$ rpki-client -vvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft File: rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json) Hash identifier: afVuqE5ae0Dcqve/QVug/MqTBDhZwpDb/lCKak28p8o= Subject key identifier: 8C:D4:3B:07:A9:8C:7F:15:66:E8:0E:8F:E9:F5:D2:C0:12:F7:94:E7 Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 Certificate issuer: /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Certificate serial: 34D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft Manifest number: 34D4 Signing time: Sat 18 Oct 2025 14:44:37 +0000 Manifest this update: Sat 18 Oct 2025 14:44:36 +0000 Manifest next update: Sat 25 Oct 2025 14:44:36 +0000 Files and hashes: 1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: dZX5uDChTqWv0N0In2W7nkk16ESFS4GW8tG4BAiJJl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13524 (0x34d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141E28, serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Validity Not Before: Oct 18 14:44:36 2025 GMT Not After : Oct 25 14:44:36 2025 GMT Subject: CN=68f3a7d5-8ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:d7:dc:0f:73:60:48:23:5c:c7:30:0d:bd:e4: bf:12:90:5c:b7:c3:49:96:01:26:fd:95:18:bf:95: 12:cc:b2:ae:90:2d:3b:39:f1:7d:47:cd:6b:70:ab: 4e:73:a4:6d:c3:22:48:9e:38:80:49:71:50:4c:1f: 11:71:03:64:96:71:3d:f1:f2:c6:cc:6d:e4:12:e9: 4d:ef:49:49:7f:cd:d3:a1:a2:ae:a2:05:5e:3d:72: 26:04:61:da:85:08:d4:dc:2f:17:3a:18:b6:3e:b8: 40:59:2e:d3:18:16:98:9e:03:f9:d7:b9:9b:7f:16: 3d:63:77:83:ef:56:45:f5:b3:25:c5:ba:ee:fb:4d: 0e:27:1c:a5:03:d6:3d:e7:94:3b:6b:03:50:66:59: 2b:3d:7a:7a:14:67:b4:d5:3d:67:19:68:ae:41:a8: 3a:fa:5d:04:be:73:20:28:99:6a:76:f1:b3:37:ae: 26:9c:0a:a5:b8:27:ba:30:ef:e6:dc:58:22:17:6c: e5:26:1d:af:e9:5f:ad:fb:7c:7f:8e:43:8d:3c:09: f3:38:ac:a9:f5:e6:21:05:c0:65:b3:f8:09:65:8f: ae:6b:e6:17:9b:f2:0f:02:df:c5:67:01:40:0c:f8: d3:be:3b:78:f4:72:74:9f:6c:fa:cc:5e:ab:9d:1e: e7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D4:3B:07:A9:8C:7F:15:66:E8:0E:8F:E9:F5:D2:C0:12:F7:94:E7 X509v3 Authority Key Identifier: keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:2c:ec:8c:73:6a:3b:0b:05:44:7a:32:bc:6d:25:93:87:10: 88:63:03:4e:40:ac:b5:c1:cd:66:fe:c2:1f:d5:3d:f8:80:1d: 0a:b0:39:7c:c4:34:8c:8f:68:57:9b:73:78:3f:32:9a:27:ff: c3:19:3b:6b:0f:24:4a:d8:fa:50:4f:a1:ba:e3:4f:b9:84:fa: a8:0a:3f:e7:fd:f7:e2:5a:56:a6:1d:e7:a1:e5:45:be:4f:de: de:4c:00:66:28:7e:18:b9:63:38:f3:11:16:31:9e:9c:df:48: 2e:f3:ef:6d:2e:e9:f6:17:f1:ce:24:e8:88:36:c6:1b:30:2d: bc:09:57:23:4d:d7:7f:c3:6c:ad:f6:df:4e:ed:57:78:d2:63: a4:00:b7:02:82:f0:37:80:86:a5:03:d1:8a:67:ae:c9:cd:0e: be:2c:1e:d1:9a:b4:68:38:20:0a:1c:72:bd:b6:ed:3f:81:58: 22:86:bb:f7:31:52:1a:18:2e:b4:ed:19:e1:51:9c:88:03:81: cf:db:b8:7b:ab:ba:1a:27:ab:13:ac:66:7c:7a:c8:1b:89:d1: e5:73:c4:b1:df:69:b4:b1:e2:48:c0:28:43:26:76:57:17:4a: 33:3b:b1:34:2f:74:05:4b:dc:53:52:23:c2:c9:b7:2f:23:08: 56:e1:af:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFFMjgxMTAvBgNVBAUTKEFDMTlDNjZCQzRCMzFDRUI5MzBCQTZBRTBENkVCNzQ3 QjEwQUI2MDYwHhcNMjUxMDE4MTQ0NDM2WhcNMjUxMDI1MTQ0NDM2WjAYMRYwFAYD VQQDEw02OGYzYTdkNS04ZWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8NfcD3NgSCNcxzANveS/EpBct8NJlgEm/ZUYv5USzLKukC07OfF9R81rcKtO c6RtwyJInjiASXFQTB8RcQNklnE98fLGzG3kEulN70lJf83ToaKuogVePXImBGHa hQjU3C8XOhi2PrhAWS7TGBaYngP517mbfxY9Y3eD71ZF9bMlxbru+00OJxylA9Y9 55Q7awNQZlkrPXp6FGe01T1nGWiuQag6+l0EvnMgKJlqdvGzN64mnAqluCe6MO/m 3FgiF2zlJh2v6V+t+3x/jkONPAnzOKyp9eYhBcBls/gJZY+ua+YXm/IPAt/FZwFA DPjTvjt49HJ0n2z6zF6rnR7nkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzUOwep jH8VZugOj+n10sAS95TnMB8GA1UdIwQYMBaAFKwZxmvEsxzrkwumrg1ut0exCrYG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUUyOC84NDU4QjkxMDFE OEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhPdVRDNmF1RFc2M1I3RUt0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JCbkdhOFN6SE91VEM2YXVEVzYzUjdFS3RnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUUyOC84NDU4QjkxMDFEOEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhP dVRDNmF1RFc2M1I3RUt0Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxLOyMc2o7CwVEejK8bSWThxCIYwNOQKy1wc1m/sIf1T34gB0KsDl8 xDSMj2hXm3N4PzKaJ//DGTtrDyRK2PpQT6G640+5hPqoCj/n/ffiWlamHeeh5UW+ T97eTABmKH4YuWM48xEWMZ6c30gu8+9tLun2F/HOJOiINsYbMC28CVcjTdd/w2yt 9t9O7Vd40mOkALcCgvA3gIalA9GKZ67JzQ6+LB7RmrRoOCAKHHK9tu0/gVgihrv3 MVIaGC607RnhUZyIA4HP27h7q7oaJ6sTrGZ8esgbidHlc8Sx32m0seJIwChDJnZX F0ozO7E0L3QFS9xTUiPCybcvIwhW4a9m -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:01 2025 by rpki-client