$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft File: lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft (raw, json) Hash identifier: f3dxkmH8aklfx2eD/5Ortw3rS1x1Z6kRM/2MNTtLEOU= Subject key identifier: 16:C3:64:4D:FD:5A:F7:EA:95:78:9D:87:69:D5:C8:7E:4D:A2:6D:52 Authority key identifier: 94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7 Certificate issuer: /CN=A91DEB01/serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft Manifest number: 30 Signing time: Sun 19 Oct 2025 11:11:27 +0000 Manifest this update: Sun 19 Oct 2025 11:11:26 +0000 Manifest next update: Sun 26 Oct 2025 11:11:26 +0000 Files and hashes: 1: lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl (hash: U+1M0vM1civ/4PlxJXo+weA3S54g+WMDCgGS0oVYvI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB01, serialNumber=943349FDB6DC0AF15CD574DA42F8EC7B49DC0DB7 Validity Not Before: Oct 19 11:11:26 2025 GMT Not After : Oct 26 11:11:26 2025 GMT Subject: CN=68f4c75e-4e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1f:e3:4f:a8:bd:aa:6e:e7:39:39:e7:94:aa: 33:ab:bf:ac:a0:69:33:2b:8d:a0:02:8e:b1:64:bf: 23:90:0a:58:ef:c4:58:8a:49:39:19:c5:b1:93:c9: ec:6e:11:17:eb:53:50:1d:61:7b:26:6b:b6:d5:82: 08:8e:39:b8:df:69:d5:44:1e:82:7d:c3:62:66:9a: bb:d0:60:60:91:dd:a2:3f:6a:fc:e3:ef:d4:d2:be: 50:98:1a:7a:49:de:47:85:ae:06:59:be:f3:89:7b: b6:ea:a8:9b:b7:56:79:a0:6d:f3:78:fc:8c:23:55: 62:6e:f3:22:2e:e6:da:8c:3f:b2:17:81:83:8b:f8: 50:59:c0:74:49:01:09:72:c6:ed:9d:79:a5:21:bf: 9a:cf:0e:8b:69:4f:2d:4f:dd:4c:60:b6:a7:e1:32: 08:68:67:93:4e:30:55:3a:5e:4a:0a:0d:5f:0d:7e: 6b:c6:70:17:86:82:fd:1e:f9:4f:55:a2:2e:7b:eb: d9:2f:80:e1:98:b2:0e:b4:66:e6:b5:ee:8c:f0:ed: 25:86:9b:7d:ea:e3:6b:e3:e4:57:41:10:71:79:ec: 2d:c9:42:38:c5:9d:3a:08:05:93:1c:2b:7b:a0:1a: 29:b4:4f:78:7e:51:e1:b2:d3:45:40:be:9a:9f:05: 74:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C3:64:4D:FD:5A:F7:EA:95:78:9D:87:69:D5:C8:7E:4D:A2:6D:52 X509v3 Authority Key Identifier: keyid:94:33:49:FD:B6:DC:0A:F1:5C:D5:74:DA:42:F8:EC:7B:49:DC:0D:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lDNJ_bbcCvFc1XTaQvjse0ncDbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/F6A645D667A111F0BBEBDF09C4F9AE02/lDNJ_bbcCvFc1XTaQvjse0ncDbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:27:da:70:76:ff:b3:b0:22:b3:6e:b9:70:8c:d0:78:8a:0d: 