$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft File: cDXbQxmt4s_Ooig68PFrYgkCbao.mft (raw, json) Hash identifier: gbRUcKTHbiYmidtR6RV5HRoBB+MjlPapTrzQx58JFPI= Subject key identifier: A9:B2:96:39:3D:3B:99:3C:3C:11:89:E3:73:22:EF:96:A4:7E:9A:A4 Authority key identifier: 70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA Certificate issuer: /CN=A918387F/serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA Certificate serial: 067A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft Manifest number: 067A Signing time: Sat 18 Oct 2025 23:59:37 +0000 Manifest this update: Sat 18 Oct 2025 23:59:36 +0000 Manifest next update: Sat 25 Oct 2025 23:59:36 +0000 Files and hashes: 1: cDXbQxmt4s_Ooig68PFrYgkCbao.crl (hash: wQewbQ48egFDDPk2wRkRuruonmQ1g5VZaJlC4WP2OfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1658 (0x67a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918387F, serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA Validity Not Before: Oct 18 23:59:36 2025 GMT Not After : Oct 25 23:59:36 2025 GMT Subject: CN=68f429e8-607e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:73:23:0c:80:38:85:50:a5:da:42:9c:c8:31: 7e:05:83:12:64:a9:3c:29:89:01:40:af:6a:a1:72: f3:16:1b:af:16:a0:44:68:44:46:2b:ba:2a:db:28: 98:20:bb:cd:ae:52:d9:15:5b:f9:c9:2f:c9:06:ff: 2d:2e:47:8b:b5:9b:a9:6e:d1:85:c7:17:19:da:ad: e3:9e:ea:35:49:f4:7a:72:18:a4:97:2f:09:1a:31: 24:84:22:4a:71:39:ea:53:3a:9b:6e:fb:8b:a6:eb: b1:1f:16:85:45:bc:c5:57:23:c3:da:4c:e8:3f:fa: ee:31:bf:82:7a:6f:3d:df:bc:cc:00:38:bf:57:de: 79:dc:23:29:df:37:de:23:36:2a:79:da:76:80:23: c6:a8:b1:72:83:a4:03:29:e4:df:8a:30:55:8c:91: d0:6f:60:44:a9:00:0c:08:4a:5a:75:db:df:8c:8c: 82:6e:32:ac:82:8d:46:3c:42:29:c0:68:d8:cb:e5: dd:99:83:15:d3:8c:b9:84:de:df:b2:3d:b8:bf:76: 70:44:34:0a:f3:14:7d:8d:99:ea:f5:d5:02:3e:fb: 54:4c:c0:42:1d:3b:2b:fa:09:61:5d:c4:6b:2b:bb: 13:92:a0:f1:dc:70:ce:77:35:0a:af:bb:ba:47:91: 0f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B2:96:39:3D:3B:99:3C:3C:11:89:E3:73:22:EF:96:A4:7E:9A:A4 X509v3 Authority Key Identifier: keyid:70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:35:b5:90:f7:89:9f:92:81:ae:8b:e9:97:e9:99:dc:1c:ef: 13:2d:86:af:5a:a5:66:27:01:23:a8:50:95:da:04:1c:b1:6b: 92:66:bb:aa:9c:88:1e:85:3e:af:aa:7e:d6:17:1c:0b:2b:45: 63:86:fa:1e:ce:4c:fd:8f:05:38:c0:b2:9d:79:7b:8a:a1:eb: 9a:22:5e:e1:9d:ea:4c:76:58:2d:a2:e7:44:16:43:e8:af:77: 51:c6:be:58:8d:1c:9f:de:b2:d9:f0:29:ac:5d:23:7d:1e:aa: 45:62:ca:62:90:da:79:2a:28:b6:e7:53:72:26:f7:ba:d8:e5: b4:28:63:70:f4:6e:07:c8:f1:2a:5e:a9:dc:9e:26:15:32:d8: 1d:73:6b:4a:07:8c:fc:61:d9:dd:ef:0c:95:bb:2b:83:87:e5: 49:2c:de:8d:82:a2:3f:c4:7b:58:f1:6a:67:6c:a2:d8:8d:f5: 74:a0:69:6b:80:ef:91:f1:7a:76:8b:99:01:2f:20:2e:24:a2: c7:42:a4:19:03:4a:10:ee:bb:c6:4b:38:ba:38:6c:f8:58:c3: 19:56:7f:8e:c4:79:37:af:c4:f5:0e:b0:7a:52:90:bc:3f:23: 3f:57:85:2d:fa:53:8f:dd:9d:29:db:7c:76:fb:02:44:37:2e: b1:17:3e:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4N0YxMTAvBgNVBAUTKDcwMzVEQjQzMTlBREUyQ0ZDRUEyMjgzQUYwRjE2QjYy MDkwMjZEQUEwHhcNMjUxMDE4MjM1OTM2WhcNMjUxMDI1MjM1OTM2WjAYMRYwFAYD VQQDEw02OGY0MjllOC02MDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnMjDIA4hVCl2kKcyDF+BYMSZKk8KYkBQK9qoXLzFhuvFqBEaERGK7oq2yiY ILvNrlLZFVv5yS/JBv8tLkeLtZupbtGFxxcZ2q3jnuo1SfR6chikly8JGjEkhCJK cTnqUzqbbvuLpuuxHxaFRbzFVyPD2kzoP/ruMb+Cem8937zMADi/V9553CMp3zfe IzYqedp2gCPGqLFyg6QDKeTfijBVjJHQb2BEqQAMCEpaddvfjIyCbjKsgo1GPEIp wGjYy+XdmYMV04y5hN7fsj24v3ZwRDQK8xR9jZnq9dUCPvtUTMBCHTsr+glhXcRr K7sTkqDx3HDOdzUKr7u6R5EPkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmyljk9 O5k8PBGJ43Mi75akfpqkMB8GA1UdIwQYMBaAFHA120MZreLPzqIoOvDxa2IJAm2q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9CNEM3OUFGODkz NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9jRFhiUXhtdDRzX09vaWc2OFBGcllna0Ni YW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NEWGJReG10NHNfT29pZzY4UEZyWWdrQ2Jhby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg3Ri9CNEM3OUFGODkzNDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9jRFhiUXhtdDRz X09vaWc2OFBGcllna0NiYW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgNbWQ94mfkoGui+mX6ZncHO8TLYavWqVmJwEjqFCV2gQcsWuSZruq nIgehT6vqn7WFxwLK0Vjhvoezkz9jwU4wLKdeXuKoeuaIl7hnepMdlgtoudEFkPo r3dRxr5YjRyf3rLZ8CmsXSN9HqpFYspikNp5Kii251NyJve62OW0KGNw9G4HyPEq XqncniYVMtgdc2tKB4z8Ydnd7wyVuyuDh+VJLN6NgqI/xHtY8WpnbKLYjfV0oGlr gO+R8Xp2i5kBLyAuJKLHQqQZA0oQ7rvGSzi6OGz4WMMZVn+OxHk3r8T1DrB6UpC8 PyM/V4Ut+lOP3Z0p23x2+wJENy6xFz4Z -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:26 2025 by rpki-client