$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json) Hash identifier: S8h/4PdoxfWkdKh7yqcgvQolKKF5DjyvKRn2F6OoyuI= Subject key identifier: F5:C1:D9:43:18:DF:25:BD:A4:62:8C:91:E0:87:8F:C5:B9:6E:DB:E1 Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft Manifest number: 01D5 Signing time: Sun 19 Oct 2025 00:56:17 +0000 Manifest this update: Sun 19 Oct 2025 00:56:16 +0000 Manifest next update: Sun 26 Oct 2025 00:56:16 +0000 Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: 9EaPBbn/4IBdRyHrI58xRqU7+uM7e+xyCQ7LQhGujDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Validity Not Before: Oct 19 00:56:16 2025 GMT Not After : Oct 26 00:56:16 2025 GMT Subject: CN=68f43730-b1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e7:f1:bb:88:4c:4d:74:0b:b9:25:ea:3d:54: df:20:3c:51:3c:3b:4e:c8:8c:a3:87:0b:3f:69:68: 1f:75:9b:02:62:ae:54:66:fb:c2:a1:d5:38:fa:62: 04:09:40:b7:be:d7:1b:b1:46:f5:a0:37:5f:c4:8e: 3d:d0:2e:f4:d7:cd:28:4d:56:0e:c9:21:d9:97:c6: cf:09:fb:db:bc:5e:92:e5:02:3c:54:3b:fd:90:bd: 76:48:79:93:23:48:0c:d7:f0:48:12:1b:cf:87:fd: 19:f2:8c:41:45:f8:b1:12:bf:e7:6b:53:2a:82:f4: ee:60:e0:0b:12:6a:49:41:32:88:52:39:43:b5:e3: 36:b1:46:aa:78:26:df:9c:f8:04:0e:87:a5:c0:3c: 3b:6b:4e:ea:65:af:2a:43:74:72:8e:93:91:7f:e0: 1b:48:0f:ca:3a:ae:e9:2d:15:bf:59:48:f4:92:b1: 2f:14:30:7f:6b:ad:a7:f0:61:55:16:cc:62:a1:29: 84:42:08:a5:92:21:5b:be:5d:36:c5:32:8a:19:06: 71:25:d8:45:37:51:6c:f6:15:cb:bd:a9:cc:27:e9: 66:ec:cf:f4:86:9d:f6:ae:9d:7a:0b:0e:a1:b5:b0: 2d:92:6e:46:22:83:36:83:5f:ea:2a:1e:c1:1d:0b: d6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C1:D9:43:18:DF:25:BD:A4:62:8C:91:E0:87:8F:C5:B9:6E:DB:E1 X509v3 Authority Key Identifier: keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:38:13:a2:8d:53:ee:23:1c:a8:8b:15:4a:9c:65:7a:74:77: 92:99:08:8c:bb:9c:b8:98:dc:81:39:fc:72:ef:23:f5:a3:9f: ef:5f:62:c1:02:ac:fa:f9:5f:33:76:58:5a:df:48:08:fc:38: 12:cb:68:46:a1:9c:73:1d:9a:19:2f:98:b5:a5:7c:ba:85:b0: d0:86:8e:0e:15:de:7f:b3:c2:d6:e5:7b:7e:09:0e:c8:d0:7c: 23:24:a6:39:45:81:02:81:73:5a:2a:fe:be:9a:93:34:0c:99: a7:7b:07:4b:17:0a:21:3a:5d:8d:c7:ff:16:8a:8d:72:67:0a: 43:7c:7b:be:12:b3:71:c8:0c:8c:c8:d1:70:68:79:f7:3f:1f: 00:81:47:8b:63:3b:48:18:7e:01:8e:4a:14:ac:f3:8e:48:c5: 90:60:95:2e:dc:b5:c2:d7:f0:0e:08:e4:13:4f:e2:01:f5:29: 40:86:dd:ad:a8:1f:f7:a1:a9:79:84:03:97:af:41:69:0c:1e: ad:22:5d:58:36:df:bf:c0:69:95:47:0c:55:66:a7:2b:e9:4f: 4c:4b:f6:cf:bb:35:5a:bc:b4:51:e2:f9:3f:c1:b2:ee:24:78: 92:b1:4c:09:ca:ef:c6:7f:c9:ac:cd:d7:0d:9b:82:89:14:8d: 24:8a:c5:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKDFCRkNENTk1QUQ1RkZEQjlDMDQzNzM3QkNBRkVDNzJF MDQ2QzZCRUUwHhcNMjUxMDE5MDA1NjE2WhcNMjUxMDI2MDA1NjE2WjAYMRYwFAYD VQQDEw02OGY0MzczMC1iMWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ufxu4hMTXQLuSXqPVTfIDxRPDtOyIyjhws/aWgfdZsCYq5UZvvCodU4+mIE CUC3vtcbsUb1oDdfxI490C70180oTVYOySHZl8bPCfvbvF6S5QI8VDv9kL12SHmT I0gM1/BIEhvPh/0Z8oxBRfixEr/na1MqgvTuYOALEmpJQTKIUjlDteM2sUaqeCbf nPgEDoelwDw7a07qZa8qQ3RyjpORf+AbSA/KOq7pLRW/WUj0krEvFDB/a62n8GFV FsxioSmEQgilkiFbvl02xTKKGQZxJdhFN1Fs9hXLvanMJ+lm7M/0hp32rp16Cw6h tbAtkm5GIoM2g1/qKh7BHQvWdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXB2UMY 3yW9pGKMkeCHj8W5btvhMB8GA1UdIwQYMBaAFBv81ZWtX/25wENze8r+xy4EbGvu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi85MUZFMDU2QURG RkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9ibkFRM043eXY3SExnUnNh LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dfelZsYTFmX2JuQVEzTjd5djdITGdSc2EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTMyMi85MUZFMDU2QURGRkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9i bkFRM043eXY3SExnUnNhLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkOBOijVPuIxyoixVKnGV6dHeSmQiMu5y4mNyBOfxy7yP1o5/vX2LB Aqz6+V8zdlha30gI/DgSy2hGoZxzHZoZL5i1pXy6hbDQho4OFd5/s8LW5Xt+CQ7I 0HwjJKY5RYECgXNaKv6+mpM0DJmnewdLFwohOl2Nx/8Wio1yZwpDfHu+ErNxyAyM yNFwaHn3Px8AgUeLYztIGH4BjkoUrPOOSMWQYJUu3LXC1/AOCOQTT+IB9SlAht2t qB/3oal5hAOXr0FpDB6tIl1YNt+/wGmVRwxVZqcr6U9MS/bPuzVavLRR4vk/wbLu JHiSsUwJyu/Gf8mszdcNm4KJFI0kisWe -----END CERTIFICATE-----Generated at Mon Oct 20 16:46:40 2025 by rpki-client