$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft File: 7unhDCkeVsgtdwcgELDlgAg_5yk.mft (raw, json) Hash identifier: u5CkGD/NXdUI4fM6gCJBVuWskVY4EJxjVwgXhpiIyRU= Subject key identifier: 20:16:D1:62:1A:B1:D9:D0:E9:A1:2B:D2:E5:38:B8:AC:F6:AE:46:C1 Authority key identifier: EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29 Certificate issuer: /CN=A91E82F0/serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft Manifest number: 0168 Signing time: Sun 19 Oct 2025 06:33:43 +0000 Manifest this update: Sun 19 Oct 2025 06:33:43 +0000 Manifest next update: Sun 26 Oct 2025 06:33:43 +0000 Files and hashes: 1: 7unhDCkeVsgtdwcgELDlgAg_5yk.crl (hash: WV6U/LbT9Qq/eO1IuWftpHxdkebXf9jxSDrChNgBChM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E82F0, serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729 Validity Not Before: Oct 19 06:33:43 2025 GMT Not After : Oct 26 06:33:43 2025 GMT Subject: CN=68f48647-bef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5e:10:59:a0:59:df:36:43:52:6e:b2:c6:af: 5c:aa:01:b2:2c:ca:d1:6d:42:40:25:0b:f7:10:fc: 48:29:7d:11:67:8f:6f:77:3c:2d:74:3e:ce:8a:cc: 64:19:3b:f0:58:f0:31:8e:d5:ea:95:25:de:3d:11: fe:0a:df:7e:72:ba:29:6c:70:fb:7e:57:5f:8b:1d: 7e:26:af:71:f6:a6:be:7b:57:37:bc:39:39:b5:db: ad:12:88:d7:85:98:4f:fc:54:7a:1d:42:64:6e:95: c8:c8:f1:8e:06:aa:e2:85:18:95:d4:02:78:ad:ab: d9:bf:36:ec:c4:d3:36:96:8d:6e:72:5e:23:37:9e: 78:28:37:01:f2:54:77:b4:3e:f0:c0:b6:fd:46:5b: e2:38:cb:0f:94:ed:6e:a1:fb:67:a9:98:d2:38:b6: 6b:11:e8:75:35:1d:1f:61:75:fb:1c:e6:b9:e3:ca: 1c:ac:75:de:f3:c6:11:fc:b7:ec:f1:f5:24:0d:12: 1b:35:df:8b:b8:58:16:b5:6f:2a:35:e9:1f:04:50: 12:5d:bb:fd:7d:06:e5:88:eb:91:5d:aa:8e:b4:97: b0:5c:c1:16:38:d9:15:4a:44:ae:fd:8a:ad:35:87: 66:50:64:1d:4b:6a:1d:91:03:6a:01:46:56:86:e3: 87:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:16:D1:62:1A:B1:D9:D0:E9:A1:2B:D2:E5:38:B8:AC:F6:AE:46:C1 X509v3 Authority Key Identifier: keyid:EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:aa:28:4f:88:06:9b:a8:78:03:8a:01:7f:e5:ef:f1:45:6c: 74:d5:c7:df:46:04:88:da:54:e5:45:93:38:87:33:a2:c9:28: bb:9d:6b:80:00:5e:b0:85:a1:91:63:06:d1:74:9e:aa:cb:4a: b7:d6:51:bc:dd:b4:77:48:4d:91:b1:19:6b:5a:d0:5f:57:8a: e6:0c:b7:2b:02:bf:22:15:f5:46:4c:12:50:ce:dc:67:01:e9: ea:4d:0b:c2:8e:ca:9c:69:68:2b:41:bd:9c:c1:48:b0:10:d5: 5c:94:86:d4:45:cf:29:3f:ef:1d:02:92:88:02:de:b5:3e:e5: 83:03:66:23:ba:33:2f:2e:62:62:4a:e4:ab:7b:d1:a6:fb:17: cd:b9:9f:14:94:8a:06:42:0b:1e:a0:33:fe:ad:4a:28:77:b1: 26:b9:9e:52:01:82:e7:41:8c:13:62:f7:ac:88:89:d4:8d:2d: 16:19:1c:87:cd:e6:ab:6c:44:f7:15:68:fe:ec:53:4a:98:b7: 6d:e7:b7:96:69:25:c9:11:85:42:a2:cf:e4:cc:11:34:68:01: c6:18:c6:d0:cd:28:ee:d6:e6:c9:bc:1f:5f:40:b3:6b:3f:b2: 17:39:49:d5:59:01:83:6b:0e:f6:e2:79:73:d4:77:6b:f9:3e: a1:15:51:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgyRjAxMTAvBgNVBAUTKEVFRTlFMTBDMjkxRTU2QzgyRDc3MDcyMDEwQjBFNTgw MDgzRkU3MjkwHhcNMjUxMDE5MDYzMzQzWhcNMjUxMDI2MDYzMzQzWjAYMRYwFAYD VQQDEw02OGY0ODY0Ny1iZWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwl4QWaBZ3zZDUm6yxq9cqgGyLMrRbUJAJQv3EPxIKX0RZ49vdzwtdD7Oisxk GTvwWPAxjtXqlSXePRH+Ct9+cropbHD7fldfix1+Jq9x9qa+e1c3vDk5tdutEojX hZhP/FR6HUJkbpXIyPGOBqrihRiV1AJ4ravZvzbsxNM2lo1ucl4jN554KDcB8lR3 tD7wwLb9RlviOMsPlO1uoftnqZjSOLZrEeh1NR0fYXX7HOa548ocrHXe88YR/Lfs 8fUkDRIbNd+LuFgWtW8qNekfBFASXbv9fQbliOuRXaqOtJewXMEWONkVSkSu/Yqt NYdmUGQdS2odkQNqAUZWhuOHQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAW0WIa sdnQ6aEr0uU4uKz2rkbBMB8GA1UdIwQYMBaAFO7p4QwpHlbILXcHIBCw5YAIP+cp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJGMC81QzU3RTVDMDgy ODMxMUVFOTBDODgxNkFDNEY5QUUwMi83dW5oRENrZVZzZ3Rkd2NnRUxEbGdBZ181 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1bmhEQ2tlVnNndGR3Y2dFTERsZ0FnXzV5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODJGMC81QzU3RTVDMDgyODMxMUVFOTBDODgxNkFDNEY5QUUwMi83dW5oRENrZVZz Z3Rkd2NnRUxEbGdBZ181eWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnqihPiAabqHgDigF/5e/xRWx01cffRgSI2lTlRZM4hzOiySi7nWuA AF6whaGRYwbRdJ6qy0q31lG83bR3SE2RsRlrWtBfV4rmDLcrAr8iFfVGTBJQztxn AenqTQvCjsqcaWgrQb2cwUiwENVclIbURc8pP+8dApKIAt61PuWDA2YjujMvLmJi SuSre9Gm+xfNuZ8UlIoGQgseoDP+rUood7EmuZ5SAYLnQYwTYvesiInUjS0WGRyH zearbET3FWj+7FNKmLdt57eWaSXJEYVCos/kzBE0aAHGGMbQzSju1ubJvB9fQLNr P7IXOUnVWQGDaw724nlz1Hdr+T6hFVEm -----END CERTIFICATE-----Generated at Mon Oct 20 12:42:34 2025 by rpki-client