$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft File: iS3iAjP9DGSOLnuflZUPOpaBfL8.mft (raw, json) Hash identifier: ez3+sw948HlLkntIIwJ/ieOs9zsGIEHPxbxEIWmMe0w= Subject key identifier: 7A:44:64:E7:D2:55:85:2F:5C:52:05:5D:8A:05:40:F3:C1:0A:53:6F Authority key identifier: 89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF Certificate issuer: /CN=A91C7175/serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft Manifest number: D7 Signing time: Sun 19 Oct 2025 08:41:09 +0000 Manifest this update: Sun 19 Oct 2025 08:41:09 +0000 Manifest next update: Sun 26 Oct 2025 08:41:09 +0000 Files and hashes: 1: iS3iAjP9DGSOLnuflZUPOpaBfL8.crl (hash: voP0bX7wryIKnLt1BvalJmMN292qVX4dd8k4r0KjFd0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175, serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF Validity Not Before: Oct 19 08:41:09 2025 GMT Not After : Oct 26 08:41:09 2025 GMT Subject: CN=68f4a425-ce76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:09:b9:cc:ef:34:81:d8:2c:36:ed:43:54:53: f5:70:dd:43:57:14:c3:8d:20:93:95:5a:eb:4e:ec: 5c:de:bd:2a:26:3e:81:81:b5:35:53:67:01:43:b2: 95:aa:c9:8c:0a:bd:65:17:e2:73:31:e9:48:9f:49: a1:9f:3c:de:a9:5e:71:d7:f1:ff:48:35:be:8a:75: 9f:1d:bf:67:c8:94:ae:27:1c:06:1b:f9:68:2c:15: b7:8f:0c:fc:ed:85:7e:c2:52:ce:83:73:fc:9e:77: 62:c2:ea:3a:60:ed:f3:ec:08:4d:d9:14:bf:96:b9: e3:13:06:e6:50:b5:4b:e1:4f:2f:15:46:02:24:1c: 4a:a5:75:47:5d:92:32:dd:60:b3:ca:50:45:64:82: 73:16:0a:39:6b:f1:5d:8a:a9:44:29:2f:a8:2f:c7: 7f:10:73:a3:08:f3:c6:fb:5f:cb:e7:4a:92:24:12: 24:16:6b:da:4d:53:74:d6:44:4f:6e:1f:66:46:71: 61:aa:fe:59:37:08:32:1f:1d:41:e8:2f:ea:06:c9: 91:d6:9e:a7:8f:7e:8f:e4:12:28:cc:c0:51:38:5e: b8:f7:c5:53:d0:3a:f4:7e:93:c4:cf:a0:22:6c:6f: 4e:ab:b3:49:b0:97:69:0f:ab:f2:df:50:cf:92:94: a9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:44:64:E7:D2:55:85:2F:5C:52:05:5D:8A:05:40:F3:C1:0A:53:6F X509v3 Authority Key Identifier: keyid:89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:1f:c0:7e:4b:3f:ec:a6:3c:63:2a:84:56:ac:6b:c4:33:35: a4:93:ee:18:19:c9:ea:2a:a1:f8:46:41:b0:99:12:6d:71:40: 3b:b0:e3:ed:bf:f2:d4:87:e7:ab:44:9b:ba:49:4e:6e:44:2b: ba:d2:0f:df:63:59:1a:46:4d:4b:79:88:40:26:11:3f:b4:fb: b0:51:1a:c1:ec:20:a1:52:25:b4:d7:c1:e2:13:0c:0f:64:94: 50:f3:1c:7f:f5:a5:28:6b:be:02:c8:31:8a:94:2b:3b:22:a0: 3a:23:a8:f4:f4:99:82:b2:9b:9d:e7:aa:51:87:b4:fb:05:dc: c9:9a:c3:73:09:16:85:67:02:df:ba:63:94:d7:93:97:3a:41: 3d:3b:0e:4c:25:55:2c:eb:a1:9b:03:16:cf:6e:37:17:1e:26: 9d:bc:0c:2c:78:cc:05:a4:da:f6:27:dd:9e:03:f9:91:be:d7: 01:4f:b2:4f:32:56:fd:cb:bb:25:ee:9d:28:56:da:8b:cb:fe: 3d:f6:6f:81:f0:19:e3:5e:74:88:ea:79:de:1a:de:6b:a0:d6: bd:1d:8c:da:5b:ba:45:14:02:e4:78:7f:f7:c6:89:f4:35:ab: d5:7b:b3:07:f2:cd:19:28:15:a4:a4:f0:11:cc:2e:39:d0:e1: 40:84:96:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxNzUxMTAvBgNVBAUTKDg5MkRFMjAyMzNGRDBDNjQ4RTJFN0I5Rjk1OTUwRjNB OTY4MTdDQkYwHhcNMjUxMDE5MDg0MTA5WhcNMjUxMDI2MDg0MTA5WjAYMRYwFAYD VQQDEw02OGY0YTQyNS1jZTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQm5zO80gdgsNu1DVFP1cN1DVxTDjSCTlVrrTuxc3r0qJj6BgbU1U2cBQ7KV qsmMCr1lF+JzMelIn0mhnzzeqV5x1/H/SDW+inWfHb9nyJSuJxwGG/loLBW3jwz8 7YV+wlLOg3P8nndiwuo6YO3z7AhN2RS/lrnjEwbmULVL4U8vFUYCJBxKpXVHXZIy 3WCzylBFZIJzFgo5a/FdiqlEKS+oL8d/EHOjCPPG+1/L50qSJBIkFmvaTVN01kRP bh9mRnFhqv5ZNwgyHx1B6C/qBsmR1p6nj36P5BIozMBROF6498VT0Dr0fpPEz6Ai bG9Oq7NJsJdpD6vy31DPkpSpHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpEZOfS VYUvXFIFXYoFQPPBClNvMB8GA1UdIwQYMBaAFIkt4gIz/Qxkji57n5WVDzqWgXy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE3NS9GMjJCOUNDQTY4 RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9pUzNpQWpQOURHU09MbnVmbFpVUE9wYUJm TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lTM2lBalA5REdTT0xudWZsWlVQT3BhQmZMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzE3NS9GMjJCOUNDQTY4RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9pUzNpQWpQOURH U09MbnVmbFpVUE9wYUJmTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtH8B+Sz/spjxjKoRWrGvEMzWkk+4YGcnqKqH4RkGwmRJtcUA7sOPt v/LUh+erRJu6SU5uRCu60g/fY1kaRk1LeYhAJhE/tPuwURrB7CChUiW018HiEwwP ZJRQ8xx/9aUoa74CyDGKlCs7IqA6I6j09JmCspud56pRh7T7BdzJmsNzCRaFZwLf umOU15OXOkE9Ow5MJVUs66GbAxbPbjcXHiadvAwseMwFpNr2J92eA/mRvtcBT7JP Mlb9y7sl7p0oVtqLy/499m+B8BnjXnSI6nneGt5roNa9HYzaW7pFFALkeH/3xon0 NavVe7MH8s0ZKBWkpPARzC450OFAhJY7 -----END CERTIFICATE-----Generated at Mon Oct 20 04:19:27 2025 by rpki-client