$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft File: R0p7MwbAohZ8ys_PgzaUALWjduE.mft (raw, json) Hash identifier: VWDRbEqLHAxQiJlcj98fA/V+tAW5/OPwNMbJoemLmTQ= Subject key identifier: F8:96:39:B4:4F:20:2D:54:79:DE:A1:D3:CA:5E:EB:27:7C:9E:9E:66 Authority key identifier: 47:4A:7B:33:06:C0:A2:16:7C:CA:CF:CF:83:36:94:00:B5:A3:76:E1 Certificate issuer: /CN=A91BBA31/serialNumber=474A7B3306C0A2167CCACFCF83369400B5A376E1 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0p7MwbAohZ8ys_PgzaUALWjduE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft Manifest number: 18 Signing time: Sun 19 Oct 2025 11:25:14 +0000 Manifest this update: Sun 19 Oct 2025 11:25:14 +0000 Manifest next update: Sun 26 Oct 2025 11:25:14 +0000 Files and hashes: 1: R0p7MwbAohZ8ys_PgzaUALWjduE.crl (hash: zaFaa+4gigyaYaruED7wxzthnvN6eViQRBy30NTryQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.crl rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0p7MwbAohZ8ys_PgzaUALWjduE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA31, serialNumber=474A7B3306C0A2167CCACFCF83369400B5A376E1 Validity Not Before: Oct 19 11:25:14 2025 GMT Not After : Oct 26 11:25:14 2025 GMT Subject: CN=68f4ca9a-9d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7a:eb:38:d8:0d:65:08:39:c0:8e:2b:0d:b2: a0:68:52:b4:0b:c7:86:22:47:24:e7:f0:03:28:9f: 9d:89:6e:e8:88:a7:23:74:4e:ff:f1:0a:b5:a5:3a: e9:f6:1e:24:3e:7c:76:ae:ae:4b:dd:f0:22:45:03: d8:c7:a8:60:af:89:ab:15:4b:a8:ac:3e:cb:36:6d: 7e:35:36:a5:37:53:c8:5a:3b:0b:d7:46:5a:78:18: 65:04:6b:04:31:af:df:0c:f9:91:b8:35:97:1a:52: 3d:a1:15:d9:e5:a3:c4:ad:65:29:80:85:24:79:a9: 62:11:8e:e2:2a:a5:05:19:d0:f1:5f:80:6a:43:d2: 59:15:77:6f:d6:1b:79:f2:6f:be:20:c3:53:c0:27: 4a:7b:45:9f:d8:a8:28:84:cf:96:ef:c0:40:a4:df: 6c:fd:cf:b4:11:4a:a9:b0:c5:ea:46:45:82:34:6c: 70:d7:67:28:7e:79:8e:1b:9c:19:d0:b1:41:30:87: 6b:39:fb:f1:89:c0:d3:50:af:c3:34:6e:5e:86:48: cd:74:9b:f0:8f:5c:ea:06:20:d6:a5:1d:47:9b:54: c9:d9:b2:be:e8:cc:2a:c4:14:f2:f5:26:79:21:44: 74:3b:78:b3:4d:e3:f7:fd:33:af:b7:2b:84:ea:ec: ed:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:96:39:B4:4F:20:2D:54:79:DE:A1:D3:CA:5E:EB:27:7C:9E:9E:66 X509v3 Authority Key Identifier: keyid:47:4A:7B:33:06:C0:A2:16:7C:CA:CF:CF:83:36:94:00:B5:A3:76:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0p7MwbAohZ8ys_PgzaUALWjduE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:08:00:cb:29:df:f9:25:b3:60:73:d8:30:83:aa:10:03:5c: 