$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft File: 7N0mV0PpIRvOCq3LsCLObzO-CwY.mft (raw, json) Hash identifier: 37uJ/Jeah9DvW+zsuHjQ5uDQbkBEVMILfzZQpEyCBkM= Subject key identifier: 2E:A0:2C:B4:16:BE:95:73:6B:F6:34:27:41:0A:2A:1E:4F:1A:4A:D8 Authority key identifier: EC:DD:26:57:43:E9:21:1B:CE:0A:AD:CB:B0:22:CE:6F:33:BE:0B:06 Certificate issuer: /CN=A91C1710/serialNumber=ECDD265743E9211BCE0AADCBB022CE6F33BE0B06 Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft Manifest number: 080D Signing time: Sun 19 Oct 2025 02:15:01 +0000 Manifest this update: Sun 19 Oct 2025 02:15:01 +0000 Manifest next update: Sun 26 Oct 2025 02:15:01 +0000 Files and hashes: 1: 7N0mV0PpIRvOCq3LsCLObzO-CwY.crl (hash: cFTOWsibktMub4IEo+KQKI8DG9EtBJTxMthrZT9fDzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.crl rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1710, serialNumber=ECDD265743E9211BCE0AADCBB022CE6F33BE0B06 Validity Not Before: Oct 19 02:15:01 2025 GMT Not After : Oct 26 02:15:01 2025 GMT Subject: CN=68f449a5-40e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fe:0e:28:79:bf:60:d3:40:2c:01:d5:eb:04: 34:60:d6:75:06:4a:e4:59:0d:7c:f5:db:54:f4:b2: 50:f3:5b:94:7e:15:93:6c:dc:b1:77:13:b8:61:3e: 06:ce:79:ac:7d:e3:7d:51:88:ee:5e:a7:57:c4:d7: 8a:e2:fa:af:2b:7f:6c:25:a4:76:56:5d:6f:e5:6e: 88:97:b3:4d:e7:3b:85:51:00:2d:d2:bd:ef:57:77: e3:5a:49:7e:53:67:60:b5:33:6e:1f:cf:3a:16:34: 5c:2a:1c:a9:ce:4d:a0:48:23:c4:bf:da:aa:72:0e: d0:5c:fe:8a:12:87:ec:a5:65:e0:d1:66:e5:20:4f: f2:27:bf:e3:6d:d8:31:5d:99:96:09:fa:c2:9b:60: bf:0a:a7:1e:94:b2:e0:4b:ca:a0:ea:10:3b:d1:44: b3:cf:08:ee:85:e4:9c:67:f0:69:43:19:f8:97:f1: 1c:2b:9b:a4:98:c0:ce:d8:44:07:22:c8:42:59:e6: c0:17:b7:3b:49:16:c9:1c:89:78:7e:c4:63:a2:bb: c4:16:a0:10:5c:17:39:6f:dd:52:ef:8a:85:10:a4: 44:17:4a:10:70:36:61:f7:da:dd:3d:7a:ad:32:b6: 07:8f:35:4f:98:a1:8a:f4:1a:19:44:24:79:d6:3a: 06:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A0:2C:B4:16:BE:95:73:6B:F6:34:27:41:0A:2A:1E:4F:1A:4A:D8 X509v3 Authority Key Identifier: keyid:EC:DD:26:57:43:E9:21:1B:CE:0A:AD:CB:B0:22:CE:6F:33:BE:0B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:8f:b4:fa:cc:9c:3a:56:79:3b:0d:47:3b:44:cf:5c:db:5f: 8e:be:e0:c0:b5:79:0a:3f:58:13:c8:c4:21:f7:81:96:33:6c: 