$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft File: MdxLbDLXteXzqGAXOIWmRfT8AVI.mft (raw, json) Hash identifier: xSoOsjCiRG5a1pIHzHRCsDJyM1NzYbWiVWfwVW7c/mk= Subject key identifier: D4:11:0B:51:09:BA:66:50:03:E1:08:36:77:F4:45:32:2A:1F:59:E7 Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 Certificate issuer: /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft Manifest number: 02E9 Signing time: Sun 19 Oct 2025 04:54:01 +0000 Manifest this update: Sun 19 Oct 2025 04:54:00 +0000 Manifest next update: Sun 26 Oct 2025 04:54:00 +0000 Files and hashes: 1: MdxLbDLXteXzqGAXOIWmRfT8AVI.crl (hash: bNOehy4cEsdlrgJu3tvsvDn61Wy9eIDAzW58i7nP7os=) 2: C47523F0509D11EFA81FC32AC4F9AE02.roa (hash: d1kPy/eiI5YE+DwwaFZQ8lzq73y437eEPrtNiOguvKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Validity Not Before: Oct 19 04:54:00 2025 GMT Not After : Oct 26 04:54:00 2025 GMT Subject: CN=68f46ee8-b2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4b:f3:4e:6a:d2:6e:93:29:fa:82:87:11:8f: d4:55:d2:05:db:75:91:85:e0:8d:4c:55:8a:8e:d2: e4:de:09:b8:92:d3:61:05:4e:e1:23:a4:54:50:b4: 7c:6a:0d:8e:cb:2f:21:58:af:c5:60:93:36:70:16: 46:65:5f:cf:a6:47:1a:22:be:99:10:41:86:d7:67: 49:8c:48:06:86:ff:a0:31:50:e4:0b:a1:b2:2a:d8: d9:bf:59:f7:f8:ea:f8:ec:03:c5:5b:01:cb:b7:cd: f9:12:82:7b:86:1a:3b:6f:90:d7:b6:2c:86:8b:4b: b9:b8:6f:a2:4a:98:6d:42:86:a4:44:7f:c6:de:96: e1:e9:65:46:66:17:a9:ea:d4:0d:ae:85:20:e4:85: 26:f0:c6:78:f2:e1:af:0c:69:91:f2:d8:ee:c2:c9: 0e:5f:4f:47:ed:bb:14:f5:92:fa:e3:13:8c:b3:99: 79:ca:f2:3e:7f:ec:09:a9:46:cf:e0:68:9d:7e:c3: 56:97:5c:5e:dc:ce:0e:c2:00:3b:a5:25:ad:9a:81: 79:87:a0:0c:a5:6e:57:72:4e:da:97:be:32:e0:d5: 00:9b:c7:7c:3f:f3:76:6d:9a:0b:c5:49:3e:04:e8: a3:a2:4e:76:a7:a0:cf:de:9d:99:9e:3c:74:e1:91: 5f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:11:0B:51:09:BA:66:50:03:E1:08:36:77:F4:45:32:2A:1F:59:E7 X509v3 Authority Key Identifier: keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:51:5b:42:9e:de:6a:48:48:a4:68:4a:b5:72:71:e5:24:e2: 23:c0:37:c2:a5:d3:d2:99:79:3f:d1:2f:12:ba:9d:2c:41:96: e7:21:0c:5f:b2:1f:fe:44:47:a4:93:68:fb:ee:6a:3c:7f:05: f9:62:6c:54:2f:69:4a:a2:2d:d1:8d:e6:a8:98:4a:45:1c:83: 0c:a8:00:5e:8e:48:7f:0e:60:4e:79:d4:fa:1f:f0:e4:d6:81: 4f:b0:d7:54:8b:cb:d1:5e:bf:7f:a6:b2:78:94:e7:21:f1:ef: c9:eb:a6:da:9c:26:2f:fa:da:f7:75:50:df:d8:6e:0c:54:21: c3:4f:b2:b7:e9:a0:6b:bc:c3:0a:31:be:ca:ff:ab:0f:92:8e: 5c:9a:60:b0:9b:ed:62:46:57:2e:1c:7a:d4:ce:ad:ec:a3:74: 98:27:7c:89:27:e0:03:55:8a:86:dc:83:fc:0a:40:21:ec:0e: 46:ff:bc:44:24:b8:9a:60:a8:1c:04:d0:4b:33:33:09:8b:d1: 06:b5:59:d3:c7:10:5e:5f:4e:f2:1f:85:b0:63:e0:e9:fb:de: 9b:ce:06:5b:c7:87:6e:55:7c:10:af:68:ce:33:32:d8:20:7e: 1d:3d:c0:27:56:ba:30:eb:1e:0e:80:75:84:6b:dc:9b:a5:c7: d7:e0:3a:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDMxREM0QjZDMzJEN0I1RTVGM0E4NjAxNzM4ODVBNjQ1 RjRGQzAxNTIwHhcNMjUxMDE5MDQ1NDAwWhcNMjUxMDI2MDQ1NDAwWjAYMRYwFAYD VQQDEw02OGY0NmVlOC1iMmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkvzTmrSbpMp+oKHEY/UVdIF23WRheCNTFWKjtLk3gm4ktNhBU7hI6RUULR8 ag2Oyy8hWK/FYJM2cBZGZV/PpkcaIr6ZEEGG12dJjEgGhv+gMVDkC6GyKtjZv1n3 +Or47APFWwHLt835EoJ7hho7b5DXtiyGi0u5uG+iSphtQoakRH/G3pbh6WVGZhep 6tQNroUg5IUm8MZ48uGvDGmR8tjuwskOX09H7bsU9ZL64xOMs5l5yvI+f+wJqUbP 4GidfsNWl1xe3M4OwgA7pSWtmoF5h6AMpW5Xck7al74y4NUAm8d8P/N2bZoLxUk+ BOijok52p6DP3p2Znjx04ZFf/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQRC1EJ umZQA+EINnf0RTIqH1nnMB8GA1UdIwQYMBaAFDHcS2wy17Xl86hgFziFpkX0/AFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRlWHpxR0FYT0lXbVJmVDhB VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01keExiRExYdGVYenFHQVhPSVdtUmZUOEFWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRl WHpxR0FYT0lXbVJmVDhBVkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcUVtCnt5qSEikaEq1cnHlJOIjwDfCpdPSmXk/0S8Sup0sQZbnIQxf sh/+REekk2j77mo8fwX5YmxUL2lKoi3RjeaomEpFHIMMqABejkh/DmBOedT6H/Dk 1oFPsNdUi8vRXr9/prJ4lOch8e/J66banCYv+tr3dVDf2G4MVCHDT7K36aBrvMMK Mb7K/6sPko5cmmCwm+1iRlcuHHrUzq3so3SYJ3yJJ+ADVYqG3IP8CkAh7A5G/7xE JLiaYKgcBNBLMzMJi9EGtVnTxxBeX07yH4WwY+Dp+96bzgZbx4duVXwQr2jOMzLY IH4dPcAnVrow6x4OgHWEa9ybpcfX4Dpc -----END CERTIFICATE-----Generated at Mon Oct 20 04:47:59 2025 by rpki-client