$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft File: cxFBrwp5OqMW733dLxsF-JHFZrI.mft (raw, json) Hash identifier: KldrCoqLi9AlK1cN5VWwFGjFvGLpQoWQRZjh6CqN0CQ= Subject key identifier: F2:B2:72:AA:76:75:97:3A:13:70:CB:74:A6:BC:32:13:A3:BA:35:4A Authority key identifier: 73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 Certificate issuer: /CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Certificate serial: 16CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft Manifest number: 16C0 Signing time: Sat 18 Oct 2025 17:05:17 +0000 Manifest this update: Sat 18 Oct 2025 17:05:17 +0000 Manifest next update: Sat 25 Oct 2025 17:05:17 +0000 Files and hashes: 1: cxFBrwp5OqMW733dLxsF-JHFZrI.crl (hash: 2uZr0JlW2oW10m1rpx9fgMPYtQ+a1fLQfptFwWH2JB8=) 2: E940EF3464B611EA9B743415C4F9AE02.roa (hash: ASMLpEvsvu5fZiBYK5kv36WlKk7sSJJC1YfYG/Sqc/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5836 (0x16cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDE0E, serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Validity Not Before: Oct 18 17:05:17 2025 GMT Not After : Oct 25 17:05:17 2025 GMT Subject: CN=68f3c8cd-ca34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:27:6c:3e:1c:3c:25:de:67:93:41:ae:0b:ef: 45:1c:fe:9d:9f:5d:de:71:07:29:97:a1:37:9d:4c: 56:6c:74:76:90:46:10:1b:49:14:97:1b:c9:4e:c9: 62:4c:58:93:03:50:d9:b9:70:63:25:49:b8:15:5a: 46:b2:d2:69:32:1c:35:f1:98:59:44:e0:e2:12:c6: 9d:7c:82:59:fc:ef:b0:c4:3b:35:30:e4:24:32:08: 8a:a4:90:de:3e:e3:c2:76:d4:48:e7:26:c8:1f:89: 45:63:aa:8a:20:22:1d:a4:ce:2c:cf:a0:93:7d:7e: 1a:ce:e6:c5:52:52:36:c6:9d:9a:84:c1:1c:48:9c: c8:14:8e:20:56:52:84:36:bf:ab:71:40:e4:92:8c: 84:50:92:c8:96:67:78:4b:3a:cd:fc:d5:56:7b:48: c8:52:01:df:10:44:5a:96:22:eb:9b:96:77:74:25: 38:ea:e9:c2:80:dc:83:dd:79:3f:14:06:2f:60:4e: 0e:b2:d2:ae:59:45:5d:c3:40:87:bf:51:80:0e:d9: 72:64:39:50:c1:a6:9c:3e:52:aa:66:cf:ba:fa:a2: 2e:f0:a0:73:62:0d:37:37:c4:f2:6b:56:b6:4c:55: a5:bb:a6:70:6d:a5:31:83:ec:a2:53:97:52:fa:91: 2b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B2:72:AA:76:75:97:3A:13:70:CB:74:A6:BC:32:13:A3:BA:35:4A X509v3 Authority Key Identifier: keyid:73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:cd:91:f1:da:57:c9:c5:f7:9d:65:07:65:08:63:1b:74:d8: 9d:7c:4f:49:98:43:2f:ae:13:cb:32:d1:78:c5:49:5d:49:73: ae:82:53:f7:3b:9a:0d:dc:e1:1f:34:cd:57:b6:33:02:17:48: 3c:b8:45:91:35:18:4e:ce:a4:e6:6b:7c:38:1a:ac:f4:96:3d: 67:94:66:93:3f:b8:c6:25:42:bc:60:b9:ae:49:5a:b2:7a:06: ad:68:7b:5d:43:e6:11:9d:b3:31:6d:44:59:c8:8c:b3:c0:0f: 6f:0b:39:fc:8d:69:f4:ed:61:ca:db:50:5c:c9:18:8e:bd:0d: 18:fc:d4:67:d9:e6:cd:e7:e0:6c:0e:8e:fb:a0:22:6c:32:0f: 21:62:d5:dd:77:ea:c2:7f:4e:4d:ee:83:17:d7:2d:53:3c:c8: ad:1c:a1:c2:28:1e:45:26:a3:00:c0:ab:32:58:19:f7:54:08: 28:d7:b6:75:9f:98:92:18:b0:90:b2:ee:0c:8e:cd:ab:83:b1: 8d:33:66:89:6b:48:d9:c1:3e:47:f1:3b:f5:c7:7a:d5:8d:93: 5e:17:ec:a8:7d:41:76:f0:2e:a9:e6:19:59:aa:c2:61:eb:7c: e5:d3:b5:7f:f6:06:ce:c2:78:e9:04:73:e3:6c:ec:f0:ce:8c: 35:b7:92:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFMEUxMTAvBgNVBAUTKDczMTE0MUFGMEE3OTNBQTMxNkVGN0RERDJGMUIwNUY4 OTFDNTY2QjIwHhcNMjUxMDE4MTcwNTE3WhcNMjUxMDI1MTcwNTE3WjAYMRYwFAYD VQQDEw02OGYzYzhjZC1jYTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqydsPhw8Jd5nk0GuC+9FHP6dn13ecQcpl6E3nUxWbHR2kEYQG0kUlxvJTsli TFiTA1DZuXBjJUm4FVpGstJpMhw18ZhZRODiEsadfIJZ/O+wxDs1MOQkMgiKpJDe PuPCdtRI5ybIH4lFY6qKICIdpM4sz6CTfX4azubFUlI2xp2ahMEcSJzIFI4gVlKE Nr+rcUDkkoyEUJLIlmd4SzrN/NVWe0jIUgHfEERaliLrm5Z3dCU46unCgNyD3Xk/ FAYvYE4OstKuWUVdw0CHv1GADtlyZDlQwaacPlKqZs+6+qIu8KBzYg03N8Tya1a2 TFWlu6ZwbaUxg+yiU5dS+pErcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKycqp2 dZc6E3DLdKa8MhOjujVKMB8GA1UdIwQYMBaAFHMRQa8KeTqjFu993S8bBfiRxWay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREUwRS82RTFFN0RFNDA1 N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9xTVc3MzNkTHhzRi1KSEZa ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4RkJyd3A1T3FNVzczM2RMeHNGLUpIRlpySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REUwRS82RTFFN0RFNDA1N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9x TVc3MzNkTHhzRi1KSEZackkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBczZHx2lfJxfedZQdlCGMbdNidfE9JmEMvrhPLMtF4xUldSXOuglP3 O5oN3OEfNM1XtjMCF0g8uEWRNRhOzqTma3w4Gqz0lj1nlGaTP7jGJUK8YLmuSVqy egataHtdQ+YRnbMxbURZyIyzwA9vCzn8jWn07WHK21BcyRiOvQ0Y/NRn2ebN5+Bs Do77oCJsMg8hYtXdd+rCf05N7oMX1y1TPMitHKHCKB5FJqMAwKsyWBn3VAgo17Z1 n5iSGLCQsu4Mjs2rg7GNM2aJa0jZwT5H8Tv1x3rVjZNeF+yofUF28C6p5hlZqsJh 63zl07V/9gbOwnjpBHPjbOzwzow1t5L1 -----END CERTIFICATE-----Generated at Mon Oct 20 09:30:13 2025 by rpki-client