2a:3a:dd:7d:1c:5e:e7:76:75:e8:2d:bc:a0:d0:b5:04:12:72: 20:9f:f6:a0:54:de:17:ac:61:b9:eb:d0:d7:82:1a:04:61:bb: 4b:dc:99:ba:e7:71:83:7f:e0:28:3b:d5:23:3c:c5:8e:38:d7: e4:0c:28:42:17:6c:34:3d:23:0d:16:00:7c:6a:79:a4:e3:83: d6:15:aa:56:10:2b:54:20:56:45:dd:1d:8f:b2:42:50:98:9d: a6:dc:35:b6:74:d7:22:70:87:93:95:43:89:f1:84:0c:54:3b: 3a:b3:c0:c7:cd:10:00:9c:13:37:0b:d0:80:45:4d:f8:3c:3c: 32:b9:19:08:38:6b:4a:37:7e:9b:fb:de:ef:05:2a:2c:18:da: c1:96:ac:0a:84:bb:df:a4:63:86:9b:17:b0:29:8e:91:ca:20: 5c:5e:62:4e:8a:43:4c:bd:ea:d7:1a:30:48:10:53:ae:07:57: 90:4a:58:9a:32:55:6b:ff:de:f9:ba:38:04:bb:a2:0f:b9:50: ee:87:dd:18:b0:ec:6b:7d:da:03:82:35:a4:5e:92:d5:c9:29: e4:15:de:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE3MTAxMTAvBgNVBAUTKEVDREQyNjU3NDNFOTIxMUJDRTBBQURDQkIwMjJDRTZG MzNCRTBCMDYwHhcNMjUxMDE5MDIxNTAxWhcNMjUxMDI2MDIxNTAxWjAYMRYwFAYD VQQDEw02OGY0NDlhNS00MGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvP4OKHm/YNNALAHV6wQ0YNZ1BkrkWQ189dtU9LJQ81uUfhWTbNyxdxO4YT4G znmsfeN9UYjuXqdXxNeK4vqvK39sJaR2Vl1v5W6Il7NN5zuFUQAt0r3vV3fjWkl+ U2dgtTNuH886FjRcKhypzk2gSCPEv9qqcg7QXP6KEofspWXg0WblIE/yJ7/jbdgx XZmWCfrCm2C/CqcelLLgS8qg6hA70USzzwjuheScZ/BpQxn4l/EcK5ukmMDO2EQH IshCWebAF7c7SRbJHIl4fsRjorvEFqAQXBc5b91S74qFEKREF0oQcDZh99rdPXqt MrYHjzVPmKGK9BoZRCR51joGfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6gLLQW vpVza/Y0J0EKKh5PGkrYMB8GA1UdIwQYMBaAFOzdJldD6SEbzgqty7Aizm8zvgsG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTcxMC8xODIyOUE4Njgy NkIxMUVDQTExQkE1MkJDNEY5QUUwMi83TjBtVjBQcElSdk9DcTNMc0NMT2J6Ty1D d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdOMG1WMFBwSVJ2T0NxM0xzQ0xPYnpPLUN3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTcxMC8xODIyOUE4NjgyNkIxMUVDQTExQkE1MkJDNEY5QUUwMi83TjBtVjBQcElS dk9DcTNMc0NMT2J6Ty1Dd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkj7T6zJw6Vnk7DUc7RM9c21+OvuDAtXkKP1gTyMQh94GWM2wqOt19 HF7ndnXoLbyg0LUEEnIgn/agVN4XrGG569DXghoEYbtL3Jm653GDf+AoO9UjPMWO ONfkDChCF2w0PSMNFgB8anmk44PWFapWECtUIFZF3R2PskJQmJ2m3DW2dNcicIeT lUOJ8YQMVDs6s8DHzRAAnBM3C9CARU34PDwyuRkIOGtKN36b+97vBSosGNrBlqwK hLvfpGOGmxewKY6RyiBcXmJOikNMverXGjBIEFOuB1eQSliaMlVr/975ujgEu6IP uVDuh90YsOxrfdoDgjWkXpLVySnkFd4i -----END CERTIFICATE-----Generated at Tue Oct 21 01:01:18 2025 by rpki-client