$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft File: c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft (raw, json) Hash identifier: A4i36X1TiuedTK7lGSAsZ0V2ooIfBk4OT1j89GY3oM4= Subject key identifier: EA:B7:2B:4D:B2:33:DC:9C:92:EA:E5:0E:AD:02:53:73:41:B6:2B:F2 Authority key identifier: 73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 Certificate issuer: /CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Certificate serial: 34E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft Manifest number: 34DC Signing time: Mon 20 Oct 2025 15:05:26 +0000 Manifest this update: Mon 20 Oct 2025 15:05:25 +0000 Manifest next update: Mon 27 Oct 2025 15:05:25 +0000 Files and hashes: 1: c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl (hash: m5Hq9Yj9At4zjxmSpPIY3SfTaL6Rjlrr7fZTR4JYYrA=) 2: 991B38BC44E811F0968D8B30C4F9AE02.roa (hash: eEF2YFvICJOqay9i6WsFZPXnUiZoOP0Qsq3SyzYoK+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13544 (0x34e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2B2, serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Validity Not Before: Oct 20 15:05:25 2025 GMT Not After : Oct 27 15:05:25 2025 GMT Subject: CN=68f64fb5-f0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d2:24:1c:e8:92:95:c7:e0:33:6b:de:fe:0b: 8b:f5:b5:d4:1e:51:ed:1f:e1:53:2b:3d:08:ca:e7: ea:dd:9a:46:68:86:0f:a4:43:d4:cd:dc:7e:46:57: 10:fb:64:26:b0:30:a3:92:70:01:15:c2:18:7d:dd: 5d:c8:6e:31:dd:c1:ee:c6:7d:c4:98:0a:a3:a0:b3: d6:24:df:ef:87:c7:a1:10:72:65:09:5d:9c:09:1d: da:cd:a5:71:97:7a:f2:26:ed:c3:15:93:0e:87:a4: 02:7a:4f:2b:98:e7:33:89:a6:44:4e:b2:32:3e:78: d2:fd:87:ae:53:7a:64:5e:95:cd:b1:7f:c1:4a:67: 7a:7c:61:5a:52:d7:3e:87:d7:de:6e:01:cb:8f:84: 99:12:30:c3:33:d2:07:7f:2f:7d:e7:eb:da:cc:8c: aa:9e:32:9f:e4:31:6f:54:56:d3:b3:5d:02:9d:f8: 7c:2c:9b:43:0e:47:2d:ad:23:30:db:79:ff:83:dc: 18:b7:8a:af:15:51:a2:58:9f:11:b1:f4:f0:2b:e5: 9e:5d:ed:db:30:43:44:4e:1b:d6:26:fb:c8:ec:d3: d7:f2:20:65:f1:a7:09:e4:15:46:36:4b:76:54:7f: ff:95:0d:43:08:51:19:4b:1c:6e:0d:49:69:53:b9: 42:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B7:2B:4D:B2:33:DC:9C:92:EA:E5:0E:AD:02:53:73:41:B6:2B:F2 X509v3 Authority Key Identifier: keyid:73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:af:a9:da:3f:29:de:a1:21:a5:8f:bc:a5:e9:49:a7:f5:0f: 7e:c1:56:ae:3a:be:c9:a2:fc:1c:4d:b9:41:88:11:52:12:93: 29:fa:7e:68:db:10:34:15:74:5d:7f:f2:48:52:98:0a:6f:e1: 2c:16:65:c7:0f:eb:e9:50:17:7e:3c:63:3a:9c:e8:22:54:82: d2:56:35:12:46:93:8b:1e:4e:c0:10:6c:6e:fd:2f:c9:68:59: 69:74:03:5b:6a:f9:97:64:77:6b:92:bc:05:d5:a5:6a:58:2a: bd:90:6f:20:fe:ae:2b:49:e5:20:85:7c:14:5d:83:dc:1d:94: d5:80:b8:37:48:61:17:18:97:6b:3e:bf:f1:60:79:ec:7a:90: 9c:ef:b9:b6:52:16:38:75:8f:10:dc:ef:0d:27:d4:a6:a3:6c: 1f:d7:34:fa:5b:f4:78:f6:ce:85:be:41:07:d7:14:73:05:6e: 6e:88:f1:d5:00:c3:a0:fa:24:20:46:75:3f:78:de:9d:6b:a3: f1:79:30:1e:33:fa:a8:65:4e:2c:3e:22:83:49:06:ea:34:de: ae:7b:b3:36:eb:17:93:26:2e:8a:71:d3:3f:a9:b9:72:ff:cb: c1:e2:aa:83:98:9c:2d:fc:98:79:e1:1f:15:a6:e5:6c:fc:5f: 47:a4:98:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQjIxMTAvBgNVBAUTKDczQ0UxMjc0Q0RERjE3QzMwREEzQUJDRkY4MUZEOUYx MkZEMUI0RjIwHhcNMjUxMDIwMTUwNTI1WhcNMjUxMDI3MTUwNTI1WjAYMRYwFAYD VQQDEw02OGY2NGZiNS1mMGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutIkHOiSlcfgM2ve/guL9bXUHlHtH+FTKz0Iyufq3ZpGaIYPpEPUzdx+RlcQ +2QmsDCjknABFcIYfd1dyG4x3cHuxn3EmAqjoLPWJN/vh8ehEHJlCV2cCR3azaVx l3ryJu3DFZMOh6QCek8rmOcziaZETrIyPnjS/YeuU3pkXpXNsX/BSmd6fGFaUtc+ h9febgHLj4SZEjDDM9IHfy995+vazIyqnjKf5DFvVFbTs10Cnfh8LJtDDkctrSMw 23n/g9wYt4qvFVGiWJ8RsfTwK+WeXe3bMENEThvWJvvI7NPX8iBl8acJ5BVGNkt2 VH//lQ1DCFEZSxxuDUlpU7lCiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOq3K02y M9yckurlDq0CU3NBtivyMB8GA1UdIwQYMBaAFHPOEnTN3xfDDaOrz/gf2fEv0bTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJCMi81M0NBNDYyQTFE OUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4TU5vNnZQLUJfWjhTX1J0 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4NFNkTTNmRjhNTm82dlAtQl9aOFNfUnRQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTJCMi81M0NBNDYyQTFEOUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4 TU5vNnZQLUJfWjhTX1J0UEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZr6naPyneoSGlj7yl6Umn9Q9+wVauOr7JovwcTblBiBFSEpMp+n5o 2xA0FXRdf/JIUpgKb+EsFmXHD+vpUBd+PGM6nOgiVILSVjUSRpOLHk7AEGxu/S/J aFlpdANbavmXZHdrkrwF1aVqWCq9kG8g/q4rSeUghXwUXYPcHZTVgLg3SGEXGJdr Pr/xYHnsepCc77m2UhY4dY8Q3O8NJ9Smo2wf1zT6W/R49s6FvkEH1xRzBW5uiPHV AMOg+iQgRnU/eN6da6PxeTAeM/qoZU4sPiKDSQbqNN6ue7M26xeTJi6KcdM/qbly /8vB4qqDmJwt/Jh54R8VpuVs/F9HpJhq -----END CERTIFICATE-----Generated at Mon Oct 20 20:19:04 2025 by rpki-client