$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft File: CdjxREM-7h4qRDmROjZuPDxZBTc.mft (raw, json) Hash identifier: S4/ZE2A9AO8Pl6YMsdt6vjwYJN8hXrGG3oldNGLl1Uw= Subject key identifier: 1B:EC:3D:84:BD:B1:72:8E:08:79:B2:76:28:21:9F:AD:57:1C:D4:93 Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 Certificate issuer: /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Certificate serial: 0CBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft Manifest number: 0CB5 Signing time: Sat 18 Oct 2025 18:54:38 +0000 Manifest this update: Sat 18 Oct 2025 18:54:37 +0000 Manifest next update: Sat 25 Oct 2025 18:54:37 +0000 Files and hashes: 1: CdjxREM-7h4qRDmROjZuPDxZBTc.crl (hash: 6JZNWFx7ihYk5N12Z3MzL74Wl0ZiGPTDVzUgYMyIOZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3262 (0xcbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9635, serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Validity Not Before: Oct 18 18:54:37 2025 GMT Not After : Oct 25 18:54:37 2025 GMT Subject: CN=68f3e26d-fa85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5d:53:d9:01:c7:d3:61:9a:ee:f3:9c:86:78: b4:a3:05:a4:ef:d2:22:40:9c:d9:2e:9e:fa:b8:2d: cb:cd:6d:5a:ea:ca:fb:87:72:55:97:86:12:44:7f: 98:f2:cd:23:59:6a:62:b1:89:b8:e0:90:1e:ab:97: 31:d8:13:f4:f6:06:9a:f3:04:52:c6:cd:83:39:94: 16:67:3a:f2:83:8c:41:02:8f:20:e8:d6:dc:0f:0d: ac:b8:65:5a:70:f5:02:27:71:f4:a8:ff:9b:90:68: 1d:c3:6b:85:37:b8:e8:2e:78:68:e3:0f:c0:76:9d: a1:11:9c:0e:d9:10:b4:a3:10:17:03:56:48:14:0b: f8:97:25:95:f8:c6:09:bb:1a:38:d1:cc:2c:71:c3: dc:73:a6:91:2e:76:ff:70:d9:27:c5:09:cd:2a:fb: a3:57:b3:84:5d:bb:e9:e4:65:be:bd:d3:1c:7c:0b: 46:82:95:d4:be:f1:17:a9:a1:dc:29:79:92:bf:3f: 93:eb:3b:d2:80:00:5d:9c:31:4d:80:15:aa:b2:c2: 1b:b5:af:01:47:10:3f:84:c3:30:5c:e2:03:34:b0: 78:bc:66:81:d3:ab:7b:32:22:9c:f6:56:0e:de:9d: 11:d1:25:96:e6:07:bb:80:55:db:62:16:8d:90:30: 11:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EC:3D:84:BD:B1:72:8E:08:79:B2:76:28:21:9F:AD:57:1C:D4:93 X509v3 Authority Key Identifier: keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:85:30:a3:b9:88:a9:bd:89:7c:81:16:de:50:94:bf:40:87: ee:41:67:7b:c7:c1:3a:d6:80:bd:99:9f:86:c5:a6:c0:fe:77: 99:f5:32:ec:7e:8e:b8:1d:93:be:d1:42:17:1a:19:14:40:8c: d9:5b:64:96:53:55:52:ac:3f:12:4f:f5:24:a0:a5:d0:a4:10: 07:ee:09:ed:54:0e:ec:fd:09:45:ef:63:e5:ad:dc:ce:a2:d5: e8:28:4d:6a:6e:71:2f:40:3c:a3:32:b6:b3:cf:5c:2b:1f:a8: 50:4f:75:24:5b:d8:58:90:9b:ac:e5:98:28:72:3c:87:45:81: c5:45:8f:3e:e5:71:59:a5:49:ac:6c:9d:10:ab:27:79:dd:f1: dd:88:4b:34:b2:56:f3:44:3c:c6:3a:fc:e0:d1:50:b3:db:68: 46:e7:99:8d:2b:1b:80:0b:cf:b2:a7:2d:6b:24:09:85:06:01: 87:21:57:09:7b:0b:bb:20:35:c2:ad:8f:82:33:5d:bf:8c:95: 20:a1:bb:43:48:ac:23:0d:31:d9:5d:3e:63:09:e8:13:8e:cd: 90:9d:25:95:04:96:57:c5:fb:ee:51:08:8d:73:12:75:af:12: 35:0f:2d:02:3a:aa:cc:7c:30:dc:92:e3:3c:bf:f8:2d:bf:cf: 23:f7:84:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2MzUxMTAvBgNVBAUTKDA5RDhGMTQ0NDMzRUVFMUUyQTQ0Mzk5MTNBMzY2RTND M0M1OTA1MzcwHhcNMjUxMDE4MTg1NDM3WhcNMjUxMDI1MTg1NDM3WjAYMRYwFAYD VQQDEw02OGYzZTI2ZC1mYTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5F1T2QHH02Ga7vOchni0owWk79IiQJzZLp76uC3LzW1a6sr7h3JVl4YSRH+Y 8s0jWWpisYm44JAeq5cx2BP09gaa8wRSxs2DOZQWZzryg4xBAo8g6NbcDw2suGVa cPUCJ3H0qP+bkGgdw2uFN7joLnho4w/Adp2hEZwO2RC0oxAXA1ZIFAv4lyWV+MYJ uxo40cwsccPcc6aRLnb/cNknxQnNKvujV7OEXbvp5GW+vdMcfAtGgpXUvvEXqaHc KXmSvz+T6zvSgABdnDFNgBWqssIbta8BRxA/hMMwXOIDNLB4vGaB06t7MiKc9lYO 3p0R0SWW5ge7gFXbYhaNkDAR6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvsPYS9 sXKOCHmydighn61XHNSTMB8GA1UdIwQYMBaAFAnY8URDPu4eKkQ5kTo2bjw8WQU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTYzNS9CQTY3Mzk5MEZG MjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdoNHFSRG1ST2padVBEeFpC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkanhSRU0tN2g0cVJEbVJPalp1UER4WkJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTYzNS9CQTY3Mzk5MEZGMjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdo NHFSRG1ST2padVBEeFpCVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnhTCjuYipvYl8gRbeUJS/QIfuQWd7x8E61oC9mZ+GxabA/neZ9TLs fo64HZO+0UIXGhkUQIzZW2SWU1VSrD8ST/UkoKXQpBAH7gntVA7s/QlF72PlrdzO otXoKE1qbnEvQDyjMrazz1wrH6hQT3UkW9hYkJus5ZgocjyHRYHFRY8+5XFZpUms bJ0Qqyd53fHdiEs0slbzRDzGOvzg0VCz22hG55mNKxuAC8+ypy1rJAmFBgGHIVcJ ewu7IDXCrY+CM12/jJUgobtDSKwjDTHZXT5jCegTjs2QnSWVBJZXxfvuUQiNcxJ1 rxI1Dy0COqrMfDDckuM8v/gtv88j94SF -----END CERTIFICATE-----Generated at Mon Oct 20 16:25:47 2025 by rpki-client