$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft File: RevxDdQ0xSgZEpy5XhoT7ML81e0.mft (raw, json) Hash identifier: sG4+V79sgf5bkujrDOwTedBCJANF8M6xFJHoY2Rboj0= Subject key identifier: DC:52:70:28:6D:A5:4B:DC:7B:D7:95:B7:77:9D:6C:CD:26:5A:D4:F6 Authority key identifier: 45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED Certificate issuer: /CN=A916ED2B/serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft Manifest number: EA Signing time: Sun 19 Oct 2025 08:19:41 +0000 Manifest this update: Sun 19 Oct 2025 08:19:41 +0000 Manifest next update: Sun 26 Oct 2025 08:19:41 +0000 Files and hashes: 1: RevxDdQ0xSgZEpy5XhoT7ML81e0.crl (hash: 2fROgOE+bp00TYNRrkZ6QDkALEP50fptiMb7oIFmfFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED2B, serialNumber=45EBF10DD434C52819129CB95E1A13ECC2FCD5ED Validity Not Before: Oct 19 08:19:41 2025 GMT Not After : Oct 26 08:19:41 2025 GMT Subject: CN=68f49f1d-14b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e6:5f:e9:18:0b:a8:cb:c3:52:bb:4f:6c:4d: 58:b4:92:fb:2f:81:76:5f:a1:4e:2d:00:aa:22:3c: 1b:89:4e:9b:11:f4:87:db:d1:df:a3:ee:54:f4:1f: 4a:37:48:f3:77:5d:72:20:29:92:17:6a:e8:ee:5d: 18:02:56:13:66:5f:f5:e1:40:71:7f:1c:3c:2d:ef: c6:53:83:88:21:46:cf:25:a8:ed:5c:51:e7:44:57: d0:d9:0b:35:3e:2d:91:c8:b0:91:7d:53:fc:21:59: 3d:8d:b7:e9:a9:17:2b:0a:eb:b1:32:99:8b:e3:95: 75:b0:fc:49:c7:57:4b:f9:66:06:0f:35:34:c6:1f: 1b:67:1c:3a:0b:e7:45:6a:c5:4f:1b:59:ee:fb:8d: 94:45:b2:72:30:7d:84:70:fc:1a:68:7f:88:37:08: 03:c2:17:13:ae:0c:4d:c4:d0:54:99:e1:39:4c:90: ad:84:d6:b9:dd:09:14:a9:64:10:25:f8:ea:e3:94: b4:ad:6d:02:b5:51:dd:9d:a7:c4:5e:b7:0c:d0:b1: 17:c3:7b:19:09:22:8c:f0:f7:ed:db:77:1a:d8:2e: 05:27:25:8d:2c:9d:bc:4c:c4:4e:2c:87:d3:2e:39: 3d:33:33:fb:c9:49:14:6b:12:80:14:5c:0f:02:35: 15:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:52:70:28:6D:A5:4B:DC:7B:D7:95:B7:77:9D:6C:CD:26:5A:D4:F6 X509v3 Authority Key Identifier: keyid:45:EB:F1:0D:D4:34:C5:28:19:12:9C:B9:5E:1A:13:EC:C2:FC:D5:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RevxDdQ0xSgZEpy5XhoT7ML81e0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED2B/04F7A58045B111EFBD598B77C4F9AE02/RevxDdQ0xSgZEpy5XhoT7ML81e0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:fd:c4:80:71:0a:d1:6b:3e:78:33:2b:51:32:3e:de:84:22: