$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft File: 1mk-41xy689CY8aYRW2C9o5xT1w.mft (raw, json) Hash identifier: LHSrO9BNFE5IA0QY9DigwIg7DWsHSXUq+GNfZ881a4A= Subject key identifier: E7:C1:A2:BD:AE:78:FD:87:F5:B4:47:62:DB:25:C7:7C:A5:A7:39:52 Authority key identifier: D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C Certificate issuer: /CN=A916EF5E/serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Certificate serial: 09C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft Manifest number: 09C7 Signing time: Mon 20 Oct 2025 17:03:18 +0000 Manifest this update: Mon 20 Oct 2025 17:03:18 +0000 Manifest next update: Mon 27 Oct 2025 17:03:18 +0000 Files and hashes: 1: 1mk-41xy689CY8aYRW2C9o5xT1w.crl (hash: LGYcTO9nrMFz9CmymsMMhFDeE1aA3fAc6bKApe4vj+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2503 (0x9c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C Validity Not Before: Oct 20 17:03:18 2025 GMT Not After : Oct 27 17:03:18 2025 GMT Subject: CN=68f66b56-b7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ef:ce:81:d4:b5:c2:35:e0:a5:3f:f3:83:33: cb:9f:68:cd:6e:3f:09:23:73:2d:cd:31:42:7a:a9: c2:40:60:ce:56:73:8f:ba:70:e0:3d:17:1c:76:c8: 78:e1:59:be:c4:91:aa:86:ff:39:af:74:e5:93:73: c9:c2:e7:09:8e:fc:a5:5d:0e:75:bf:7b:b5:a5:c3: 85:cf:e9:ed:4d:2c:74:f5:9b:f2:09:bb:bb:41:e4: fc:6a:33:6c:43:9f:d2:ea:03:17:da:4e:ab:8a:da: e3:3d:52:9b:41:d3:ce:29:93:8a:4c:41:28:55:dc: 4a:d0:90:f4:f0:df:13:88:d8:f5:c4:21:e4:b0:52: 82:84:ae:b5:71:3c:ce:81:f6:ba:8e:84:f7:2b:db: a0:8e:97:d7:7b:0a:0f:c5:e3:58:28:0f:ef:97:51: c5:90:17:9c:7d:39:ba:e0:18:e5:02:d3:a0:95:82: 48:24:6b:23:43:df:f3:0a:0a:3d:63:d5:37:a3:fd: ba:40:99:83:eb:16:d5:3d:8e:70:3b:6b:3e:5e:d5: 88:78:62:96:df:eb:e2:7c:fa:57:ed:2e:2d:01:af: 66:32:09:1e:4b:0c:3c:49:5e:d7:62:9b:e5:c5:5c: d5:bf:87:c9:40:2a:20:6f:3c:3b:ca:52:05:f0:d6: 5f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C1:A2:BD:AE:78:FD:87:F5:B4:47:62:DB:25:C7:7C:A5:A7:39:52 X509v3 Authority Key Identifier: keyid:D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a0:51:13:89:3a:77:17:e9:d9:8c:60:3e:2b:06:87:ae:55: f0:09:39:bd:f8:5f:e4:6a:b6:48:16:ab:60:f1:25:44:09:5b: c5:78:a2:f3:27:5b:8c:2f:9f:35:58:1f:62:2f:9e:a1:82:60: 2c:80:09:b1:f7:7e:b9:8a:7e:7b:35:5a:cf:65:7c:65:df:e1: bd:49:0f:0c:aa:d4:21:fe:ae:16:cf:cb:e4:e7:fb:82:1a:9f: a4:f8:5c:e1:c6:72:68:56:07:7c:33:10:7f:ca:ce:7c:22:de: 70:52:9d:74:51:19:20:cb:3f:ef:86:53:cc:69:40:f7:bb:02: e2:69:bf:33:99:d5:c9:f2:8f:c3:50:11:12:ed:b4:6e:5d:e5: 90:81:54:ab:69:5e:ae:b0:32:7b:b1:d5:62:2c:ee:64:c1:98: b4:74:34:f4:89:e0:cc:ae:19:c2:b4:55:1f:21:de:5c:79:57: 2b:3e:68:37:6f:d4:5f:6f:6a:45:b4:3e:e1:39:0a:55:9b:44: a1:ef:78:4b:28:6c:d4:ed:2c:54:47:8c:84:96:57:e1:85:6c: e8:5e:7d:13:5c:e6:d5:6a:18:15:3d:a3:5f:eb:d6:b1:6e:96: 32:ca:bb:cc:c3:60:cb:a9:5b:41:ce:c9:11:db:9f:67:e9:9f: 7d:59:3c:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKEQ2NjkzRUUzNUM3MkVCQ0Y0MjYzQzY5ODQ1NkQ4MkY2 OEU3MTRGNUMwHhcNMjUxMDIwMTcwMzE4WhcNMjUxMDI3MTcwMzE4WjAYMRYwFAYD VQQDEw02OGY2NmI1Ni1iN2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+/OgdS1wjXgpT/zgzPLn2jNbj8JI3MtzTFCeqnCQGDOVnOPunDgPRccdsh4 4Vm+xJGqhv85r3Tlk3PJwucJjvylXQ51v3u1pcOFz+ntTSx09ZvyCbu7QeT8ajNs Q5/S6gMX2k6ritrjPVKbQdPOKZOKTEEoVdxK0JD08N8TiNj1xCHksFKChK61cTzO gfa6joT3K9ugjpfXewoPxeNYKA/vl1HFkBecfTm64BjlAtOglYJIJGsjQ9/zCgo9 Y9U3o/26QJmD6xbVPY5wO2s+XtWIeGKW3+vifPpX7S4tAa9mMgkeSww8SV7XYpvl xVzVv4fJQCogbzw7ylIF8NZfYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfBor2u eP2H9bRHYtslx3ylpzlSMB8GA1UdIwQYMBaAFNZpPuNccuvPQmPGmEVtgvaOcU9c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS8yQ0U0OTRDMDhG OTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4OUNZOGFZUlcyQzlvNXhU MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFtay00MXh5Njg5Q1k4YVlSVzJDOW81eFQxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS8yQ0U0OTRDMDhGOTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi8xbWstNDF4eTY4 OUNZOGFZUlcyQzlvNXhUMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOoFETiTp3F+nZjGA+KwaHrlXwCTm9+F/karZIFqtg8SVECVvFeKLz J1uML581WB9iL56hgmAsgAmx9365in57NVrPZXxl3+G9SQ8MqtQh/q4Wz8vk5/uC Gp+k+FzhxnJoVgd8MxB/ys58It5wUp10URkgyz/vhlPMaUD3uwLiab8zmdXJ8o/D UBES7bRuXeWQgVSraV6usDJ7sdViLO5kwZi0dDT0ieDMrhnCtFUfId5ceVcrPmg3 b9Rfb2pFtD7hOQpVm0Sh73hLKGzU7SxUR4yEllfhhWzoXn0TXObVahgVPaNf69ax bpYyyrvMw2DLqVtBzskR259n6Z99WTzl -----END CERTIFICATE-----Generated at Tue Oct 21 08:15:14 2025 by rpki-client