$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft File: M5IbTpqJQaWGu92a-LGIWo8iX6I.mft (raw, json) Hash identifier: rZ3kyswwy5/0zXZ5QWyTnhf7wPeMnV/SrIZHbuJb/jI= Subject key identifier: B7:14:E4:07:E9:5B:53:42:CF:3A:BB:5C:02:C7:FE:A7:2F:FD:0A:D1 Authority key identifier: 33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2 Certificate issuer: /CN=A9195A3A/serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2 Certificate serial: 34CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft Manifest number: 34CC Signing time: Sat 18 Oct 2025 15:09:52 +0000 Manifest this update: Sat 18 Oct 2025 15:09:52 +0000 Manifest next update: Sat 25 Oct 2025 15:09:52 +0000 Files and hashes: 1: M5IbTpqJQaWGu92a-LGIWo8iX6I.crl (hash: KCEb3sQ8xzlArvB2chcUqD+R6S9xf2oIP31GUeUvRgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13516 (0x34cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195A3A, serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2 Validity Not Before: Oct 18 15:09:52 2025 GMT Not After : Oct 25 15:09:52 2025 GMT Subject: CN=68f3adc0-5727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2a:ab:45:85:f9:57:69:a2:cf:7e:a1:a6:2b: aa:41:c3:13:44:0a:08:95:63:66:62:77:c7:da:2f: 51:6f:a7:48:03:68:90:0e:90:57:07:9d:c1:d5:f5: 8d:ae:0c:44:46:9d:32:90:d8:ec:81:53:5d:5f:98: 52:49:8e:86:63:92:ad:25:44:4a:88:ff:1f:db:73: bd:d7:ad:7a:3d:0c:a5:db:31:28:49:39:3e:b1:8b: a0:3e:f8:ad:1a:62:b9:d1:5a:57:90:9c:9d:4d:54: f4:c7:bd:96:5a:ff:f7:35:40:4b:c2:b0:6b:e4:f8: 68:b1:5d:06:2a:c1:64:6c:9f:e7:c0:36:4a:46:83: cd:ab:ce:eb:75:c1:c4:dc:1e:90:e7:3f:e7:41:3d: e9:7e:77:12:eb:f5:27:0d:03:da:05:3b:32:7e:f5: 9e:35:b8:7d:18:99:6b:79:df:e2:9b:af:95:d0:f2: c3:e1:64:9a:7f:34:fb:0c:bc:38:5e:d2:d4:88:95: c9:8e:0b:83:a0:55:32:7d:41:de:cb:64:2a:a9:5d: a2:e2:66:52:a4:62:bc:92:84:30:77:a6:0c:14:11: 07:09:ec:24:fe:2b:f4:b5:55:85:54:65:d6:76:ac: ff:48:42:f4:a8:37:60:d1:f6:f6:74:5f:0b:86:c8: 5b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:14:E4:07:E9:5B:53:42:CF:3A:BB:5C:02:C7:FE:A7:2F:FD:0A:D1 X509v3 Authority Key Identifier: keyid:33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e7:17:41:8a:77:79:7d:04:2c:ed:ad:c4:82:d1:15:0f:7b: 29:90:e0:90:e7:fe:2b:39:35:e6:19:33:f5:4e:9d:51:0b:b9: 04:73:80:64:cc:99:10:38:27:34:da:bd:b2:e7:27:b5:5b:05: ef:42:9b:7d:a4:bc:55:1d:ad:c8:02:75:63:82:ce:ab:df:ec: 33:13:63:3f:e4:fc:c8:f0:00:a4:65:29:3b:0c:fc:0d:18:34: 8c:77:f0:6a:03:22:cb:81:d1:d5:27:56:99:7f:99:73:0d:ff: 89:ae:79:49:24:4b:88:5f:75:fe:f5:74:1b:87:18:4b:23:38: 50:6d:33:02:6a:d0:f8:75:c3:bc:3d:eb:e7:fa:01:35:04:66: a2:41:d0:f3:a1:7e:94:83:3d:b6:66:61:cc:c7:c6:85:3b:60: 54:02:2c:9b:46:58:e4:0b:c0:9f:9d:ed:83:98:c8:44:9e:a5: 5a:87:b2:2b:3b:ff:40:bb:a8:de:60:e8:ab:fb:07:54:4e:db: 15:4a:6e:70:bc:23:6b:b7:01:d6:5c:f1:b3:bc:4f:34:03:1d: 11:e1:e9:7b:63:f2:0f:23:d5:15:5c:c5:4b:01:2f:e3:73:b8: af:0a:82:cb:e9:e6:8e:d0:90:a3:22:82:c3:7d:05:05:06:73: 00:a8:74:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBM0ExMTAvBgNVBAUTKDMzOTIxQjRFOUE4OTQxQTU4NkJCREQ5QUY4QjE4ODVB OEYyMjVGQTIwHhcNMjUxMDE4MTUwOTUyWhcNMjUxMDI1MTUwOTUyWjAYMRYwFAYD VQQDEw02OGYzYWRjMC01NzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCqrRYX5V2miz36hpiuqQcMTRAoIlWNmYnfH2i9Rb6dIA2iQDpBXB53B1fWN rgxERp0ykNjsgVNdX5hSSY6GY5KtJURKiP8f23O91616PQyl2zEoSTk+sYugPvit GmK50VpXkJydTVT0x72WWv/3NUBLwrBr5PhosV0GKsFkbJ/nwDZKRoPNq87rdcHE 3B6Q5z/nQT3pfncS6/UnDQPaBTsyfvWeNbh9GJlred/im6+V0PLD4WSafzT7DLw4 XtLUiJXJjguDoFUyfUHey2QqqV2i4mZSpGK8koQwd6YMFBEHCewk/iv0tVWFVGXW dqz/SEL0qDdg0fb2dF8LhshbkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcU5Afp W1NCzzq7XALH/qcv/QrRMB8GA1UdIwQYMBaAFDOSG06aiUGlhrvdmvixiFqPIl+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUEzQS8yOThEMjU4ODFE OUYxMUUyOTY5MTkwOEYwOEIwMkNEMi9NNUliVHBxSlFhV0d1OTJhLUxHSVdvOGlY NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL001SWJUcHFKUWFXR3U5MmEtTEdJV284aVg2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUEzQS8yOThEMjU4ODFEOUYxMUUyOTY5MTkwOEYwOEIwMkNEMi9NNUliVHBxSlFh V0d1OTJhLUxHSVdvOGlYNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK5xdBind5fQQs7a3EgtEVD3spkOCQ5/4rOTXmGTP1Tp1RC7kEc4Bk zJkQOCc02r2y5ye1WwXvQpt9pLxVHa3IAnVjgs6r3+wzE2M/5PzI8ACkZSk7DPwN GDSMd/BqAyLLgdHVJ1aZf5lzDf+JrnlJJEuIX3X+9XQbhxhLIzhQbTMCatD4dcO8 Pevn+gE1BGaiQdDzoX6Ugz22ZmHMx8aFO2BUAiybRljkC8Cfne2DmMhEnqVah7Ir O/9Au6jeYOir+wdUTtsVSm5wvCNrtwHWXPGzvE80Ax0R4el7Y/IPI9UVXMVLAS/j c7ivCoLL6eaO0JCjIoLDfQUFBnMAqHQn -----END CERTIFICATE-----Generated at Mon Oct 20 12:45:25 2025 by rpki-client