$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft File: 1ex0z8jA_QV81Og74-tX8GHcWPg.mft (raw, json) Hash identifier: co6C+aMuUYKosphjDrZ86t30k9XKIqvKguX2rATT/zA= Subject key identifier: C8:36:AF:11:9A:4F:91:9A:7B:DC:17:CA:FE:C7:99:6C:C1:E0:35:8E Authority key identifier: D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8 Certificate issuer: /CN=A91D313B/serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft Manifest number: E9 Signing time: Sun 19 Oct 2025 08:21:45 +0000 Manifest this update: Sun 19 Oct 2025 08:21:44 +0000 Manifest next update: Sun 26 Oct 2025 08:21:44 +0000 Files and hashes: 1: 1ex0z8jA_QV81Og74-tX8GHcWPg.crl (hash: Isb1UD3bSd+IIeEn9vHSrUg0cIiKwOH5fkH0DMOhVF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D313B, serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8 Validity Not Before: Oct 19 08:21:44 2025 GMT Not After : Oct 26 08:21:44 2025 GMT Subject: CN=68f49f99-5bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:34:63:6e:be:66:20:17:86:30:ac:89:23:b3: 46:72:68:db:a5:f2:22:00:06:eb:5f:b4:2e:ee:bf: dc:b2:d0:4b:98:f1:3d:af:e7:f0:dc:07:c6:52:7c: d8:cd:1d:62:2f:c3:c2:29:1a:c4:41:22:bb:47:e0: dd:57:dc:89:9c:66:a9:24:a1:7b:9f:23:ca:e8:a1: 6d:89:79:b9:23:b9:c5:3a:cd:bd:01:5c:21:13:4e: de:2c:7f:a7:38:ea:9d:34:4e:52:a1:0f:80:99:e2: 87:de:9c:5b:63:16:f7:eb:8f:d5:73:d1:7f:8a:37: b2:57:77:8c:de:5e:a6:e7:82:72:01:8c:fa:13:ef: 12:6e:e6:e1:d8:fb:85:83:e7:b7:92:37:87:e9:3d: a0:b9:2d:60:d8:56:53:43:28:75:88:f3:db:80:ee: f1:e0:ee:ea:a1:f8:f3:6c:1e:d3:fc:b2:a7:12:77: a7:00:32:80:c1:2e:d9:51:3d:4d:33:38:aa:cc:c6: 3d:c2:0b:4c:0d:8d:b1:cd:f0:0d:55:8b:d9:95:b2: 1b:46:69:d4:6c:22:0d:56:04:46:52:48:dc:2c:32: 87:9e:42:df:70:da:2b:6f:18:1b:39:1a:6f:ec:84: 33:76:03:be:e5:61:f8:49:8f:3f:00:6e:b9:34:39: 80:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:36:AF:11:9A:4F:91:9A:7B:DC:17:CA:FE:C7:99:6C:C1:E0:35:8E X509v3 Authority Key Identifier: keyid:D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:c4:ac:c5:4d:80:85:37:7d:f7:df:b3:c9:c3:c3:ad:9c:89: 0a:f9:64:5a:a2:eb:78:9c:fc:ef:79:59:67:0e:7e:20:62:0f: 1c:09:31:3e:f3:c2:9c:9d:7f:07:ed:1c:0b:b9:1b:0b:cb:49: 39:2d:ca:4b:13:b1:0f:e4:59:c0:0e:31:33:d0:f2:8c:9f:00: 1a:dc:d6:b5:96:61:b4:d9:27:85:3a:f3:74:57:5b:06:1e:7d: bd:5b:02:84:6e:95:86:00:1c:36:d3:2f:7c:e3:33:ce:37:f6: b0:8e:9e:de:49:bc:63:27:f1:d5:ce:b9:af:5f:5a:89:90:09: 2b:8b:61:e5:89:f0:4c:b1:86:6e:81:16:28:e7:50:0a:b3:3d: 61:95:02:83:ab:c5:22:35:f0:0a:d1:13:9c:b9:69:d8:02:cb: 1d:a4:de:37:1c:ee:db:2c:76:56:32:24:48:62:7e:64:36:89: be:e9:60:17:b6:59:f9:e8:74:28:d6:86:7a:31:bf:13:dc:74: fd:ae:a9:35:c2:7d:bd:33:76:37:6f:0b:c8:8f:5d:0d:11:8c: 0a:8d:8b:1d:79:91:8c:22:90:8b:47:44:7e:f5:a4:59:56:b6: f1:10:cc:74:bd:fe:ca:63:f0:22:5a:30:06:29:74:c2:f2:f9: 2b:cf:06:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxM0IxMTAvBgNVBAUTKEQ1RUM3NENGQzhDMEZEMDU3Q0Q0RTgzQkUzRUI1N0Yw NjFEQzU4RjgwHhcNMjUxMDE5MDgyMTQ0WhcNMjUxMDI2MDgyMTQ0WjAYMRYwFAYD VQQDEw02OGY0OWY5OS01YmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4DRjbr5mIBeGMKyJI7NGcmjbpfIiAAbrX7Qu7r/cstBLmPE9r+fw3AfGUnzY zR1iL8PCKRrEQSK7R+DdV9yJnGapJKF7nyPK6KFtiXm5I7nFOs29AVwhE07eLH+n OOqdNE5SoQ+AmeKH3pxbYxb364/Vc9F/ijeyV3eM3l6m54JyAYz6E+8Sbubh2PuF g+e3kjeH6T2guS1g2FZTQyh1iPPbgO7x4O7qofjzbB7T/LKnEnenADKAwS7ZUT1N MziqzMY9wgtMDY2xzfANVYvZlbIbRmnUbCINVgRGUkjcLDKHnkLfcNorbxgbORpv 7IQzdgO+5WH4SY8/AG65NDmAjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMg2rxGa T5Gae9wXyv7HmWzB4DWOMB8GA1UdIwQYMBaAFNXsdM/IwP0FfNToO+PrV/Bh3Fj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEzQi9ENUJGRUMxNDQ3 REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8xZXgwejhqQV9RVjgxT2c3NC10WDhHSGNX UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFleDB6OGpBX1FWODFPZzc0LXRYOEdIY1dQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzEzQi9ENUJGRUMxNDQ3REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8xZXgwejhqQV9R VjgxT2c3NC10WDhHSGNXUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJxKzFTYCFN33337PJw8OtnIkK+WRaout4nPzveVlnDn4gYg8cCTE+ 88KcnX8H7RwLuRsLy0k5LcpLE7EP5FnADjEz0PKMnwAa3Na1lmG02SeFOvN0V1sG Hn29WwKEbpWGABw20y984zPON/awjp7eSbxjJ/HVzrmvX1qJkAkri2HlifBMsYZu gRYo51AKsz1hlQKDq8UiNfAK0ROcuWnYAssdpN43HO7bLHZWMiRIYn5kNom+6WAX tln56HQo1oZ6Mb8T3HT9rqk1wn29M3Y3bwvIj10NEYwKjYsdeZGMIpCLR0R+9aRZ VrbxEMx0vf7KY/AiWjAGKXTC8vkrzwYd -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:38 2025 by rpki-client