$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft File: -H8wma149Ynd_kql85E3_7Mq_54.mft (raw, json) Hash identifier: pyva5k4U6AG7sGcIKu0hB27HvOHmOaAeIMIe48c8cQY= Subject key identifier: 1E:90:19:13:96:2D:93:D5:85:50:17:B5:19:DE:2F:BF:0B:F8:7E:E5 Authority key identifier: F8:7F:30:99:AD:78:F5:89:DD:FE:4A:A5:F3:91:37:FF:B3:2A:FF:9E Certificate issuer: /CN=A91F17B3/serialNumber=F87F3099AD78F589DDFE4AA5F39137FFB32AFF9E Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft Manifest number: 23 Signing time: Sun 19 Oct 2025 11:18:13 +0000 Manifest this update: Sun 19 Oct 2025 11:18:12 +0000 Manifest next update: Sun 26 Oct 2025 11:18:12 +0000 Files and hashes: 1: -H8wma149Ynd_kql85E3_7Mq_54.crl (hash: za/8lbd2oob61cg8w9kNGtNNf5Mx0Rvxci0Xz4eweTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.crl rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B3, serialNumber=F87F3099AD78F589DDFE4AA5F39137FFB32AFF9E Validity Not Before: Oct 19 11:18:12 2025 GMT Not After : Oct 26 11:18:12 2025 GMT Subject: CN=68f4c8f5-c204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b8:11:73:b5:07:fd:d9:a9:dd:de:0a:39:6a: 7d:b9:2d:1e:a7:d4:9e:c8:2f:01:7a:c7:3b:62:b9: 7c:fb:87:ae:d9:4a:0e:8f:af:af:2f:f6:22:cd:e0: f0:fd:02:a3:58:c2:bb:34:43:b4:93:d4:a6:2e:66: 20:c5:1c:48:8d:2f:23:c5:b6:67:23:20:b7:cc:40: 8f:d5:ac:3a:a1:6f:7d:5c:80:f8:fd:15:30:04:54: c7:0b:89:08:1d:f5:cb:b3:8b:ef:ee:70:40:d9:9e: 1f:21:15:20:3e:92:91:5b:e2:53:3d:f5:9b:61:e9: 27:ff:89:80:73:bf:20:9f:73:d7:06:ca:d1:5c:07: aa:a9:45:b0:5f:07:a1:58:87:3b:75:43:50:b6:b2: 9f:b1:8f:83:f3:bc:86:10:28:fe:92:56:ec:42:f1: 1b:c8:e2:6a:0e:89:60:6d:f8:0a:db:bc:c1:02:8a: da:ce:37:9f:19:d0:b0:e4:c5:06:eb:eb:2e:50:96: c4:81:94:47:a8:82:01:fe:61:ab:d6:cc:7a:55:5d: 83:8e:9b:b4:07:a9:2c:7c:a4:31:45:a0:20:de:a0: a6:36:26:3c:8c:6c:49:56:c5:4d:68:14:48:be:94: ea:4f:17:9a:b7:db:ec:c3:71:51:20:01:66:7a:57: 7f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:90:19:13:96:2D:93:D5:85:50:17:B5:19:DE:2F:BF:0B:F8:7E:E5 X509v3 Authority Key Identifier: keyid:F8:7F:30:99:AD:78:F5:89:DD:FE:4A:A5:F3:91:37:FF:B3:2A:FF:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-H8wma149Ynd_kql85E3_7Mq_54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/5E5095C879CD11F0A9B90321C4F9AE02/-H8wma149Ynd_kql85E3_7Mq_54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:ff:30:83:e7:c8:90:5c:29:60:5f:43:db:d4:dd:b5:9d:ee: 