$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft File: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft (raw, json) Hash identifier: 4Y765/6M7SmKvushiWVARNYUXAbnFMdiSapXdfrD/V4= Subject key identifier: 35:1E:25:24:94:37:C4:71:06:AC:C0:7E:6E:14:7F:B1:86:CC:4E:6F Authority key identifier: 11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 Certificate issuer: /CN=A919FDC0/serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft Manifest number: 2E Signing time: Sun 19 Oct 2025 11:12:32 +0000 Manifest this update: Sun 19 Oct 2025 11:12:31 +0000 Manifest next update: Sun 26 Oct 2025 11:12:31 +0000 Files and hashes: 1: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl (hash: X+xsLVjY2O0k+jLDWjlnE5cgDOiFeqtcouO8oXMFVZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FDC0, serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Validity Not Before: Oct 19 11:12:31 2025 GMT Not After : Oct 26 11:12:31 2025 GMT Subject: CN=68f4c79f-8503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f9:37:94:73:98:55:63:d8:7f:4c:35:7b:83: d4:69:46:d4:6c:fa:94:64:14:17:28:69:37:09:d6: 9a:9a:54:5e:db:1a:db:de:49:84:54:59:66:19:35: 7c:37:df:84:cb:9d:8d:04:49:7a:81:34:88:39:d6: 4b:5f:ae:84:20:86:c0:f1:bb:f4:0d:f4:d2:6a:7f: b4:b2:45:ef:ad:38:cc:90:7a:3a:fe:f6:8d:74:1d: 46:86:ba:cb:18:33:14:d8:2b:b7:ad:8e:42:67:91: d1:03:6a:ce:0d:63:88:1b:de:74:e6:5a:30:9b:a2: b7:f3:d4:fb:1a:c2:de:51:fa:e5:88:36:f6:b7:eb: 1c:75:cc:ed:87:ff:d7:66:b0:b7:e4:36:99:c0:d1: 55:9f:0c:ef:ba:55:01:06:0b:bc:1c:40:41:22:15: dd:73:be:e3:0e:a9:79:31:93:99:05:de:1f:65:fd: 60:36:ae:2b:ac:5f:cb:db:0c:a6:fa:b4:00:57:b5: d8:47:39:8d:80:9d:64:43:5b:20:2d:d0:c2:c3:1c: 7f:28:0e:65:c2:ec:7e:7b:3d:bd:77:8f:ec:8a:c1: da:5c:b7:07:3d:a9:c9:db:bc:8d:5c:28:84:e6:ed: 22:0a:7d:0f:01:53:10:07:b7:4d:74:96:9d:3c:99: 38:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1E:25:24:94:37:C4:71:06:AC:C0:7E:6E:14:7F:B1:86:CC:4E:6F X509v3 Authority Key Identifier: keyid:11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:6e:7b:96:77:36:6b:65:ef:6a:06:50:8b:ad:6c:7d:d6:ac: 44:eb:9b:39:fd:d4:f3:12:73:77:dd:3e:1c:ca:1d:ae:bd:8e: 9f:3d:c9:45:dd:7c:c1:41:25:ef:de:3b:d8:e1:43:f7:4b:af: da:ae:e9:06:28:39:f9:09:d7:bb:4b:86:30:50:1c:a6:0e:3a: c9:3c:cf:1e:32:74:54:e3:00:fc:49:69:e3:ce:c1:ae:55:42: b8:23:64:2e:a8:ab:d7:bd:77:26:81:49:f2:f7:26:c7:26:4d: f6:a5:17:3b:29:28:de:eb:48:e4:b5:10:35:23:0d:b4:94:2f: 8e:98:0e:8a:93:24:1a:7a:d6:4a:6d:95:73:10:f5:14:1c:04: b4:5a:83:3e:15:37:0d:a2:32:d8:c6:ac:11:04:31:53:67:e1: 62:15:7d:7a:5b:69:cc:d1:83:cf:75:ef:db:63:58:78:35:2e: 82:8f:f3:51:e5:57:3f:d8:d4:31:95:a9:30:23:fb:c7:98:e4: 2a:25:92:19:fa:52:63:8a:89:ea:52:28:42:2f:61:51:3b:60: ae:6d:5b:6c:01:f1:f5:1b:22:c5:4b:e9:7c:3e:91:2d:64:b3: ae:10:6c:10:b9:53:af:c5:af:69:f8:36:28:ae:87:dd:62:47: f4:4e:f7:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkRDMDExMC8GA1UEBRMoMTE3QzBENkQxOUJGQkE0OEI1RkE5RTUxN0QwRTY5MjY1 NUM5OEM0NDAeFw0yNTEwMTkxMTEyMzFaFw0yNTEwMjYxMTEyMzFaMBgxFjAUBgNV BAMTDTY4ZjRjNzlmLTg1MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDT+TeUc5hVY9h/TDV7g9RpRtRs+pRkFBcoaTcJ1pqaVF7bGtveSYRUWWYZNXw3 34TLnY0ESXqBNIg51ktfroQghsDxu/QN9NJqf7SyRe+tOMyQejr+9o10HUaGussY MxTYK7etjkJnkdEDas4NY4gb3nTmWjCborfz1Psawt5R+uWINva36xx1zO2H/9dm sLfkNpnA0VWfDO+6VQEGC7wcQEEiFd1zvuMOqXkxk5kF3h9l/WA2riusX8vbDKb6 tABXtdhHOY2AnWRDWyAt0MLDHH8oDmXC7H57Pb13j+yKwdpctwc9qcnbvI1cKITm 7SIKfQ8BUxAHt010lp08mTijAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNR4lJJQ3 xHEGrMB+bhR/sYbMTm8wHwYDVR0jBBgwFoAUEXwNbRm/uki1+p5RfQ5pJlXJjEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGREMwLzMzMTFGMEVFNjlF OTExRjA4MUI2NUI2N0M0RjlBRTAyL0VYd05iUm1fdWtpMS1wNVJmUTVwSmxYSmpF US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRVh3TmJSbV91a2kxLXA1UmZRNXBKbFhKakVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG REMwLzMzMTFGMEVFNjlFOTExRjA4MUI2NUI2N0M0RjlBRTAyL0VYd05iUm1fdWtp MS1wNVJmUTVwSmxYSmpFUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEhue5Z3Nmtl72oGUIutbH3WrETrmzn91PMSc3fdPhzKHa69jp89yUXd fMFBJe/eO9jhQ/dLr9qu6QYoOfkJ17tLhjBQHKYOOsk8zx4ydFTjAPxJaePOwa5V QrgjZC6oq9e9dyaBSfL3JscmTfalFzspKN7rSOS1EDUjDbSUL46YDoqTJBp61kpt lXMQ9RQcBLRagz4VNw2iMtjGrBEEMVNn4WIVfXpbaczRg89179tjWHg1LoKP81Hl Vz/Y1DGVqTAj+8eY5Colkhn6UmOKiepSKEIvYVE7YK5tW2wB8fUbIsVL6Xw+kS1k s64QbBC5U6/Fr2n4Niiuh91iR/RO9zE= -----END CERTIFICATE-----Generated at Mon Oct 20 21:39:07 2025 by rpki-client