$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft File: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft (raw, json) Hash identifier: C08JD/RBkwBPrnyJ5YtaGCeSKBOlfHgEak1zfMzrWvw= Subject key identifier: 4B:8E:43:46:F1:33:DC:82:13:01:21:E4:9B:FE:69:9C:04:BA:18:98 Authority key identifier: 82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD Certificate issuer: /CN=A91C1C49/serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft Manifest number: 412A Signing time: Sat 18 Oct 2025 15:10:53 +0000 Manifest this update: Sat 18 Oct 2025 15:10:52 +0000 Manifest next update: Sat 25 Oct 2025 15:10:52 +0000 Files and hashes: 1: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl (hash: 0S9g6Je5b+XIePljCBBkLkNHZccuKlTcQgl7z7wvsYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1C49, serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD Validity Not Before: Oct 18 15:10:52 2025 GMT Not After : Oct 25 15:10:52 2025 GMT Subject: CN=68f3adfc-0b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:21:f0:d4:bf:ca:6f:eb:d4:ad:5c:cf:e9:b4: 3f:31:be:82:fd:a8:84:e4:38:0b:90:4a:bd:cc:36: f5:6d:15:b1:67:d1:1e:e2:69:78:06:b3:de:e6:c8: d4:19:63:67:78:7f:96:3c:94:0e:0c:13:be:83:39: bf:ff:c6:2f:70:5a:57:d6:da:e7:4b:85:8e:9e:66: a2:cb:b7:85:ca:97:19:ef:a2:f2:0e:ad:29:bf:28: df:b5:d6:1e:7d:92:63:ac:7e:3c:4c:98:00:e6:1b: 91:79:70:61:80:0f:22:19:7d:7a:f8:6e:5d:ce:27: 4e:ba:cf:20:a0:40:24:c5:96:00:0d:41:c1:ae:67: d1:41:c3:1d:d9:75:77:2e:15:b5:99:db:dc:15:05: cb:a6:26:81:1b:41:15:7e:e9:eb:44:39:0b:f6:d8: bb:b3:30:c7:88:d5:91:79:a5:93:c3:4e:18:a0:42: 8d:87:cf:db:67:fc:8e:c0:fe:b2:b9:5f:03:a9:e9: 74:0e:d1:93:37:a0:7e:d9:9c:c3:25:68:4d:fc:37: c7:39:c3:93:a5:56:86:00:b3:15:4b:da:d8:9f:84: af:f8:6f:03:5e:5e:7d:62:38:07:6d:67:2e:88:97: 0e:b6:8d:cb:96:9b:e4:8b:e8:86:89:a7:d6:0c:5a: 2e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8E:43:46:F1:33:DC:82:13:01:21:E4:9B:FE:69:9C:04:BA:18:98 X509v3 Authority Key Identifier: keyid:82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:c5:65:72:39:b5:40:f8:31:c7:c8:6e:d0:6c:b9:74:f7:75: df:ad:98:78:01:4e:0d:14:5e:7c:ca:16:94:5b:96:d5:d4:b5: 74:23:5e:36:92:8a:fb:0a:ae:ff:98:d3:2e:d5:81:98:f4:be: 13:cf:de:1c:b8:e0:40:ff:3f:db:d0:b8:71:a4:ec:09:e9:ef: 9b:b1:9c:f7:b6:f3:7c:85:be:8c:6a:67:36:ce:7b:51:95:c9: bc:a8:63:aa:de:26:07:86:b0:d6:dc:de:ef:9f:12:11:0c:86: 82:4d:62:b2:4d:c6:2f:42:15:d5:6e:d2:9c:b9:b7:e4:12:77: d2:03:43:76:be:a3:ae:79:8b:04:07:ac:83:75:48:e4:42:c3: 48:70:24:13:cb:5e:d0:a3:f2:3c:29:90:96:1a:6c:9a:77:db: 45:76:d3:43:43:ea:1f:63:0e:13:86:1e:b5:06:ac:bd:ac:f2: 20:79:08:65:63:b7:7f:33:c9:13:d0:9a:f3:06:6a:f2:64:ad: 4e:dd:84:65:a6:74:00:81:39:95:d3:83:fa:df:5d:29:a2:10: 50:70:42:41:18:03:2d:bf:ff:db:b7:14:95:60:f2:ce:a0:10: e7:9d:8c:62:c4:a9:9a:fa:cb:2e:26:0a:9e:a0:e0:a9:49:ff: ed:52:e5:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFDNDkxMTAvBgNVBAUTKDgyMUY0REIyMkVFNTlBRkQ1OTNBN0U2ODlFREE5RkM5 NEJFNTg1REQwHhcNMjUxMDE4MTUxMDUyWhcNMjUxMDI1MTUxMDUyWjAYMRYwFAYD VQQDEw02OGYzYWRmYy0wYjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4iHw1L/Kb+vUrVzP6bQ/Mb6C/aiE5DgLkEq9zDb1bRWxZ9Ee4ml4BrPe5sjU GWNneH+WPJQODBO+gzm//8YvcFpX1trnS4WOnmaiy7eFypcZ76LyDq0pvyjftdYe fZJjrH48TJgA5huReXBhgA8iGX16+G5dzidOus8goEAkxZYADUHBrmfRQcMd2XV3 LhW1mdvcFQXLpiaBG0EVfunrRDkL9ti7szDHiNWReaWTw04YoEKNh8/bZ/yOwP6y uV8Dqel0DtGTN6B+2ZzDJWhN/DfHOcOTpVaGALMVS9rYn4Sv+G8DXl59YjgHbWcu iJcOto3Llpvki+iGiafWDFoucQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEuOQ0bx M9yCEwEh5Jv+aZwEuhiYMB8GA1UdIwQYMBaAFIIfTbIu5Zr9WTp+aJ7an8lL5YXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUM0OS9DNDlGNzVGODFE OUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9naDlOc2k3bG12MVpPbjVvbnRxZnlVdmxo ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doOU5zaTdsbXYxWk9uNW9udHFmeVV2bGhkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUM0OS9DNDlGNzVGODFEOUYxMUUyOUVGQkEyOTAwOEIwMkNEMi9naDlOc2k3bG12 MVpPbjVvbnRxZnlVdmxoZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCixWVyObVA+DHHyG7QbLl093XfrZh4AU4NFF58yhaUW5bV1LV0I142 kor7Cq7/mNMu1YGY9L4Tz94cuOBA/z/b0LhxpOwJ6e+bsZz3tvN8hb6Mamc2zntR lcm8qGOq3iYHhrDW3N7vnxIRDIaCTWKyTcYvQhXVbtKcubfkEnfSA0N2vqOueYsE B6yDdUjkQsNIcCQTy17Qo/I8KZCWGmyad9tFdtNDQ+ofYw4Thh61Bqy9rPIgeQhl Y7d/M8kT0JrzBmryZK1O3YRlpnQAgTmV04P6310pohBQcEJBGAMtv//btxSVYPLO oBDnnYxixKma+ssuJgqeoOCpSf/tUuVk -----END CERTIFICATE-----Generated at Mon Oct 20 07:33:19 2025 by rpki-client