$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft File: lDuBQuFVPslGJaRyTlaYKhVY_pw.mft (raw, json) Hash identifier: voPsyd76BiaPFGP/L7Skoors7HwOGAU/GaFQpIjfLeI= Subject key identifier: AC:D9:9C:54:ED:2C:D8:B8:18:C1:0E:5D:D1:FA:69:5B:49:AE:A9:D9 Authority key identifier: 94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C Certificate issuer: /CN=A91582D9/serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C Certificate serial: 17DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft Manifest number: 2023 Signing time: Sat 18 Oct 2025 16:57:20 +0000 Manifest this update: Sat 18 Oct 2025 16:57:19 +0000 Manifest next update: Sat 25 Oct 2025 16:57:19 +0000 Files and hashes: 1: lDuBQuFVPslGJaRyTlaYKhVY_pw.crl (hash: eD/npaKNUfbjGo3pHCJ1oPCmdcN/2K0IHWVJdK4Y8/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6108 (0x17dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9, serialNumber=943B8142E1553EC94625A4724E56982A1558FE9C Validity Not Before: Oct 18 16:57:19 2025 GMT Not After : Oct 25 16:57:19 2025 GMT Subject: CN=68f3c6f0-5e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:31:43:5d:42:5b:a9:96:41:a6:5d:29:7a:1d: 4e:c1:d5:ee:c8:1c:42:34:eb:fd:69:e7:82:40:b8: 87:f1:6b:a4:54:95:c6:b4:43:d1:bb:ab:67:b9:86: 56:eb:1a:cb:70:04:89:f7:93:1a:3f:e6:40:3a:f9: 67:6d:3b:92:f2:fa:f9:96:c5:a4:d4:40:64:1f:fd: 9a:df:d4:46:a4:36:14:05:8c:d8:1b:44:3b:b5:cd: 4b:ac:0e:16:54:c4:72:01:69:97:e5:2c:58:e3:18: 1a:66:85:86:fa:9d:64:ab:c8:c6:72:26:d1:e0:0b: f2:83:2b:32:1b:4f:08:c2:27:02:fd:85:f0:e3:2d: ea:de:40:76:f3:3c:66:2d:52:25:72:a5:23:ee:1b: 66:63:21:1d:3b:18:11:1a:ca:cc:e4:9d:59:fa:fc: c6:d5:3f:bc:4c:09:5a:4e:90:42:d3:67:06:11:e7: 3d:1c:55:38:9d:a8:1c:c0:d3:4b:07:37:e8:fe:aa: 23:4a:3c:77:3e:67:51:d8:64:33:3b:21:57:46:31: d6:fb:6f:b5:1c:b5:6c:66:4c:7c:88:61:9e:be:94: f4:b3:47:1d:9c:b1:f3:1a:77:ff:1d:94:18:06:b0: d1:e6:0d:51:ea:a3:14:02:c4:2a:f8:c8:cb:cf:88: 50:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D9:9C:54:ED:2C:D8:B8:18:C1:0E:5D:D1:FA:69:5B:49:AE:A9:D9 X509v3 Authority Key Identifier: keyid:94:3B:81:42:E1:55:3E:C9:46:25:A4:72:4E:56:98:2A:15:58:FE:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDuBQuFVPslGJaRyTlaYKhVY_pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/lDuBQuFVPslGJaRyTlaYKhVY_pw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d2:5c:25:f1:dd:23:79:a9:fc:09:5a:63:39:4a:ec:e2:1b: f7:94:e0:e3:c8:17:54:d2:b8:3c:62:f1:95:a1:a1:47:1b:23: e6:04:6f:c0:74:0e:2c:f4:df:9a:6d:cd:d4:95:74:ea:96:63: 1e:cd:c5:6f:12:b9:7a:86:1c:21:d7:9f:b9:e0:33:64:6e:1f: 22:e3:cc:33:e0:20:33:b8:37:bd:14:c1:9f:fa:f7:88:b4:6e: cb:d0:34:e0:6a:1d:1b:46:3e:86:d0:85:cd:0e:1a:64:79:2e: 07:0a:7a:01:4f:cc:f9:fd:43:fd:17:3a:19:20:77:4a:76:91: cf:cb:fa:f5:76:d0:cc:51:d0:3b:ac:b7:31:71:7c:9a:de:26: 19:d8:49:e8:85:96:3f:d3:2b:98:93:b5:93:34:26:6b:43:02: 80:db:c1:07:2a:69:47:12:8d:df:ea:d6:cf:6d:a6:d5:67:ba: 62:d5:6b:61:52:07:97:9f:e3:28:6d:f9:1a:ed:a9:cc:fd:29: 9b:b4:89:41:ec:e3:7b:94:87:ea:0d:a7:7c:0f:92:ed:df:2f: dc:fe:66:7f:8f:e7:d8:83:7e:1b:b7:e0:3f:1a:0d:27:bf:f0: 4e:3f:5a:e5:71:ea:35:00:72:d8:c4:44:ed:03:c6:77:45:1c: c3:4c:c3:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDk0M0I4MTQyRTE1NTNFQzk0NjI1QTQ3MjRFNTY5ODJB MTU1OEZFOUMwHhcNMjUxMDE4MTY1NzE5WhcNMjUxMDI1MTY1NzE5WjAYMRYwFAYD VQQDEw02OGYzYzZmMC01ZTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6zFDXUJbqZZBpl0peh1OwdXuyBxCNOv9aeeCQLiH8WukVJXGtEPRu6tnuYZW 6xrLcASJ95MaP+ZAOvlnbTuS8vr5lsWk1EBkH/2a39RGpDYUBYzYG0Q7tc1LrA4W VMRyAWmX5SxY4xgaZoWG+p1kq8jGcibR4AvygysyG08IwicC/YXw4y3q3kB28zxm LVIlcqUj7htmYyEdOxgRGsrM5J1Z+vzG1T+8TAlaTpBC02cGEec9HFU4nagcwNNL Bzfo/qojSjx3PmdR2GQzOyFXRjHW+2+1HLVsZkx8iGGevpT0s0cdnLHzGnf/HZQY BrDR5g1R6qMUAsQq+MjLz4hQ9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzZnFTt LNi4GMEOXdH6aVtJrqnZMB8GA1UdIwQYMBaAFJQ7gULhVT7JRiWkck5WmCoVWP6c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9sRHVCUXVGVlBzbEdKYVJ5VGxhWUtoVllf cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xEdUJRdUZWUHNsR0phUnlUbGFZS2hWWV9wdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODJEOS8wRURBNkQ1RUNEREExMUU3QkRFQThDMkJDNEY5QUUwMi9sRHVCUXVGVlBz bEdKYVJ5VGxhWUtoVllfcHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf0lwl8d0jean8CVpjOUrs4hv3lODjyBdU0rg8YvGVoaFHGyPmBG/A dA4s9N+abc3UlXTqlmMezcVvErl6hhwh15+54DNkbh8i48wz4CAzuDe9FMGf+veI tG7L0DTgah0bRj6G0IXNDhpkeS4HCnoBT8z5/UP9FzoZIHdKdpHPy/r1dtDMUdA7 rLcxcXya3iYZ2EnohZY/0yuYk7WTNCZrQwKA28EHKmlHEo3f6tbPbabVZ7pi1Wth UgeXn+Mobfka7anM/SmbtIlB7ON7lIfqDad8D5Lt3y/c/mZ/j+fYg34bt+A/Gg0n v/BOP1rlceo1AHLYxETtA8Z3RRzDTMNB -----END CERTIFICATE-----Generated at Sun Oct 19 23:04:49 2025 by rpki-client