$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft File: cPEzmWaoGrwgfjvuM3CR2fLzydc.mft (raw, json) Hash identifier: HjgI4/OL/j1LqyF6TjQDvfUI7A3wxtUPtFjFIFw7Fd0= Subject key identifier: 68:C9:18:A2:3D:D2:5A:F1:72:6C:23:22:49:51:9D:94:EF:7D:87:B0 Authority key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 Certificate issuer: /CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft Manifest number: 01D3 Signing time: Sun 19 Oct 2025 02:59:04 +0000 Manifest this update: Sun 19 Oct 2025 02:59:04 +0000 Manifest next update: Sun 26 Oct 2025 02:59:04 +0000 Files and hashes: 1: cPEzmWaoGrwgfjvuM3CR2fLzydc.crl (hash: rifddykn3kTA0JZ3pYrr6N6zvzCMhN4FG9TDzhmWYrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324, serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Validity Not Before: Oct 19 02:59:04 2025 GMT Not After : Oct 26 02:59:04 2025 GMT Subject: CN=68f453f8-8671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ff:ae:b3:23:59:35:97:8d:9a:67:58:32:ab: e0:cd:c5:1f:ec:d2:f9:ee:b5:0f:3b:35:cf:de:9d: 87:b0:73:a3:5e:5b:73:03:4b:20:66:99:b7:7f:9d: d9:ec:65:91:ef:b9:1c:a0:96:7b:27:da:e1:9e:a2: 6f:81:05:a5:67:d5:0b:5d:16:8b:3d:05:28:05:e7: e1:63:89:d3:46:1b:0b:a2:d3:7b:a8:f2:66:ae:a9: 03:82:ab:9c:97:5e:02:10:8e:bb:c3:ae:cb:e4:91: 40:a7:76:10:52:d8:08:04:56:02:05:64:38:d3:69: 92:b7:03:2d:de:50:68:6f:8a:b9:09:e1:9f:46:73: b5:20:12:45:41:b2:ca:2d:dd:d1:93:92:fd:f2:df: 31:6f:8e:f4:91:24:9b:60:a1:b6:54:1c:b3:91:a5: f5:93:0e:86:39:bc:49:2d:28:c5:59:73:98:e0:04: 4e:73:f1:53:4d:d5:17:c9:29:27:70:82:55:91:f5: b2:35:1c:ea:ee:8f:df:0a:74:fb:71:7b:34:0e:12: db:9e:7f:78:2e:c0:f3:df:26:3a:dd:24:57:90:43: eb:9f:b7:aa:c5:74:f5:dd:4f:ea:ca:4c:90:30:e1: 60:a6:ac:22:f1:3c:33:80:c5:92:bb:18:b3:3c:03: de:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C9:18:A2:3D:D2:5A:F1:72:6C:23:22:49:51:9D:94:EF:7D:87:B0 X509v3 Authority Key Identifier: keyid:70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:03:38:07:19:27:22:0a:f8:84:97:54:75:0d:52:37:28:a7: 6e:0d:44:c2:ee:6a:e8:cd:77:96:df:1e:03:51:13:33:7c:b3: dd:92:d3:3a:f3:34:96:5d:b0:84:d1:31:41:4c:bf:a9:ae:7b: 83:05:36:8f:79:da:a2:73:c8:10:dc:37:7e:13:ab:78:78:5a: 47:d7:90:70:9b:5b:03:3b:85:6e:a2:58:79:47:97:b6:e4:28: ef:3e:e8:d2:cc:05:29:aa:4d:70:1e:38:e7:eb:2d:48:f3:14: b9:b6:5c:a8:e9:4f:ea:b7:c5:93:30:fa:a4:6f:ef:aa:b3:ce: 6c:20:c8:ff:db:0e:f0:78:96:c7:cb:1e:48:8a:5e:9c:9b:b0: 59:94:b8:d1:f1:49:01:27:fd:14:84:b6:71:dc:31:47:54:db: 5e:3a:47:64:52:47:a8:8b:5b:2e:77:50:7f:1d:bd:cc:df:65: 8a:e0:03:ac:da:df:f6:81:4d:c8:62:c1:27:35:c4:c1:b5:e7: c4:bb:cb:ec:df:db:fa:9c:32:0b:d5:65:92:25:cd:01:96:70: 98:88:6a:9b:04:7e:3e:cf:68:8f:e1:40:af:9d:89:3f:87:a8: a4:dd:6c:de:80:9d:7d:17:65:27:12:23:5b:62:a3:ce:10:9a: 40:5d:13:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDcwRjEzMzk5NjZBODFBQkMyMDdFM0JFRTMzNzA5MUQ5 RjJGM0M5RDcwHhcNMjUxMDE5MDI1OTA0WhcNMjUxMDI2MDI1OTA0WjAYMRYwFAYD VQQDEw02OGY0NTNmOC04NjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/+usyNZNZeNmmdYMqvgzcUf7NL57rUPOzXP3p2HsHOjXltzA0sgZpm3f53Z 7GWR77kcoJZ7J9rhnqJvgQWlZ9ULXRaLPQUoBefhY4nTRhsLotN7qPJmrqkDgquc l14CEI67w67L5JFAp3YQUtgIBFYCBWQ402mStwMt3lBob4q5CeGfRnO1IBJFQbLK Ld3Rk5L98t8xb470kSSbYKG2VByzkaX1kw6GObxJLSjFWXOY4AROc/FTTdUXySkn cIJVkfWyNRzq7o/fCnT7cXs0DhLbnn94LsDz3yY63SRXkEPrn7eqxXT13U/qykyQ MOFgpqwi8TwzgMWSuxizPAPehwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjJGKI9 0lrxcmwjIklRnZTvfYewMB8GA1UdIwQYMBaAFHDxM5lmqBq8IH477jNwkdny88nX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC8yMkJGOEQzMkUw MkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dyd2dmanZ1TTNDUjJmTHp5 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NQRXptV2FvR3J3Z2ZqdnVNM0NSMmZMenlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTMyNC8yMkJGOEQzMkUwMkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dy d2dmanZ1TTNDUjJmTHp5ZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7AzgHGSciCviEl1R1DVI3KKduDUTC7mrozXeW3x4DURMzfLPdktM6 8zSWXbCE0TFBTL+prnuDBTaPedqic8gQ3Dd+E6t4eFpH15Bwm1sDO4Vuolh5R5e2 5CjvPujSzAUpqk1wHjjn6y1I8xS5tlyo6U/qt8WTMPqkb++qs85sIMj/2w7weJbH yx5Iil6cm7BZlLjR8UkBJ/0UhLZx3DFHVNteOkdkUkeoi1sud1B/Hb3M32WK4AOs 2t/2gU3IYsEnNcTBtefEu8vs39v6nDIL1WWSJc0BlnCYiGqbBH4+z2iP4UCvnYk/ h6ik3WzegJ19F2UnEiNbYqPOEJpAXRO7 -----END CERTIFICATE-----Generated at Tue Oct 21 00:03:55 2025 by rpki-client