$ rpki-client -vvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft File: pStC19RpVfQoUSa7DcS-qnNKkr0.mft (raw, json) Hash identifier: 7ntBW8R1ro2Q3CAeZKXnAvGpWsn8qPk1L+kcvrWNCC0= Subject key identifier: DD:61:1C:1B:12:46:8F:7A:4E:E6:77:CA:4C:27:EE:FD:A6:4E:C1:3B Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Certificate serial: 34D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft Manifest number: 34D0 Signing time: Sat 18 Oct 2025 14:39:10 +0000 Manifest this update: Sat 18 Oct 2025 14:39:09 +0000 Manifest next update: Sat 25 Oct 2025 14:39:09 +0000 Files and hashes: 1: pStC19RpVfQoUSa7DcS-qnNKkr0.crl (hash: teHqHs68Sae4e2OwPz8MC0+58pfz2ShNnwEUV74AF5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13520 (0x34d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Validity Not Before: Oct 18 14:39:09 2025 GMT Not After : Oct 25 14:39:09 2025 GMT Subject: CN=68f3a68d-5baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:00:04:a5:41:82:c3:df:2a:a9:da:fa:20:8f: 83:40:d1:a7:75:15:ba:13:9a:64:05:25:39:e9:f0: 79:49:de:ea:da:c2:97:eb:52:d3:81:17:f1:c6:b2: 6d:cc:33:bd:49:63:b2:48:17:3c:36:1e:75:e5:de: bc:d5:d0:7d:c8:00:6b:28:e5:e8:61:fb:e2:00:36: 44:94:75:ae:30:25:0b:d3:55:db:a6:71:dc:94:f2: ae:78:8b:f0:e9:51:b5:66:64:87:ef:1c:dc:5b:71: 5b:e9:23:16:7a:8a:7e:31:25:5f:3f:17:73:54:ac: 8b:7d:14:ab:37:70:e2:9c:07:bd:ef:10:60:a3:be: e2:c7:7c:2a:21:fd:c1:ce:34:fd:4c:b1:b0:0c:66: 4d:d6:c7:37:70:4c:43:8e:4e:35:89:76:a5:d7:1e: 71:61:da:eb:d4:d7:1a:ca:86:13:80:bf:7f:40:c9: ee:48:ab:be:f9:02:eb:58:8f:06:f6:87:17:9b:55: a0:ff:3f:f4:de:b2:da:0f:88:a5:e9:1c:87:58:57: 03:b7:7b:91:a1:fd:b1:67:7c:4f:e2:e4:a1:46:37: 86:02:df:e6:39:57:6d:64:11:93:c6:ad:f7:ae:56: 3c:b6:00:4d:54:66:60:40:65:bd:96:c7:64:c5:24: 6c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:61:1C:1B:12:46:8F:7A:4E:E6:77:CA:4C:27:EE:FD:A6:4E:C1:3B X509v3 Authority Key Identifier: keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:00:4e:71:71:f1:c9:be:86:98:86:b1:59:d3:8e:0b:de:9c: 87:56:fc:04:11:16:da:1e:06:d7:64:27:e6:1b:1c:54:39:3e: 6a:4e:13:42:1f:0d:aa:28:69:07:3a:05:a9:43:01:bc:2e:18: 0a:51:2c:da:83:8a:83:0e:d6:18:8a:cf:6d:55:e6:8f:18:5c: ed:75:ce:c0:37:2a:50:e4:3e:0e:ed:d7:18:5d:4b:81:25:18: 58:dd:fc:f9:77:5e:f2:53:44:f5:e3:fb:07:60:5a:5c:22:f2: 7e:6a:ec:81:19:d6:88:2b:ac:1a:25:91:7c:5f:ea:5f:39:ab: d7:2c:4c:fd:f4:69:1a:d3:30:6d:cb:13:98:31:82:dd:2d:83: 6d:36:84:fd:78:ba:99:36:de:de:8d:1f:40:4f:30:a0:27:5f: 67:56:9f:a0:6a:ea:d2:b4:73:7a:3a:d3:a7:b3:82:c0:32:18: e9:30:96:c1:68:88:32:77:0a:6d:26:b0:ff:18:98:b9:cf:9e: 2a:3a:36:51:cf:8e:62:ad:e2:21:1f:61:7e:3a:19:aa:7e:a4: b5:bc:46:91:4d:df:1e:ac:5e:fa:e0:cb:53:ed:e2:c9:bd:e1: 12:0c:55:3f:ee:09:dd:46:1e:aa:93:0b:26:3b:a9:49:56:21: c7:37:fd:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUxQUQxMTAvBgNVBAUTKEE1MkI0MkQ3RDQ2OTU1RjQyODUxMjZCQjBEQzRCRUFB NzM0QTkyQkQwHhcNMjUxMDE4MTQzOTA5WhcNMjUxMDI1MTQzOTA5WjAYMRYwFAYD VQQDEw02OGYzYTY4ZC01YmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygAEpUGCw98qqdr6II+DQNGndRW6E5pkBSU56fB5Sd7q2sKX61LTgRfxxrJt zDO9SWOySBc8Nh515d681dB9yABrKOXoYfviADZElHWuMCUL01XbpnHclPKueIvw 6VG1ZmSH7xzcW3Fb6SMWeop+MSVfPxdzVKyLfRSrN3DinAe97xBgo77ix3wqIf3B zjT9TLGwDGZN1sc3cExDjk41iXal1x5xYdrr1NcayoYTgL9/QMnuSKu++QLrWI8G 9ocXm1Wg/z/03rLaD4il6RyHWFcDt3uRof2xZ3xP4uShRjeGAt/mOVdtZBGTxq33 rlY8tgBNVGZgQGW9lsdkxSRscwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1hHBsS Ro96TuZ3ykwn7v2mTsE7MB8GA1UdIwQYMBaAFKUrQtfUaVX0KFEmuw3EvqpzSpK9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTFBRC8yMjk1ODFENDFE OEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZmUW9VU2E3RGNTLXFuTktr cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTdEMxOVJwVmZRb1VTYTdEY1MtcW5OS2tyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTFBRC8yMjk1ODFENDFEOEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZm UW9VU2E3RGNTLXFuTktrcjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7AE5xcfHJvoaYhrFZ044L3pyHVvwEERbaHgbXZCfmGxxUOT5qThNC Hw2qKGkHOgWpQwG8LhgKUSzag4qDDtYYis9tVeaPGFztdc7ANypQ5D4O7dcYXUuB JRhY3fz5d17yU0T14/sHYFpcIvJ+auyBGdaIK6waJZF8X+pfOavXLEz99Gka0zBt yxOYMYLdLYNtNoT9eLqZNt7ejR9ATzCgJ19nVp+gaurStHN6OtOns4LAMhjpMJbB aIgydwptJrD/GJi5z54qOjZRz45ireIhH2F+OhmqfqS1vEaRTd8erF764MtT7eLJ veESDFU/7gndRh6qkwsmO6lJViHHN/0P -----END CERTIFICATE-----Generated at Mon Oct 20 05:20:26 2025 by rpki-client