$ rpki-client -vvf rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft File: cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft (raw, json) Hash identifier: M6WC8xxhGdrg8DKQa/0LVp2lSbO+OGfxpKs9fss8NtI= Subject key identifier: 93:C9:8D:C6:83:5A:87:1B:C4:A3:75:74:3B:8A:FE:17:0A:2C:F6:FD Authority key identifier: 71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74 Certificate issuer: /CN=A91A759F/serialNumber=71ACECF1A1AD97085655DBD344C3EBBBD56FE474 Certificate serial: 0948 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft Manifest number: 3C95 Signing time: Sat 18 Oct 2025 15:32:29 +0000 Manifest this update: Sat 18 Oct 2025 15:32:27 +0000 Manifest next update: Sat 25 Oct 2025 15:32:27 +0000 Files and hashes: 1: cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl (hash: TseTZRs4F+NsKu5woddQtnL4nk2E08N/dETI/XkUiLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2376 (0x948) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A759F, serialNumber=71ACECF1A1AD97085655DBD344C3EBBBD56FE474 Validity Not Before: Oct 18 15:32:27 2025 GMT Not After : Oct 25 15:32:27 2025 GMT Subject: CN=68f3b30c-2917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ce:3a:7d:8f:57:97:b1:f2:74:98:5b:f1:87: 9c:d5:9a:f2:a2:c8:27:b3:1c:44:23:56:4a:d7:44: 96:de:d2:8c:69:2f:3b:23:80:87:17:e7:9f:c4:93: 6b:fa:5b:5a:29:6c:98:f9:08:f8:97:95:8b:f8:37: d6:43:28:40:4a:fa:74:c4:47:59:d3:24:59:a8:03: e9:6f:53:73:fd:fa:64:a0:31:bd:ed:dc:18:d3:54: e3:78:6e:e1:51:29:82:a3:8c:48:fb:65:a1:8d:b5: 6e:9b:eb:8b:d6:d8:1c:68:ab:09:40:06:4f:97:17: d3:59:5f:50:c8:3d:51:3a:65:71:76:9d:df:c5:75: 53:05:a4:30:72:87:17:06:18:2c:ec:96:a2:8e:d4: c8:fa:15:21:6e:9b:9d:c4:62:15:43:13:b1:d2:2f: ac:3c:75:5e:8c:d2:5b:1b:8b:56:d3:02:70:ba:d9: d0:74:db:35:cb:ad:0a:2d:c2:d2:87:97:23:8d:51: 87:9d:5f:e1:64:bc:7c:2e:73:b7:46:80:46:0e:75: 4a:ff:a8:03:40:76:0b:1d:d2:af:cb:a1:b1:2d:68: 70:79:d9:31:9c:0f:79:4c:39:fd:f2:4e:e2:ef:d6: 0c:49:75:53:07:ba:7b:48:9a:62:ff:83:89:48:a4: 8e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C9:8D:C6:83:5A:87:1B:C4:A3:75:74:3B:8A:FE:17:0A:2C:F6:FD X509v3 Authority Key Identifier: keyid:71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:d9:76:b6:ba:a4:ef:27:ec:b7:4c:06:85:44:7e:b8:90:71: 36:d8:d8:49:2c:e0:11:60:21:11:ec:1c:f5:79:39:ff:d2:b8: a1:94:00:9c:51:71:fc:c5:0b:38:5b:af:f3:d7:29:ff:5a:c0: 26:00:90:46:52:f9:20:7f:0a:5d:05:ad:d8:96:f9:40:01:f5: 53:1b:00:36:34:c6:16:9d:67:38:72:9e:15:4b:24:bf:eb:bf: 89:c7:f0:50:d7:a6:e5:d5:7f:e6:34:8e:cb:48:0e:5e:53:f1: d2:d6:b9:a6:1b:30:de:f5:4b:de:c0:2e:9e:fc:67:2a:44:83: 3d:34:cd:31:43:14:88:88:a1:85:6e:05:72:f1:5a:5c:58:86: a8:11:58:3f:ad:ee:0c:c9:ae:a1:58:42:68:b0:82:6e:49:a8: 6c:85:eb:74:ca:3a:d0:0a:09:51:3d:13:84:c5:85:de:d1:28: 41:f2:73:65:b1:b1:cf:0a:62:cf:55:99:44:ab:f4:b0:11:bc: 80:5e:d4:67:b4:8e:d2:a5:77:30:8c:00:a6:24:a3:48:c1:5e: f6:90:b3:91:3c:5e:a7:0f:30:97:82:4b:74:f6:e8:2d:6b:d8: b0:cd:3a:da:f1:b5:82:6a:b4:09:da:b7:08:b7:68:7b:ba:cf: 08:7d:7e:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc1OUYxMTAvBgNVBAUTKDcxQUNFQ0YxQTFBRDk3MDg1NjU1REJEMzQ0QzNFQkJC RDU2RkU0NzQwHhcNMjUxMDE4MTUzMjI3WhcNMjUxMDI1MTUzMjI3WjAYMRYwFAYD VQQDEw02OGYzYjMwYy0yOTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsc46fY9Xl7HydJhb8Yec1ZryosgnsxxEI1ZK10SW3tKMaS87I4CHF+efxJNr +ltaKWyY+Qj4l5WL+DfWQyhASvp0xEdZ0yRZqAPpb1Nz/fpkoDG97dwY01TjeG7h USmCo4xI+2WhjbVum+uL1tgcaKsJQAZPlxfTWV9QyD1ROmVxdp3fxXVTBaQwcocX Bhgs7JaijtTI+hUhbpudxGIVQxOx0i+sPHVejNJbG4tW0wJwutnQdNs1y60KLcLS h5cjjVGHnV/hZLx8LnO3RoBGDnVK/6gDQHYLHdKvy6GxLWhwedkxnA95TDn98k7i 79YMSXVTB7p7SJpi/4OJSKSO5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPJjcaD WocbxKN1dDuK/hcKLPb9MB8GA1UdIwQYMBaAFHGs7PGhrZcIVlXb00TD67vVb+R0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzU5Ri8wQTZGMjYzNDY5 QzUxMUUyODU5MDAyNDUyOTc5QkIyMC9jYXpzOGFHdGx3aFdWZHZUUk1QcnU5VnY1 SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NhenM4YUd0bHdoV1ZkdlRSTVBydTlWdjVIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzU5Ri8wQTZGMjYzNDY5QzUxMUUyODU5MDAyNDUyOTc5QkIyMC9jYXpzOGFHdGx3 aFdWZHZUUk1QcnU5VnY1SFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI2Xa2uqTvJ+y3TAaFRH64kHE22NhJLOARYCER7Bz1eTn/0rihlACc UXH8xQs4W6/z1yn/WsAmAJBGUvkgfwpdBa3YlvlAAfVTGwA2NMYWnWc4cp4VSyS/ 67+Jx/BQ16bl1X/mNI7LSA5eU/HS1rmmGzDe9UvewC6e/GcqRIM9NM0xQxSIiKGF bgVy8VpcWIaoEVg/re4Mya6hWEJosIJuSahshet0yjrQCglRPROExYXe0ShB8nNl sbHPCmLPVZlEq/SwEbyAXtRntI7SpXcwjACmJKNIwV72kLORPF6nDzCXgkt09ugt a9iwzTra8bWCarQJ2rcIt2h7us8IfX4J -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:46 2025 by rpki-client