0HvFGEzaxYPFhjqAKr7xyaStoyQ8yqffbNq1w T8N0R4DnktGKi3i2ONCZemey3CI9zqE4pACRgl3ZFxTrSHjOe7AoSQ6BsaXmSAjq Ksm1PxYxgeGOxH9+jHKI0P0VtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8xBu7Q BZGTROWVBv1Cr/J9XRFYMB8GA1UdIwQYMBaAFCvwrmeQ0vAd0dtnODEy3EA7Z0Ui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjZFMy9GMkZCODI1MEI1 REQxMUVGOTdEOUZBMzRDNEY5QUUwMi9LX0N1WjVEUzhCM1IyMmM0TVRMY1FEdG5S U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tfQ3VaNURTOEIzUjIyYzRNVExjUUR0blJTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjZFMy9GMkZCODI1MEI1REQxMUVGOTdEOUZBMzRDNEY5QUUwMi9LX0N1WjVEUzhC M1IyMmM0TVRMY1FEdG5SU0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKeYtJhDbI36+DeWouRfkQTTc+as5C+XwXn3rP78moa9jnmRjIsXHn 6xTtSiD+jOJWDfQ58+Z/MCfrHTOkL0fMRIEpxLX47MdTnt3b1BUIvA9YM+XHpkfd NtBia0kAPzXrDsWoUJu5QNoD4kREpsJcu3/cAwIbtwK994vWbM8CXcIH/pUhUAD1 9uVJGoYOU9/AuywIZzMPwf37A1q6geULu/s0U/NIMyA9cd+ILU9yhQJKduPFaSZs cHlxKQuu6R7qZiWZg5IG9eZSUrH/gSYXblGHtxh+f7nFPgDQSCshuIqfrHbg6RgH pIXUiZYdb1fea4FYBlRup37Y+gUYzkLq -----END CERTIFICATE-----Generated at Mon Oct 20 05:40:34 2025 by rpki-client