$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft File: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft (raw, json) Hash identifier: Rv9ohWlidlZMfCO+uk8zJDYSjBU7P33nl/RTPXGq2AY= Subject key identifier: 0F:ED:D4:04:9F:7C:A5:51:E7:28:41:B4:21:F7:D9:1D:84:FA:14:4F Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC Certificate issuer: /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Certificate serial: 1DD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft Manifest number: 1DB9 Signing time: Mon 20 Oct 2025 16:24:29 +0000 Manifest this update: Mon 20 Oct 2025 16:24:28 +0000 Manifest next update: Mon 27 Oct 2025 16:24:28 +0000 Files and hashes: 1: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl (hash: iHWr98E7NNroQ0qZhHwwMbY5FB0L2bgY4RsrKJl0fNA=) 2: 945DB376E34711EE87868164C4F9AE02.roa (hash: jKYWlk4C7kYul3yO/WtiSzFFPrzY/sFxwRTKtBHcm64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7634 (0x1dd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5098, serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Validity Not Before: Oct 20 16:24:28 2025 GMT Not After : Oct 27 16:24:28 2025 GMT Subject: CN=68f6623d-3c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:51:dc:48:a3:1f:7f:b3:1f:fa:0f:b0:83:76: cd:3a:ea:56:df:96:31:c8:2b:74:43:03:ce:94:5c: 95:a1:a5:84:8c:21:dc:d9:a6:db:a1:bb:0f:5e:1a: 03:12:cd:ff:fd:de:9d:15:43:9b:83:47:8a:d5:28: 78:48:31:a6:a7:8a:ef:e6:a7:08:4f:d0:0f:cf:82: 18:0f:24:f6:3a:4f:a4:fc:8c:df:d5:74:6b:6d:20: 56:83:95:99:7f:65:f2:f2:ac:a9:9d:ed:3b:a2:aa: c8:ae:c3:39:54:83:ac:6b:57:0f:0e:30:6b:17:94: 17:41:45:1f:7d:ee:49:48:f5:37:92:71:78:ec:2e: 5a:3e:19:cf:90:af:c3:0a:d4:bf:37:4a:cc:68:5a: ba:62:02:4f:cb:6d:2c:59:b3:ae:bb:03:c8:d1:f2: d0:4f:45:4f:95:9e:05:37:a7:29:ce:b6:95:a3:ae: 5a:56:3b:42:2f:e4:83:77:c7:62:a2:8c:b2:cc:8c: a0:f0:f2:54:71:8d:51:57:c1:d9:7a:0e:e5:03:81: 4e:30:12:31:86:68:8f:be:a2:08:21:c8:29:31:ef: 94:01:3a:44:6c:57:b3:03:c2:36:a3:35:01:c7:57: 50:e1:d7:96:b2:ce:4c:55:ab:87:57:2a:ff:84:ef: 06:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:ED:D4:04:9F:7C:A5:51:E7:28:41:B4:21:F7:D9:1D:84:FA:14:4F X509v3 Authority Key Identifier: keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:6c:b7:2c:c0:b8:e3:16:97:9c:58:39:e8:a8:c6:d6:1a:e3: 3c:1b:4c:f7:a2:83:f2:1d:94:21:0e:c4:ff:64:93:2e:19:71: 4a:67:2e:67:be:46:a7:23:9a:12:e2:d9:d6:14:d6:46:15:9b: bb:d6:81:60:e8:01:f8:49:c7:b0:f0:78:68:e0:23:77:b1:74: 89:3b:20:47:81:3d:00:f9:d6:41:f0:40:3e:9f:da:3f:db:30: 35:53:f2:48:08:1e:b7:cf:9b:20:cc:e4:63:d0:7c:6d:88:0f: 14:78:63:b7:38:94:3e:1e:26:f1:f0:70:5a:77:ec:74:3d:1d: 50:fc:b4:e4:da:82:2d:24:d8:e4:12:e9:3f:42:86:2d:9e:fb: 31:4c:02:72:74:25:b3:7d:5f:2f:2e:48:80:07:43:38:b2:3d: 96:f4:d3:82:39:e6:49:cd:43:e2:af:4d:6c:ee:1c:86:9f:b4: 5a:03:ad:53:77:60:47:30:17:a7:56:87:b0:7f:00:41:d0:3f: 56:3b:1d:c2:2c:dd:16:9f:25:a9:f1:cd:a1:74:67:0f:8f:66: d2:25:76:03:a5:90:14:02:6d:fe:6f:94:9c:e5:83:33:87:ea: 09:a6:82:b4:e0:32:cc:c3:98:ef:5e:1c:6a:7a:dc:89:e4:d7: 9f:4e:81:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUwOTgxMTAvBgNVBAUTKDA5OTcxNEE3MEU2RjQwMTI4OTEwODIwOUQ2QTdGNDg1 OUY5ODAwQ0MwHhcNMjUxMDIwMTYyNDI4WhcNMjUxMDI3MTYyNDI4WjAYMRYwFAYD VQQDEw02OGY2NjIzZC0zYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1HcSKMff7Mf+g+wg3bNOupW35YxyCt0QwPOlFyVoaWEjCHc2abbobsPXhoD Es3//d6dFUObg0eK1Sh4SDGmp4rv5qcIT9APz4IYDyT2Ok+k/Izf1XRrbSBWg5WZ f2Xy8qypne07oqrIrsM5VIOsa1cPDjBrF5QXQUUffe5JSPU3knF47C5aPhnPkK/D CtS/N0rMaFq6YgJPy20sWbOuuwPI0fLQT0VPlZ4FN6cpzraVo65aVjtCL+SDd8di ooyyzIyg8PJUcY1RV8HZeg7lA4FOMBIxhmiPvqIIIcgpMe+UATpEbFezA8I2ozUB x1dQ4deWss5MVauHVyr/hO8G/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/t1ASf fKVR5yhBtCH32R2E+hRPMB8GA1UdIwQYMBaAFAmXFKcOb0ASiRCCCdan9IWfmADM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTA5OC9DNjgwOTE5NkFD OTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFCS0pFSUlKMXFmMGhaLVlB TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaY1VwdzV2UUJLSkVJSUoxcWYwaFotWUFNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTA5OC9DNjgwOTE5NkFDOTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFC S0pFSUlKMXFmMGhaLVlBTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDbLcswLjjFpecWDnoqMbWGuM8G0z3ooPyHZQhDsT/ZJMuGXFKZy5n vkanI5oS4tnWFNZGFZu71oFg6AH4Scew8Hho4CN3sXSJOyBHgT0A+dZB8EA+n9o/ 2zA1U/JICB63z5sgzORj0HxtiA8UeGO3OJQ+Hibx8HBad+x0PR1Q/LTk2oItJNjk Euk/QoYtnvsxTAJydCWzfV8vLkiAB0M4sj2W9NOCOeZJzUPir01s7hyGn7RaA61T d2BHMBenVoewfwBB0D9WOx3CLN0WnyWp8c2hdGcPj2bSJXYDpZAUAm3+b5Sc5YMz h+oJpoK04DLMw5jvXhxqetyJ5NefToE5 -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:15 2025 by rpki-client