ec:39:ca:80:f7:31:37:dd:48:c7:1d:cc:91:30:2f:e2:75:e6: 72:c2:42:1a:ab:4c:ef:d6:12:f9:7a:54:6a:cb:8f:96:99:ac: e2:bb:cb:93:f8:a8:91:8c:66:21:35:e5:34:51:a0:82:74:90: 82:22:ac:62:99:fb:1a:56:9c:16:05:4c:70:21:17:3c:d6:b3: 20:87:83:c9:16:06:99:00:69:6d:9a:da:08:3f:bd:bc:11:d8: 27:36:00:1f:80:75:04:f5:43:86:d4:4c:03:31:a9:69:de:a1: 8a:d2:67:6a:30:da:35:02:54:fa:eb:8c:ec:0a:2d:eb:db:80: 5c:98:03:e8:04:d3:71:9b:e6:2e:b4:2d:3f:40:f7:d8:8f:50: 39:b9:fb:73:6e:a8:9c:4e:be:69:22:68:28:df:2e:f1:b0:41: ac:03:5f:b8:b2:23:93:51:26:e2:d0:5f:64:e8:fa:8c:f0:d5: a7:3b:71:53:74:3c:00:8c:f0:ef:64:3c:a5:8f:68:c3:16:f2: 3b:68:c7:b3:ab:e8:4e:d8:d5:55:f7:ad:55:78:85:c9:a1:b4: 46:d9:51:23:63:8e:00:18:4f:3e:3b:86:b4:ad:b0:b7:28:a7: a8:53:dd:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMkIxMTAvBgNVBAUTKDQ1RUJGMTBERDQzNEM1MjgxOTEyOUNCOTVFMUExM0VD QzJGQ0Q1RUQwHhcNMjUxMDE5MDgxOTQxWhcNMjUxMDI2MDgxOTQxWjAYMRYwFAYD VQQDEw02OGY0OWYxZC0xNGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruZf6RgLqMvDUrtPbE1YtJL7L4F2X6FOLQCqIjwbiU6bEfSH29Hfo+5U9B9K N0jzd11yICmSF2ro7l0YAlYTZl/14UBxfxw8Le/GU4OIIUbPJajtXFHnRFfQ2Qs1 Pi2RyLCRfVP8IVk9jbfpqRcrCuuxMpmL45V1sPxJx1dL+WYGDzU0xh8bZxw6C+dF asVPG1nu+42URbJyMH2EcPwaaH+INwgDwhcTrgxNxNBUmeE5TJCthNa53QkUqWQQ Jfjq45S0rW0CtVHdnafEXrcM0LEXw3sZCSKM8Pft23ca2C4FJyWNLJ28TMROLIfT Ljk9MzP7yUkUaxKAFFwPAjUVCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxScCht pUvce9eVt3edbM0mWtT2MB8GA1UdIwQYMBaAFEXr8Q3UNMUoGRKcuV4aE+zC/NXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQyQi8wNEY3QTU4MDQ1 QjExMUVGQkQ1OThCNzdDNEY5QUUwMi9SZXZ4RGRRMHhTZ1pFcHk1WGhvVDdNTDgx ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JldnhEZFEweFNnWkVweTVYaG9UN01MODFlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQyQi8wNEY3QTU4MDQ1QjExMUVGQkQ1OThCNzdDNEY5QUUwMi9SZXZ4RGRRMHhT Z1pFcHk1WGhvVDdNTDgxZTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq/cSAcQrRaz54MytRMj7ehCLsOcqA9zE33UjHHcyRMC/ideZywkIa q0zv1hL5elRqy4+Wmaziu8uT+KiRjGYhNeU0UaCCdJCCIqximfsaVpwWBUxwIRc8 1rMgh4PJFgaZAGltmtoIP728EdgnNgAfgHUE9UOG1EwDMalp3qGK0mdqMNo1AlT6 64zsCi3r24BcmAPoBNNxm+YutC0/QPfYj1A5uftzbqicTr5pImgo3y7xsEGsA1+4 siOTUSbi0F9k6PqM8NWnO3FTdDwAjPDvZDylj2jDFvI7aMezq+hO2NVV961VeIXJ obRG2VEjY44AGE8+O4a0rbC3KKeoU93h -----END CERTIFICATE-----Generated at Mon Oct 20 13:07:34 2025 by rpki-client