$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft File: msqKXCR04g_6ZzTz9yVL__GFE_4.mft (raw, json) Hash identifier: PAa5Y2/K1+LJgTN/S6V1CeRlPJCkT00v1za2iOnCQZo= Subject key identifier: EA:F5:48:1C:EF:AB:61:EF:51:BF:89:F7:96:1E:A0:30:16:B9:EF:00 Authority key identifier: 9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE Certificate issuer: /CN=A91A8A96/serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Certificate serial: 34C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft Manifest number: 34C7 Signing time: Sat 18 Oct 2025 15:16:47 +0000 Manifest this update: Sat 18 Oct 2025 15:16:46 +0000 Manifest next update: Sat 25 Oct 2025 15:16:46 +0000 Files and hashes: 1: msqKXCR04g_6ZzTz9yVL__GFE_4.crl (hash: RBiqlywD+wsbQplg8LqqpD/lsRZwxOrIFYgC2kXDZjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13511 (0x34c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A96, serialNumber=9ACA8A5C2474E20FFA6734F3F7254BFFF18513FE Validity Not Before: Oct 18 15:16:46 2025 GMT Not After : Oct 25 15:16:46 2025 GMT Subject: CN=68f3af5e-006e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:52:a3:2e:c8:20:96:db:55:79:e2:55:0e:2d: d1:4f:85:98:f0:dd:c0:ae:02:c6:33:93:f3:dd:92: b6:24:81:b4:91:e1:f1:5e:3c:ae:2a:86:0c:d2:7d: fd:18:34:0c:24:ab:08:5f:76:36:f9:63:8d:00:cc: 67:52:7c:47:a4:f2:c8:d6:8b:ba:71:f3:c0:e8:b3: 4a:c0:b8:03:e5:a0:63:9b:fb:a2:39:12:d9:69:b2: 5e:d3:17:d6:e4:8f:a5:d6:6c:3d:68:47:fe:b4:97: 7a:89:73:68:53:dd:4d:48:b3:45:34:af:4b:9d:87: d8:76:24:c4:97:1b:7e:1e:c7:df:7a:68:29:ea:13: f2:d0:b1:b9:f6:91:d0:79:31:4d:f6:64:0c:b0:aa: 28:9d:7b:2c:af:3d:bb:cd:fa:b4:07:ab:ff:6e:34: a7:17:9b:9f:46:c5:4e:1b:75:07:58:07:d9:2d:5e: 4e:e9:46:4b:24:61:12:86:9c:c1:b8:cd:f0:8d:f0: 70:77:22:a2:a1:11:2b:61:44:48:32:63:0d:7b:81: 6a:4d:b2:81:93:7c:7d:1a:c3:ab:df:15:e5:65:c9: 33:e7:a6:24:3e:e5:c6:31:e1:fd:a4:59:c0:ab:6b: 51:91:53:18:e8:65:99:5f:e0:e0:1b:f1:71:a2:1c: be:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F5:48:1C:EF:AB:61:EF:51:BF:89:F7:96:1E:A0:30:16:B9:EF:00 X509v3 Authority Key Identifier: keyid:9A:CA:8A:5C:24:74:E2:0F:FA:67:34:F3:F7:25:4B:FF:F1:85:13:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msqKXCR04g_6ZzTz9yVL__GFE_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A96/909D74901DA311E2A00B069908B02CD2/msqKXCR04g_6ZzTz9yVL__GFE_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:4d:d0:7a:bc:64:e5:4e:82:7c:16:70:93:3d:a7:4d:af:26: