$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json) Hash identifier: ZEdDW2aJw4JVWIMGQ2B71SMa7uZawx4575Xy41WnvH8= Subject key identifier: 8D:11:44:E0:9D:6D:7F:5A:91:A2:06:4A:2C:23:05:E2:F0:85:00:27 Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft Manifest number: 0185 Signing time: Sun 19 Oct 2025 06:13:43 +0000 Manifest this update: Sun 19 Oct 2025 06:13:43 +0000 Manifest next update: Sun 26 Oct 2025 06:13:43 +0000 Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: CAF5utxujDAq2E0h+Ys4IDm61c0YTplbaO4UJQQ4Goo=) 2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: PHAPD39R0/+5V+WCmlH3xcXfFFqLnGp5Euy8i5sqtnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91374BB, serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Validity Not Before: Oct 19 06:13:43 2025 GMT Not After : Oct 26 06:13:43 2025 GMT Subject: CN=68f48197-5d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:55:24:ad:d6:0c:1e:d4:10:c1:ac:99:a9:03: 80:65:d9:05:47:ca:05:31:3e:52:6d:0a:27:b5:b3: 69:09:9e:69:96:8a:3f:64:8b:0c:0c:c1:59:1d:1f: ac:72:76:44:c1:99:6b:53:5f:64:ce:aa:33:ec:93: da:de:b6:96:65:44:6d:fc:2d:20:bd:82:20:65:33: 73:63:df:e5:a6:e3:56:25:9c:9d:dc:dc:b4:09:8c: 7e:1d:f6:3e:70:5c:9d:b1:2c:75:0d:56:9d:5b:f2: 6e:41:ae:0a:c0:7d:4e:9f:67:c2:5f:90:04:e7:9e: 62:08:ba:bd:c5:67:03:22:0b:8a:91:dc:34:1b:18: bc:68:dc:56:5c:43:c7:a7:75:c3:47:c9:7f:31:fd: c4:10:ca:b9:3f:5c:cb:84:aa:0d:97:72:8f:3d:77: ce:63:c5:c8:26:94:34:ad:ab:08:8f:02:24:d4:7a: fa:c3:59:59:fd:ba:83:f7:58:db:ed:11:b2:a3:c6: 3f:63:36:85:05:70:1a:b2:fc:5a:2f:5f:df:dc:b8: 02:81:25:ce:9b:51:fd:23:17:71:ee:1c:4a:42:85: b3:82:97:a9:f0:9e:49:d7:0c:00:14:ee:33:65:ae: b9:3f:62:7e:7c:6f:f5:7b:7d:50:f8:81:60:31:e6: bc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:11:44:E0:9D:6D:7F:5A:91:A2:06:4A:2C:23:05:E2:F0:85:00:27 X509v3 Authority Key Identifier: keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2d:51:e9:5f:37:a4:e5:f5:0c:35:80:5d:e8:72:f5:5d:d3: 21:d3:d1:50:ec:f3:b5:30:2e:c5:c3:be:f9:0e:ee:64:fc:0f: b6:3b:1e:43:0a:d4:8b:94:2e:f4:b3:da:89:78:d3:48:e7:ae: 14:3d:ac:a6:06:ec:76:fc:03:7c:37:b1:7c:d1:5b:33:9e:85: 7c:a5:72:0b:ad:33:ed:55:9f:73:a7:a0:bf:d8:90:b1:64:6e: 81:7d:6f:33:3f:1e:e1:fa:58:99:c4:ec:1c:78:cc:4f:62:76: 95:c0:c5:80:24:ec:a8:50:34:4f:7c:7c:1d:35:7b:03:37:90: 7d:26:c8:06:de:f2:25:31:f8:02:f1:de:08:9f:04:e6:97:44: db:b4:12:08:46:b8:e8:cf:41:61:c6:20:70:fe:ef:b3:7a:3d: 8d:f6:17:9a:96:8e:1d:71:f0:3d:66:a1:c1:b5:b1:c7:38:4e: 64:da:05:07:b9:c6:b7:1c:49:3a:45:ea:30:b0:4b:2d:16:d9: 01:ac:86:29:ec:2a:b2:ce:e8:bd:36:75:1f:32:0d:f6:2f:e2: b5:d7:6b:2e:47:73:0b:37:4f:a5:0f:f6:80:aa:cb:1b:2f:64: 9a:1e:5b:df:31:b1:c3:e2:5b:08:57:a8:a6:25:d9:c7:95:8f: dd:ee:f0:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc0QkIxMTAvBgNVBAUTKEIzMTJDMjJGM0QwQjk3QkFBRjMyNzNFNUM2NkI4RjE0 MDIwM0UyRjkwHhcNMjUxMDE5MDYxMzQzWhcNMjUxMDI2MDYxMzQzWjAYMRYwFAYD VQQDEw02OGY0ODE5Ny01ZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFUkrdYMHtQQwayZqQOAZdkFR8oFMT5SbQontbNpCZ5ploo/ZIsMDMFZHR+s cnZEwZlrU19kzqoz7JPa3raWZURt/C0gvYIgZTNzY9/lpuNWJZyd3Ny0CYx+HfY+ cFydsSx1DVadW/JuQa4KwH1On2fCX5AE555iCLq9xWcDIguKkdw0Gxi8aNxWXEPH p3XDR8l/Mf3EEMq5P1zLhKoNl3KPPXfOY8XIJpQ0rasIjwIk1Hr6w1lZ/bqD91jb 7RGyo8Y/YzaFBXAasvxaL1/f3LgCgSXOm1H9Ixdx7hxKQoWzgpep8J5J1wwAFO4z Za65P2J+fG/1e31Q+IFgMea8NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0RROCd bX9akaIGSiwjBeLwhQAnMB8GA1UdIwQYMBaAFLMSwi89C5e6rzJz5cZrjxQCA+L5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzRCQi82NDg1NDJDODVC NkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3cXZNblBseG11UEZBSUQ0 dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4TENMejBMbDdxdk1uUGx4bXVQRkFJRDR2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzRCQi82NDg1NDJDODVCNkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3 cXZNblBseG11UEZBSUQ0dmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+LVHpXzek5fUMNYBd6HL1XdMh09FQ7PO1MC7Fw775Du5k/A+2Ox5D CtSLlC70s9qJeNNI564UPaymBux2/AN8N7F80VsznoV8pXILrTPtVZ9zp6C/2JCx ZG6BfW8zPx7h+liZxOwceMxPYnaVwMWAJOyoUDRPfHwdNXsDN5B9JsgG3vIlMfgC 8d4InwTml0TbtBIIRrjoz0FhxiBw/u+zej2N9healo4dcfA9ZqHBtbHHOE5k2gUH uca3HEk6ReowsEstFtkBrIYp7Cqyzui9NnUfMg32L+K112suR3MLN0+lD/aAqssb L2SaHlvfMbHD4lsIV6imJdnHlY/d7vA/ -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:04 2025 by rpki-client