$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft File: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft (raw, json) Hash identifier: GhlUwHSPiUcRvyJh7dHXNIhoH/u36dy9z+ZZ+SgdxXE= Subject key identifier: 92:22:14:56:F0:AF:DB:19:E7:28:32:05:F7:95:37:CD:75:67:0A:91 Authority key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D Certificate issuer: /CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D Certificate serial: 085C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft Manifest number: 0B8A Signing time: Sat 18 Oct 2025 21:48:45 +0000 Manifest this update: Sat 18 Oct 2025 21:48:44 +0000 Manifest next update: Sat 25 Oct 2025 21:48:44 +0000 Files and hashes: 1: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl (hash: MTLiY8p3hT51lLp/ZdnTTn1eTR8TDSMUgHqW8r0eP4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2140 (0x85c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=A59D836E1C31623CC586448AA752B746853B841D Validity Not Before: Oct 18 21:48:44 2025 GMT Not After : Oct 25 21:48:44 2025 GMT Subject: CN=68f40b3d-4ad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:72:2c:7c:b7:f5:31:82:3d:90:fa:76:6b: b1:57:b7:2c:ea:14:44:43:2e:f7:f7:e9:cd:a4:df: fc:b7:17:8e:93:bc:19:98:6e:78:ee:56:74:46:4e: 3a:41:77:ef:4c:31:5d:f4:20:90:64:cc:2f:74:56: 7f:d8:4f:e9:ba:32:43:6b:08:fe:72:03:26:ad:24: b3:7c:00:8a:b3:8c:a5:c7:4e:7b:a7:e8:de:13:d2: 70:64:4c:8b:9c:fa:24:4f:0f:78:0c:b5:a7:3e:8c: 6e:39:38:07:d4:fe:61:a2:c2:5c:bd:cd:7a:aa:8f: 0f:3f:f7:4b:e0:99:b7:34:b3:78:d5:b2:8e:a7:c9: 4e:0a:b4:44:ea:19:e0:a0:9f:00:3a:ca:86:9d:ef: d0:ae:29:13:a0:66:24:95:2d:d0:9f:44:2a:f8:ea: f3:3f:6b:08:36:82:18:8d:30:f3:4c:db:96:03:7c: b1:c3:4b:b5:db:dd:f6:8e:ff:48:23:52:e5:57:3b: f7:bd:56:35:76:71:59:35:66:02:cd:1b:f7:49:42: cc:3a:05:aa:0d:41:8d:90:31:e0:5a:cb:64:15:c1: e4:31:f5:08:16:69:89:0d:62:04:69:f9:4c:19:68: 4a:2e:32:ae:ce:60:be:78:8e:7f:0e:17:2c:ca:78: 80:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:22:14:56:F0:AF:DB:19:E7:28:32:05:F7:95:37:CD:75:67:0A:91 X509v3 Authority Key Identifier: keyid:A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:3a:c9:0e:eb:b0:7d:13:5c:12:1d:3a:62:5c:78:0e:0d:62: 15:b7:db:29:08:f0:7c:2b:f4:53:dd:f2:f1:b3:c3:83:48:fb: d5:af:c3:30:8b:94:20:10:f5:9b:fc:59:49:6e:a7:3c:23:c7: 5d:a2:01:fa:81:07:38:a6:76:b7:42:88:dd:74:99:e4:29:f6: dc:5a:93:38:1d:db:18:0b:54:b8:b7:05:b9:77:20:a3:ac:44: 55:50:64:db:e9:00:d1:53:44:e5:61:50:ff:d2:f9:74:0a:a9: e4:24:f4:5a:65:89:9d:4f:64:2c:91:a4:51:d1:78:43:c0:97: 21:b6:fb:07:bd:2c:67:af:91:56:dd:50:a4:b4:2f:7e:f8:1e: 7c:86:06:cd:fa:d7:23:07:30:c9:81:24:1c:79:ef:ae:c5:ff: 87:77:59:99:db:86:62:41:d2:41:82:0b:d3:c8:ef:68:89:83: 49:33:a0:eb:96:cf:0a:17:6b:dd:80:39:48:d1:eb:42:2e:b7: 0a:0f:0a:a3:e7:50:1e:19:03:a0:2a:f4:04:e0:2c:9b:62:d2: dc:31:6a:8e:ee:7a:66:fb:b2:49:ed:7b:57:99:96:40:ad:17: 57:e8:32:2d:f6:af:54:0c:85:73:a9:6a:dd:ae:eb:c1:ec:63: c1:f9:af:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEE1OUQ4MzZFMUMzMTYyM0NDNTg2NDQ4QUE3NTJCNzQ2 ODUzQjg0MUQwHhcNMjUxMDE4MjE0ODQ0WhcNMjUxMDI1MjE0ODQ0WjAYMRYwFAYD VQQDEw02OGY0MGIzZC00YWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2dyLHy39TGCPZD6dmuxV7cs6hREQy739+nNpN/8txeOk7wZmG547lZ0Rk46 QXfvTDFd9CCQZMwvdFZ/2E/pujJDawj+cgMmrSSzfACKs4ylx057p+jeE9JwZEyL nPokTw94DLWnPoxuOTgH1P5hosJcvc16qo8PP/dL4Jm3NLN41bKOp8lOCrRE6hng oJ8AOsqGne/QrikToGYklS3Qn0Qq+OrzP2sINoIYjTDzTNuWA3yxw0u12932jv9I I1LlVzv3vVY1dnFZNWYCzRv3SULMOgWqDUGNkDHgWstkFcHkMfUIFmmJDWIEaflM GWhKLjKuzmC+eI5/DhcsyniA6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIiFFbw r9sZ5ygyBfeVN811ZwqRMB8GA1UdIwQYMBaAFKWdg24cMWI8xYZEiqdSt0aFO4Qd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlqekZoa1NLcDFLM1JvVTdo QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BaMkRiaHd4WWp6RmhrU0twMUszUm9VN2hCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlq ekZoa1NLcDFLM1JvVTdoQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1OskO67B9E1wSHTpiXHgODWIVt9spCPB8K/RT3fLxs8ODSPvVr8Mw i5QgEPWb/FlJbqc8I8ddogH6gQc4pna3QojddJnkKfbcWpM4HdsYC1S4twW5dyCj rERVUGTb6QDRU0TlYVD/0vl0CqnkJPRaZYmdT2QskaRR0XhDwJchtvsHvSxnr5FW 3VCktC9++B58hgbN+tcjBzDJgSQcee+uxf+Hd1mZ24ZiQdJBggvTyO9oiYNJM6Dr ls8KF2vdgDlI0etCLrcKDwqj51AeGQOgKvQE4CybYtLcMWqO7npm+7JJ7XtXmZZA rRdX6DIt9q9UDIVzqWrdruvB7GPB+a/d -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:26 2025 by rpki-client