$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft File: xCkJXLK5d7BnGRGTtDubL14Zyug.mft (raw, json) Hash identifier: +2ufUvrYs5x3aTsogyFPkL7VwLmrISMS2CiBhUmUSU8= Subject key identifier: 85:F0:0A:A0:B3:73:7C:DD:48:77:64:3C:E8:E8:CA:B8:C4:E9:CC:58 Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 Certificate issuer: /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft Manifest number: 94 Signing time: Sun 19 Oct 2025 09:40:01 +0000 Manifest this update: Sun 19 Oct 2025 09:40:00 +0000 Manifest next update: Sun 26 Oct 2025 09:40:00 +0000 Files and hashes: 1: xCkJXLK5d7BnGRGTtDubL14Zyug.crl (hash: 6KVPE8UDIswyZCDgsao3ndBkWWhFJ0mrlWnYvZBywug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDBF5, serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8 Validity Not Before: Oct 19 09:40:00 2025 GMT Not After : Oct 26 09:40:00 2025 GMT Subject: CN=68f4b1f1-98dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6e:a1:da:0f:de:8c:22:8a:7c:78:f9:95:85: 4f:cf:30:df:45:40:24:86:3a:bd:77:d4:3f:44:c2: 0f:56:b0:00:f7:49:88:d1:02:1b:06:d8:05:7c:63: 66:ae:b5:9a:db:f7:cb:4e:a4:4e:a3:d6:db:06:98: 2d:7e:35:92:eb:ae:f7:7c:aa:21:cf:88:75:22:7d: 82:cf:30:8c:da:79:2b:f5:3e:86:8b:69:a0:b4:90: 8d:50:72:36:79:27:0e:0e:47:c4:d2:11:25:61:d7: 43:28:96:55:05:9e:b2:60:08:67:8a:ff:8b:bb:c6: d7:c9:a3:1f:7d:e7:5e:05:8e:6e:64:41:75:81:13: 74:2b:18:85:de:ea:67:34:c5:5a:88:b5:ca:bc:2e: d1:6f:54:cc:fd:b0:d7:b4:55:fe:73:a7:90:91:c0: b2:54:a7:7c:bf:49:45:ea:8e:e3:46:cc:5e:65:28: 92:4c:77:5b:64:68:44:48:68:d6:41:eb:86:97:0c: ab:96:33:67:1f:16:d4:7e:1c:a6:31:20:b4:dd:c5: d3:00:0e:6f:28:b3:8d:47:60:69:24:ee:56:00:2e: 9f:d5:81:11:2a:63:70:d9:b5:2b:8c:4d:7a:04:f1: 77:8b:ee:7f:72:43:58:0c:f2:6f:6b:6f:05:f1:b7: f0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F0:0A:A0:B3:73:7C:DD:48:77:64:3C:E8:E8:CA:B8:C4:E9:CC:58 X509v3 Authority Key Identifier: keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:22:2a:8b:5b:9a:e6:e3:13:e3:b7:c9:72:25:58:ab:eb:f7: 3b:35:29:20:c4:e2:65:9a:10:2a:1a:c8:18:fd:7d:09:16:a6: 2f:eb:d5:4a:7f:fc:33:5e:07:38:e3:04:16:aa:24:de:3d:bc: b0:20:ba:36:2a:24:9a:2a:43:49:57:54:ee:f1:f7:b4:2c:2f: 8f:af:e3:fd:95:4b:b3:dd:3a:69:4f:9f:4d:d8:7e:fe:9a:a4: 60:68:8d:e0:f3:28:62:d7:3e:90:d0:f3:f7:91:eb:15:37:67: 6f:7c:ac:05:2b:73:e2:42:ee:99:2f:24:26:23:34:c5:16:51: 9d:b8:2a:55:d6:ff:2b:e9:f8:21:7e:de:41:0c:38:37:65:29: 74:54:e8:e5:e2:7d:38:5c:dc:2c:64:78:77:eb:bf:2e:49:84: e9:95:65:c2:0c:d6:35:e6:cb:91:f5:4b:d8:1f:ab:4e:3a:6b: 64:0d:20:23:4e:15:02:03:07:20:4e:dd:48:19:8c:57:da:9a: 65:46:50:fe:15:46:77:f3:ef:fe:79:fe:e0:ac:d5:85:2e:24: 39:e5:89:95:a2:88:48:1b:43:2e:34:48:fb:a3:c4:eb:32:ef: ea:b5:65:67:c3:d7:70:45:00:1b:74:62:b2:c5:47:7f:1a:d2: 3a:2c:30:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCRjUxMTAvBgNVBAUTKEM0MjkwOTVDQjJCOTc3QjA2NzE5MTE5M0I0M0I5QjJG NUUxOUNBRTgwHhcNMjUxMDE5MDk0MDAwWhcNMjUxMDI2MDk0MDAwWjAYMRYwFAYD VQQDEw02OGY0YjFmMS05OGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqW6h2g/ejCKKfHj5lYVPzzDfRUAkhjq9d9Q/RMIPVrAA90mI0QIbBtgFfGNm rrWa2/fLTqROo9bbBpgtfjWS6673fKohz4h1In2CzzCM2nkr9T6Gi2mgtJCNUHI2 eScODkfE0hElYddDKJZVBZ6yYAhniv+Lu8bXyaMffedeBY5uZEF1gRN0KxiF3upn NMVaiLXKvC7Rb1TM/bDXtFX+c6eQkcCyVKd8v0lF6o7jRsxeZSiSTHdbZGhESGjW QeuGlwyrljNnHxbUfhymMSC03cXTAA5vKLONR2BpJO5WAC6f1YERKmNw2bUrjE16 BPF3i+5/ckNYDPJva28F8bfwAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXwCqCz c3zdSHdkPOjoyrjE6cxYMB8GA1UdIwQYMBaAFMQpCVyyuXewZxkRk7Q7my9eGcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREJGNS82NjU5RjUxRUNC NTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3Qm5HUkdUdER1YkwxNFp5 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDa0pYTEs1ZDdCbkdSR1R0RHViTDE0Wnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REJGNS82NjU5RjUxRUNCNTExMUVGOTA0MDBEMTdDNEY5QUUwMi94Q2tKWExLNWQ3 Qm5HUkdUdER1YkwxNFp5dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEIiqLW5rm4xPjt8lyJVir6/c7NSkgxOJlmhAqGsgY/X0JFqYv69VK f/wzXgc44wQWqiTePbywILo2KiSaKkNJV1Tu8fe0LC+Pr+P9lUuz3TppT59N2H7+ mqRgaI3g8yhi1z6Q0PP3kesVN2dvfKwFK3PiQu6ZLyQmIzTFFlGduCpV1v8r6fgh ft5BDDg3ZSl0VOjl4n04XNwsZHh3678uSYTplWXCDNY15suR9UvYH6tOOmtkDSAj ThUCAwcgTt1IGYxX2pplRlD+FUZ38+/+ef7grNWFLiQ55YmVoohIG0MuNEj7o8Tr Mu/qtWVnw9dwRQAbdGKyxUd/GtI6LDDX -----END CERTIFICATE-----Generated at Mon Oct 20 12:04:18 2025 by rpki-client