$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft File: tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft (raw, json) Hash identifier: m22DR+BXz8ZkFIZOJ+kVTIU7bsk3j8vX2eXFuHDt6w4= Subject key identifier: F8:CA:25:E3:68:35:9D:39:DB:9C:17:9C:DE:62:9D:6A:F7:FA:84:4F Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0D32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft Manifest number: 0D32 Signing time: Mon 20 Oct 2025 18:34:30 +0000 Manifest this update: Mon 20 Oct 2025 18:34:29 +0000 Manifest next update: Mon 27 Oct 2025 18:34:29 +0000 Files and hashes: 1: tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl (hash: t93vtOSBzIibbN1uVQ87LjgOFErhfHd+OjMzryY9rT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3378 (0xd32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: Oct 20 18:34:29 2025 GMT Not After : Oct 27 18:34:29 2025 GMT Subject: CN=68f680b5-e607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ad:5c:d9:8c:ca:5b:36:42:23:34:eb:2a:e5: d8:9f:aa:c9:87:ea:84:e9:c9:db:54:72:6c:a4:e1: 64:3d:85:a3:1a:b1:9a:18:7e:7e:04:ec:c9:c4:46: 83:87:85:af:31:91:2d:a9:b1:87:01:33:c6:1f:92: 96:9a:5d:61:c3:23:42:ac:36:7f:ae:63:09:ab:c4: aa:25:57:c4:5c:e6:f7:9d:08:75:82:5c:41:78:f3: 4e:82:42:ef:e9:4f:88:97:24:f4:9e:e5:f1:ed:ec: 81:c6:f9:8b:80:2d:34:ad:8b:fb:3c:12:bb:f4:4d: d3:9d:db:f9:5b:d3:5d:d5:cf:e7:1f:31:80:4d:a3: e4:b2:6d:0c:04:7f:d1:74:76:2e:68:bc:9b:73:20: f3:bf:b5:e3:30:04:2c:1d:0a:3e:66:f8:bb:bd:60: f0:90:01:4b:3c:fa:25:b2:6c:44:18:4a:8e:0d:33: b2:84:d1:c5:5e:60:77:fa:40:79:a7:e7:8d:cb:f2: 49:2d:09:1b:ea:96:bc:06:0f:13:a1:10:fa:42:6d: 93:2c:b9:8a:50:53:82:f7:1f:02:ca:b6:ff:5c:7a: 31:8f:ed:44:11:8f:d2:91:e4:b4:b9:68:8f:c0:22: 1b:d3:06:29:9e:86:eb:45:ef:f4:d7:11:8a:a4:2e: 05:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CA:25:E3:68:35:9D:39:DB:9C:17:9C:DE:62:9D:6A:F7:FA:84:4F X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:21:79:aa:50:11:f5:66:50:be:cb:b1:46:a3:10:64:4e:12: b9:d5:d7:67:02:27:66:7b:d4:b2:83:42:e8:bb:16:b6:1c:4e: cc:cc:6a:94:4d:66:25:36:1b:74:d4:db:bb:cb:26:32:5a:29: 20:94:4e:4b:6e:85:b5:c1:9e:ca:a1:05:e6:26:d1:51:65:47: 46:b9:c3:7b:35:38:91:73:67:01:a4:51:66:85:b5:fa:a6:b5: 97:55:c2:81:09:80:e4:13:84:c1:f6:6b:c2:ef:20:70:43:52: da:19:23:88:49:f2:68:ed:0f:37:77:c6:95:d3:38:c1:18:26: 43:6e:79:d4:69:6e:8e:ba:cd:68:6b:ce:fa:0c:cf:d7:94:f6: bd:6a:06:40:0b:8b:82:dc:76:61:45:0d:15:44:20:86:7d:cd: 5d:d7:bf:fc:ab:04:8d:ca:03:55:b4:ca:bd:e7:d9:64:f4:9e: 1d:4f:67:08:a4:6a:71:5d:32:12:7f:36:73:cf:26:38:1c:4d: aa:2d:72:b0:19:ea:71:22:e6:b2:42:1d:fb:f5:b0:35:0c:e9: 57:60:47:3d:36:b4:89:5e:e4:52:27:33:45:95:0a:17:f2:a9: cd:0d:07:88:d8:9d:1f:30:67:ac:ca:b1:14:3b:33:4b:e7:8c: 36:08:27:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjUxMDIwMTgzNDI5WhcNMjUxMDI3MTgzNDI5WjAYMRYwFAYD VQQDEw02OGY2ODBiNS1lNjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvK1c2YzKWzZCIzTrKuXYn6rJh+qE6cnbVHJspOFkPYWjGrGaGH5+BOzJxEaD h4WvMZEtqbGHATPGH5KWml1hwyNCrDZ/rmMJq8SqJVfEXOb3nQh1glxBePNOgkLv 6U+IlyT0nuXx7eyBxvmLgC00rYv7PBK79E3Tndv5W9Nd1c/nHzGATaPksm0MBH/R dHYuaLybcyDzv7XjMAQsHQo+Zvi7vWDwkAFLPPolsmxEGEqODTOyhNHFXmB3+kB5 p+eNy/JJLQkb6pa8Bg8ToRD6Qm2TLLmKUFOC9x8Cyrb/XHoxj+1EEY/SkeS0uWiP wCIb0wYpnobrRe/01xGKpC4FawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjKJeNo NZ0525wXnN5inWr3+oRPMB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjU1MS9EQkY2RTFENEUyRTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNX clFDWm1uV1IteUJCaWE4WmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDaIXmqUBH1ZlC+y7FGoxBkThK51ddnAidme9Syg0Louxa2HE7MzGqU TWYlNht01Nu7yyYyWikglE5LboW1wZ7KoQXmJtFRZUdGucN7NTiRc2cBpFFmhbX6 prWXVcKBCYDkE4TB9mvC7yBwQ1LaGSOISfJo7Q83d8aV0zjBGCZDbnnUaW6Ous1o a876DM/XlPa9agZAC4uC3HZhRQ0VRCCGfc1d17/8qwSNygNVtMq959lk9J4dT2cI pGpxXTISfzZzzyY4HE2qLXKwGepxIuayQh379bA1DOlXYEc9NrSJXuRSJzNFlQoX 8qnNDQeI2J0fMGesyrEUOzNL54w2CCfS -----END CERTIFICATE-----Generated at Mon Oct 20 21:35:20 2025 by rpki-client