$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft File: -c8El8-2fhYnKRCY8R8XhuuJ_1A.mft (raw, json) Hash identifier: 6c4a1VKimJIioA849i9JZhpHqcw/NmulnLYQCvK4nTA= Subject key identifier: 2C:D2:A6:E9:97:3B:23:3D:60:03:E9:2E:61:AC:40:DF:CC:3F:9A:19 Authority key identifier: F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 Certificate issuer: /CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Certificate serial: 10D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft Manifest number: 19C1 Signing time: Sat 18 Oct 2025 17:52:10 +0000 Manifest this update: Sat 18 Oct 2025 17:52:09 +0000 Manifest next update: Sat 25 Oct 2025 17:52:09 +0000 Files and hashes: 1: -c8El8-2fhYnKRCY8R8XhuuJ_1A.crl (hash: EGkYvkYUrfJQEKmOHlauLYRW79WeWCDyMFzyY02hyKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4312 (0x10d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Validity Not Before: Oct 18 17:52:09 2025 GMT Not After : Oct 25 17:52:09 2025 GMT Subject: CN=68f3d3c9-0d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:18:7c:6a:91:df:1d:5c:4d:50:20:b8:82:a7: 09:88:42:6e:be:8e:51:d1:29:ff:26:fa:68:51:9e: 73:99:47:ca:6d:83:bc:43:f8:77:47:b6:8e:36:83: ef:54:61:86:d0:15:a4:f0:9f:69:d6:30:14:91:70: 29:26:0b:2a:89:a8:61:60:d3:52:dd:ee:29:ef:74: f0:ff:55:d1:25:15:0a:ae:9a:b6:57:5f:f1:72:33: 5d:4b:95:9e:cf:08:23:aa:a2:a1:e2:54:11:a0:12: 16:e2:14:43:06:98:0d:a9:95:5b:80:75:13:38:91: 6a:f2:19:6f:79:ed:b0:f3:59:6d:4a:45:cd:26:9e: dd:b3:fb:77:a1:6d:8c:9d:5e:18:5c:bf:c0:15:cf: 1f:e0:09:dc:98:95:eb:59:3c:55:af:8c:9a:b2:35: 5b:3f:4d:8a:45:9d:99:b4:db:24:54:55:09:69:d1: b3:f3:78:fb:02:39:e9:cb:ba:0f:60:e1:3e:1b:96: de:c7:c2:d1:ca:50:ed:1c:80:02:2a:d8:bc:13:06: 0a:5c:cc:c6:21:19:ee:21:e1:1b:bd:ae:92:9a:db: d0:0f:e0:6c:e0:35:15:cf:10:5a:2e:26:1b:b4:b1: b9:b9:2a:be:3c:ea:4a:d0:1f:52:56:c9:ef:5d:9f: be:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D2:A6:E9:97:3B:23:3D:60:03:E9:2E:61:AC:40:DF:CC:3F:9A:19 X509v3 Authority Key Identifier: keyid:F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:d9:aa:5f:44:75:a4:23:8f:ca:11:bd:01:a5:04:03:32:66: 75:2b:27:48:d1:c8:0a:3f:f6:50:58:f9:1a:66:08:19:ba:43: 2d:30:08:34:a2:08:fc:d9:26:4d:00:e2:d9:39:8c:c3:be:8a: 91:fc:74:7f:9c:70:ab:09:7e:0f:b9:43:b3:e8:9c:1e:82:19: 12:a7:ca:42:9a:0f:78:55:49:c6:90:32:05:42:d9:e6:95:b5: 71:be:89:51:0b:aa:52:20:f6:fa:8d:5e:1d:54:a2:c5:72:5d: be:29:06:13:40:52:96:ca:02:30:ff:64:1a:98:2f:3a:74:77: 2f:51:0f:55:1d:3d:18:52:5c:f9:76:47:15:6a:de:6d:cd:e9: 61:3d:6d:d6:61:b0:8a:79:b6:cf:d4:00:9f:7a:25:cd:ef:4f: c4:ed:0a:e0:d5:d7:2a:32:73:75:58:9c:64:a7:99:64:66:3e: 05:54:8c:16:a1:cc:6a:17:04:c2:d9:2f:bf:8f:e4:c7:33:62: 5e:03:cd:a5:5f:77:4f:09:c8:dd:43:cb:68:d8:12:eb:12:2b: aa:68:96:14:60:a9:50:49:97:0d:bd:15:2f:10:1f:7b:9a:31: d1:bd:58:8d:42:e7:84:4f:ce:19:26:a7:a1:77:9a:97:cd:a9: af:96:be:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICENgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKEY5Q0YwNDk3Q0ZCNjdFMTYyNzI5MTA5OEYxMUYxNzg2 RUI4OUZGNTAwHhcNMjUxMDE4MTc1MjA5WhcNMjUxMDI1MTc1MjA5WjAYMRYwFAYD VQQDEw02OGYzZDNjOS0wZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xh8apHfHVxNUCC4gqcJiEJuvo5R0Sn/JvpoUZ5zmUfKbYO8Q/h3R7aONoPv VGGG0BWk8J9p1jAUkXApJgsqiahhYNNS3e4p73Tw/1XRJRUKrpq2V1/xcjNdS5We zwgjqqKh4lQRoBIW4hRDBpgNqZVbgHUTOJFq8hlvee2w81ltSkXNJp7ds/t3oW2M nV4YXL/AFc8f4AncmJXrWTxVr4yasjVbP02KRZ2ZtNskVFUJadGz83j7Ajnpy7oP YOE+G5bex8LRylDtHIACKti8EwYKXMzGIRnuIeEbva6SmtvQD+Bs4DUVzxBaLiYb tLG5uSq+POpK0B9SVsnvXZ++pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzSpumX OyM9YAPpLmGsQN/MP5oZMB8GA1UdIwQYMBaAFPnPBJfPtn4WJykQmPEfF4brif9Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZoWW5LUkNZOFI4WGh1dUpf MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jOEVsOC0yZmhZbktSQ1k4UjhYaHV1Sl8xQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZo WW5LUkNZOFI4WGh1dUpfMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS2apfRHWkI4/KEb0BpQQDMmZ1KydI0cgKP/ZQWPkaZggZukMtMAg0 ogj82SZNAOLZOYzDvoqR/HR/nHCrCX4PuUOz6JweghkSp8pCmg94VUnGkDIFQtnm lbVxvolRC6pSIPb6jV4dVKLFcl2+KQYTQFKWygIw/2QamC86dHcvUQ9VHT0YUlz5 dkcVat5tzelhPW3WYbCKebbP1ACfeiXN70/E7Qrg1dcqMnN1WJxkp5lkZj4FVIwW ocxqFwTC2S+/j+THM2JeA82lX3dPCcjdQ8to2BLrEiuqaJYUYKlQSZcNvRUvEB97 mjHRvViNQueET84ZJqehd5qXzamvlr4J -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:45 2025 by rpki-client