$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft File: RGicZx-u8ZZ896mxozaNi5FLe6c.mft (raw, json) Hash identifier: TqXXz127ez9rwkAbyB3X9TQDi0tUnwiDZENzDD3jglY= Subject key identifier: 77:70:3F:F4:8D:CE:AD:51:B0:A8:A1:6E:BE:F5:E2:34:EE:A6:80:0C Authority key identifier: 44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 Certificate issuer: /CN=A91EBA46/serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft Manifest number: B1 Signing time: Sun 19 Oct 2025 09:13:37 +0000 Manifest this update: Sun 19 Oct 2025 09:13:36 +0000 Manifest next update: Sun 26 Oct 2025 09:13:36 +0000 Files and hashes: 1: RGicZx-u8ZZ896mxozaNi5FLe6c.crl (hash: 6sFTgEHfXofTlEgrEP2eZHDtxDL6eFb+bbiIAsHKNRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:13:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Validity Not Before: Oct 19 09:13:36 2025 GMT Not After : Oct 26 09:13:36 2025 GMT Subject: CN=68f4abc0-8dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:80:36:0f:52:68:a9:0b:22:81:3a:10:cb:c0: 90:fe:6c:2d:03:ca:a6:68:47:9d:10:16:f8:ed:d2: 79:36:ea:09:c3:fc:71:51:38:08:84:43:d7:55:2a: 03:ea:bb:83:26:e3:84:de:3a:02:91:74:16:3f:06: 02:c0:7a:09:08:a4:57:e7:cd:4a:d7:89:db:8b:d9: 06:0b:dd:c1:7d:87:99:3b:3a:a3:f6:22:95:5e:a8: 5a:c2:e3:3a:f9:d0:f9:83:2e:b1:e3:60:e0:b9:5d: 18:1c:72:23:5c:9d:2c:c8:1f:c2:d9:81:1a:29:a4: c9:37:43:de:e9:c0:45:28:01:45:55:83:e2:a9:79: 9f:11:38:51:da:83:8b:81:0f:cc:36:8e:63:ef:4c: 77:97:c7:3a:e2:7d:fd:cb:e6:be:ee:30:02:4b:6f: fa:fb:a6:cb:7c:14:f9:3a:34:46:1b:6a:ad:1d:e2: 74:13:b3:20:28:90:26:81:3f:42:11:86:3b:e3:4c: 64:73:de:f9:05:b2:18:9b:39:05:dd:63:df:0a:92: aa:9a:81:fb:e5:be:3f:7d:f9:d7:de:2b:37:53:20: 57:ac:ed:e0:09:1c:b9:59:5a:43:62:f4:e8:03:04: d4:b4:1e:73:8b:05:8e:f7:95:4c:a3:40:46:b6:37: 6c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:70:3F:F4:8D:CE:AD:51:B0:A8:A1:6E:BE:F5:E2:34:EE:A6:80:0C X509v3 Authority Key Identifier: keyid:44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:f6:bf:2b:18:22:4e:a3:ba:01:56:e5:70:28:79:8a:8f:4d: 62:b4:00:11:a0:ea:ee:0b:25:b2:73:57:26:c9:f7:11:0f:14: 96:34:67:76:49:9a:21:47:c9:45:e6:cf:17:d7:ee:86:7a:b7: 04:2e:1c:3d:fa:e4:3d:dd:8d:d9:8f:f8:4e:f4:f1:a4:1f:90: 38:67:1c:6d:32:8b:e6:27:47:c7:55:59:48:89:cf:51:33:33: 46:f7:0e:a4:cf:72:48:ee:66:99:44:b3:45:ad:e1:34:c9:ee: 16:be:6b:74:8f:de:13:33:e1:fb:27:df:37:d7:42:a9:ed:b5: ad:b9:ad:8e:f9:1b:bb:c0:2e:8c:9f:dc:b8:20:9a:45:5f:da: 0e:9b:ae:dc:ae:c7:53:64:99:30:7e:4b:5d:84:09:9f:29:a1: 92:a7:7c:07:0b:38:5c:56:4a:b3:e0:99:94:d7:70:fb:78:a3: 83:74:6d:67:0f:33:ae:ce:56:22:28:1d:1d:e1:b1:3a:c9:37: db:9b:be:f1:f2:1d:73:6f:3b:89:98:6b:dd:7e:6b:07:6c:93: e2:b0:e0:4e:4b:3a:93:1e:1f:62:78:2e:5c:4e:63:e4:7c:63: 28:30:e3:84:a5:5d:8a:ad:b1:bd:f2:75:27:a0:68:ad:8e:83: df:4d:35:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBNDYxMTAvBgNVBAUTKDQ0Njg5QzY3MUZBRUYxOTY3Q0Y3QTlCMUEzMzY4RDhC OTE0QjdCQTcwHhcNMjUxMDE5MDkxMzM2WhcNMjUxMDI2MDkxMzM2WjAYMRYwFAYD VQQDEw02OGY0YWJjMC04ZGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYA2D1JoqQsigToQy8CQ/mwtA8qmaEedEBb47dJ5NuoJw/xxUTgIhEPXVSoD 6ruDJuOE3joCkXQWPwYCwHoJCKRX581K14nbi9kGC93BfYeZOzqj9iKVXqhawuM6 +dD5gy6x42DguV0YHHIjXJ0syB/C2YEaKaTJN0Pe6cBFKAFFVYPiqXmfEThR2oOL gQ/MNo5j70x3l8c64n39y+a+7jACS2/6+6bLfBT5OjRGG2qtHeJ0E7MgKJAmgT9C EYY740xkc975BbIYmzkF3WPfCpKqmoH75b4/ffnX3is3UyBXrO3gCRy5WVpDYvTo AwTUtB5ziwWO95VMo0BGtjdsGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdwP/SN zq1RsKihbr714jTupoAMMB8GA1UdIwQYMBaAFERonGcfrvGWfPepsaM2jYuRS3un MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE0Ni8wN0FFN0E5NjlD RjYxMUVGOEE2Qzg1ODFDNEY5QUUwMi9SR2ljWngtdThaWjg5Nm14b3phTmk1Rkxl NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JHaWNaeC11OFpaODk2bXhvemFOaTVGTGU2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE0Ni8wN0FFN0E5NjlDRjYxMUVGOEE2Qzg1ODFDNEY5QUUwMi9SR2ljWngtdTha Wjg5Nm14b3phTmk1RkxlNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDg9r8rGCJOo7oBVuVwKHmKj01itAARoOruCyWyc1cmyfcRDxSWNGd2 SZohR8lF5s8X1+6GercELhw9+uQ93Y3Zj/hO9PGkH5A4ZxxtMovmJ0fHVVlIic9R MzNG9w6kz3JI7maZRLNFreE0ye4Wvmt0j94TM+H7J98310Kp7bWtua2O+Ru7wC6M n9y4IJpFX9oOm67crsdTZJkwfktdhAmfKaGSp3wHCzhcVkqz4JmU13D7eKODdG1n DzOuzlYiKB0d4bE6yTfbm77x8h1zbzuJmGvdfmsHbJPisOBOSzqTHh9ieC5cTmPk fGMoMOOEpV2KrbG98nUnoGitjoPfTTX3 -----END CERTIFICATE-----Generated at Mon Oct 20 23:11:21 2025 by rpki-client