$ rpki-client -vvf rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft File: a1eqjwdnrM-oLNKqaesREse3fPw.mft (raw, json) Hash identifier: kH3ZSkSs2cmT43wMTG9A8KNdCqRBk030eIFUhuhYywo= Subject key identifier: 76:84:3A:10:96:69:33:C6:0D:F2:61:0D:F9:CE:AA:80:87:93:46:0E Authority key identifier: 6B:57:AA:8F:07:67:AC:CF:A8:2C:D2:AA:69:EB:11:12:C7:B7:7C:FC Certificate issuer: /CN=A917EC30/serialNumber=6B57AA8F0767ACCFA82CD2AA69EB1112C7B77CFC Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft Manifest number: 3D Signing time: Sun 19 Oct 2025 10:59:22 +0000 Manifest this update: Sun 19 Oct 2025 10:59:22 +0000 Manifest next update: Sun 26 Oct 2025 10:59:22 +0000 Files and hashes: 1: a1eqjwdnrM-oLNKqaesREse3fPw.crl (hash: OMq57UQSQDAZhIUdM0pbsoHjvf746PNb84U/LxlBsN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.crl rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EC30, serialNumber=6B57AA8F0767ACCFA82CD2AA69EB1112C7B77CFC Validity Not Before: Oct 19 10:59:22 2025 GMT Not After : Oct 26 10:59:22 2025 GMT Subject: CN=68f4c48a-0231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c3:bd:75:b0:48:22:e1:6c:a0:92:91:ef:43: 6f:3e:b9:31:c8:7a:60:53:8b:5b:23:36:57:35:f4: 8a:af:30:81:ca:3d:84:ce:50:55:4f:97:00:12:83: d0:1c:dd:d6:ef:04:17:1a:c8:ee:e5:ce:fc:6c:27: 8f:cb:6c:c7:2c:c2:21:99:fa:a3:0f:1f:5c:3e:ab: 6e:33:35:65:97:fb:4f:42:b5:fa:20:72:f9:a5:fd: b4:18:ef:4e:b0:78:21:be:3b:e6:58:e6:32:d9:f9: ed:f5:7a:32:c5:ed:e2:6d:3a:c3:68:10:7f:56:e2: bf:d0:6b:6f:a4:b3:96:1d:4f:10:a0:63:9f:0c:ed: 42:92:cc:39:3f:55:87:a6:71:21:b7:76:15:60:97: 7f:06:8e:7e:3b:a1:44:d7:ca:07:e6:73:ab:ed:b6: 7b:27:69:93:31:17:09:78:4b:a0:61:45:50:ff:61: 7f:e3:51:32:55:a3:6d:15:eb:10:61:f0:b2:f9:e5: e0:3c:81:90:8a:0f:d1:9d:71:58:95:45:8d:67:ba: db:2a:7a:ff:a7:a2:63:18:3d:6f:be:47:82:16:01: c3:62:92:ae:80:3d:08:ca:14:b1:e5:f9:85:29:86: f9:d8:51:c0:b4:d5:12:fc:bd:5c:b1:94:de:e1:ee: f6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:84:3A:10:96:69:33:C6:0D:F2:61:0D:F9:CE:AA:80:87:93:46:0E X509v3 Authority Key Identifier: keyid:6B:57:AA:8F:07:67:AC:CF:A8:2C:D2:AA:69:EB:11:12:C7:B7:7C:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1eqjwdnrM-oLNKqaesREse3fPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EC30/63CD6EC4573E11F0BB27FB84C4F9AE02/a1eqjwdnrM-oLNKqaesREse3fPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:e3:43:70:19:98:99:85:e3:d9:97:ec:49:67:aa:92:b5:e7: 