$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft File: MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft (raw, json) Hash identifier: 2en2BKsv4Ys6fnOGtjkePbS99yVxizcpI6mYuL8yi04= Subject key identifier: DC:BB:53:C8:70:64:70:C6:E2:31:E8:69:5D:9B:49:67:CA:7D:7B:5A Authority key identifier: 30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D Certificate issuer: /CN=A91B4F3C/serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Certificate serial: 34CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft Manifest number: 34CE Signing time: Sat 18 Oct 2025 15:21:22 +0000 Manifest this update: Sat 18 Oct 2025 15:21:21 +0000 Manifest next update: Sat 25 Oct 2025 15:21:21 +0000 Files and hashes: 1: MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl (hash: Ps+DpW9nLR8pKFZKBp1fuaM61x9KEcFXuy3VVaEvooI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13518 (0x34ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4F3C, serialNumber=307AD45E01B8479FA228A123DE7AFAA5D197C17D Validity Not Before: Oct 18 15:21:21 2025 GMT Not After : Oct 25 15:21:21 2025 GMT Subject: CN=68f3b072-022d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f9:a7:7e:78:e8:e2:71:3f:bb:79:bf:6a:0d: c5:fb:d7:94:84:a9:39:8d:7c:21:c6:c0:97:cc:78: aa:d3:70:1c:5e:6c:8e:5e:c0:ba:db:a7:a6:82:fc: cf:bf:93:c3:9b:7d:fe:7a:19:ff:70:32:cc:bb:7b: 15:a6:62:ec:39:ef:ab:9a:95:e7:aa:83:0b:62:9c: 1b:b2:d1:64:c1:4c:2c:d1:6d:72:d9:4c:87:22:10: 76:81:37:9a:4a:f3:1e:83:52:cc:10:bc:32:d5:08: b6:a0:69:0c:44:bc:cd:ae:9c:bf:f9:f2:31:36:ab: 77:23:f7:9b:93:fa:dd:a8:94:57:a4:89:52:f9:3a: ca:b2:d7:04:a3:2e:a7:85:51:fa:49:22:85:95:c6: 8b:48:cf:8d:8c:8f:6f:36:ad:e4:ea:cb:98:29:8a: 55:3f:2e:ff:85:45:4c:b4:5a:fe:72:c5:05:0c:00: ab:f7:ee:67:2d:ac:ed:c1:2e:28:64:57:0e:d8:b8: b9:fe:a7:07:36:91:bf:73:68:e2:af:48:b1:34:3a: 09:aa:5e:04:c2:f4:36:cb:d4:e9:1b:23:46:bf:2b: eb:62:bf:a9:df:50:7e:d4:12:6b:ee:f4:91:41:30: bb:59:c5:de:fb:8a:3e:81:03:b8:f8:5a:4b:ff:9b: 3f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BB:53:C8:70:64:70:C6:E2:31:E8:69:5D:9B:49:67:CA:7D:7B:5A X509v3 Authority Key Identifier: keyid:30:7A:D4:5E:01:B8:47:9F:A2:28:A1:23:DE:7A:FA:A5:D1:97:C1:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F3C/8A55A6A41DA611E2B91CD29D08B02CD2/MHrUXgG4R5-iKKEj3nr6pdGXwX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:cf:27:78:3f:fa:a4:82:32:0d:5c:d6:ee:3d:f1:5c:2c:40: 65:a2:12:67:ca:57:49:f8:26:8b:29:a0:ef:b0:68:1f:7b:10: b4:23:30:6c:5a:14:74:6e:06:f1:2d:66:f4:69:4c:bb:36:f2: ae:11:9e:dd:cb:73:36:e0:d8:6d:71:ee:49:78:90:b3:76:e2: c1:04:16:80:7b:3d:68:8c:ee:87:e0:ed:a4:e1:a4:dc:f2:99: 60:b4:53:94:03:f4:8e:ac:a8:42:2e:3e:03:80:69:19:0e:12: 0a:ea:b4:e2:ff:98:58:e3:8f:7b:8b:69:77:8a:83:01:b2:1c: ee:2b:36:96:35:98:15:6e:d1:ba:33:44:77:1e:ea:36:c6:dc: 6a:f4:05:7a:26:48:46:cb:1a:f3:73:9a:77:37:78:bc:80:ab: 6c:11:85:1a:ee:f6:3c:b6:22:fd:5a:26:86:ba:aa:31:99:0f: 9d:16:c9:57:84:c5:ab:b6:c9:7d:9e:d5:c1:bb:66:f2:c4:bd: 6c:86:8f:da:fa:66:56:c9:c7:00:a0:65:29:fb:55:a1:3d:0c: 60:56:32:83:6b:d0:79:e6:70:d0:5d:95:a4:66:bb:23:2b:c0: 7a:f9:01:a2:2f:95:3c:73:d7:9b:64:fa:52:8f:cd:e5:24:94: b8:a7:89:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRGM0MxMTAvBgNVBAUTKDMwN0FENDVFMDFCODQ3OUZBMjI4QTEyM0RFN0FGQUE1 RDE5N0MxN0QwHhcNMjUxMDE4MTUyMTIxWhcNMjUxMDI1MTUyMTIxWjAYMRYwFAYD VQQDEw02OGYzYjA3Mi0wMjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvmnfnjo4nE/u3m/ag3F+9eUhKk5jXwhxsCXzHiq03AcXmyOXsC626emgvzP v5PDm33+ehn/cDLMu3sVpmLsOe+rmpXnqoMLYpwbstFkwUws0W1y2UyHIhB2gTea SvMeg1LMELwy1Qi2oGkMRLzNrpy/+fIxNqt3I/ebk/rdqJRXpIlS+TrKstcEoy6n hVH6SSKFlcaLSM+NjI9vNq3k6suYKYpVPy7/hUVMtFr+csUFDACr9+5nLaztwS4o ZFcO2Li5/qcHNpG/c2jir0ixNDoJql4EwvQ2y9TpGyNGvyvrYr+p31B+1BJr7vSR QTC7WcXe+4o+gQO4+FpL/5s/hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNy7U8hw ZHDG4jHoaV2bSWfKfXtaMB8GA1UdIwQYMBaAFDB61F4BuEefoiihI956+qXRl8F9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEYzQy84QTU1QTZBNDFE QTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1LWlLS0VqM25yNnBkR1h3 WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01IclVYZ0c0UjUtaUtLRWozbnI2cGRHWHdYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEYzQy84QTU1QTZBNDFEQTYxMUUyQjkxQ0QyOUQwOEIwMkNEMi9NSHJVWGdHNFI1 LWlLS0VqM25yNnBkR1h3WDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxzyd4P/qkgjINXNbuPfFcLEBlohJnyldJ+CaLKaDvsGgfexC0IzBs WhR0bgbxLWb0aUy7NvKuEZ7dy3M24Nhtce5JeJCzduLBBBaAez1ojO6H4O2k4aTc 8plgtFOUA/SOrKhCLj4DgGkZDhIK6rTi/5hY4497i2l3ioMBshzuKzaWNZgVbtG6 M0R3Huo2xtxq9AV6JkhGyxrzc5p3N3i8gKtsEYUa7vY8tiL9WiaGuqoxmQ+dFslX hMWrtsl9ntXBu2byxL1sho/a+mZWyccAoGUp+1WhPQxgVjKDa9B55nDQXZWkZrsj K8B6+QGiL5U8c9ebZPpSj83lJJS4p4kA -----END CERTIFICATE-----Generated at Mon Oct 20 07:31:34 2025 by rpki-client