$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft File: -BaXnSqJmynqWV8rVO6jmQokNvk.mft (raw, json) Hash identifier: XSFofuxXjxzxZzofod4H9Deb2nJnBshBKLsRms88Yns= Subject key identifier: 6C:23:3F:29:B5:9E:49:D5:BB:58:D9:9A:85:F2:80:7F:CA:E0:85:01 Authority key identifier: F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9 Certificate issuer: /CN=A91D5DB6/serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9 Certificate serial: 163C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft Manifest number: 163C Signing time: Sat 18 Oct 2025 17:09:18 +0000 Manifest this update: Sat 18 Oct 2025 17:09:18 +0000 Manifest next update: Sat 25 Oct 2025 17:09:18 +0000 Files and hashes: 1: -BaXnSqJmynqWV8rVO6jmQokNvk.crl (hash: VSYNqepRm+GMGVE9saIC2qJlcwG9yrXi0KjXK8dmW+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5692 (0x163c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5DB6, serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9 Validity Not Before: Oct 18 17:09:18 2025 GMT Not After : Oct 25 17:09:18 2025 GMT Subject: CN=68f3c9be-4708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:94:14:2f:11:84:f3:b8:e0:26:c5:9b:c8:d5: 6c:75:d9:b1:3c:f7:84:dc:de:6e:43:95:a7:90:40: 80:99:1a:71:e5:11:2a:7b:f9:ad:cc:60:65:ae:30: 63:f8:19:55:6d:11:f6:d4:d3:7b:a6:82:a1:45:a3: 47:e1:d6:ed:9f:8d:17:c7:a3:48:8e:78:da:84:27: d1:93:98:91:8f:2b:30:59:c2:94:2d:2a:a7:84:35: e4:5e:a3:47:66:df:95:cd:2a:80:2b:81:e5:d6:46: 0b:52:a8:72:f6:47:27:d3:44:a9:88:3b:51:27:1d: b8:a9:5f:2c:5d:3b:31:13:a1:e0:ff:c0:cf:3d:65: 34:f4:0a:aa:a6:63:15:af:f1:62:cf:39:fc:43:98: 1f:2d:9c:ef:9e:f2:37:b7:c3:cd:10:39:9a:4d:33: 0a:71:1d:32:35:d0:2f:be:ea:93:b2:a7:8b:47:5c: 0d:e2:c9:c4:06:e8:ba:c6:db:ed:1e:7c:93:2c:d2: 5d:87:4e:b3:59:64:df:b2:c2:29:be:d4:2d:1a:9e: e1:ae:76:33:44:2c:da:28:27:48:75:d7:6a:4d:67: f0:c5:73:14:fb:71:e0:18:d0:4f:fa:68:81:19:b7: 2c:8d:13:f9:f5:07:0e:80:3f:17:13:c5:7c:c3:f9: 9b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:23:3F:29:B5:9E:49:D5:BB:58:D9:9A:85:F2:80:7F:CA:E0:85:01 X509v3 Authority Key Identifier: keyid:F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b2:d1:a8:32:b9:cd:69:1a:ce:de:da:da:cd:96:b2:cb:06: 91:1c:9d:9a:70:01:db:21:f8:b8:90:09:a7:43:91:05:9b:43: e8:83:98:02:77:78:50:ee:7b:71:78:5d:01:14:00:33:aa:d0: 35:96:fe:a9:2a:a5:82:53:05:1d:95:c8:c9:d0:98:46:b7:9a: 92:34:79:df:1f:6b:d7:08:8f:81:b5:2f:c5:b4:17:7c:d1:12: 6d:bc:81:9f:61:df:51:e4:85:fe:32:c6:d6:70:27:ec:7b:6a: 82:94:6f:59:80:b7:3b:d8:4a:4d:d1:0a:09:dd:91:18:84:ba: 49:82:b5:54:66:d6:89:ad:c5:52:78:31:ed:b9:dd:d6:94:ce: 03:5a:dd:ee:eb:72:cf:d0:64:97:47:29:e8:6b:e5:02:c9:5e: da:df:9f:b1:e2:f2:44:75:4b:e5:6b:3a:13:c2:9f:a3:df:66: 85:1f:d1:65:86:9e:9e:9b:58:b1:18:31:5e:16:de:c6:33:06: 25:c0:8d:d0:7b:bb:ab:a1:bc:d6:24:cf:20:04:c2:7a:e8:70: 3b:b5:ae:e8:8a:5f:1c:ba:5f:ad:9e:c4:f3:4e:95:9b:08:99: b9:ca:a1:f9:45:4f:ff:b6:ed:f4:5a:85:4e:e6:fe:04:75:68: 0f:7e:8a:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVEQjYxMTAvBgNVBAUTKEY4MTY5NzlEMkE4OTlCMjlFQTU5NUYyQjU0RUVBMzk5 MEEyNDM2RjkwHhcNMjUxMDE4MTcwOTE4WhcNMjUxMDI1MTcwOTE4WjAYMRYwFAYD VQQDEw02OGYzYzliZS00NzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJQULxGE87jgJsWbyNVsddmxPPeE3N5uQ5WnkECAmRpx5REqe/mtzGBlrjBj +BlVbRH21NN7poKhRaNH4dbtn40Xx6NIjnjahCfRk5iRjyswWcKULSqnhDXkXqNH Zt+VzSqAK4Hl1kYLUqhy9kcn00SpiDtRJx24qV8sXTsxE6Hg/8DPPWU09AqqpmMV r/Fizzn8Q5gfLZzvnvI3t8PNEDmaTTMKcR0yNdAvvuqTsqeLR1wN4snEBui6xtvt HnyTLNJdh06zWWTfssIpvtQtGp7hrnYzRCzaKCdIdddqTWfwxXMU+3HgGNBP+miB GbcsjRP59QcOgD8XE8V8w/mbRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwjPym1 nknVu1jZmoXygH/K4IUBMB8GA1UdIwQYMBaAFPgWl50qiZsp6llfK1Tuo5kKJDb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENURCNi8xM0Y5NkI4MjE4 NjIxMUU4QjFFMzE3MjlDNEY5QUUwMi8tQmFYblNxSm15bnFXVjhyVk82am1Rb2tO dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CYVhuU3FKbXlucVdWOHJWTzZqbVFva052ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NURCNi8xM0Y5NkI4MjE4NjIxMUU4QjFFMzE3MjlDNEY5QUUwMi8tQmFYblNxSm15 bnFXVjhyVk82am1Rb2tOdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtstGoMrnNaRrO3trazZayywaRHJ2acAHbIfi4kAmnQ5EFm0Pog5gC d3hQ7ntxeF0BFAAzqtA1lv6pKqWCUwUdlcjJ0JhGt5qSNHnfH2vXCI+BtS/FtBd8 0RJtvIGfYd9R5IX+MsbWcCfse2qClG9ZgLc72EpN0QoJ3ZEYhLpJgrVUZtaJrcVS eDHtud3WlM4DWt3u63LP0GSXRynoa+UCyV7a35+x4vJEdUvlazoTwp+j32aFH9Fl hp6em1ixGDFeFt7GMwYlwI3Qe7urobzWJM8gBMJ66HA7ta7oil8cul+tnsTzTpWb CJm5yqH5RU//tu30WoVO5v4EdWgPfoqp -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:50 2025 by rpki-client