$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft File: i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json) Hash identifier: +d+SHSPuqGELzMMmHD0bRaG36fp4zY5/M0E5AZA1cYM= Subject key identifier: 9A:BC:90:88:80:52:C2:55:8C:06:C9:19:01:19:04:6C:EC:DF:E6:D1 Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 Certificate issuer: /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Certificate serial: 34D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft Manifest number: 34D0 Signing time: Sat 18 Oct 2025 14:35:22 +0000 Manifest this update: Sat 18 Oct 2025 14:35:21 +0000 Manifest next update: Sat 25 Oct 2025 14:35:21 +0000 Files and hashes: 1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: 62EkAB2ZyHAjzCuLZEJ6P3sac8PaL65LUFUe88toYkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13520 (0x34d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Validity Not Before: Oct 18 14:35:21 2025 GMT Not After : Oct 25 14:35:21 2025 GMT Subject: CN=68f3a5aa-2229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e2:c9:d0:77:62:a9:3f:b7:4e:15:a2:91:2b: 60:e1:87:66:7a:1c:1e:da:42:f9:8b:c9:2b:d0:c4: b5:75:92:92:ad:31:c9:f8:7f:ec:ff:9b:1e:38:16: 1c:f4:f7:90:f7:44:c3:4e:b1:28:a1:4a:44:16:eb: 09:be:57:ac:83:c0:be:fd:5e:1c:c2:0d:e3:79:67: 65:bf:a2:a2:dd:72:ac:a4:b8:c3:5f:0e:01:85:86: 38:92:8f:fb:32:6e:66:f8:fc:fb:eb:c8:66:da:88: c6:dd:48:1a:95:ea:36:e1:62:70:4a:b7:23:88:8e: 1d:d2:2a:67:45:cf:94:26:af:49:10:79:f0:ba:8c: a6:90:b5:38:78:ae:87:58:59:1a:b5:20:d3:6d:56: c6:fa:91:5e:62:b3:fd:6f:50:62:42:b9:d6:82:02: 47:b5:df:e8:31:ae:5e:51:8c:8d:dc:d1:7a:f9:8e: 19:5b:94:fc:bc:72:34:16:5b:14:c6:b8:10:63:29: 1e:21:00:0a:ef:36:34:a5:1b:d0:33:1b:19:44:40: 21:61:23:c7:d6:8e:7e:54:64:07:0e:0d:fc:7d:9b: 5c:ae:0a:d2:b8:4a:53:b5:37:87:54:3f:6f:1c:be: 0f:8c:25:18:92:44:c9:c4:e7:da:a4:c8:b6:a0:fc: d0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BC:90:88:80:52:C2:55:8C:06:C9:19:01:19:04:6C:EC:DF:E6:D1 X509v3 Authority Key Identifier: keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:95:ae:44:24:6b:7d:c9:64:12:9a:d3:2a:25:b4:88:70:64: b0:3c:bf:f0:85:dc:54:c8:b2:ba:03:88:f5:a0:69:8d:8a:69: 7b:32:73:6a:03:e1:9d:e4:df:cd:90:01:7f:1d:ca:0e:03:bc: ce:a1:f6:af:bb:39:92:0a:c0:26:c5:f7:82:99:2f:29:8f:90: 3b:c8:74:59:7c:7a:2a:43:95:b5:8e:2e:91:80:ad:b6:6e:ff: 18:da:bd:8a:53:82:60:58:96:ab:d9:7a:3b:7a:9f:73:96:6e: 1e:50:bc:0a:76:17:d5:a8:f0:54:e7:63:72:66:00:e7:b3:bc: 76:da:61:51:78:d8:42:58:ca:95:ee:07:56:2e:0f:ae:b3:ca: 54:92:57:52:1a:8d:1f:2d:29:79:3d:78:16:56:87:43:d5:11: 1c:ea:f6:25:46:83:41:e7:77:55:ed:dc:5e:bb:63:f9:75:e5: 45:9d:bc:db:82:4b:2d:6c:63:cc:ec:1c:60:d5:48:53:47:ff: 4a:38:d2:13:92:a3:5c:24:f0:7a:5a:38:71:f2:71:1b:56:08: a3:42:15:ce:57:39:0d:c6:4b:f2:70:b0:f0:82:d9:5d:36:41: 84:b1:5a:cf:9f:89:8a:28:7f:41:6d:41:9f:85:79:6b:67:60: 1d:22:02:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQUUxMTAvBgNVBAUTKDhCQUMwREQzRTQ5MTg1ODk0RkRBRTI4Mjg0RURDODA0 NzIwQjQ2MTQwHhcNMjUxMDE4MTQzNTIxWhcNMjUxMDI1MTQzNTIxWjAYMRYwFAYD VQQDEw02OGYzYTVhYS0yMjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eLJ0HdiqT+3ThWikStg4Ydmehwe2kL5i8kr0MS1dZKSrTHJ+H/s/5seOBYc 9PeQ90TDTrEooUpEFusJvlesg8C+/V4cwg3jeWdlv6Ki3XKspLjDXw4BhYY4ko/7 Mm5m+Pz768hm2ojG3Ugaleo24WJwSrcjiI4d0ipnRc+UJq9JEHnwuoymkLU4eK6H WFkatSDTbVbG+pFeYrP9b1BiQrnWggJHtd/oMa5eUYyN3NF6+Y4ZW5T8vHI0FlsU xrgQYykeIQAK7zY0pRvQMxsZREAhYSPH1o5+VGQHDg38fZtcrgrSuEpTtTeHVD9v HL4PjCUYkkTJxOfapMi2oPzQSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJq8kIiA UsJVjAbJGQEZBGzs3+bRMB8GA1UdIwQYMBaAFIusDdPkkYWJT9rigoTtyARyC0YU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS8xNjhGRkQ2QzFE OEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZbFAydUtDaE8zSUJISUxS aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2d04wLVNSaFlsUDJ1S0NoTzNJQkhJTFJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZBRS8xNjhGRkQ2QzFEOEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZ bFAydUtDaE8zSUJISUxSaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpla5EJGt9yWQSmtMqJbSIcGSwPL/whdxUyLK6A4j1oGmNiml7MnNq A+Gd5N/NkAF/HcoOA7zOofavuzmSCsAmxfeCmS8pj5A7yHRZfHoqQ5W1ji6RgK22 bv8Y2r2KU4JgWJar2Xo7ep9zlm4eULwKdhfVqPBU52NyZgDns7x22mFReNhCWMqV 7gdWLg+us8pUkldSGo0fLSl5PXgWVodD1REc6vYlRoNB53dV7dxeu2P5deVFnbzb gkstbGPM7Bxg1UhTR/9KONITkqNcJPB6Wjhx8nEbVgijQhXOVzkNxkvycLDwgtld NkGEsVrPn4mKKH9BbUGfhXlrZ2AdIgJy -----END CERTIFICATE-----Generated at Sun Oct 19 23:30:51 2025 by rpki-client