$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft File: RLpWm_0uyBawaXNFE-C78tNOtwc.mft (raw, json) Hash identifier: CpPxU2wo2YRj5qg7NbE6TAsZSfwvq/83RWP1uti0hhU= Subject key identifier: F2:78:CD:9D:8B:62:FA:F7:A1:9F:E3:16:F2:84:C4:7E:25:A4:A3:FB Authority key identifier: 44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07 Certificate issuer: /CN=A91AD0B2/serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707 Certificate serial: 060C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft Manifest number: 05FA Signing time: Sun 19 Oct 2025 00:35:10 +0000 Manifest this update: Sun 19 Oct 2025 00:35:09 +0000 Manifest next update: Sun 26 Oct 2025 00:35:09 +0000 Files and hashes: 1: RLpWm_0uyBawaXNFE-C78tNOtwc.crl (hash: QLpPH3PH7iOTOPGIzY6ymTOnrULWHn5nDNE8JMmUZNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1548 (0x60c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD0B2, serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707 Validity Not Before: Oct 19 00:35:09 2025 GMT Not After : Oct 26 00:35:09 2025 GMT Subject: CN=68f4323d-197a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:62:84:f3:eb:45:0c:cc:f4:2a:6e:79:8a:ed: b1:51:69:25:4b:1d:45:e5:02:86:35:ca:2d:cd:cb: 44:ae:bc:44:ff:5a:22:fd:24:4e:8f:e0:fa:9c:50: da:5e:86:ea:33:56:f6:59:c1:8d:a5:a4:64:90:88: 47:bd:5a:42:1c:a0:d7:29:e0:e6:d1:33:8a:49:2a: ed:d2:9d:2d:e3:08:de:0c:dd:dc:8e:48:9d:7a:af: 90:ca:36:1f:60:7e:de:0c:f8:c7:5d:6f:22:7d:43: 03:a3:23:8e:f4:8e:90:19:7c:38:87:f2:a1:cf:80: 08:34:94:5d:80:88:a2:60:a7:34:23:b8:10:2b:48: 64:6f:d2:72:ec:a6:1e:d2:8a:4a:ff:3c:dc:92:66: 05:3f:20:c0:fb:46:af:ec:91:7b:7f:8c:86:90:8f: 18:9a:73:b8:9a:ef:d2:51:42:db:38:04:2a:31:25: 19:50:5f:b7:24:7c:01:1f:c9:32:80:6f:7a:57:83: cc:ad:f9:40:9d:d9:b4:00:86:24:24:91:c1:5b:d8: df:03:3c:0a:bb:1b:29:9e:9c:09:e3:2b:cf:5d:03: 7d:57:bc:12:5b:07:cc:8e:1e:43:94:06:41:c5:2e: f1:33:83:05:dc:6d:fa:c0:83:1e:37:22:39:6c:63: 35:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:78:CD:9D:8B:62:FA:F7:A1:9F:E3:16:F2:84:C4:7E:25:A4:A3:FB X509v3 Authority Key Identifier: keyid:44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:8f:c7:5e:d1:d8:cd:aa:4f:1b:f0:1c:da:ed:41:c6:61:83: 11:14:7d:d0:32:6f:3f:29:88:b0:c5:dc:19:fc:13:39:6e:e4: b6:78:91:2e:a0:67:87:cc:5b:e5:71:46:9e:95:6c:b5:42:58: 4d:01:19:4e:ab:c8:47:9b:4e:fd:a0:a1:6d:66:d1:81:89:16: 67:4a:08:db:99:1f:59:89:3b:9c:f9:87:3a:8a:96:8e:34:b6: 02:e5:d5:4e:22:fd:11:73:79:c1:5d:2d:6f:64:18:be:3e:80: 85:d9:ed:93:34:d2:b4:dc:e8:f8:4a:d0:21:4f:76:4c:2d:63: 1a:76:b9:55:be:b8:e9:4d:94:52:4e:89:bf:5e:81:85:41:bd: 67:8d:68:eb:3f:f9:bc:84:b8:92:08:2e:42:f4:ff:57:45:f0: ef:b1:e8:7b:ad:59:13:79:16:f4:d9:69:69:a5:a7:47:89:09: 3e:a5:96:d6:7b:c5:b6:55:31:fa:6a:c3:c5:ab:b1:3f:09:13: cf:b2:3d:93:35:52:cf:17:6d:7b:1b:89:92:c9:17:3e:cf:fa: 26:f6:91:01:b7:97:15:a9:af:6f:8e:7a:a8:8f:9b:d5:5f:d4: 4c:c0:b0:e2:87:12:16:5d:d4:98:32:8d:0e:b0:0a:a0:0e:22: e8:ef:cd:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQwQjIxMTAvBgNVBAUTKDQ0QkE1NjlCRkQyRUM4MTZCMDY5NzM0NTEzRTBCQkYy RDM0RUI3MDcwHhcNMjUxMDE5MDAzNTA5WhcNMjUxMDI2MDAzNTA5WjAYMRYwFAYD VQQDEw02OGY0MzIzZC0xOTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmGKE8+tFDMz0Km55iu2xUWklSx1F5QKGNcotzctErrxE/1oi/SROj+D6nFDa XobqM1b2WcGNpaRkkIhHvVpCHKDXKeDm0TOKSSrt0p0t4wjeDN3cjkideq+QyjYf YH7eDPjHXW8ifUMDoyOO9I6QGXw4h/Khz4AINJRdgIiiYKc0I7gQK0hkb9Jy7KYe 0opK/zzckmYFPyDA+0av7JF7f4yGkI8YmnO4mu/SUULbOAQqMSUZUF+3JHwBH8ky gG96V4PMrflAndm0AIYkJJHBW9jfAzwKuxspnpwJ4yvPXQN9V7wSWwfMjh5DlAZB xS7xM4MF3G36wIMeNyI5bGM1SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJ4zZ2L Yvr3oZ/jFvKExH4lpKP7MB8GA1UdIwQYMBaAFES6Vpv9LsgWsGlzRRPgu/LTTrcH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDBCMi8yMjEzRTVCQ0NC MkUxMUVCQjJEMzk3NDhDNEY5QUUwMi9STHBXbV8wdXlCYXdhWE5GRS1DNzh0Tk90 d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JMcFdtXzB1eUJhd2FYTkZFLUM3OHROT3R3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDBCMi8yMjEzRTVCQ0NCMkUxMUVCQjJEMzk3NDhDNEY5QUUwMi9STHBXbV8wdXlC YXdhWE5GRS1DNzh0Tk90d2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIj8de0djNqk8b8Bza7UHGYYMRFH3QMm8/KYiwxdwZ/BM5buS2eJEu oGeHzFvlcUaelWy1QlhNARlOq8hHm079oKFtZtGBiRZnSgjbmR9ZiTuc+Yc6ipaO NLYC5dVOIv0Rc3nBXS1vZBi+PoCF2e2TNNK03Oj4StAhT3ZMLWMadrlVvrjpTZRS Tom/XoGFQb1njWjrP/m8hLiSCC5C9P9XRfDvseh7rVkTeRb02WlppadHiQk+pZbW e8W2VTH6asPFq7E/CRPPsj2TNVLPF217G4mSyRc+z/om9pEBt5cVqa9vjnqoj5vV X9RMwLDihxIWXdSYMo0OsAqgDiLo7802 -----END CERTIFICATE-----Generated at Mon Oct 20 16:19:07 2025 by rpki-client