$ rpki-client -vvf rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft File: -vIwziL75k9oiZnvfNiU3b2biSU.mft (raw, json) Hash identifier: qpzBsnULZhKZXybIpL/2TgnXpXa7J1gGnarrJ7k/5NM= Subject key identifier: 16:1D:3F:24:D7:9B:36:03:32:8B:E6:CB:BC:90:D1:40:87:70:63:44 Authority key identifier: FA:F2:30:CE:22:FB:E6:4F:68:89:99:EF:7C:D8:94:DD:BD:9B:89:25 Certificate issuer: /CN=A913841B/serialNumber=FAF230CE22FBE64F688999EF7CD894DDBD9B8925 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft Manifest number: 33 Signing time: Sun 19 Oct 2025 11:06:18 +0000 Manifest this update: Sun 19 Oct 2025 11:06:18 +0000 Manifest next update: Sun 26 Oct 2025 11:06:18 +0000 Files and hashes: 1: -vIwziL75k9oiZnvfNiU3b2biSU.crl (hash: ACKnkZkWiwfgzoUU+VsJESzJwn5dE0+w0u+/fTC5j3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.crl rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913841B, serialNumber=FAF230CE22FBE64F688999EF7CD894DDBD9B8925 Validity Not Before: Oct 19 11:06:18 2025 GMT Not After : Oct 26 11:06:18 2025 GMT Subject: CN=68f4c62a-3665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:07:05:ba:f2:d2:28:03:5b:b0:96:cb:56:b9: 5f:06:e6:68:4d:1f:65:b3:c4:1b:f5:0a:72:71:7f: e3:74:84:97:4a:c6:ac:00:2f:a1:09:24:0a:01:61: 06:d6:72:a4:ee:f0:e1:ca:9e:ef:d7:80:aa:8e:34: 8c:09:c6:5c:01:58:5f:fd:ca:21:b2:ab:2a:2a:af: 5b:50:82:07:d8:8e:b2:bb:e6:19:a4:98:4c:df:29: 99:f7:e5:59:ed:29:98:19:a5:7a:d6:42:2a:a9:23: cf:c5:7e:15:e7:c1:61:3b:c7:05:a0:be:3a:3a:9a: 22:da:95:fe:b1:4a:d7:f0:90:c1:56:b3:26:0a:78: 29:aa:46:98:c1:71:73:f9:c0:e5:94:05:c5:41:90: b6:67:5e:f9:3e:6b:7f:72:7e:2e:4f:4e:7f:bc:69: 4a:96:3f:f4:14:a4:2c:19:ab:9b:10:60:5a:5b:bf: 95:aa:d0:ce:32:c6:7b:ab:74:28:95:4b:66:82:e7: 6c:33:e5:8a:0f:06:41:e7:01:1b:98:ae:41:15:d9: f1:4f:8b:86:c3:18:5d:05:ca:3e:04:e8:25:ad:f1: 45:ef:db:ea:e3:b0:a1:d6:22:17:0c:ef:7e:46:86: 07:d7:3a:45:78:5e:67:99:65:85:08:69:36:d3:59: 6c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:1D:3F:24:D7:9B:36:03:32:8B:E6:CB:BC:90:D1:40:87:70:63:44 X509v3 Authority Key Identifier: keyid:FA:F2:30:CE:22:FB:E6:4F:68:89:99:EF:7C:D8:94:DD:BD:9B:89:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-vIwziL75k9oiZnvfNiU3b2biSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913841B/D5F118EE60C011F0A2F1EA2CC4F9AE02/-vIwziL75k9oiZnvfNiU3b2biSU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:9d:fc:e1:6a:ef:76:70:d4:73:4a:a9:95:62:ed:6c:cc:3f: 