$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft File: u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft (raw, json) Hash identifier: m57TqaxVqAhltLWU3klxRI98YxTTbQlrugf2al4h2pw= Subject key identifier: B5:20:F2:E3:65:00:49:C3:0A:4C:C7:0C:3B:32:33:EF:6D:73:CE:8B Authority key identifier: BB:83:F2:A3:73:C0:5A:9F:DE:C4:0F:71:2C:83:1F:57:CF:91:8A:59 Certificate issuer: /CN=A91A1E1C/serialNumber=BB83F2A373C05A9FDEC40F712C831F57CF918A59 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft Manifest number: B9 Signing time: Sun 19 Oct 2025 09:08:06 +0000 Manifest this update: Sun 19 Oct 2025 09:08:06 +0000 Manifest next update: Sun 26 Oct 2025 09:08:06 +0000 Files and hashes: 1: u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl (hash: pHbxiupWg3Phi/+NP3/QP/RKyVDMClaH/G8VCni14nE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1E1C, serialNumber=BB83F2A373C05A9FDEC40F712C831F57CF918A59 Validity Not Before: Oct 19 09:08:06 2025 GMT Not After : Oct 26 09:08:06 2025 GMT Subject: CN=68f4aa76-c10b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2f:aa:7e:31:97:35:83:49:78:f6:39:0e:66: 00:35:f4:89:78:05:26:84:c3:78:70:93:db:61:18: d3:f8:ec:e7:ef:9a:09:be:d3:80:98:81:5f:69:c9: 1e:b1:c0:d5:1b:a1:80:20:cc:3e:89:67:b0:41:91: fa:d7:35:d3:4a:2d:b7:f1:6d:d6:8e:b8:a7:14:f7: be:c6:f1:4b:63:99:8e:4b:b1:48:84:f0:4e:52:51: e2:d7:c5:d2:84:ad:5f:09:78:5c:7e:88:f3:bf:47: ba:ca:72:d4:5e:f4:5f:9d:2e:de:92:d7:a6:50:f2: 56:ef:9f:a7:c6:67:b0:a5:a9:ce:9d:4f:38:72:cf: f2:97:6f:ac:4b:2e:bb:fc:52:50:1d:96:20:64:b3: e9:a4:73:7d:be:37:1e:e5:5f:08:93:8b:ea:2c:fb: ca:a9:78:2d:1c:1d:5d:b1:ae:54:74:c6:fc:23:60: d6:97:ac:a1:64:9c:71:fb:16:fa:ee:c8:0f:5e:05: 21:8f:8c:b4:9c:d1:25:20:5d:eb:90:29:9b:76:70: 66:31:dc:45:78:97:ce:ac:00:02:4b:40:83:bd:40: f1:24:36:aa:58:3b:b2:9a:d9:4b:6c:a3:d7:4d:1e: 78:29:af:84:7a:9b:ba:c8:a2:b0:bc:64:6e:97:84: 4c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:20:F2:E3:65:00:49:C3:0A:4C:C7:0C:3B:32:33:EF:6D:73:CE:8B X509v3 Authority Key Identifier: keyid:BB:83:F2:A3:73:C0:5A:9F:DE:C4:0F:71:2C:83:1F:57:CF:91:8A:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u4Pyo3PAWp_exA9xLIMfV8-Rilk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/2DB535FA920011EF9E0C3D6BC4F9AE02/u4Pyo3PAWp_exA9xLIMfV8-Rilk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:8a:37:0c:b5:13:a5:ae:b4:ba:4f:03:73:34:0e:c3:42:a5: 