$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft File: DldBdtqmrGyXcGxmecfiTnC6rVc.mft (raw, json) Hash identifier: Hx1XxBLTWsgQG9BEe6jYfJ95ZjzcKcGYALv+vbFbMEY= Subject key identifier: 06:43:F6:E6:33:F9:BE:8A:0B:B9:DB:CE:ED:04:4E:94:11:66:43:4F Authority key identifier: 0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 Certificate issuer: /CN=A91C0BDE/serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Certificate serial: 09E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft Manifest number: 130B Signing time: Sat 18 Oct 2025 20:56:14 +0000 Manifest this update: Sat 18 Oct 2025 20:56:14 +0000 Manifest next update: Sat 25 Oct 2025 20:56:14 +0000 Files and hashes: 1: DldBdtqmrGyXcGxmecfiTnC6rVc.crl (hash: ihUdf0CwNZXKXE+STFXHSOduS79q4KG61OEjLAzk58g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2533 (0x9e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Validity Not Before: Oct 18 20:56:14 2025 GMT Not After : Oct 25 20:56:14 2025 GMT Subject: CN=68f3feee-a836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bb:0d:32:7d:19:37:cb:5d:4f:ab:0e:8f:8b: 84:2d:fb:0b:4a:7d:ac:2b:8c:f5:3f:65:73:00:cd: b9:ca:0d:f6:df:a1:7f:22:1a:29:cc:23:80:f7:9a: 73:79:67:c2:d7:9d:00:bc:90:62:d3:8a:a5:be:24: 08:b0:39:af:54:22:18:49:eb:07:a0:91:4e:3e:66: ea:58:bf:06:77:5d:2b:95:e9:5b:92:68:35:4d:ae: 02:59:e2:ce:4e:68:19:8a:b8:01:6b:fb:cb:14:cc: bc:a2:2a:80:f4:54:8a:9d:f6:81:71:e9:fd:b7:b7: 1e:6c:fb:47:c9:21:19:2a:0f:f0:6a:3e:12:55:3c: 23:6e:a4:79:7a:1c:f4:ea:76:36:19:41:83:80:17: 58:5a:a4:28:2a:e1:4b:08:79:df:a2:b3:1f:25:af: d4:ce:61:63:53:ec:37:0c:e2:d7:ac:ee:a1:d1:94: 1f:e7:71:87:77:54:b4:b6:93:ed:30:f7:ef:78:5a: 87:1c:30:d5:d4:35:7d:ed:2f:53:a9:b3:36:09:d0: 55:63:f7:60:45:07:3a:64:71:af:d4:10:7d:a5:66: 52:69:a6:e0:aa:e5:09:5b:ca:b7:0b:52:0b:9a:67: 60:e6:ef:22:7a:e4:40:d1:42:c1:df:ee:42:88:24: e4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:43:F6:E6:33:F9:BE:8A:0B:B9:DB:CE:ED:04:4E:94:11:66:43:4F X509v3 Authority Key Identifier: keyid:0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:52:55:e3:10:57:83:47:81:cf:ae:01:f1:21:e0:f9:84:45: c4:42:29:bd:31:0b:ce:2a:e7:aa:6e:a3:4a:73:eb:b7:c5:12: 14:dc:ac:20:f1:88:64:fa:20:f5:a2:e1:14:d3:61:b5:02:77: d1:53:b9:93:65:8b:ea:86:b2:9f:be:07:cb:26:0d:1e:17:d3: 07:8a:63:78:ff:54:56:75:54:b7:ff:9d:7b:cb:4d:ae:ba:97: 23:e6:37:6e:17:94:68:52:5c:19:4d:e5:a8:ae:f4:1b:30:52: ad:f6:c5:59:f9:9c:73:5a:41:2c:3a:43:50:f8:b0:b4:c7:e9: 63:65:19:c1:48:83:01:ff:cd:04:8d:38:d6:a4:ae:7a:72:2f: 2d:b2:40:bc:dc:b4:3f:48:c6:a3:bd:23:c4:e6:11:2e:e0:20: 73:30:ba:32:57:be:b6:7e:76:aa:58:e0:63:4c:37:a6:5c:9b: 58:97:98:66:5c:d2:fc:89:84:34:ad:a7:c9:b6:52:8c:74:71: bd:4e:4e:22:05:c6:e1:e2:1d:38:6c:aa:3f:ed:1a:f0:01:f6: 0c:cb:aa:fe:46:18:22:0c:2c:1d:27:50:0f:ba:75:b2:95:44: f6:32:81:9f:ef:52:0c:09:b9:54:f4:d3:1b:29:6b:78:15:f4: f1:5e:82:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKDBFNTc0MTc2REFBNkFDNkM5NzcwNkM2Njc5QzdFMjRF NzBCQUFENTcwHhcNMjUxMDE4MjA1NjE0WhcNMjUxMDI1MjA1NjE0WjAYMRYwFAYD VQQDEw02OGYzZmVlZS1hODM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7sNMn0ZN8tdT6sOj4uELfsLSn2sK4z1P2VzAM25yg3236F/IhopzCOA95pz eWfC150AvJBi04qlviQIsDmvVCIYSesHoJFOPmbqWL8Gd10rlelbkmg1Ta4CWeLO TmgZirgBa/vLFMy8oiqA9FSKnfaBcen9t7cebPtHySEZKg/waj4SVTwjbqR5ehz0 6nY2GUGDgBdYWqQoKuFLCHnforMfJa/UzmFjU+w3DOLXrO6h0ZQf53GHd1S0tpPt MPfveFqHHDDV1DV97S9TqbM2CdBVY/dgRQc6ZHGv1BB9pWZSaabgquUJW8q3C1IL mmdg5u8ieuRA0ULB3+5CiCTkGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZD9uYz +b6KC7nbzu0ETpQRZkNPMB8GA1UdIwQYMBaAFA5XQXbapqxsl3BsZnnH4k5wuq1X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJHeVhjR3htZWNmaVRuQzZy VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZEJkdHFtckd5WGNHeG1lY2ZpVG5DNnJWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJH eVhjR3htZWNmaVRuQzZyVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbUlXjEFeDR4HPrgHxIeD5hEXEQim9MQvOKueqbqNKc+u3xRIU3Kwg 8Yhk+iD1ouEU02G1AnfRU7mTZYvqhrKfvgfLJg0eF9MHimN4/1RWdVS3/517y02u upcj5jduF5RoUlwZTeWorvQbMFKt9sVZ+ZxzWkEsOkNQ+LC0x+ljZRnBSIMB/80E jTjWpK56ci8tskC83LQ/SMajvSPE5hEu4CBzMLoyV762fnaqWOBjTDemXJtYl5hm XNL8iYQ0rafJtlKMdHG9Tk4iBcbh4h04bKo/7RrwAfYMy6r+RhgiDCwdJ1APunWy lUT2MoGf71IMCblU9NMbKWt4FfTxXoJq -----END CERTIFICATE-----Generated at Mon Oct 20 08:58:50 2025 by rpki-client