38:3f:ab:64:e2:fa:03:e5:9c:94:26:82:6d:74:ba:5a:80:2e: 97:85:5d:c8:d5:56:e8:46:c8:82:8b:8f:c3:bd:96:ad:a8:f4: 95:55:fa:c8:75:de:12:9f:6f:2c:4b:23:a5:7b:3e:78:3c:32: b0:a1:5d:f8:02:a2:a0:2d:01:41:91:03:01:55:c4:c7:59:a7: 07:82:8a:ea:3a:86:91:73:e5:3f:5d:1e:ff:13:b7:84:42:7e: a4:51:32:e9:ea:71:bf:15:ef:ac:c2:49:7a:03:55:a1:9b:52: df:d5:57:94:f2:5d:b6:41:84:53:8e:57:14:98:5d:8e:d3:22: 4d:7b:1d:19:e6:6b:93:5b:a5:84:3e:05:d2:a5:20:34:23:3e: 1b:64:74:c5:17:06:ec:38:85:96:d4:42:1d:3b:46:5f:1d:e9: 0d:bd:34:f7:f8:fa:cd:4f:aa:3c:70:4e:0f:b7:9f:3d:f0:f3: 71:10:30:20:95:84:18:3b:a2:88:09:ed:18:31:d3:44:86:1a: a1:d8:0f:07:74:39:57:7f:e1:08:bb:f0:77:9b:95:9d:34:c4: 10:9e:54:db:ea:69:17:59:f2:5f:aa:78:d8:a1:0e:b2:81:98: 94:48:89:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODQxQjExMC8GA1UEBRMoRkFGMjMwQ0UyMkZCRTY0RjY4ODk5OUVGN0NEODk0RERC RDlCODkyNTAeFw0yNTEwMTkxMTA2MThaFw0yNTEwMjYxMTA2MThaMBgxFjAUBgNV BAMTDTY4ZjRjNjJhLTM2NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmBwW68tIoA1uwlstWuV8G5mhNH2WzxBv1CnJxf+N0hJdKxqwAL6EJJAoBYQbW cqTu8OHKnu/XgKqONIwJxlwBWF/9yiGyqyoqr1tQggfYjrK75hmkmEzfKZn35Vnt KZgZpXrWQiqpI8/FfhXnwWE7xwWgvjo6miLalf6xStfwkMFWsyYKeCmqRpjBcXP5 wOWUBcVBkLZnXvk+a39yfi5PTn+8aUqWP/QUpCwZq5sQYFpbv5Wq0M4yxnurdCiV S2aC52wz5YoPBkHnARuYrkEV2fFPi4bDGF0Fyj4E6CWt8UXv2+rjsKHWIhcM735G hgfXOkV4XmeZZYUIaTbTWWzNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFh0/JNeb NgMyi+bLvJDRQIdwY0QwHwYDVR0jBBgwFoAU+vIwziL75k9oiZnvfNiU3b2biSUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4NDFCL0Q1RjExOEVFNjBD MDExRjBBMkYxRUEyQ0M0RjlBRTAyLy12SXd6aUw3NWs5b2labnZmTmlVM2IyYmlT VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLXZJd3ppTDc1azlvaVpudmZOaVUzYjJiaVNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4 NDFCL0Q1RjExOEVFNjBDMDExRjBBMkYxRUEyQ0M0RjlBRTAyLy12SXd6aUw3NWs5 b2labnZmTmlVM2IyYmlTVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALud/OFq73Zw1HNKqZVi7WzMPzg/q2Ti+gPlnJQmgm10ulqALpeFXcjV VuhGyIKLj8O9lq2o9JVV+sh13hKfbyxLI6V7Png8MrChXfgCoqAtAUGRAwFVxMdZ pweCiuo6hpFz5T9dHv8Tt4RCfqRRMunqcb8V76zCSXoDVaGbUt/VV5TyXbZBhFOO VxSYXY7TIk17HRnma5NbpYQ+BdKlIDQjPhtkdMUXBuw4hZbUQh07Rl8d6Q29NPf4 +s1PqjxwTg+3nz3w83EQMCCVhBg7oogJ7Rgx00SGGqHYDwd0OVd/4Qi78HeblZ00 xBCeVNvqaRdZ8l+qeNihDrKBmJRIiZs= -----END CERTIFICATE-----Generated at Mon Oct 20 10:15:40 2025 by rpki-client