$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft File: 67tHPRcLa4MG0eFsi5UjNK3UDxA.mft (raw, json) Hash identifier: 4Bi8SCxeInVEUykASrEG7dbgNpmpYsQYKFvHrhwCbvA= Subject key identifier: 5B:96:71:3D:AB:42:A4:57:16:44:DD:54:8F:1F:36:C3:C2:70:35:2D Authority key identifier: EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 Certificate issuer: /CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Certificate serial: 07DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft Manifest number: 07FB Signing time: Sat 18 Oct 2025 22:30:20 +0000 Manifest this update: Sat 18 Oct 2025 22:30:19 +0000 Manifest next update: Sat 25 Oct 2025 22:30:19 +0000 Files and hashes: 1: 67tHPRcLa4MG0eFsi5UjNK3UDxA.crl (hash: 4qN/GekpBBOz3vTRsMIUWLuapIM2UrHKSo4yWsrR9v8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F5A, serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Validity Not Before: Oct 18 22:30:19 2025 GMT Not After : Oct 25 22:30:19 2025 GMT Subject: CN=68f414fb-0c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:84:dc:2f:6d:95:ed:e1:d9:c4:64:2f:07:c8: d7:cd:84:55:74:4a:66:cc:8e:cc:af:bd:56:6c:1e: de:1f:47:5c:f5:00:5c:38:52:7e:f5:8d:00:d7:91: 79:d3:58:20:76:3f:ec:59:ec:9a:24:ba:13:da:da: 41:a1:f4:62:0f:37:58:ae:c8:7a:ac:5e:17:ae:cf: b3:e1:bb:3b:bc:25:c1:77:96:75:de:ab:bc:90:c7: d8:bf:5e:93:d3:97:9f:f7:73:01:db:e2:27:52:34: fc:3f:78:0e:c7:74:a0:81:ac:d5:ad:8f:d4:0a:11: 1d:72:b4:2f:63:50:0b:2e:94:60:95:2c:a8:5a:0f: c9:0f:41:20:e7:50:5d:4e:2c:25:8b:37:6b:97:6e: c5:5b:96:df:4c:9e:a7:b1:c3:15:04:d8:06:6b:18: df:ac:35:93:24:9b:19:32:89:07:c9:21:b5:2a:42: 70:f7:27:a4:4b:23:40:1c:8d:6f:2c:eb:56:7d:5e: 3d:58:63:23:04:0b:73:6b:90:ff:4c:b0:46:87:8b: 97:8c:24:18:f1:8e:3e:b3:96:c5:5e:47:7d:f2:a8: 62:aa:2c:bc:ed:a0:37:40:c7:60:4b:fb:c9:08:17: a2:e8:c8:32:c6:8a:e6:74:14:e4:09:21:cc:2a:b3: 64:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:96:71:3D:AB:42:A4:57:16:44:DD:54:8F:1F:36:C3:C2:70:35:2D X509v3 Authority Key Identifier: keyid:EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:d6:a2:ca:32:b8:4f:25:40:82:be:09:83:da:05:b0:c9:3c: 80:1e:3a:b8:5e:fc:87:15:83:57:dc:0c:e4:08:78:49:38:1e: ae:3d:5e:81:40:1d:0a:4e:5b:1d:29:0a:0b:ea:bf:a8:17:65: b6:c2:45:c8:74:2a:b1:6b:07:e6:dd:b1:2c:c9:a8:0c:49:66: fd:41:17:fe:de:69:6b:75:5a:f0:06:31:47:a3:84:76:a2:56: 80:fb:ff:85:1a:cf:72:6b:79:cd:3a:05:c8:1a:88:72:e7:78: 54:48:cf:fe:ba:73:aa:4f:9d:72:7e:15:b5:9e:43:74:01:76: 55:f4:3a:91:f2:a6:a5:ba:01:c2:50:2b:26:65:6e:fd:64:ec: 7d:9c:82:e9:d8:5f:67:db:be:b4:b5:93:a1:cc:7e:f1:90:cd: af:a9:fd:ad:d8:2d:5f:9f:a4:f9:97:c2:db:3a:fa:1c:1f:d8: 3d:f7:18:b9:b4:af:86:4d:42:12:e4:99:0c:aa:48:b6:40:73: 31:fc:b0:5e:50:fc:4d:c6:2e:b3:81:e2:2c:4b:e1:04:3d:ad: 71:a2:fc:b2:04:b5:b5:a7:8e:77:06:68:70:43:e8:6a:15:89: e5:71:09:7e:07:94:37:29:f8:79:7e:86:25:b2:3b:53:f8:f3: 3a:b5:c6:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGNUExMTAvBgNVBAUTKEVCQkI0NzNEMTcwQjZCODMwNkQxRTE2QzhCOTUyMzM0 QURENDBGMTAwHhcNMjUxMDE4MjIzMDE5WhcNMjUxMDI1MjIzMDE5WjAYMRYwFAYD VQQDEw02OGY0MTRmYi0wYzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoITcL22V7eHZxGQvB8jXzYRVdEpmzI7Mr71WbB7eH0dc9QBcOFJ+9Y0A15F5 01ggdj/sWeyaJLoT2tpBofRiDzdYrsh6rF4Xrs+z4bs7vCXBd5Z13qu8kMfYv16T 05ef93MB2+InUjT8P3gOx3SggazVrY/UChEdcrQvY1ALLpRglSyoWg/JD0Eg51Bd Tiwlizdrl27FW5bfTJ6nscMVBNgGaxjfrDWTJJsZMokHySG1KkJw9yekSyNAHI1v LOtWfV49WGMjBAtza5D/TLBGh4uXjCQY8Y4+s5bFXkd98qhiqiy87aA3QMdgS/vJ CBei6MgyxormdBTkCSHMKrNkAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuWcT2r QqRXFkTdVI8fNsPCcDUtMB8GA1UdIwQYMBaAFOu7Rz0XC2uDBtHhbIuVIzSt1A8Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUY1QS8wODk4QjIzQTEx QkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0TUcwZUZzaTVVak5LM1VE eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dEhQUmNMYTRNRzBlRnNpNVVqTkszVUR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUY1QS8wODk4QjIzQTExQkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0 TUcwZUZzaTVVak5LM1VEeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDC1qLKMrhPJUCCvgmD2gWwyTyAHjq4XvyHFYNX3AzkCHhJOB6uPV6B QB0KTlsdKQoL6r+oF2W2wkXIdCqxawfm3bEsyagMSWb9QRf+3mlrdVrwBjFHo4R2 olaA+/+FGs9ya3nNOgXIGohy53hUSM/+unOqT51yfhW1nkN0AXZV9DqR8qalugHC UCsmZW79ZOx9nILp2F9n2760tZOhzH7xkM2vqf2t2C1fn6T5l8LbOvocH9g99xi5 tK+GTUIS5JkMqki2QHMx/LBeUPxNxi6zgeIsS+EEPa1xovyyBLW1p453BmhwQ+hq FYnlcQl+B5Q3Kfh5foYlsjtT+PM6tcY0 -----END CERTIFICATE-----Generated at Mon Oct 20 07:13:15 2025 by rpki-client