$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft File: vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft (raw, json) Hash identifier: kkON7IseiOn79COUQBvKB667nXM0AXOhmI824pOoHmw= Subject key identifier: CB:46:B2:0C:EF:D1:47:67:3C:9E:D5:63:55:AF:04:E9:8E:BD:13:78 Authority key identifier: BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 Certificate issuer: /CN=A91EC3C9/serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft Manifest number: 53 Signing time: Sun 19 Oct 2025 10:39:36 +0000 Manifest this update: Sun 19 Oct 2025 10:39:35 +0000 Manifest next update: Sun 26 Oct 2025 10:39:35 +0000 Files and hashes: 1: vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl (hash: UNMw1zDBeE7vuMjMpN52AgtgRNI5eW/e9k0TeVQ/WuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Validity Not Before: Oct 19 10:39:35 2025 GMT Not After : Oct 26 10:39:35 2025 GMT Subject: CN=68f4bfe8-c362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1c:0f:7f:41:98:ba:66:9a:0b:17:dc:17:a2: cf:1d:99:59:9d:76:1c:39:22:d0:19:0e:49:c4:2e: 38:c5:e2:59:ac:62:d1:e3:d7:24:7a:8d:6a:00:a1: 8b:e7:c1:d2:2e:ac:55:51:fd:2e:a5:93:bc:33:b2: 70:88:b5:5e:78:c2:33:f1:8e:1d:63:d6:68:26:65: 7a:d7:1f:d8:9b:f0:54:9a:dd:16:45:78:59:2f:e1: 6f:b1:fb:92:c6:1f:e1:13:5f:be:c4:8b:5b:08:db: 37:9e:82:c4:d0:13:4c:90:99:ac:c1:15:60:0b:da: 73:c8:13:fa:9d:ed:eb:be:36:34:c0:4b:77:5e:1a: b5:37:07:92:f3:bb:51:a4:5e:96:e4:88:48:2b:1d: 3f:a7:15:8b:7a:a1:96:ba:c7:0b:e5:9b:02:62:b0: ee:94:c4:5f:09:25:64:fe:39:67:a4:f9:94:28:44: e4:86:e6:0c:29:56:9f:7f:fc:5b:a0:48:29:6a:bc: 3b:2a:fd:2c:a2:a9:01:3c:e4:db:ca:89:56:d7:d9: d8:cb:18:3c:76:80:e5:fe:d5:ed:9f:87:d2:f3:db: b2:bd:c4:a3:3a:62:3b:9f:01:b5:a5:b5:b5:e5:4f: df:cf:95:3e:bd:7f:a7:0b:67:1f:9f:39:cd:13:8d: d8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:46:B2:0C:EF:D1:47:67:3C:9E:D5:63:55:AF:04:E9:8E:BD:13:78 X509v3 Authority Key Identifier: keyid:BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:3e:bc:69:06:48:6f:3e:b4:20:f6:26:07:19:44:dd:2a:8a: 71:1c:dc:2f:2e:8f:73:f0:be:a7:ea:27:2f:b8:85:cc:4b:20: 17:c9:25:6b:15:33:66:21:29:23:f9:31:b1:5c:39:f7:1e:42: a3:b2:67:43:ed:99:39:46:77:98:78:28:d9:1b:9c:60:32:e3: 4b:6a:ce:00:be:58:c5:04:a4:e4:66:7d:b9:f2:e1:9e:e7:a2: 44:f2:89:61:90:1f:34:58:ce:7b:3b:be:85:d1:9f:d5:3a:0e: ac:89:4a:1d:cb:3a:7d:f7:65:d0:e7:0f:37:dc:9e:b5:61:43: ad:4a:d3:c2:89:04:5a:97:a3:67:3b:db:75:04:36:42:12:81: 9c:b6:a0:9d:79:b9:18:7e:ef:9e:15:9a:08:1b:94:7b:99:a3: 54:70:78:b4:d5:b6:e8:c1:28:66:da:c2:d2:15:17:03:38:b4: 71:8f:c2:ba:ed:ce:48:2b:54:b6:8c:b9:e8:bf:f3:51:ad:bf: 78:f3:52:fa:15:02:47:97:64:30:43:58:a0:4e:33:c9:93:b0: 7e:13:40:00:0d:f7:0b:a4:aa:96:e7:02:34:37:c3:2d:f3:3f: 9f:0f:2b:cd:bb:54:9e:86:b6:9b:80:54:7a:86:ee:32:3d:d3: e7:f4:c2:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzNDOTExMC8GA1UEBRMoQkNFOUZBNkMzNzdDOTQzNEIxMkM3N0JFRkNERDQyQTVC NzAzNEZGMjAeFw0yNTEwMTkxMDM5MzVaFw0yNTEwMjYxMDM5MzVaMBgxFjAUBgNV BAMTDTY4ZjRiZmU4LWMzNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOHA9/QZi6ZpoLF9wXos8dmVmddhw5ItAZDknELjjF4lmsYtHj1yR6jWoAoYvn wdIurFVR/S6lk7wzsnCItV54wjPxjh1j1mgmZXrXH9ib8FSa3RZFeFkv4W+x+5LG H+ETX77Ei1sI2zeegsTQE0yQmazBFWAL2nPIE/qd7eu+NjTAS3deGrU3B5Lzu1Gk XpbkiEgrHT+nFYt6oZa6xwvlmwJisO6UxF8JJWT+OWek+ZQoROSG5gwpVp9//Fug SClqvDsq/SyiqQE85NvKiVbX2djLGDx2gOX+1e2fh9Lz27K9xKM6YjufAbWltbXl T9/PlT69f6cLZx+fOc0TjdjdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy0ayDO/R R2c8ntVjVa8E6Y69E3gwHwYDVR0jBBgwFoAUvOn6bDd8lDSxLHe+/N1CpbcDT/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDM0M5L0MxMkNEQUU0MzE4 RTExRjA5QzM2REE3QkM0RjlBRTAyL3ZPbjZiRGQ4bERTeExIZS1fTjFDcGJjRFRf SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdk9uNmJEZDhsRFN4TEhlLV9OMUNwYmNEVF9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD M0M5L0MxMkNEQUU0MzE4RTExRjA5QzM2REE3QkM0RjlBRTAyL3ZPbjZiRGQ4bERT eExIZS1fTjFDcGJjRFRfSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJw+vGkGSG8+tCD2JgcZRN0qinEc3C8uj3PwvqfqJy+4hcxLIBfJJWsV M2YhKSP5MbFcOfceQqOyZ0PtmTlGd5h4KNkbnGAy40tqzgC+WMUEpORmfbny4Z7n okTyiWGQHzRYzns7voXRn9U6DqyJSh3LOn33ZdDnDzfcnrVhQ61K08KJBFqXo2c7 23UENkISgZy2oJ15uRh+754VmggblHuZo1RweLTVtujBKGbawtIVFwM4tHGPwrrt zkgrVLaMuei/81Gtv3jzUvoVAkeXZDBDWKBOM8mTsH4TQAAN9wukqpbnAjQ3wy3z P58PK827VJ6GtpuAVHqG7jI90+f0wr4= -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:40 2025 by rpki-client