26:28:be:3b:7d:ed:c1:4e:24:66:4c:53:ed:73:15:09:b1:33: e1:a4:47:56:e6:e7:42:31:f9:4f:06:3c:ab:9f:56:0d:f4:7b: 55:e2:41:d9:eb:f8:5e:fd:c2:d7:6e:0a:43:8b:d0:fc:70:e4: b2:fc:43:60:ce:1c:fd:a0:d8:08:be:10:88:79:81:57:dd:a2: 79:e5:4c:bf:25:86:99:03:87:05:be:11:d4:f1:e9:26:e3:de: 92:19:9d:3e:e2:23:7b:31:28:ac:6c:87:ea:19:31:bb:1f:c9: b1:98:25:16:9e:d5:5f:bc:2c:64:33:25:cb:7c:91:11:5a:3a: a3:bc:a8:79:27:8c:30:88:c3:c0:d0:aa:45:8c:ff:bd:da:2a: 11:39:1c:f3:f1:44:6e:87:8c:35:89:dd:60:52:ab:c7:74:d8: 9e:c4:56:a4:1b:74:81:58:c3:df:1f:68:79:ce:1d:6a:c7:96: f3:60:ca:c1:3f:c8:69:79:50:a5:cb:eb:e6:ea:ee:3c:72:c3: 11:4e:6b:44:eb:7c:bd:11:36:b6:79:33:6b:79:8e:e4:d2:21: 0d:38:8c:b2:31:16:9b:29:57:f7:72:13:79:93:6b:b0:45:51: e5:36:0b:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFMUMxMTAvBgNVBAUTKEJCODNGMkEzNzNDMDVBOUZERUM0MEY3MTJDODMxRjU3 Q0Y5MThBNTkwHhcNMjUxMDE5MDkwODA2WhcNMjUxMDI2MDkwODA2WjAYMRYwFAYD VQQDEw02OGY0YWE3Ni1jMTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwS+qfjGXNYNJePY5DmYANfSJeAUmhMN4cJPbYRjT+Ozn75oJvtOAmIFfacke scDVG6GAIMw+iWewQZH61zXTSi238W3WjrinFPe+xvFLY5mOS7FIhPBOUlHi18XS hK1fCXhcfojzv0e6ynLUXvRfnS7ektemUPJW75+nxmewpanOnU84cs/yl2+sSy67 /FJQHZYgZLPppHN9vjce5V8Ik4vqLPvKqXgtHB1dsa5UdMb8I2DWl6yhZJxx+xb6 7sgPXgUhj4y0nNElIF3rkCmbdnBmMdxFeJfOrAACS0CDvUDxJDaqWDuymtlLbKPX TR54Ka+Eepu6yKKwvGRul4RMHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUg8uNl AEnDCkzHDDsyM+9tc86LMB8GA1UdIwQYMBaAFLuD8qNzwFqf3sQPcSyDH1fPkYpZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUUxQy8yREI1MzVGQTky MDAxMUVGOUUwQzNENkJDNEY5QUUwMi91NFB5bzNQQVdwX2V4QTl4TElNZlY4LVJp bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U0UHlvM1BBV3BfZXhBOXhMSU1mVjgtUmlsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUUxQy8yREI1MzVGQTkyMDAxMUVGOUUwQzNENkJDNEY5QUUwMi91NFB5bzNQQVdw X2V4QTl4TElNZlY4LVJpbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPijcMtROlrrS6TwNzNA7DQqUmKL47fe3BTiRmTFPtcxUJsTPhpEdW 5udCMflPBjyrn1YN9HtV4kHZ6/he/cLXbgpDi9D8cOSy/ENgzhz9oNgIvhCIeYFX 3aJ55Uy/JYaZA4cFvhHU8ekm496SGZ0+4iN7MSisbIfqGTG7H8mxmCUWntVfvCxk MyXLfJERWjqjvKh5J4wwiMPA0KpFjP+92ioRORzz8URuh4w1id1gUqvHdNiexFak G3SBWMPfH2h5zh1qx5bzYMrBP8hpeVCly+vm6u48csMRTmtE63y9ETa2eTNreY7k 0iENOIyyMRabKVf3chN5k2uwRVHlNgtX -----END CERTIFICATE-----Generated at Mon Oct 20 13:44:39 2025 by rpki-client