$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft File: 1N8l4OzS44CPaHDuVvcPJVgYkz4.mft (raw, json) Hash identifier: xnFrKhUi+bHp+HJSzEAf4UbHzvUjdjnhBs6dIbW15lc= Subject key identifier: C9:84:20:1C:C6:04:C2:F5:9E:3B:D4:8A:25:90:5F:FF:67:87:F9:6B Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E Certificate issuer: /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft Manifest number: EB Signing time: Sun 19 Oct 2025 08:18:10 +0000 Manifest this update: Sun 19 Oct 2025 08:18:09 +0000 Manifest next update: Sun 26 Oct 2025 08:18:09 +0000 Files and hashes: 1: 1N8l4OzS44CPaHDuVvcPJVgYkz4.crl (hash: M5y1kles9tt5ipbEUz4HWgD0E70I4l4gXYTxwK9y7RU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D260A, serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E Validity Not Before: Oct 19 08:18:09 2025 GMT Not After : Oct 26 08:18:09 2025 GMT Subject: CN=68f49ec2-b472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:84:4d:94:4b:49:c3:8a:02:59:35:f5:13:44: 82:07:ee:18:4c:96:fa:0e:87:27:57:8f:fa:0a:9f: 52:7b:7b:e5:3a:6c:bc:f5:88:48:f6:d2:12:98:ef: d1:36:1e:d2:82:69:93:a2:01:10:ad:18:ca:6b:3b: 9c:78:d6:5e:eb:85:61:62:4b:fe:d1:09:5a:b3:a4: 70:02:bc:fa:27:0f:28:8a:4c:88:57:9f:9e:bc:66: 49:42:71:3d:85:01:00:ba:a9:c9:6e:06:f3:fb:99: b8:4b:88:c2:5b:38:21:fd:f7:34:73:d2:89:e0:ac: 85:8e:17:51:e9:6d:57:8f:a3:17:01:94:36:50:c2: f2:0d:2e:bb:c7:26:6c:80:c5:e3:5a:55:65:a2:5f: fc:0e:5f:f9:17:0e:7f:2b:92:1e:7a:0e:8d:a6:ad: 0e:ab:5a:0d:ba:7c:25:74:02:be:87:da:48:ce:91: 38:f5:77:40:4f:53:11:62:60:d2:ad:dc:fe:40:e9: 85:53:ad:78:9b:a1:db:e6:b6:9c:59:bf:3b:93:69: ac:d5:c2:26:bc:d1:96:d7:b7:ba:ce:73:e5:9e:6b: e1:50:98:9a:34:01:f5:89:4d:7a:6e:0b:d2:67:c2: b7:25:65:a3:fa:6b:dc:db:43:fd:67:f1:d5:ac:c4: 6f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:84:20:1C:C6:04:C2:F5:9E:3B:D4:8A:25:90:5F:FF:67:87:F9:6B X509v3 Authority Key Identifier: keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:4f:59:22:d8:ea:af:ac:2b:f5:f0:f4:4a:38:41:27:43:ea: 45:51:79:98:18:4e:0a:c1:69:13:37:26:ec:86:75:f3:bf:c8: a0:17:f9:5e:b4:0b:96:ff:bc:d7:25:8c:9d:5d:38:49:66:58: 69:18:30:ad:be:15:fb:4e:75:10:4e:2b:60:93:b5:06:9a:78: 4e:ad:3a:19:8e:13:61:70:99:f5:e0:60:f0:ad:62:89:15:91: 49:76:00:82:22:19:5c:8d:0d:56:4a:fa:6e:bc:5e:27:62:3a: fc:2d:f7:34:53:14:9e:23:73:2b:da:f3:d2:b5:31:67:0b:e6: a5:e9:11:36:a6:78:a1:c3:a7:ca:7e:0f:93:66:cd:f7:22:5b: 2c:f0:75:5e:65:36:e4:b1:f5:2c:2d:c0:a0:21:9a:0e:b9:26: 3a:61:6b:68:ce:45:9b:7f:72:ec:bb:15:5f:f3:55:43:58:ea: 11:03:ec:33:ec:4d:42:93:34:14:83:9d:9f:88:fd:87:99:f7: 81:bd:d8:dd:6c:03:e2:d4:f8:c0:d5:6e:93:92:d1:aa:f0:3e: 4c:81:13:db:b8:86:3b:85:2a:99:a7:68:e0:4d:c2:ab:87:2e: 28:55:c8:e2:04:1f:b6:da:ba:54:86:40:d7:4d:c9:1f:0f:d8: 2f:39:02:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2MEExMTAvBgNVBAUTKEQ0REYyNUUwRUNEMkUzODA4RjY4NzBFRTU2RjcwRjI1 NTgxODkzM0UwHhcNMjUxMDE5MDgxODA5WhcNMjUxMDI2MDgxODA5WjAYMRYwFAYD VQQDEw02OGY0OWVjMi1iNDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoRNlEtJw4oCWTX1E0SCB+4YTJb6DocnV4/6Cp9Se3vlOmy89YhI9tISmO/R Nh7SgmmTogEQrRjKazuceNZe64VhYkv+0Qlas6RwArz6Jw8oikyIV5+evGZJQnE9 hQEAuqnJbgbz+5m4S4jCWzgh/fc0c9KJ4KyFjhdR6W1Xj6MXAZQ2UMLyDS67xyZs gMXjWlVlol/8Dl/5Fw5/K5Ieeg6Npq0Oq1oNunwldAK+h9pIzpE49XdAT1MRYmDS rdz+QOmFU614m6Hb5racWb87k2ms1cImvNGW17e6znPlnmvhUJiaNAH1iU16bgvS Z8K3JWWj+mvc20P9Z/HVrMRv/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmEIBzG BML1njvUiiWQX/9nh/lrMB8GA1UdIwQYMBaAFNTfJeDs0uOAj2hw7lb3DyVYGJM+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjYwQS9CNkRDRjFEQzQ0 OTUxMUVGQTQ1OTBDM0RDNEY5QUUwMi8xTjhsNE96UzQ0Q1BhSER1VnZjUEpWZ1lr ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFOOGw0T3pTNDRDUGFIRHVWdmNQSlZnWWt6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjYwQS9CNkRDRjFEQzQ0OTUxMUVGQTQ1OTBDM0RDNEY5QUUwMi8xTjhsNE96UzQ0 Q1BhSER1VnZjUEpWZ1lrejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRT1ki2OqvrCv18PRKOEEnQ+pFUXmYGE4KwWkTNybshnXzv8igF/le tAuW/7zXJYydXThJZlhpGDCtvhX7TnUQTitgk7UGmnhOrToZjhNhcJn14GDwrWKJ FZFJdgCCIhlcjQ1WSvpuvF4nYjr8Lfc0UxSeI3Mr2vPStTFnC+al6RE2pnihw6fK fg+TZs33Ilss8HVeZTbksfUsLcCgIZoOuSY6YWtozkWbf3LsuxVf81VDWOoRA+wz 7E1CkzQUg52fiP2HmfeBvdjdbAPi1PjA1W6TktGq8D5MgRPbuIY7hSqZp2jgTcKr hy4oVcjiBB+22rpUhkDXTckfD9gvOQJS -----END CERTIFICATE-----Generated at Tue Oct 21 10:28:14 2025 by rpki-client