a3:5f:8c:38:eb:44:32:cb:c4:49:27:08:0d:26:67:79:e7:72: a1:7c:35:84:0f:14:9e:90:81:c0:98:9d:ea:07:b9:2d:7c:48: 37:4e:ca:a5:7e:ea:c6:ce:a8:0f:88:4f:f9:88:41:50:26:8d: 4b:cc:21:c2:84:48:b1:83:93:17:f4:9c:98:ca:a9:47:69:38: 5c:42:af:31:a0:d8:55:91:03:bb:b1:2f:f3:48:5a:c5:dd:6c: f8:e8:8e:7c:82:44:ef:24:2a:70:17:57:7a:94:c7:5c:f0:1d: 37:a7:c2:04:e7:33:79:6c:73:0e:a7:9b:bb:52:2b:ac:4e:1b: 82:68:ca:88:23:5e:1d:73:fe:02:b3:af:54:16:78:f5:f4:b7: 5c:67:e3:48:2e:d9:00:d0:95:ba:91:0c:45:24:fb:50:5d:76: 43:0c:79:0a:5e:fc:18:39:f7:22:f9:36:3b:bc:f9:5d:36:a0: c6:9c:71:b5:10:ce:c9:44:bb:dd:d0:0d:f1:4f:92:77:7a:60: 00:4f:35:2a:25:ea:29:e0:f5:55:25:94:64:24:3d:83:1a:4a: ab:5d:dc:58:91:fa:e4:d3:3d:ca:ee:dc:60:e5:5f:2e:ed:16: d4:29:01:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBOTYxMTAvBgNVBAUTKDlBQ0E4QTVDMjQ3NEUyMEZGQTY3MzRGM0Y3MjU0QkZG RjE4NTEzRkUwHhcNMjUxMDE4MTUxNjQ2WhcNMjUxMDI1MTUxNjQ2WjAYMRYwFAYD VQQDEw02OGYzYWY1ZS0wMDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3lKjLsgglttVeeJVDi3RT4WY8N3ArgLGM5Pz3ZK2JIG0keHxXjyuKoYM0n39 GDQMJKsIX3Y2+WONAMxnUnxHpPLI1ou6cfPA6LNKwLgD5aBjm/uiORLZabJe0xfW 5I+l1mw9aEf+tJd6iXNoU91NSLNFNK9LnYfYdiTElxt+Hsffemgp6hPy0LG59pHQ eTFN9mQMsKoonXssrz27zfq0B6v/bjSnF5ufRsVOG3UHWAfZLV5O6UZLJGEShpzB uM3wjfBwdyKioRErYURIMmMNe4FqTbKBk3x9GsOr3xXlZckz56YkPuXGMeH9pFnA q2tRkVMY6GWZX+DgG/Fxohy+6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOr1SBzv q2HvUb+J95YeoDAWue8AMB8GA1UdIwQYMBaAFJrKilwkdOIP+mc08/clS//xhRP+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE5Ni85MDlENzQ5MDFE QTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRnXzZaelR6OXlWTF9fR0ZF XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zcUtYQ1IwNGdfNlp6VHo5eVZMX19HRkVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE5Ni85MDlENzQ5MDFEQTMxMUUyQTAwQjA2OTkwOEIwMkNEMi9tc3FLWENSMDRn XzZaelR6OXlWTF9fR0ZFXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiTdB6vGTlToJ8FnCTPadNryajX4w460Qyy8RJJwgNJmd553KhfDWE DxSekIHAmJ3qB7ktfEg3TsqlfurGzqgPiE/5iEFQJo1LzCHChEixg5MX9JyYyqlH aThcQq8xoNhVkQO7sS/zSFrF3Wz46I58gkTvJCpwF1d6lMdc8B03p8IE5zN5bHMO p5u7UiusThuCaMqII14dc/4Cs69UFnj19LdcZ+NILtkA0JW6kQxFJPtQXXZDDHkK XvwYOfci+TY7vPldNqDGnHG1EM7JRLvd0A3xT5J3emAATzUqJeop4PVVJZRkJD2D GkqrXdxYkfrk0z3K7txg5V8u7RbUKQGO -----END CERTIFICATE-----Generated at Mon Oct 20 15:11:25 2025 by rpki-client