71:18:90:c5:3b:27:52:6e:01:98:66:57:d3:39:a7:d7:ff:d0: 6b:d9:f2:8a:b2:00:76:3c:02:e4:2d:23:b0:41:8c:ab:a2:9a: 17:55:60:f0:ef:25:e7:48:7e:57:4b:7b:8d:78:e6:d0:b8:ec: 1d:a8:40:aa:d0:ab:8d:fd:99:03:9f:3b:98:75:01:2f:12:f5: bf:e4:cb:fd:63:80:dc:d6:9a:cd:ca:75:da:a1:b5:46:5c:f1: f0:b5:2d:fc:16:d7:50:63:30:a9:db:07:48:f1:04:77:81:67: 7e:c2:e6:c8:f5:ad:ae:42:62:5b:8b:b0:12:27:75:fd:db:24: d1:ec:43:3e:62:31:1b:67:a3:10:c6:b4:47:8b:30:15:0a:90: 25:75:7e:e2:e6:24:16:49:99:e1:3d:16:87:00:0b:68:a1:ff: 24:b2:7a:5e:4e:67:ca:c6:bb:a1:33:e5:bd:a9:e4:05:f0:f9: 6b:b4:29:48:fb:92:e3:03:27:72:7c:44:88:3e:90:d4:fa:6b: 7b:52:70:48:a0:ed:33:a3:58:aa:41:91:41:f9:ba:41:2b:ab: f4:ce:7c:fc:fb:09:04:9f:11:bd:aa:28:7c:83:29:87:5e:6a: e8:c7:2c:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTdCMzExMC8GA1UEBRMoRjg3RjMwOTlBRDc4RjU4OURERkU0QUE1RjM5MTM3RkZC MzJBRkY5RTAeFw0yNTEwMTkxMTE4MTJaFw0yNTEwMjYxMTE4MTJaMBgxFjAUBgNV BAMTDTY4ZjRjOGY1LWMyMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8uBFztQf92and3go5an25LR6n1J7ILwF6xztiuXz7h67ZSg6Pr68v9iLN4PD9 AqNYwrs0Q7ST1KYuZiDFHEiNLyPFtmcjILfMQI/VrDqhb31cgPj9FTAEVMcLiQgd 9cuzi+/ucEDZnh8hFSA+kpFb4lM99Zth6Sf/iYBzvyCfc9cGytFcB6qpRbBfB6FY hzt1Q1C2sp+xj4PzvIYQKP6SVuxC8RvI4moOiWBt+ArbvMECitrON58Z0LDkxQbr 6y5QlsSBlEeoggH+YavWzHpVXYOOm7QHqSx8pDFFoCDeoKY2JjyMbElWxU1oFEi+ lOpPF5q32+zDcVEgAWZ6V39dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHpAZE5Yt k9WFUBe1Gd4vvwv4fuUwHwYDVR0jBBgwFoAU+H8wma149Ynd/kql85E3/7Mq/54w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxN0IzLzVFNTA5NUM4NzlD RDExRjBBOUI5MDMyMUM0RjlBRTAyLy1IOHdtYTE0OVluZF9rcWw4NUUzXzdNcV81 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLUg4d21hMTQ5WW5kX2txbDg1RTNfN01xXzU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx N0IzLzVFNTA5NUM4NzlDRDExRjBBOUI5MDMyMUM0RjlBRTAyLy1IOHdtYTE0OVlu ZF9rcWw4NUUzXzdNcV81NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIP/MIPnyJBcKWBfQ9vU3bWd7nEYkMU7J1JuAZhmV9M5p9f/0GvZ8oqy AHY8AuQtI7BBjKuimhdVYPDvJedIfldLe4145tC47B2oQKrQq439mQOfO5h1AS8S 9b/ky/1jgNzWms3KddqhtUZc8fC1LfwW11BjMKnbB0jxBHeBZ37C5sj1ra5CYluL sBIndf3bJNHsQz5iMRtnoxDGtEeLMBUKkCV1fuLmJBZJmeE9FocAC2ih/ySyel5O Z8rGu6Ez5b2p5AXw+Wu0KUj7kuMDJ3J8RIg+kNT6a3tScEig7TOjWKpBkUH5ukEr q/TOfPz7CQSfEb2qKHyDKYdeaujHLBw= -----END CERTIFICATE-----Generated at Tue Oct 21 03:17:03 2025 by rpki-client