$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft File: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft (raw, json) Hash identifier: sjEGNZze5ClzsMFuRkvYBeQeBqcuRDT2jHfO3ejvF0o= Subject key identifier: 01:A9:0A:F9:C5:C8:95:AC:F1:BC:4E:B8:C7:9A:ED:D6:2E:51:8C:18 Authority key identifier: F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 Certificate issuer: /CN=A91ECF21/serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Certificate serial: 034B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft Manifest number: 034B Signing time: Sun 19 Oct 2025 03:02:34 +0000 Manifest this update: Sun 19 Oct 2025 03:02:33 +0000 Manifest next update: Sun 26 Oct 2025 03:02:33 +0000 Files and hashes: 1: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl (hash: Zi5eWm6iAxrRyzSoUKh9VMgSRA+eEVTxAa2hnw1UVTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 843 (0x34b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECF21, serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5 Validity Not Before: Oct 19 03:02:33 2025 GMT Not After : Oct 26 03:02:33 2025 GMT Subject: CN=68f454ca-4dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:40:cf:60:a1:cf:0d:c0:89:98:c9:f7:36:c5: 6e:08:6b:05:cc:4b:72:f7:e7:c8:f4:c3:4b:d1:33: 7f:27:3f:ba:df:6b:10:6e:bb:a3:a2:51:89:93:b8: 92:4f:f0:75:9f:98:15:ad:b8:10:5e:f6:f0:af:1c: d9:82:14:8a:b5:85:a2:97:63:d9:7d:16:58:26:69: dc:1d:39:49:37:e8:9b:82:6b:7d:12:5e:d0:41:72: e2:67:c8:04:09:13:97:81:ce:74:bf:89:cc:bc:5b: 78:77:e5:9e:63:db:a7:6c:89:29:61:9e:ff:aa:a5: 28:c4:52:18:9f:b6:d7:2a:b6:b4:53:71:9f:7d:3f: 00:dd:54:03:b9:0a:28:86:33:61:16:b9:73:24:31: 93:f5:b5:99:75:97:fc:c4:03:84:43:7c:c2:e4:44: f5:a6:56:94:b3:a4:48:05:e1:c9:98:dd:86:24:48: 3b:71:c5:e7:aa:e9:fe:be:98:98:75:90:4a:6d:34: 19:e9:f6:0d:5b:b7:26:9f:a8:dc:56:36:8b:08:50: 67:0e:82:0e:fa:a9:f5:53:dd:b7:68:fd:5f:65:6b: 36:4f:f9:69:6f:5a:0e:fd:09:2e:ce:5e:66:6d:f9: f5:fc:d8:bf:96:fd:09:90:93:f6:2a:61:cc:69:01: 66:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A9:0A:F9:C5:C8:95:AC:F1:BC:4E:B8:C7:9A:ED:D6:2E:51:8C:18 X509v3 Authority Key Identifier: keyid:F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:93:a4:a5:43:9d:99:db:94:ed:c9:5c:51:19:9f:7e:f4:f0: 92:ae:79:0a:c9:80:20:ef:0c:0b:cd:c2:97:9b:60:13:c2:20: c5:e2:09:50:94:5d:28:e4:ac:ed:13:88:28:6e:f0:0a:a7:ef: d6:84:cb:63:73:5f:f8:3b:53:2b:ba:dd:f2:28:04:91:f4:a3: 4f:34:21:60:bf:46:0d:96:af:d8:f8:1d:ee:db:a0:f6:f9:32: 55:8c:05:a5:85:2a:de:71:a8:54:63:58:98:f5:03:7a:94:71: 56:99:67:85:95:06:6a:52:fd:fc:30:15:96:49:bb:02:c0:47: bc:42:da:fd:c4:0c:97:2b:50:3f:44:d7:e6:39:30:49:28:99: 53:34:50:f8:38:5c:30:2d:3e:77:17:ca:8a:a8:0b:cd:3d:97: a9:0c:c5:fa:f3:7a:9e:02:42:35:39:71:8c:be:53:8a:a7:e8: ac:7e:0d:01:a3:40:4c:8d:5d:25:16:4e:71:b3:66:9d:f5:b8: 62:5b:f2:10:49:ae:a5:1d:20:d1:06:7b:92:09:73:d1:87:44: 8d:ad:f8:27:a9:fc:f2:1d:9d:2e:38:d0:93:8b:f7:31:39:69: f5:5f:ae:9a:38:c7:1f:3d:1a:41:d1:51:24:b3:72:d5:53:55: 20:22:39:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNGMjExMTAvBgNVBAUTKEY2N0RBOUYxNUU1RTkzNEQ5MEU0OEZFNTBFN0RDODU3 MUREOTM3QTUwHhcNMjUxMDE5MDMwMjMzWhcNMjUxMDI2MDMwMjMzWjAYMRYwFAYD VQQDEw02OGY0NTRjYS00ZGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EDPYKHPDcCJmMn3NsVuCGsFzEty9+fI9MNL0TN/Jz+632sQbrujolGJk7iS T/B1n5gVrbgQXvbwrxzZghSKtYWil2PZfRZYJmncHTlJN+ibgmt9El7QQXLiZ8gE CROXgc50v4nMvFt4d+WeY9unbIkpYZ7/qqUoxFIYn7bXKra0U3GffT8A3VQDuQoo hjNhFrlzJDGT9bWZdZf8xAOEQ3zC5ET1plaUs6RIBeHJmN2GJEg7ccXnqun+vpiY dZBKbTQZ6fYNW7cmn6jcVjaLCFBnDoIO+qn1U923aP1fZWs2T/lpb1oO/Qkuzl5m bfn1/Ni/lv0JkJP2KmHMaQFmfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGpCvnF yJWs8bxOuMea7dYuUYwYMB8GA1UdIwQYMBaAFPZ9qfFeXpNNkOSP5Q59yFcd2Tel MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0YyMS9GMkVCRUIzNEQ1 MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWswMlE1SV9sRG4zSVZ4M1pO NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzluMnA4VjVlazAyUTVJX2xEbjNJVngzWk42VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0YyMS9GMkVCRUIzNEQ1MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWsw MlE1SV9sRG4zSVZ4M1pONlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXk6SlQ52Z25TtyVxRGZ9+9PCSrnkKyYAg7wwLzcKXm2ATwiDF4glQ lF0o5KztE4gobvAKp+/WhMtjc1/4O1Mrut3yKASR9KNPNCFgv0YNlq/Y+B3u26D2 +TJVjAWlhSrecahUY1iY9QN6lHFWmWeFlQZqUv38MBWWSbsCwEe8Qtr9xAyXK1A/ RNfmOTBJKJlTNFD4OFwwLT53F8qKqAvNPZepDMX683qeAkI1OXGMvlOKp+isfg0B o0BMjV0lFk5xs2ad9bhiW/IQSa6lHSDRBnuSCXPRh0SNrfgnqfzyHZ0uONCTi/cx OWn1X66aOMcfPRpB0VEks3LVU1UgIjnw -----END CERTIFICATE-----Generated at Mon Oct 20 10:41:44 2025 by rpki-client