$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft File: datLjbMBU71ybPn5YlC-BATYixo.mft (raw, json) Hash identifier: fYzwVCJvDr/JR/hyLa6E+mB6yEmuJEuR8IlpTrON4nw= Subject key identifier: 95:35:7D:3D:3B:D7:3B:C8:EC:E3:8B:64:94:B1:10:A2:E1:BB:1A:BE Authority key identifier: 75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A Certificate issuer: /CN=A91C0CD3/serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft Manifest number: 01B6 Signing time: Sun 19 Oct 2025 05:31:59 +0000 Manifest this update: Sun 19 Oct 2025 05:31:58 +0000 Manifest next update: Sun 26 Oct 2025 05:31:58 +0000 Files and hashes: 1: datLjbMBU71ybPn5YlC-BATYixo.crl (hash: 0EOvDLMeYU3PZOp1pGqOAEXQDLKf8mlmhxiLWOfIUYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:31:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0CD3, serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A Validity Not Before: Oct 19 05:31:58 2025 GMT Not After : Oct 26 05:31:58 2025 GMT Subject: CN=68f477cf-1af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:46:05:32:80:3c:74:d4:8a:34:01:e0:16:6a: d2:b1:4f:64:b7:a7:d0:bc:f4:12:08:e8:2c:ec:47: 55:d9:df:c0:0a:80:22:1a:cc:10:7d:91:ac:71:3d: b4:54:7f:ca:80:f4:7e:a4:9d:e1:1e:c5:cd:d0:cd: 4e:5f:91:f9:35:e5:e3:b8:97:c2:70:01:91:a6:23: c5:4c:f7:e2:51:17:77:8b:d4:3e:0a:4d:20:54:58: f6:34:8c:98:c1:7e:0c:44:70:0c:84:84:bc:e9:49: c2:f9:de:31:c0:c3:7d:4d:a6:ba:1a:c4:4c:f7:e0: e4:1c:6e:56:76:71:4f:43:9f:a9:a9:2e:a6:08:80: 86:29:9b:2f:0c:4b:85:20:9a:c6:e2:7b:24:88:ca: 80:21:96:3d:ac:4c:31:48:08:f5:1e:b0:5e:19:7b: c8:df:02:9c:ac:f8:8f:cc:31:75:7e:c0:57:47:05: dc:9c:43:9e:7b:cd:d0:cb:82:ad:94:f3:c0:12:8a: a7:a6:33:b0:28:8b:b2:07:87:fd:67:af:cb:a4:ff: da:ae:45:f7:16:d4:0b:c6:44:11:03:2c:2a:1a:c8: 72:60:4e:2a:d1:4a:bd:79:ff:33:17:90:fe:bd:48: 3b:ea:66:5f:e0:e2:41:1a:81:e8:43:ec:21:12:72: 89:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:35:7D:3D:3B:D7:3B:C8:EC:E3:8B:64:94:B1:10:A2:E1:BB:1A:BE X509v3 Authority Key Identifier: keyid:75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:32:36:00:7b:b6:b5:8a:c2:84:a5:55:e5:f9:68:88:56:fc: c9:d3:49:db:52:31:61:37:76:f9:f8:36:0d:61:1a:d2:54:64: 11:ba:3c:e4:37:c2:95:9c:60:09:da:25:7c:54:a8:8c:5c:26: 6b:1c:41:81:7f:6a:2a:b7:e0:df:df:8c:c0:69:93:01:ea:df: 79:26:03:03:97:a2:8d:0b:43:d0:91:f6:06:d6:65:5b:f1:9a: 58:25:13:75:ef:3d:80:ce:39:d8:47:0f:3d:8f:8a:37:e3:00: 9c:87:61:df:c0:38:b8:29:23:b2:a6:35:b8:68:e3:ef:3a:94: 8a:a8:5c:25:49:8a:97:16:f1:0b:2e:cf:23:ee:b4:96:cc:34: 75:69:4b:ca:c3:31:97:ae:a0:96:e3:fb:eb:8e:eb:b4:c7:75: 37:28:6b:8f:a2:3a:d0:27:f6:af:c4:a3:da:c0:e9:2d:be:c9: a0:93:7f:9b:2a:b1:36:a9:c5:02:63:55:bd:b6:32:79:37:e1: 0d:e1:7c:d9:c8:5a:78:f7:96:d4:6c:28:63:d8:37:8c:01:b4: 75:45:06:9b:d1:15:ec:b2:3c:2d:83:53:d1:2d:9f:3e:b7:48: 56:71:83:90:4c:ed:dc:0f:e3:95:23:7a:54:75:79:5c:70:47: 08:df:6e:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDRDMxMTAvBgNVBAUTKDc1QUI0QjhEQjMwMTUzQkQ3MjZDRjlGOTYyNTBCRTA0 MDREODhCMUEwHhcNMjUxMDE5MDUzMTU4WhcNMjUxMDI2MDUzMTU4WjAYMRYwFAYD VQQDEw02OGY0NzdjZi0xYWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7kYFMoA8dNSKNAHgFmrSsU9kt6fQvPQSCOgs7EdV2d/ACoAiGswQfZGscT20 VH/KgPR+pJ3hHsXN0M1OX5H5NeXjuJfCcAGRpiPFTPfiURd3i9Q+Ck0gVFj2NIyY wX4MRHAMhIS86UnC+d4xwMN9Taa6GsRM9+DkHG5WdnFPQ5+pqS6mCICGKZsvDEuF IJrG4nskiMqAIZY9rEwxSAj1HrBeGXvI3wKcrPiPzDF1fsBXRwXcnEOee83Qy4Kt lPPAEoqnpjOwKIuyB4f9Z6/LpP/arkX3FtQLxkQRAywqGshyYE4q0Uq9ef8zF5D+ vUg76mZf4OJBGoHoQ+whEnKJrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJU1fT07 1zvI7OOLZJSxEKLhuxq+MB8GA1UdIwQYMBaAFHWrS42zAVO9cmz5+WJQvgQE2Isa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMENEMy83RjYwMEVDQTA4 RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3MXliUG41WWxDLUJBVFlp eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhdExqYk1CVTcxeWJQbjVZbEMtQkFUWWl4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MENEMy83RjYwMEVDQTA4RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3 MXliUG41WWxDLUJBVFlpeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNMjYAe7a1isKEpVXl+WiIVvzJ00nbUjFhN3b5+DYNYRrSVGQRujzk N8KVnGAJ2iV8VKiMXCZrHEGBf2oqt+Df34zAaZMB6t95JgMDl6KNC0PQkfYG1mVb 8ZpYJRN17z2AzjnYRw89j4o34wCch2HfwDi4KSOypjW4aOPvOpSKqFwlSYqXFvEL Ls8j7rSWzDR1aUvKwzGXrqCW4/vrjuu0x3U3KGuPojrQJ/avxKPawOktvsmgk3+b KrE2qcUCY1W9tjJ5N+EN4XzZyFp495bUbChj2DeMAbR1RQab0RXssjwtg1PRLZ8+ t0hWcYOQTO3cD+OVI3pUdXlccEcI326M -----END CERTIFICATE-----Generated at Tue Oct 21 11:28:13 2025 by rpki-client