83:26:cb:cc:93:59:b3:c0:8b:04:47:9e:6a:c5:15:80:34:f8: 6b:97:ec:80:ce:a2:44:41:34:c8:01:08:9d:58:d7:3f:e1:c1: 46:c6:be:19:37:0c:31:1a:16:38:14:fc:0a:b5:75:4e:a1:dc: 31:f2:1a:c2:61:84:d3:d1:b7:16:55:5c:cb:1d:81:cf:e9:9c: 50:6f:d1:ac:f1:52:47:d6:55:cf:22:f8:5a:c2:28:a9:1b:d4: 13:d6:50:ef:ba:2e:e5:2c:02:10:57:24:09:c9:1a:d4:1f:0a: cc:9b:e6:53:bd:5f:f4:cc:ca:7f:c2:42:3b:b3:1e:9b:dc:a1: 90:a6:4f:67:e9:e0:22:4e:d9:dd:8f:49:e6:1b:66:a8:37:25: 31:5d:0c:1d:4f:d9:b2:5b:f0:3e:68:46:ac:c6:f4:3d:a6:0e: d5:08:b3:47:15:39:10:7c:ca:21:5e:ae:97:cc:7e:81:7e:88: a7:cc:c2:e6:49:3f:29:24:d2:92:18:38:2f:1d:01:e3:90:11: 2c:91:c2:f3:78:55:a6:7d:f3:2e:6f:0a:76:dd:61:88:3a:43: 9f:30:1b:21:72:8e:a6:fb:a9:b8:db:fd:97:87:40:fe:0f:17: 68:08:8c:d1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RUMzMDExMC8GA1UEBRMoNkI1N0FBOEYwNzY3QUNDRkE4MkNEMkFBNjlFQjExMTJD N0I3N0NGQzAeFw0yNTEwMTkxMDU5MjJaFw0yNTEwMjYxMDU5MjJaMBgxFjAUBgNV BAMTDTY4ZjRjNDhhLTAyMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCww711sEgi4WygkpHvQ28+uTHIemBTi1sjNlc19IqvMIHKPYTOUFVPlwASg9Ac 3dbvBBcayO7lzvxsJ4/LbMcswiGZ+qMPH1w+q24zNWWX+09Ctfogcvml/bQY706w eCG+O+ZY5jLZ+e31ejLF7eJtOsNoEH9W4r/Qa2+ks5YdTxCgY58M7UKSzDk/VYem cSG3dhVgl38Gjn47oUTXygfmc6vttnsnaZMxFwl4S6BhRVD/YX/jUTJVo20V6xBh 8LL55eA8gZCKD9GdcViVRY1nutsqev+nomMYPW++R4IWAcNikq6APQjKFLHl+YUp hvnYUcC01RL8vVyxlN7h7vbTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdoQ6EJZp M8YN8mEN+c6qgIeTRg4wHwYDVR0jBBgwFoAUa1eqjwdnrM+oLNKqaesREse3fPww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFQzMwLzYzQ0Q2RUM0NTcz RTExRjBCQjI3RkI4NEM0RjlBRTAyL2ExZXFqd2Ruck0tb0xOS3FhZXNSRXNlM2ZQ dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYTFlcWp3ZG5yTS1vTE5LcWFlc1JFc2UzZlB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF QzMwLzYzQ0Q2RUM0NTczRTExRjBCQjI3RkI4NEM0RjlBRTAyL2ExZXFqd2Ruck0t b0xOS3FhZXNSRXNlM2ZQdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALHjQ3AZmJmF49mX7ElnqpK154Mmy8yTWbPAiwRHnmrFFYA0+GuX7IDO okRBNMgBCJ1Y1z/hwUbGvhk3DDEaFjgU/Aq1dU6h3DHyGsJhhNPRtxZVXMsdgc/p nFBv0azxUkfWVc8i+FrCKKkb1BPWUO+6LuUsAhBXJAnJGtQfCsyb5lO9X/TMyn/C QjuzHpvcoZCmT2fp4CJO2d2PSeYbZqg3JTFdDB1P2bJb8D5oRqzG9D2mDtUIs0cV ORB8yiFerpfMfoF+iKfMwuZJPykk0pIYOC8dAeOQESyRwvN4VaZ98y5vCnbdYYg6 Q58wGyFyjqb7qbjb/ZeHQP4PF2gIjNE= -----END CERTIFICATE-----Generated at Mon Oct 20 04:24:58 2025 by rpki-client