$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft File: x67AwRtt8SmLElCYMaTMAkTa3PI.mft (raw, json) Hash identifier: FS+ZnAR23Rf3EVCCgVQw8ysRKs49j1kt5+XKP47+gTU= Subject key identifier: 13:E1:52:92:7F:06:61:43:01:39:F5:E8:D4:13:2A:16:12:50:AF:D3 Authority key identifier: C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 Certificate issuer: /CN=A91C612E/serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Certificate serial: 0700 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft Manifest number: 13AA Signing time: Sat 18 Oct 2025 19:16:16 +0000 Manifest this update: Sat 18 Oct 2025 19:16:16 +0000 Manifest next update: Sat 25 Oct 2025 19:16:16 +0000 Files and hashes: 1: x67AwRtt8SmLElCYMaTMAkTa3PI.crl (hash: XjvWUbeKIkhztOEqDyYs1KFIRpL03T2QupjqdGaM9xM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1792 (0x700) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=C7AEC0C11B6DF1298B12509831A4CC0244DADCF2 Validity Not Before: Oct 18 19:16:16 2025 GMT Not After : Oct 25 19:16:16 2025 GMT Subject: CN=68f3e780-ad53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:48:b9:70:59:0a:00:13:f5:37:6e:e0:7a:20: 87:d5:44:21:a5:22:18:66:2d:6e:8e:62:0d:ec:36: 0d:f7:89:11:ff:24:83:f0:69:b1:7d:13:7f:70:b1: 94:56:dd:6f:68:c7:59:74:25:ad:36:2c:64:14:6b: ce:c1:93:08:84:f3:af:22:d6:b6:18:2a:54:20:2d: 02:63:53:0e:bf:88:41:6f:2a:a9:6e:22:e5:b5:16: 32:5c:c1:91:65:3c:5b:38:1f:a4:c4:ae:1c:d7:f8: 47:dc:a1:46:b9:6f:38:b4:e8:9b:13:55:39:0e:a8: ea:34:4b:58:36:0a:f1:de:d7:4f:a9:e1:78:ba:a9: d0:23:2c:30:bc:8b:e9:6f:51:5b:32:90:47:fe:c6: 99:4b:b3:23:98:9a:ed:43:0f:bb:fe:d4:f6:08:ca: 3e:b7:5a:38:82:57:37:ce:f4:50:ed:3c:08:cc:63: af:eb:c3:a0:78:05:ce:6d:5c:ed:ce:77:19:f3:72: 36:68:7a:a4:8e:f1:06:e8:45:6c:26:f4:c1:e2:d1: e3:d9:5d:8f:84:ad:4f:aa:82:55:ff:fe:4c:5f:1f: 29:f7:4d:79:46:10:23:7a:b8:0b:c8:ff:53:73:7a: 91:aa:be:67:e1:c9:4e:a9:f6:e4:8f:78:be:a5:da: 60:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E1:52:92:7F:06:61:43:01:39:F5:E8:D4:13:2A:16:12:50:AF:D3 X509v3 Authority Key Identifier: keyid:C7:AE:C0:C1:1B:6D:F1:29:8B:12:50:98:31:A4:CC:02:44:DA:DC:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x67AwRtt8SmLElCYMaTMAkTa3PI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/x67AwRtt8SmLElCYMaTMAkTa3PI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:54:91:9f:4a:74:54:95:60:3b:72:dc:0b:7b:c9:d7:70:a9: 1a:42:b3:80:93:bf:6f:ee:d1:d2:15:f7:45:f1:18:bf:d9:cd: ef:48:9e:92:7b:d7:ed:6d:be:04:34:7e:44:85:be:77:10:1d: 36:f3:8d:61:7b:99:ae:bb:ce:91:e6:f7:f3:09:12:af:7a:e4: 42:d0:e9:05:64:af:5c:ab:59:e7:fd:2f:8a:26:12:c5:3c:38: 35:3a:2d:7b:f0:fa:81:48:7d:be:53:77:c6:ee:4b:58:11:50: bf:3f:f5:0a:11:66:e7:f5:fe:81:1f:a2:db:cb:5a:02:36:14: 0f:5c:67:20:4b:9c:8c:55:1f:d2:09:e0:24:24:0f:6a:e5:5a: e2:8f:4c:1a:f4:fe:b7:4e:02:18:72:5b:22:c9:b7:5a:f8:9a: 9b:d4:d1:f2:2f:5e:07:6b:de:72:1d:1a:fd:34:d0:0b:58:d1: 80:92:6f:b9:2b:6f:4e:17:2f:30:61:87:e2:4a:0e:fc:b8:17: 9c:84:d5:c0:52:18:3c:47:30:0c:e0:c5:95:1a:c8:cc:dc:80: 00:71:04:1e:77:d4:ee:c9:c2:bc:bf:ec:93:7a:ec:ea:3d:f7: 42:1f:06:01:b3:59:16:17:e9:e5:a8:66:b2:2f:92:bc:d9:24: d1:75:31:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKEM3QUVDMEMxMUI2REYxMjk4QjEyNTA5ODMxQTRDQzAy NDREQURDRjIwHhcNMjUxMDE4MTkxNjE2WhcNMjUxMDI1MTkxNjE2WjAYMRYwFAYD VQQDEw02OGYzZTc4MC1hZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEi5cFkKABP1N27geiCH1UQhpSIYZi1ujmIN7DYN94kR/ySD8GmxfRN/cLGU Vt1vaMdZdCWtNixkFGvOwZMIhPOvIta2GCpUIC0CY1MOv4hBbyqpbiLltRYyXMGR ZTxbOB+kxK4c1/hH3KFGuW84tOibE1U5DqjqNEtYNgrx3tdPqeF4uqnQIywwvIvp b1FbMpBH/saZS7MjmJrtQw+7/tT2CMo+t1o4glc3zvRQ7TwIzGOv68OgeAXObVzt zncZ83I2aHqkjvEG6EVsJvTB4tHj2V2PhK1PqoJV//5MXx8p9015RhAjergLyP9T c3qRqr5n4clOqfbkj3i+pdpgmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBPhUpJ/ BmFDATn16NQTKhYSUK/TMB8GA1UdIwQYMBaAFMeuwMEbbfEpixJQmDGkzAJE2tzy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhTbUxFbENZTWFUTUFrVGEz UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g2N0F3UnR0OFNtTEVsQ1lNYVRNQWtUYTNQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi94NjdBd1J0dDhT bUxFbENZTWFUTUFrVGEzUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdVJGfSnRUlWA7ctwLe8nXcKkaQrOAk79v7tHSFfdF8Ri/2c3vSJ6S e9ftbb4ENH5Ehb53EB02841he5muu86R5vfzCRKveuRC0OkFZK9cq1nn/S+KJhLF PDg1Oi178PqBSH2+U3fG7ktYEVC/P/UKEWbn9f6BH6Lby1oCNhQPXGcgS5yMVR/S CeAkJA9q5Vrij0wa9P63TgIYclsiybda+Jqb1NHyL14Ha95yHRr9NNALWNGAkm+5 K29OFy8wYYfiSg78uBechNXAUhg8RzAM4MWVGsjM3IAAcQQed9TuycK8v+yTeuzq PfdCHwYBs1kWF+nlqGayL5K82STRdTEX -----END CERTIFICATE-----Generated at Mon Oct 20 07:07:05 2025 by rpki-client