$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft File: AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json) Hash identifier: ymjvEfVKTQASx2VeYnILyYubjhlR8urhP52rKfU3hYk= Subject key identifier: 75:90:6A:3B:6A:29:1C:9F:8B:9E:2E:2B:BA:E7:CB:99:DB:DF:FA:2B Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E Certificate issuer: /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Certificate serial: 34CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft Manifest number: 34CD Signing time: Sat 18 Oct 2025 15:20:27 +0000 Manifest this update: Sat 18 Oct 2025 15:20:26 +0000 Manifest next update: Sat 25 Oct 2025 15:20:26 +0000 Files and hashes: 1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: +b4/I2RgYPxpvZzQNitK7gwny8cf4PAObJbX+TCZQiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:20:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13517 (0x34cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Validity Not Before: Oct 18 15:20:26 2025 GMT Not After : Oct 25 15:20:26 2025 GMT Subject: CN=68f3b03b-5c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5a:45:c0:a9:85:fe:73:bf:c0:5c:75:59:20: d2:9a:12:09:69:8e:94:32:19:e0:f9:3e:ec:5a:a9: a3:c0:7c:19:db:b4:e8:4a:2f:9e:0e:a1:48:37:7b: 2a:29:8a:9f:4f:15:4c:aa:3e:60:dc:11:25:88:a4: 3a:aa:99:a2:f7:34:2e:1e:cb:a9:7e:81:c2:6b:49: 42:5a:53:e2:f8:fe:fd:8b:e0:79:94:89:7d:bb:76: 8d:62:7f:d5:ec:ee:05:33:d3:0b:0c:ed:2d:5d:6b: d4:3a:8c:b5:d2:a4:1c:d7:b4:ee:79:40:3f:2c:88: 8d:d4:87:d8:5c:6a:cd:46:f7:32:b5:04:e9:e8:2d: 6e:48:b6:be:d4:fd:f3:29:ed:47:5f:eb:42:27:c3: 00:1c:bc:8e:b4:58:a1:96:2a:60:d8:79:ff:ea:1f: 22:4b:30:86:13:89:63:82:5b:47:7c:2e:27:6a:d5: 13:a2:45:6c:03:f0:4c:aa:2f:d0:84:64:37:87:01: c4:6a:3d:cc:9d:d9:85:8e:57:83:48:c0:1b:6f:b9: c9:d8:61:0c:3c:12:37:7a:f4:ef:82:03:b0:5e:ad: f5:6c:de:44:08:d3:66:9c:10:93:08:da:67:ae:c6: 9b:75:56:b6:f8:b5:0e:09:e5:af:5a:d7:55:5b:dc: fe:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:90:6A:3B:6A:29:1C:9F:8B:9E:2E:2B:BA:E7:CB:99:DB:DF:FA:2B X509v3 Authority Key Identifier: keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:d2:26:7e:71:2e:29:f9:51:e9:8a:0d:86:31:11:1a:7e:eb: f8:86:46:2c:53:91:0a:5a:ce:17:6f:66:57:b5:e6:73:1c:45: 2b:b0:eb:fa:eb:4d:42:ac:ec:60:79:35:aa:6a:b8:bf:b8:c5: df:06:8e:c6:cd:7e:f2:4c:b0:1b:ea:68:67:50:2f:9a:db:b4: c3:a2:90:c3:4f:fb:09:53:45:d4:0a:af:db:d8:9a:68:5f:e5: b1:2f:b9:c9:ae:c3:ba:ae:aa:4a:01:c1:24:d7:eb:bf:4d:d9: b6:0d:f7:98:6d:98:d8:7d:df:c3:ad:c1:7a:a7:4b:21:93:cc: 65:ca:bd:10:3a:e0:f1:86:49:f4:4d:0b:24:49:c8:cf:0b:4f: c7:41:f2:9b:57:3e:1e:2c:50:82:aa:27:00:d7:bd:e0:de:10: 6e:eb:f3:98:aa:4a:3a:b5:1f:65:c5:2b:2f:05:bc:d1:c3:81: 60:63:21:bb:0f:3f:85:77:2e:31:bc:2f:7e:81:b5:06:c1:f0: 2b:8a:2d:7d:5e:05:89:e0:0c:ff:a8:8c:fc:40:1f:96:7d:29: d6:e8:64:35:7f:ff:7b:37:2d:0d:a6:d7:02:9a:ab:28:77:fe: 67:7e:f1:47:36:85:6a:0e:11:06:aa:71:3d:19:b7:f3:a9:04: 93:87:6b:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCNUUxMTAvBgNVBAUTKDAxMUQ2MUIyMzNBREYzMENEMjQ3NTYyMTI0QkI3MThC QzYzQUQ2NEUwHhcNMjUxMDE4MTUyMDI2WhcNMjUxMDI1MTUyMDI2WjAYMRYwFAYD VQQDEw02OGYzYjAzYi01YzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnFpFwKmF/nO/wFx1WSDSmhIJaY6UMhng+T7sWqmjwHwZ27ToSi+eDqFIN3sq KYqfTxVMqj5g3BEliKQ6qpmi9zQuHsupfoHCa0lCWlPi+P79i+B5lIl9u3aNYn/V 7O4FM9MLDO0tXWvUOoy10qQc17TueUA/LIiN1IfYXGrNRvcytQTp6C1uSLa+1P3z Ke1HX+tCJ8MAHLyOtFihlipg2Hn/6h8iSzCGE4ljgltHfC4natUTokVsA/BMqi/Q hGQ3hwHEaj3MndmFjleDSMAbb7nJ2GEMPBI3evTvggOwXq31bN5ECNNmnBCTCNpn rsabdVa2+LUOCeWvWtdVW9z+kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWQajtq KRyfi54uK7rny5nb3/orMB8GA1UdIwQYMBaAFAEdYbIzrfMM0kdWISS7cYvGOtZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI1RS9GNTY1QUREMjFE QTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3elNSMVloSkx0eGk4WTYx azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FSMWhzak90OHd6U1IxWWhKTHR4aThZNjFrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI1RS9GNTY1QUREMjFEQTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3 elNSMVloSkx0eGk4WTYxazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI0iZ+cS4p+VHpig2GMREafuv4hkYsU5EKWs4Xb2ZXteZzHEUrsOv6 601CrOxgeTWqari/uMXfBo7GzX7yTLAb6mhnUC+a27TDopDDT/sJU0XUCq/b2Jpo X+WxL7nJrsO6rqpKAcEk1+u/Tdm2DfeYbZjYfd/DrcF6p0shk8xlyr0QOuDxhkn0 TQskScjPC0/HQfKbVz4eLFCCqicA173g3hBu6/OYqko6tR9lxSsvBbzRw4FgYyG7 Dz+Fdy4xvC9+gbUGwfArii19XgWJ4Az/qIz8QB+WfSnW6GQ1f/97Ny0NptcCmqso d/5nfvFHNoVqDhEGqnE9GbfzqQSTh2uW -----END CERTIFICATE-----Generated at Mon Oct 20 08:22:10 2025 by rpki-client