$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json) Hash identifier: WCiTHLKj2XWFPrBZEvyHHJDKp3NQHTqEVoGFh5F1pvo= Subject key identifier: 21:B6:C4:48:C9:38:58:DC:47:ED:0B:65:5A:89:3E:27:6D:D8:94:FA Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft Manifest number: 02E8 Signing time: Sun 19 Oct 2025 04:53:58 +0000 Manifest this update: Sun 19 Oct 2025 04:53:57 +0000 Manifest next update: Sun 26 Oct 2025 04:53:57 +0000 Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: heJzi0ndN5rU3l/ab+b0FS1+10mQ7xDJyLywYiHLPg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Validity Not Before: Oct 19 04:53:57 2025 GMT Not After : Oct 26 04:53:57 2025 GMT Subject: CN=68f46ee6-57be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:39:8a:5d:3c:80:6e:d1:ae:36:e1:ec:6a: 24:25:de:d9:29:44:d8:f5:26:77:b8:15:ce:0f:b3: 0d:09:f4:4f:61:13:17:cb:b4:e9:c7:92:63:1a:b9: 4c:bb:5f:e7:68:1b:10:fb:b0:71:4f:a0:df:53:ab: 50:dc:2d:f6:d0:0f:20:64:28:5f:77:ae:99:61:f3: 19:30:f9:c1:74:1a:84:0d:b7:6e:84:ee:27:04:31: 76:dd:c1:b7:8b:31:f5:3e:75:7e:6a:83:59:eb:4d: 96:ec:0e:03:df:01:27:20:0b:62:72:80:9d:21:fe: 25:bf:65:bf:19:55:e0:f0:11:27:d7:01:5f:13:f7: a8:e9:73:4e:db:0d:12:30:d2:dc:3a:a8:f0:67:5b: 58:01:49:eb:a2:e7:3c:e4:8c:07:cf:2f:58:16:a3: 30:fe:2f:95:bd:2a:d1:30:ef:41:89:00:6b:5f:ca: 8d:7a:37:1a:2e:32:08:0c:33:a1:47:0c:ae:7f:c4: e3:7c:6e:ff:e4:72:08:87:a9:45:7c:ab:20:99:53: 8c:fa:98:7a:39:c6:45:ca:32:ba:e3:6e:84:47:c5: 06:85:4b:22:5f:4c:5d:2c:18:fb:f7:c1:9d:4d:e1: 00:c1:3f:7f:54:6a:61:cd:91:8a:19:9c:1c:2e:cd: 65:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B6:C4:48:C9:38:58:DC:47:ED:0B:65:5A:89:3E:27:6D:D8:94:FA X509v3 Authority Key Identifier: keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:37:fd:b0:d3:07:ad:ed:e0:43:c6:70:ba:58:8e:0f:bd:0d: 52:88:c8:c8:46:d3:f2:e8:86:62:6e:a8:ed:54:1f:a5:4c:7e: 77:3e:91:0a:22:14:9a:45:6f:00:c4:16:cc:81:e6:da:da:ff: 26:ad:16:6e:84:79:3a:b7:e1:fa:89:c7:a7:78:8c:a3:91:36: 5b:92:72:db:5d:c2:a6:e9:6b:c7:c9:f3:c3:09:df:e9:21:2d: 1c:64:15:82:02:90:c8:6a:3f:3a:51:9c:f0:05:0d:4e:53:56: 45:4a:d9:ac:a2:c5:1a:8b:88:f8:e1:24:8b:da:1c:4d:4d:81: 8f:0e:a5:e2:2f:3f:f3:66:64:87:90:10:8e:4b:58:54:14:d3: 04:87:8c:db:75:7d:c8:e2:01:97:ea:51:e2:61:1b:c3:f0:34: 2a:76:ca:c4:b8:a7:e5:a4:8b:bb:75:9f:2e:dc:d3:3b:66:8e: b4:c6:84:4a:7d:69:cb:71:6a:53:0d:a6:63:2d:e1:3e:80:33: 75:d5:ed:16:d0:6b:81:69:9a:8f:fd:32:95:62:b8:7f:d2:85: 0b:5d:a9:c7:19:6b:17:dc:8c:00:46:72:10:3b:77:8b:22:0c: 6e:82:b0:e1:f9:49:91:0b:d4:47:58:24:e8:ea:34:5c:75:2c: 61:23:f4:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDBBMDE0NDlFQUVBMEZCMjg4NUM3RjNDNTY0RUU5MzMx QTczRjNGRjkwHhcNMjUxMDE5MDQ1MzU3WhcNMjUxMDI2MDQ1MzU3WjAYMRYwFAYD VQQDEw02OGY0NmVlNi01N2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9s5il08gG7Rrjbh7GokJd7ZKUTY9SZ3uBXOD7MNCfRPYRMXy7Tpx5JjGrlM u1/naBsQ+7BxT6DfU6tQ3C320A8gZChfd66ZYfMZMPnBdBqEDbduhO4nBDF23cG3 izH1PnV+aoNZ602W7A4D3wEnIAticoCdIf4lv2W/GVXg8BEn1wFfE/eo6XNO2w0S MNLcOqjwZ1tYAUnrouc85IwHzy9YFqMw/i+VvSrRMO9BiQBrX8qNejcaLjIIDDOh Rwyuf8TjfG7/5HIIh6lFfKsgmVOM+ph6OcZFyjK6426ER8UGhUsiX0xdLBj798Gd TeEAwT9/VGphzZGKGZwcLs1lIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCG2xEjJ OFjcR+0LZVqJPidt2JT6MB8GA1UdIwQYMBaAFAoBRJ6uoPsohcfzxWTukzGnPz/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15aUZ4X1BGWk82VE1hY19Q X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnRkVucTZnLXlpRnhfUEZaTzZUTWFjX1Bfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15 aUZ4X1BGWk82VE1hY19QX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhN/2w0wet7eBDxnC6WI4PvQ1SiMjIRtPy6IZibqjtVB+lTH53PpEK IhSaRW8AxBbMgeba2v8mrRZuhHk6t+H6iceneIyjkTZbknLbXcKm6WvHyfPDCd/p IS0cZBWCApDIaj86UZzwBQ1OU1ZFStmsosUai4j44SSL2hxNTYGPDqXiLz/zZmSH kBCOS1hUFNMEh4zbdX3I4gGX6lHiYRvD8DQqdsrEuKflpIu7dZ8u3NM7Zo60xoRK fWnLcWpTDaZjLeE+gDN11e0W0GuBaZqP/TKVYrh/0oULXanHGWsX3IwARnIQO3eL IgxugrDh+UmRC9RHWCTo6jRcdSxhI/QX -----END CERTIFICATE-----Generated at Mon Oct 20 13:07:01 2025 by rpki-client