$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft File: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft (raw, json) Hash identifier: Qc3vax+PcxJBznraujjZn7+5UvkLH5pc5r35t+/xFfE= Subject key identifier: 06:30:C1:07:46:62:5A:53:12:4B:C6:0F:D1:22:D5:0A:E5:70:65:65 Authority key identifier: 4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2 Certificate issuer: /CN=A91733A8/serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2 Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft Manifest number: 01CE Signing time: Sat 18 Oct 2025 21:11:58 +0000 Manifest this update: Sat 18 Oct 2025 21:11:58 +0000 Manifest next update: Sat 25 Oct 2025 21:11:58 +0000 Files and hashes: 1: Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl (hash: td9powA5Whvh/ILXYMkfjf0gRNckm0HOxKpb+ZP7dAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91733A8, serialNumber=4E276FE94813A5D708AF866D61D621340FC051B2 Validity Not Before: Oct 18 21:11:58 2025 GMT Not After : Oct 25 21:11:58 2025 GMT Subject: CN=68f4029e-1904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:05:52:45:dc:35:2c:84:5f:c6:e0:fd:b5:99: 04:b4:bb:2f:ac:c2:8e:cb:2c:11:e7:23:e0:70:c6: b7:f3:2d:76:77:79:79:0e:da:14:31:a1:5e:78:94: 14:76:42:58:b4:1d:a4:6c:54:ea:dd:52:60:13:99: 28:fa:1d:c2:2f:df:2b:c0:63:88:ef:78:22:2d:53: 83:ef:c9:7f:35:b4:eb:48:92:e8:bb:5d:82:eb:26: 16:00:8c:4b:f7:06:05:f0:60:3d:a0:5e:41:4f:3a: 27:ad:e0:87:10:32:c3:56:e4:cf:f6:22:26:fa:00: 73:5f:6f:a9:cd:09:33:c2:08:d7:3b:42:b4:eb:b3: 95:13:6d:fb:80:56:4c:6e:03:96:f8:4c:6e:af:a0: be:4e:1b:d3:15:a5:81:32:d9:1d:b9:43:bb:86:cd: ef:e3:21:ef:5d:45:f9:11:cf:dc:46:71:e7:20:3b: 08:97:46:c3:36:08:a7:5e:17:24:95:33:ed:bf:d8: 47:fd:40:c3:a7:a9:6c:37:19:66:19:4f:ac:ce:39: 98:ac:be:11:35:e2:81:45:73:0d:ed:27:a4:02:56: 78:17:fb:a7:a8:bc:39:02:31:04:78:07:19:91:47: bd:32:77:81:26:6f:56:67:c1:9a:14:b2:0e:c8:93: ef:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:30:C1:07:46:62:5A:53:12:4B:C6:0F:D1:22:D5:0A:E5:70:65:65 X509v3 Authority Key Identifier: keyid:4E:27:6F:E9:48:13:A5:D7:08:AF:86:6D:61:D6:21:34:0F:C0:51:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/E86440D8EFC411EDA0F16348C4F9AE02/Tidv6UgTpdcIr4ZtYdYhNA_AUbI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:b5:6f:14:4e:db:07:28:23:39:5f:78:44:40:4b:6a:72:ec: f4:e6:c5:77:85:5d:32:ca:fc:a8:71:b6:a6:16:cf:7d:5f:4b: 58:76:ee:8c:ff:0d:d5:dc:dd:7b:58:66:a5:6e:bf:78:46:56: 5e:57:16:29:63:95:52:10:fe:b3:99:41:c4:ec:1b:2d:d0:02: 53:f3:74:97:49:ee:f4:00:c5:4b:d8:d0:a7:7a:db:8d:66:51: 15:eb:56:a9:d9:e9:62:3e:2e:ec:01:03:5a:f3:25:5e:fa:36: 25:18:cc:72:b2:ab:5a:28:7b:f6:5a:ee:63:d6:13:00:cb:cc: ed:92:6a:80:bf:42:9c:cc:f1:f3:14:a8:b8:28:7a:70:c9:85: d1:1b:05:0a:84:57:c5:11:d5:25:33:8e:24:de:56:19:93:49: d3:10:77:f4:8c:55:84:f4:4b:9a:3e:2b:c4:bf:76:71:71:9d: e1:a2:be:06:77:35:a0:62:d5:46:d8:c0:a0:3c:6c:ff:ef:a5: 6e:b2:d1:75:84:63:81:75:08:98:df:85:37:24:e0:26:81:a5: ae:d6:65:c3:81:8a:01:1f:ec:94:10:06:f7:21:61:cd:86:36: 50:91:f4:f0:28:a7:d5:dd:bb:1e:48:96:46:92:9b:5d:58:94: 93:ff:1c:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzQTgxMTAvBgNVBAUTKDRFMjc2RkU5NDgxM0E1RDcwOEFGODY2RDYxRDYyMTM0 MEZDMDUxQjIwHhcNMjUxMDE4MjExMTU4WhcNMjUxMDI1MjExMTU4WjAYMRYwFAYD VQQDEw02OGY0MDI5ZS0xOTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7AVSRdw1LIRfxuD9tZkEtLsvrMKOyywR5yPgcMa38y12d3l5DtoUMaFeeJQU dkJYtB2kbFTq3VJgE5ko+h3CL98rwGOI73giLVOD78l/NbTrSJLou12C6yYWAIxL 9wYF8GA9oF5BTzonreCHEDLDVuTP9iIm+gBzX2+pzQkzwgjXO0K067OVE237gFZM bgOW+Exur6C+ThvTFaWBMtkduUO7hs3v4yHvXUX5Ec/cRnHnIDsIl0bDNginXhck lTPtv9hH/UDDp6lsNxlmGU+szjmYrL4RNeKBRXMN7SekAlZ4F/unqLw5AjEEeAcZ kUe9MneBJm9WZ8GaFLIOyJPv0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYwwQdG YlpTEkvGD9Ei1QrlcGVlMB8GA1UdIwQYMBaAFE4nb+lIE6XXCK+GbWHWITQPwFGy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC9FODY0NDBEOEVG QzQxMUVEQTBGMTYzNDhDNEY5QUUwMi9UaWR2NlVnVHBkY0lyNFp0WWRZaE5BX0FV YkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL1RpZHY2VWdUcGRjSXI0WnRZZFloTkFfQVViSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzNBOC9FODY0NDBEOEVGQzQxMUVEQTBGMTYzNDhDNEY5QUUwMi9UaWR2NlVnVHBk Y0lyNFp0WWRZaE5BX0FVYkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4tW8UTtsHKCM5X3hEQEtqcuz05sV3hV0yyvyocbamFs99X0tYdu6M /w3V3N17WGalbr94RlZeVxYpY5VSEP6zmUHE7Bst0AJT83SXSe70AMVL2NCnetuN ZlEV61ap2eliPi7sAQNa8yVe+jYlGMxysqtaKHv2Wu5j1hMAy8ztkmqAv0KczPHz FKi4KHpwyYXRGwUKhFfFEdUlM44k3lYZk0nTEHf0jFWE9EuaPivEv3ZxcZ3hor4G dzWgYtVG2MCgPGz/76VustF1hGOBdQiY34U3JOAmgaWu1mXDgYoBH+yUEAb3IWHN hjZQkfTwKKfV3bseSJZGkptdWJST/xzj -----END CERTIFICATE-----Generated at Mon Oct 20 16:27:23 2025 by rpki-client