$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft File: pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json) Hash identifier: +gvm5tRcipxDxNfbve9b0xy1ZHog94ARIcg53BvETE0= Subject key identifier: 1F:6F:50:C8:44:73:9B:03:24:09:AD:74:CA:59:4F:27:70:33:D4:23 Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 Certificate issuer: /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Certificate serial: 34CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft Manifest number: 34CB Signing time: Sat 18 Oct 2025 15:01:13 +0000 Manifest this update: Sat 18 Oct 2025 15:01:13 +0000 Manifest next update: Sat 25 Oct 2025 15:01:13 +0000 Files and hashes: 1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: 5jUKTNuC5stYgqG18NarShZTK+xrCMabZVMKv8cwdxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13515 (0x34cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6552, serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Validity Not Before: Oct 18 15:01:13 2025 GMT Not After : Oct 25 15:01:13 2025 GMT Subject: CN=68f3abb9-07cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:57:9c:cf:e5:38:3d:8e:44:17:5f:88:24:4f: ab:2c:b1:24:e3:0f:20:dd:c6:56:21:e6:84:9a:da: 43:9c:2f:91:0e:17:a9:d8:06:5b:90:47:b2:1f:44: 26:57:e8:46:93:b3:53:6b:8d:47:01:11:cf:4d:57: 58:ba:51:3e:28:c2:7c:6a:a2:a7:42:f2:bf:22:68: e3:b3:aa:30:61:e7:29:51:c6:db:ab:b4:e9:8f:9b: cf:7e:be:cb:5d:50:b5:7f:25:70:d7:bb:a5:d5:a7: a1:4f:db:56:c8:e7:11:8c:67:49:64:ec:4c:65:0e: 38:e7:2e:b9:cf:c3:91:83:f7:6a:08:05:fd:ae:f8: 34:a7:e3:f2:a4:90:dd:bc:72:4a:9a:4a:db:5a:da: a7:9f:ad:ef:e8:60:d0:cf:5d:b9:4c:81:88:ce:01: 21:57:f0:2e:c2:08:3c:74:f4:5f:fe:7a:6b:0b:44: f4:e0:45:cf:85:7d:a1:30:52:b2:fe:fd:90:c8:25: ea:bc:28:d5:4e:57:3b:b4:e3:65:0b:1f:58:33:94: cb:38:72:6c:ff:db:72:8f:48:5d:46:b4:b3:91:f9: f8:ab:fe:de:ec:30:1d:71:53:14:cb:9a:9b:f6:cf: 7f:2a:37:05:91:28:cb:05:81:34:e8:6a:11:92:4b: 32:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6F:50:C8:44:73:9B:03:24:09:AD:74:CA:59:4F:27:70:33:D4:23 X509v3 Authority Key Identifier: keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:a7:91:af:ba:9b:ae:be:cb:b6:b6:dd:45:dd:65:25:d0:3e: b7:40:e1:d1:5e:38:10:0e:46:34:6b:f7:7a:96:15:66:b5:57: e2:ab:74:6d:47:11:19:39:10:f4:47:83:46:e0:79:3c:d7:63: 8c:fc:36:12:aa:c1:48:f2:15:1e:5a:50:85:4a:ce:06:cd:fa: ec:29:7b:0f:a3:43:27:3b:54:8f:82:dd:be:87:18:40:08:73: fc:b2:f6:9d:21:88:10:bd:62:6d:23:73:7a:7d:21:d0:75:8e: a3:2f:8e:2e:9e:5c:2f:2a:83:8c:d4:ea:f3:a4:6d:72:41:58: ac:82:d2:b8:72:07:d3:82:a4:09:1d:da:8e:40:a0:f5:42:88: 93:79:36:06:d9:05:b4:73:e9:cd:da:98:18:98:d4:7d:24:01: 3a:6a:64:22:c5:fb:7f:eb:10:1b:06:24:70:cc:af:a2:dc:d3: 67:cc:56:23:d5:7b:db:d0:80:50:e2:83:2a:10:af:d2:ba:b3: 33:3d:24:c6:d0:57:0f:74:c1:de:e3:d6:1f:70:29:0a:0e:4a: e0:f9:e2:3c:01:73:45:a9:90:1b:1e:8d:53:8c:a4:ed:f2:cc: 9f:d2:88:a7:95:96:7a:20:0b:30:3a:b5:40:39:38:a1:c5:19: ab:d0:24:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1NTIxMTAvBgNVBAUTKEE1NkUwNDMzQUVCOEIwRkNDNTlFRkU5MUYwRUFGNTA2 MUI3MEQxMTgwHhcNMjUxMDE4MTUwMTEzWhcNMjUxMDI1MTUwMTEzWjAYMRYwFAYD VQQDEw02OGYzYWJiOS0wN2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzVecz+U4PY5EF1+IJE+rLLEk4w8g3cZWIeaEmtpDnC+RDhep2AZbkEeyH0Qm V+hGk7NTa41HARHPTVdYulE+KMJ8aqKnQvK/Imjjs6owYecpUcbbq7Tpj5vPfr7L XVC1fyVw17ul1aehT9tWyOcRjGdJZOxMZQ445y65z8ORg/dqCAX9rvg0p+PypJDd vHJKmkrbWtqnn63v6GDQz125TIGIzgEhV/Auwgg8dPRf/nprC0T04EXPhX2hMFKy /v2QyCXqvCjVTlc7tONlCx9YM5TLOHJs/9tyj0hdRrSzkfn4q/7e7DAdcVMUy5qb 9s9/KjcFkSjLBYE06GoRkksylwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9vUMhE c5sDJAmtdMpZTydwM9QjMB8GA1UdIwQYMBaAFKVuBDOuuLD8xZ7+kfDq9QYbcNEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjU1Mi84ODdENzUxMjFE OTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQekZudjZSOE9yMUJodHcw UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXNEVNNjY0c1B6Rm52NlI4T3IxQmh0dzBSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjU1Mi84ODdENzUxMjFEOTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQ ekZudjZSOE9yMUJodHcwUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzp5Gvupuuvsu2tt1F3WUl0D63QOHRXjgQDkY0a/d6lhVmtVfiq3Rt RxEZORD0R4NG4Hk812OM/DYSqsFI8hUeWlCFSs4GzfrsKXsPo0MnO1SPgt2+hxhA CHP8svadIYgQvWJtI3N6fSHQdY6jL44unlwvKoOM1OrzpG1yQVisgtK4cgfTgqQJ HdqOQKD1QoiTeTYG2QW0c+nN2pgYmNR9JAE6amQixft/6xAbBiRwzK+i3NNnzFYj 1Xvb0IBQ4oMqEK/SurMzPSTG0FcPdMHe49YfcCkKDkrg+eI8AXNFqZAbHo1TjKTt 8syf0oinlZZ6IAswOrVAOTihxRmr0CTW -----END CERTIFICATE-----Generated at Mon Oct 20 12:04:52 2025 by rpki-client