$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft File: cBtV7SDYPjSNgjfON1l5WevAGCQ.mft (raw, json) Hash identifier: B9vb9bIwe2rUOeb7QQfVl+Z6mQcTbSiarN3UZSVFRZA= Subject key identifier: 5C:4D:DF:BC:2F:5F:B4:9A:13:5E:E6:91:2C:F0:19:AE:FA:92:5B:F4 Authority key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 Certificate issuer: /CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Certificate serial: 12D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft Manifest number: 47C3 Signing time: Mon 20 Oct 2025 14:22:05 +0000 Manifest this update: Mon 20 Oct 2025 14:22:04 +0000 Manifest next update: Mon 27 Oct 2025 14:22:04 +0000 Files and hashes: 1: cBtV7SDYPjSNgjfON1l5WevAGCQ.crl (hash: WaoKkCgAc9zwqGgRiFIdflp/27e5nc+bekqdzxaEl0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4824 (0x12d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=701B55ED20D83E348D8237CE37597959EBC01824 Validity Not Before: Oct 20 14:22:04 2025 GMT Not After : Oct 27 14:22:04 2025 GMT Subject: CN=68f6458d-2fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b0:5b:f3:c9:e3:f5:53:b6:b7:4d:ff:50:e4: 34:ee:e6:ef:03:45:08:a5:d6:c2:2d:3b:b6:d8:43: 6a:83:52:c0:f7:33:7c:1a:17:d5:1c:79:d7:ca:6e: 98:16:90:bc:ef:fd:9d:39:33:2a:a0:91:4d:24:c1: be:d8:0a:2c:9d:93:ed:34:cc:87:db:16:3d:6d:a4: 5a:7e:cc:15:52:69:a6:4a:6c:48:0d:e1:b1:fc:4b: 9c:95:ff:27:c0:ac:9d:ec:5b:fd:32:9a:0b:ae:df: 5a:dd:e5:7f:e6:17:32:58:69:05:51:a5:c3:88:f7: 03:c7:d8:58:da:69:ac:b8:4b:66:a4:03:5e:28:1f: 28:07:45:30:da:5f:53:02:eb:5b:3e:e4:10:9c:9e: 2c:11:81:6f:32:ca:bf:76:2c:8f:37:50:6f:10:4a: 8d:46:35:b1:e5:b0:d6:a9:8e:00:49:a2:b8:f2:82: 39:34:2f:c2:9f:21:fb:2d:f8:6f:4b:ae:20:d1:fa: b8:7a:ac:d6:c9:02:65:3a:c9:37:85:26:80:20:63: d7:63:7d:10:0c:9c:d0:2b:aa:df:18:2f:07:3c:60: 9f:c1:57:05:c9:bf:be:f4:3c:1d:e3:4a:58:96:2d: cb:e1:4b:c8:b1:41:af:db:30:e1:f1:38:20:65:5e: 70:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4D:DF:BC:2F:5F:B4:9A:13:5E:E6:91:2C:F0:19:AE:FA:92:5B:F4 X509v3 Authority Key Identifier: keyid:70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:46:47:d5:40:c3:f8:6a:8b:3b:31:52:83:63:06:2f:c3:17: 61:a3:42:71:d0:8c:6a:b8:cc:de:9e:ff:2d:93:d9:5a:24:50: 25:4a:29:71:d6:b5:df:9c:ba:51:43:a4:fa:53:e8:3b:cc:4b: 79:85:b0:8c:7b:19:fb:45:50:1c:47:da:c1:b6:95:28:79:38: dc:47:83:39:74:0f:c9:61:a1:ab:f2:5a:af:81:b4:c0:40:dd: 5d:5a:55:3b:c2:cf:c5:59:29:2e:70:27:bd:9c:e5:6b:ad:12: 8b:6d:ef:bf:de:c0:45:f8:14:95:1e:d2:12:f8:ee:3c:5c:ec: 76:aa:22:dc:87:37:60:23:d0:a9:9e:0d:ae:8e:7b:5d:c3:7e: 79:f3:61:60:b4:7d:6f:55:4f:2c:ad:aa:80:59:02:35:5c:b6: bb:5f:03:d7:15:28:bf:66:ea:5d:6f:8a:f9:f2:bd:d8:31:29: 5c:aa:b5:cd:53:13:46:3f:2a:7e:84:b3:c6:3a:38:07:21:6f: dc:f0:53:57:ee:81:86:25:23:ed:bc:71:cc:79:69:bc:8b:39: ea:7f:b8:cb:00:10:de:71:aa:95:2a:97:5a:4c:d5:3a:63:73: 7d:01:3f:cf:60:fe:dd:dd:67:bc:33:ee:b9:89:a8:b6:fd:df: 87:84:4b:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDcwMUI1NUVEMjBEODNFMzQ4RDgyMzdDRTM3NTk3OTU5 RUJDMDE4MjQwHhcNMjUxMDIwMTQyMjA0WhcNMjUxMDI3MTQyMjA0WjAYMRYwFAYD VQQDEw02OGY2NDU4ZC0yZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrBb88nj9VO2t03/UOQ07ubvA0UIpdbCLTu22ENqg1LA9zN8GhfVHHnXym6Y FpC87/2dOTMqoJFNJMG+2AosnZPtNMyH2xY9baRafswVUmmmSmxIDeGx/Euclf8n wKyd7Fv9MpoLrt9a3eV/5hcyWGkFUaXDiPcDx9hY2mmsuEtmpANeKB8oB0Uw2l9T AutbPuQQnJ4sEYFvMsq/diyPN1BvEEqNRjWx5bDWqY4ASaK48oI5NC/CnyH7Lfhv S64g0fq4eqzWyQJlOsk3hSaAIGPXY30QDJzQK6rfGC8HPGCfwVcFyb++9Dwd40pY li3L4UvIsUGv2zDh8TggZV5wjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxN37wv X7SaE17mkSzwGa76klv0MB8GA1UdIwQYMBaAFHAbVe0g2D40jYI3zjdZeVnrwBgk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS9FRTY3RDhDMDFE NzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBqU05namZPTjFsNVdldkFH Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NCdFY3U0RZUGpTTmdqZk9OMWw1V2V2QUdDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS9FRTY3RDhDMDFENzgxMUUyODc5RTM4QzUwOEIwMkNEMi9jQnRWN1NEWVBq U05namZPTjFsNVdldkFHQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+RkfVQMP4aos7MVKDYwYvwxdho0Jx0IxquMzenv8tk9laJFAlSilx 1rXfnLpRQ6T6U+g7zEt5hbCMexn7RVAcR9rBtpUoeTjcR4M5dA/JYaGr8lqvgbTA QN1dWlU7ws/FWSkucCe9nOVrrRKLbe+/3sBF+BSVHtIS+O48XOx2qiLchzdgI9Cp ng2ujntdw35582FgtH1vVU8sraqAWQI1XLa7XwPXFSi/Zupdb4r58r3YMSlcqrXN UxNGPyp+hLPGOjgHIW/c8FNX7oGGJSPtvHHMeWm8iznqf7jLABDecaqVKpdaTNU6 Y3N9AT/PYP7d3We8M+65iai2/d+HhEvP -----END CERTIFICATE-----Generated at Tue Oct 21 07:55:08 2025 by rpki-client