$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft File: Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft (raw, json) Hash identifier: y/WcOW0hbvqN0SLNJbx9sfe7Qdg1w69aAMrthYyYv+c= Subject key identifier: 73:68:C5:87:FE:D3:83:C3:FF:91:9D:7A:17:14:3A:8B:5F:29:8A:E9 Authority key identifier: 3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 Certificate issuer: /CN=A91F1303/serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft Manifest number: 45 Signing time: Sun 19 Oct 2025 10:50:57 +0000 Manifest this update: Sun 19 Oct 2025 10:50:56 +0000 Manifest next update: Sun 26 Oct 2025 10:50:56 +0000 Files and hashes: 1: Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl (hash: Ib5gOmJLr8F0eOro2zV1lHJUmdKEf/DPnYdbgjeX/5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1303, serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Validity Not Before: Oct 19 10:50:56 2025 GMT Not After : Oct 26 10:50:56 2025 GMT Subject: CN=68f4c291-64f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:89:8a:ef:db:f0:fa:a8:56:21:0b:ed:24: be:54:48:7d:d3:28:1e:1b:1e:25:b7:70:7d:4b:8a: 1c:95:ed:9d:1b:ee:10:fd:c9:70:66:c4:19:fc:28: 34:0a:a4:43:ed:2b:d4:a7:6d:5c:eb:71:7f:14:13: f4:94:d7:16:63:ac:05:bc:61:6b:72:ae:8e:bd:cd: c1:39:6e:07:0d:da:18:e3:9b:43:da:2d:79:d1:dd: 41:b1:ea:47:c0:ab:96:c8:69:21:8b:a8:eb:9b:f3: 80:f9:cf:23:1b:e1:24:12:07:c9:df:05:67:30:90: 70:fe:a6:42:f0:44:41:e5:f8:dc:03:c8:4e:84:1b: 77:20:51:08:9e:af:e1:f2:18:b9:fc:b7:04:e8:a5: ff:69:d7:74:a9:07:f6:c0:83:79:1d:30:3d:25:b5: 8b:9f:f8:f1:b6:a2:96:5f:d4:fb:f9:79:3f:5c:30: 7a:67:fd:56:4e:2a:36:fd:65:2f:b7:2c:42:48:95: 87:c8:95:89:5b:00:e2:26:f4:47:cb:d4:41:1a:ad: 8f:65:ee:db:7d:ce:91:54:51:9a:c1:df:cb:ce:07: 31:74:21:a3:5c:1d:e1:49:f9:9d:0c:94:41:2c:f8: 85:ca:f8:eb:a4:d0:e1:86:09:21:e2:bb:a0:be:eb: a5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:68:C5:87:FE:D3:83:C3:FF:91:9D:7A:17:14:3A:8B:5F:29:8A:E9 X509v3 Authority Key Identifier: keyid:3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:51:b3:df:fc:95:72:4c:59:47:65:22:f9:ad:8e:7a:a1:04: fc:bc:7a:78:f8:39:8e:6b:a0:cf:66:c0:cd:28:6c:aa:c8:85: a8:6d:47:d6:34:e0:17:be:c3:2a:b9:a5:a1:4f:b2:23:e8:ed: 8f:ee:18:c2:65:11:25:60:c7:51:4a:dc:ed:8e:79:2f:c5:22: 62:73:73:c2:b3:81:78:12:06:50:b5:31:80:d4:1b:4e:4c:bb: 71:81:34:09:95:1a:b1:fe:4a:b5:40:0c:43:16:09:fa:88:44: ee:29:46:d2:4d:9b:23:23:f0:25:8f:68:d7:4a:19:0f:c1:c0: 73:a8:12:f9:8a:8e:0b:9a:9c:2a:c3:e9:cc:9b:83:eb:53:9b: 3c:fb:2e:7d:c0:6d:0a:00:90:31:df:7b:b1:65:c3:f3:cb:bf: af:79:f5:80:11:e0:cc:2a:c6:4b:04:59:c2:ba:8d:d5:23:4a: c3:b9:4a:67:35:49:aa:e5:62:a3:55:1e:0d:1e:11:f6:fb:6f: 07:70:de:20:f0:ee:c1:aa:42:e2:5e:8a:cc:5f:a5:b8:06:b8: d1:3b:98:1a:45:d2:50:cf:02:9e:f8:0e:28:a8:ec:55:08:0d: d7:52:32:bb:f3:04:38:5b:64:d1:57:c0:d7:7b:ca:8d:ce:7b: fa:4b:8a:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTMwMzExMC8GA1UEBRMoM0YxNzc5MDk4OTE3MkY0MDkyNjdFMEZGRTc0NEVFNDhC MDE3OTFFNzAeFw0yNTEwMTkxMDUwNTZaFw0yNTEwMjYxMDUwNTZaMBgxFjAUBgNV BAMTDTY4ZjRjMjkxLTY0ZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCg9ImK79vw+qhWIQvtJL5USH3TKB4bHiW3cH1LihyV7Z0b7hD9yXBmxBn8KDQK pEPtK9SnbVzrcX8UE/SU1xZjrAW8YWtyro69zcE5bgcN2hjjm0PaLXnR3UGx6kfA q5bIaSGLqOub84D5zyMb4SQSB8nfBWcwkHD+pkLwREHl+NwDyE6EG3cgUQier+Hy GLn8twTopf9p13SpB/bAg3kdMD0ltYuf+PG2opZf1Pv5eT9cMHpn/VZOKjb9ZS+3 LEJIlYfIlYlbAOIm9EfL1EEarY9l7tt9zpFUUZrB38vOBzF0IaNcHeFJ+Z0MlEEs +IXK+Ouk0OGGCSHiu6C+66UnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc2jFh/7T g8P/kZ16FxQ6i18piukwHwYDVR0jBBgwFoAUPxd5CYkXL0CSZ+D/50TuSLAXkecw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxMzAzLzlCNDI0RDMwNDY4 NTExRjBBODgxODgzRUM0RjlBRTAyL1B4ZDVDWWtYTDBDU1otRF81MFR1U0xBWGtl Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHhkNUNZa1hMMENTWi1EXzUwVHVTTEFYa2VjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx MzAzLzlCNDI0RDMwNDY4NTExRjBBODgxODgzRUM0RjlBRTAyL1B4ZDVDWWtYTDBD U1otRF81MFR1U0xBWGtlYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIVRs9/8lXJMWUdlIvmtjnqhBPy8enj4OY5roM9mwM0obKrIhahtR9Y0 4Be+wyq5paFPsiPo7Y/uGMJlESVgx1FK3O2OeS/FImJzc8KzgXgSBlC1MYDUG05M u3GBNAmVGrH+SrVADEMWCfqIRO4pRtJNmyMj8CWPaNdKGQ/BwHOoEvmKjguanCrD 6cybg+tTmzz7Ln3AbQoAkDHfe7Flw/PLv6959YAR4MwqxksEWcK6jdUjSsO5Smc1 SarlYqNVHg0eEfb7bwdw3iDw7sGqQuJeisxfpbgGuNE7mBpF0lDPAp74Diio7FUI DddSMrvzBDhbZNFXwNd7yo3Oe/pLioY= -----END CERTIFICATE-----Generated at Mon Oct 20 18:27:15 2025 by rpki-client