$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft File: jos0Y56lTfgQuSvLp0JwTkyIQsI.mft (raw, json) Hash identifier: EJV/syIX5R+D5Mw9qPJLYYoRmeqNngbhUmJuTKDviIM= Subject key identifier: A8:EE:4A:A5:97:37:12:E4:C8:4E:D7:4E:C1:79:CA:6C:8B:F2:C3:BF Authority key identifier: 8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 Certificate issuer: /CN=A91B4C1B/serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft Manifest number: D7 Signing time: Sun 19 Oct 2025 08:38:34 +0000 Manifest this update: Sun 19 Oct 2025 08:38:33 +0000 Manifest next update: Sun 26 Oct 2025 08:38:33 +0000 Files and hashes: 1: jos0Y56lTfgQuSvLp0JwTkyIQsI.crl (hash: lFxtqgSwpCXrCvWSL/PuZJia6UXQ9dCBdtOaPQC6t9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C1B, serialNumber=8E8B34639EA54DF810B92BCBA742704E4C8842C2 Validity Not Before: Oct 19 08:38:33 2025 GMT Not After : Oct 26 08:38:33 2025 GMT Subject: CN=68f4a38a-bc78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:90:84:79:d7:fe:50:33:26:00:f4:52:3b:95: 8a:b7:69:3a:17:8a:43:14:9b:a1:a8:a7:b8:27:b0: 68:fd:fd:0f:ec:fc:25:19:0a:8b:d5:f9:74:e5:0c: b4:df:8b:36:ec:f1:16:10:1d:c1:27:d3:11:8c:a4: ee:71:a5:09:b7:ed:35:a2:2a:84:04:0a:a0:2f:c0: fe:89:bd:e1:b1:b7:2e:79:b7:0d:2c:13:54:74:ae: 24:7e:93:87:c6:e8:fe:08:2d:17:75:50:3b:65:72: 10:5a:20:46:9a:c8:db:86:fb:88:8f:ea:b4:cc:6c: 1c:e2:a0:96:6d:6c:7c:be:59:c2:1d:60:0a:4a:e4: 1b:ea:c2:18:86:07:ea:6c:64:ae:5c:6e:da:4a:61: 19:7e:9f:c7:05:57:af:db:da:9d:b7:b1:8d:91:e5: 03:d7:0f:60:3a:a3:b8:6d:5e:d9:d8:bf:3d:dd:36: e4:15:74:b3:76:f4:b8:41:7f:bd:df:15:6a:48:5f: e7:6a:a5:32:6f:24:45:61:a0:04:f3:38:23:aa:fc: 33:d1:53:77:af:7f:c1:c3:25:9a:bb:b2:54:ab:e8: 05:9c:ab:3e:e4:a6:97:5e:8d:bf:8e:7b:87:57:2f: 2f:41:4f:ce:b1:50:21:8a:d2:2e:31:9f:55:ab:f9: a8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EE:4A:A5:97:37:12:E4:C8:4E:D7:4E:C1:79:CA:6C:8B:F2:C3:BF X509v3 Authority Key Identifier: keyid:8E:8B:34:63:9E:A5:4D:F8:10:B9:2B:CB:A7:42:70:4E:4C:88:42:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jos0Y56lTfgQuSvLp0JwTkyIQsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/D965BA40641B11EF9891547FC4F9AE02/jos0Y56lTfgQuSvLp0JwTkyIQsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:18:72:2f:b1:9a:e3:a1:3b:1c:a3:b5:85:0f:ff:10:98:ab: c2:62:04:5f:89:17:84:3d:e2:3f:3c:a0:21:c3:60:65:d7:de: 62:bf:46:ca:0e:b2:9c:16:e8:d4:84:ca:fe:69:ac:7f:3a:24: bd:21:b5:5d:23:3d:53:e0:7d:e0:b2:bd:88:2a:87:39:a2:18: 3a:1f:c7:66:91:12:95:1a:a1:72:1b:bd:9a:3d:dd:4b:cf:2c: 0b:da:d4:39:19:20:bc:ce:3f:48:4c:bb:14:2c:0c:0a:bf:c8: 18:80:18:ff:2d:d5:74:bd:22:9b:54:80:4c:6d:02:93:23:6b: 12:ab:c5:7c:f5:bb:cb:e8:fc:51:14:30:68:b8:1a:25:63:c2: ba:94:ec:b8:00:69:0e:d2:95:75:c2:74:2d:ad:00:88:27:7c: 46:99:b5:b3:fb:35:20:e6:98:df:c0:7f:4f:a6:63:88:8c:56: 69:43:e0:97:a5:e4:76:4c:a0:2c:90:6a:f3:63:5e:10:fd:50: fe:75:76:a2:08:dd:c0:73:f9:96:eb:a4:f5:4b:62:10:24:b2: 1f:d5:ee:a7:87:e4:75:fa:2e:cb:26:28:62:07:f5:ee:07:12: a5:35:07:2d:92:a5:7b:78:aa:3e:34:df:c4:47:39:53:aa:9d: c9:2d:b0:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRDMUIxMTAvBgNVBAUTKDhFOEIzNDYzOUVBNTRERjgxMEI5MkJDQkE3NDI3MDRF NEM4ODQyQzIwHhcNMjUxMDE5MDgzODMzWhcNMjUxMDI2MDgzODMzWjAYMRYwFAYD VQQDEw02OGY0YTM4YS1iYzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypCEedf+UDMmAPRSO5WKt2k6F4pDFJuhqKe4J7Bo/f0P7PwlGQqL1fl05Qy0 34s27PEWEB3BJ9MRjKTucaUJt+01oiqEBAqgL8D+ib3hsbcuebcNLBNUdK4kfpOH xuj+CC0XdVA7ZXIQWiBGmsjbhvuIj+q0zGwc4qCWbWx8vlnCHWAKSuQb6sIYhgfq bGSuXG7aSmEZfp/HBVev29qdt7GNkeUD1w9gOqO4bV7Z2L893TbkFXSzdvS4QX+9 3xVqSF/naqUybyRFYaAE8zgjqvwz0VN3r3/BwyWau7JUq+gFnKs+5KaXXo2/jnuH Vy8vQU/OsVAhitIuMZ9Vq/moEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjuSqWX NxLkyE7XTsF5ymyL8sO/MB8GA1UdIwQYMBaAFI6LNGOepU34ELkry6dCcE5MiELC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEMxQi9EOTY1QkE0MDY0 MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi9qb3MwWTU2bFRmZ1F1U3ZMcDBKd1RreUlR c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvczBZNTZsVGZnUXVTdkxwMEp3VGt5SVFzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEMxQi9EOTY1QkE0MDY0MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi9qb3MwWTU2bFRm Z1F1U3ZMcDBKd1RreUlRc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcGHIvsZrjoTsco7WFD/8QmKvCYgRfiReEPeI/PKAhw2Bl195iv0bK DrKcFujUhMr+aax/OiS9IbVdIz1T4H3gsr2IKoc5ohg6H8dmkRKVGqFyG72aPd1L zywL2tQ5GSC8zj9ITLsULAwKv8gYgBj/LdV0vSKbVIBMbQKTI2sSq8V89bvL6PxR FDBouBolY8K6lOy4AGkO0pV1wnQtrQCIJ3xGmbWz+zUg5pjfwH9PpmOIjFZpQ+CX peR2TKAskGrzY14Q/VD+dXaiCN3Ac/mW66T1S2IQJLIf1e6nh+R1+i7LJihiB/Xu BxKlNQctkqV7eKo+NN/ERzlTqp3JLbAK -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:59 2025 by rpki-client