99:1d:2f:81:8f:86:8b:5f:ec:39:2e:d7:58:18:dc:b8:24:9f: 92:a3:82:53:15:72:f1:6a:4a:dc:2c:44:e5:36:c7:a1:7d:4f: a0:da:19:f9:23:e2:bb:60:4b:10:95:8f:2d:a4:2a:35:e0:e9: f6:62:25:5d:bf:6f:28:6d:a8:d8:80:ac:eb:f1:08:28:ff:2e: b1:f1:69:55:6a:48:3d:57:48:40:b2:6b:77:d2:3f:5d:e3:ce: db:54:6a:2b:1e:c5:52:fc:5a:11:50:0d:2e:24:71:7f:6c:40: 53:e6:3b:fe:6d:7b:24:89:83:ff:c4:64:09:63:cd:61:d4:b1: bf:c6:77:55:d7:69:c1:30:5c:43:e1:6b:df:64:2c:44:2b:b1: 05:84:8b:19:4b:aa:92:4c:6b:96:cb:59:d5:9f:41:ff:e4:e3: 33:1e:8c:59:d8:c5:ae:83:22:5d:a4:90:f4:52:92:96:a4:bf: 03:98:a4:ca:d4:5d:b6:0d:61:73:07:a7:20:ad:17:21:35:79: c1:bd:d3:64:b9:b3:61:03:26:5c:d6:ab:46:4f:e5:74:22:12: d8:9d:95:46:87:d1:c2:22:ff:d8:17:7a:aa:74:59:d8:69:1f: e3:e9:ee:8d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkEzMTExMC8GA1UEBRMoNDc0QTdCMzMwNkMwQTIxNjdDQ0FDRkNGODMzNjk0MDBC NUEzNzZFMTAeFw0yNTEwMTkxMTI1MTRaFw0yNTEwMjYxMTI1MTRaMBgxFjAUBgNV BAMTDTY4ZjRjYTlhLTlkMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQeus42A1lCDnAjisNsqBoUrQLx4YiRyTn8AMon52JbuiIpyN0Tv/xCrWlOun2 HiQ+fHaurkvd8CJFA9jHqGCviasVS6isPss2bX41NqU3U8haOwvXRlp4GGUEawQx r98M+ZG4NZcaUj2hFdnlo8StZSmAhSR5qWIRjuIqpQUZ0PFfgGpD0lkVd2/WG3ny b74gw1PAJ0p7RZ/YqCiEz5bvwECk32z9z7QRSqmwxepGRYI0bHDXZyh+eY4bnBnQ sUEwh2s5+/GJwNNQr8M0bl6GSM10m/CPXOoGINalHUebVMnZsr7ozCrEFPL1Jnkh RHQ7eLNN4/f9M6+3K4Tq7O3fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+JY5tE8g LVR53qHTyl7rJ3yenmYwHwYDVR0jBBgwFoAUR0p7MwbAohZ8ys/PgzaUALWjduEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCQTMxLzgyMkZERjdFODkz RDExRjBCQ0U3QTcyMEM0RjlBRTAyL1IwcDdNd2JBb2haOHlzX1BnemFVQUxXamR1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjBwN013YkFvaFo4eXNfUGd6YVVBTFdqZHVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC QTMxLzgyMkZERjdFODkzRDExRjBCQ0U3QTcyMEM0RjlBRTAyL1IwcDdNd2JBb2ha OHlzX1BnemFVQUxXamR1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIoIAMsp3/kls2Bz2DCDqhADXJkdL4GPhotf7Dku11gY3Lgkn5KjglMV cvFqStwsROU2x6F9T6DaGfkj4rtgSxCVjy2kKjXg6fZiJV2/byhtqNiArOvxCCj/ LrHxaVVqSD1XSECya3fSP13jzttUaisexVL8WhFQDS4kcX9sQFPmO/5teySJg//E ZAljzWHUsb/Gd1XXacEwXEPha99kLEQrsQWEixlLqpJMa5bLWdWfQf/k4zMejFnY xa6DIl2kkPRSkpakvwOYpMrUXbYNYXMHpyCtFyE1ecG902S5s2EDJlzWq0ZP5XQi EtidlUaH0cIi/9gXeqp0WdhpH+Pp7o0= -----END CERTIFICATE-----Generated at Sun Oct 19 22:56:47 2025 by rpki-client