65:c3:f9:7c:a2:c7:a7:f4:c0:3c:03:fb:1d:b4:82:89:0f:cc: 78:44:d3:5b:58:43:da:6e:68:ed:d9:e7:a5:25:e2:43:32:18: 4d:d0:6d:fd:eb:54:1f:d3:97:96:48:bf:38:86:3a:3f:3d:3c: 84:4d:27:a7:3d:27:d0:dc:a4:d9:7d:3d:e9:ba:93:9a:e7:2d: 0f:27:07:e8:c3:b1:7f:58:b7:3a:79:05:e2:40:8e:30:b5:92: 9b:e4:4d:f3:f8:4d:32:b0:45:67:67:14:07:3a:7c:12:bf:87: 00:90:9b:b6:da:98:f2:43:7b:b1:4c:39:c9:1b:74:42:57:bc: bb:5a:98:5f:c7:17:65:5c:3e:62:2c:36:9e:66:25:bb:48:c8: 6a:d5:64:cb:dd:a1:8a:73:57:a8:f6:70:c6:de:fd:e6:1c:2a: b9:35:40:e7:e0:9b:16:ce:99:87:a9:ad:36:01:9f:79:a3:4b: be:28:00:f6:92:d4:fc:9c:9e:1f:c7:91:d7:c1:70:91:81:58: 11:41:84:f4:1d:fa:43:89:4a:f3:fc:89:6b:fb:fc:ae:2b:9d: 96:df:76:a4:1d:f0:40:e0:d0:e8:ab:9f:f7:26:b1:5b:a5:62: 35:79:ce:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RUIwMTExMC8GA1UEBRMoOTQzMzQ5RkRCNkRDMEFGMTVDRDU3NERBNDJGOEVDN0I0 OURDMERCNzAeFw0yNTEwMTkxMTExMjZaFw0yNTEwMjYxMTExMjZaMBgxFjAUBgNV BAMTDTY4ZjRjNzVlLTRlNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpH+NPqL2qbuc5OeeUqjOrv6ygaTMrjaACjrFkvyOQCljvxFiKSTkZxbGTyexu ERfrU1AdYXsma7bVggiOObjfadVEHoJ9w2JmmrvQYGCR3aI/avzj79TSvlCYGnpJ 3keFrgZZvvOJe7bqqJu3VnmgbfN4/IwjVWJu8yIu5tqMP7IXgYOL+FBZwHRJAQly xu2deaUhv5rPDotpTy1P3UxgtqfhMghoZ5NOMFU6XkoKDV8NfmvGcBeGgv0e+U9V oi5769kvgOGYsg60Zua17ozw7SWGm33q42vj5FdBEHF57C3JQjjFnToIBZMcK3ug Gim0T3h+UeGy00VAvpqfBXQtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFsNkTf1a 9+qVeJ2HadXIfk2ibVIwHwYDVR0jBBgwFoAUlDNJ/bbcCvFc1XTaQvjse0ncDbcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFQjAxL0Y2QTY0NUQ2NjdB MTExRjBCQkVCREYwOUM0RjlBRTAyL2xETkpfYmJjQ3ZGYzFYVGFRdmpzZTBuY0Ri Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbEROSl9iYmNDdkZjMVhUYVF2anNlMG5jRGJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF QjAxL0Y2QTY0NUQ2NjdBMTExRjBCQkVCREYwOUM0RjlBRTAyL2xETkpfYmJjQ3ZG YzFYVGFRdmpzZTBuY0RiYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAon2nB2/7OwIrNuuXCM0HiKDWXD+Xyix6f0wDwD+x20gokPzHhE01tY Q9puaO3Z56Ul4kMyGE3Qbf3rVB/Tl5ZIvziGOj89PIRNJ6c9J9DcpNl9Pem6k5rn LQ8nB+jDsX9Ytzp5BeJAjjC1kpvkTfP4TTKwRWdnFAc6fBK/hwCQm7bamPJDe7FM OckbdEJXvLtamF/HF2VcPmIsNp5mJbtIyGrVZMvdoYpzV6j2cMbe/eYcKrk1QOfg mxbOmYeprTYBn3mjS74oAPaS1Pycnh/HkdfBcJGBWBFBhPQd+kOJSvP8iWv7/K4r nZbfdqQd8EDg0Oirn/cmsVulYjV5zsY= -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:49 2025 by rpki-client