$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft File: RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft (raw, json) Hash identifier: MUhbkj0eyymVHQ/oGWuAYyMhK1/hsjB2fUKWhF6kwNs= Subject key identifier: A8:F6:67:E9:CB:A4:15:FE:9E:87:5A:F5:51:8C:BA:A0:1E:12:6D:03 Authority key identifier: 44:F9:C4:DA:47:E6:37:1F:D1:C9:F9:F8:E5:64:D1:80:3A:0F:32:87 Certificate issuer: /CN=A91807BB/serialNumber=44F9C4DA47E6371FD1C9F9F8E564D1803A0F3287 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft Manifest number: C7 Signing time: Sun 19 Oct 2025 08:53:46 +0000 Manifest this update: Sun 19 Oct 2025 08:53:45 +0000 Manifest next update: Sun 26 Oct 2025 08:53:45 +0000 Files and hashes: 1: RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl (hash: pu5fI1LQMCZjSloCXpmLWwUbuiCh4BoqL7Pswj72LgI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91807BB, serialNumber=44F9C4DA47E6371FD1C9F9F8E564D1803A0F3287 Validity Not Before: Oct 19 08:53:45 2025 GMT Not After : Oct 26 08:53:45 2025 GMT Subject: CN=68f4a71a-3d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:00:2d:22:e8:8c:65:b9:a8:a4:db:68:a2:a1: 68:c7:33:77:9d:5b:4f:5b:bb:bb:99:19:d2:0a:02: ae:04:67:d3:68:9d:08:3b:06:5f:85:c4:13:6e:08: d9:46:00:91:f5:1e:97:2e:6e:c1:8b:d1:67:3e:69: d4:29:22:21:ab:0b:fc:14:96:c9:f8:d6:62:5d:43: a8:8d:9a:95:1e:e2:87:65:6e:4e:ba:92:0b:a3:f0: 9e:8e:ff:cd:37:28:3b:44:5b:2b:4c:ea:89:84:c5: 83:66:95:f2:4e:4b:7b:cd:60:3f:61:3b:3c:48:cc: d1:3b:84:38:a0:41:5e:7e:81:b2:fb:42:b3:8b:77: 9e:08:a3:a3:d8:c0:06:0b:79:00:db:4b:23:48:03: 32:0c:86:16:df:59:2d:35:8c:38:6c:8f:7f:27:ee: 85:2d:3e:23:22:06:d0:4c:3e:51:5f:cd:48:51:88: 5d:23:21:44:3e:49:33:0b:20:44:76:ce:81:30:17: c1:61:e0:30:ed:55:48:1c:b9:01:6e:b4:93:fc:77: f0:0e:e8:cc:89:e1:bd:a7:d1:0e:06:8a:77:89:65: fb:af:5d:bd:18:81:6f:43:97:5b:ed:c7:86:6c:12: 3d:51:de:b7:d0:1e:10:ec:f9:2f:a3:f9:d8:68:c2: 82:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F6:67:E9:CB:A4:15:FE:9E:87:5A:F5:51:8C:BA:A0:1E:12:6D:03 X509v3 Authority Key Identifier: keyid:44:F9:C4:DA:47:E6:37:1F:D1:C9:F9:F8:E5:64:D1:80:3A:0F:32:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:78:2d:f4:33:a4:d1:53:70:8e:ea:c2:20:fc:d6:57:36:d3: 94:6e:38:92:29:28:76:70:45:06:3d:2c:56:a2:da:9d:7d:f0: 99:38:af:fe:7e:5e:20:58:8e:7b:56:65:e0:51:a3:5f:97:c5: 61:a2:e7:91:b6:39:be:d0:68:30:74:62:bb:80:28:e5:52:5e: 4e:c6:5e:c0:e6:0e:1d:18:e1:38:7a:ca:e8:1b:84:9f:cd:10: 47:d7:e5:da:d9:c6:66:80:f4:a3:e1:88:38:dc:c9:f9:5d:63: 95:a3:86:e1:53:45:cb:e2:af:42:ef:65:30:d5:18:78:04:66: 09:0f:22:1f:af:9a:3b:a4:2b:60:50:9d:91:3a:e0:36:53:de: 47:d8:c9:e6:a3:fa:f2:b3:77:6b:dc:1f:d0:f5:78:5f:c5:98: b8:21:01:d0:83:f6:d8:c0:25:31:f9:c8:68:f1:28:8b:51:e3: b1:79:06:fc:e3:03:e2:4e:2d:28:ff:d6:b2:85:76:02:19:dd: 3c:93:a7:8e:35:06:70:5c:37:b9:30:f5:9c:72:15:42:85:21: 56:52:6b:9e:e7:fd:1b:24:96:ee:63:ad:cd:d6:4c:c7:4a:91: 2e:86:49:1f:f4:d7:98:ea:84:ea:c1:8e:e8:1d:79:99:35:48: 74:b1:66:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA3QkIxMTAvBgNVBAUTKDQ0RjlDNERBNDdFNjM3MUZEMUM5RjlGOEU1NjREMTgw M0EwRjMyODcwHhcNMjUxMDE5MDg1MzQ1WhcNMjUxMDI2MDg1MzQ1WjAYMRYwFAYD VQQDEw02OGY0YTcxYS0zZDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgAtIuiMZbmopNtooqFoxzN3nVtPW7u7mRnSCgKuBGfTaJ0IOwZfhcQTbgjZ RgCR9R6XLm7Bi9FnPmnUKSIhqwv8FJbJ+NZiXUOojZqVHuKHZW5OupILo/Cejv/N Nyg7RFsrTOqJhMWDZpXyTkt7zWA/YTs8SMzRO4Q4oEFefoGy+0Kzi3eeCKOj2MAG C3kA20sjSAMyDIYW31ktNYw4bI9/J+6FLT4jIgbQTD5RX81IUYhdIyFEPkkzCyBE ds6BMBfBYeAw7VVIHLkBbrST/HfwDujMieG9p9EOBop3iWX7r129GIFvQ5db7ceG bBI9Ud630B4Q7Pkvo/nYaMKCOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKj2Z+nL pBX+noda9VGMuqAeEm0DMB8GA1UdIwQYMBaAFET5xNpH5jcf0cn5+OVk0YA6DzKH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDdCQi8wQUU0ODI5MDdD QjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9SUG5FMmtmbU54X1J5Zm40NVdUUmdEb1BN b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JQbkUya2ZtTnhfUnlmbjQ1V1RSZ0RvUE1vYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDdCQi8wQUU0ODI5MDdDQjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9SUG5FMmtmbU54 X1J5Zm40NVdUUmdEb1BNb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbeC30M6TRU3CO6sIg/NZXNtOUbjiSKSh2cEUGPSxWotqdffCZOK/+ fl4gWI57VmXgUaNfl8VhoueRtjm+0GgwdGK7gCjlUl5Oxl7A5g4dGOE4esroG4Sf zRBH1+Xa2cZmgPSj4Yg43Mn5XWOVo4bhU0XL4q9C72Uw1Rh4BGYJDyIfr5o7pCtg UJ2ROuA2U95H2Mnmo/rys3dr3B/Q9XhfxZi4IQHQg/bYwCUx+cho8SiLUeOxeQb8 4wPiTi0o/9ayhXYCGd08k6eONQZwXDe5MPWcchVChSFWUmue5/0bJJbuY63N1kzH SpEuhkkf9NeY6oTqwY7oHXmZNUh0sWZw -----END CERTIFICATE-----Generated at Mon Oct 20 19:04:45 2025 by rpki-client