$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft File: RtfjskJlD3X4XEWBNYWNzYyZwgM.mft (raw, json) Hash identifier: RvI54vumDiH/I/NIFB20AEAxrw5Knfm/trjHcNXw3JY= Subject key identifier: E3:39:E6:7E:21:AA:9E:7D:66:60:B3:F2:CF:CF:8A:ED:38:5E:22:78 Authority key identifier: 46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03 Certificate issuer: /CN=A91F3989/serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft Manifest number: 0123 Signing time: Sun 19 Oct 2025 07:32:43 +0000 Manifest this update: Sun 19 Oct 2025 07:32:43 +0000 Manifest next update: Sun 26 Oct 2025 07:32:43 +0000 Files and hashes: 1: RtfjskJlD3X4XEWBNYWNzYyZwgM.crl (hash: U5JRVG0ImDOMO6WbwMXrEv+HcU44AxR9Gp+TGH99Mv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3989, serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203 Validity Not Before: Oct 19 07:32:43 2025 GMT Not After : Oct 26 07:32:43 2025 GMT Subject: CN=68f4941b-a97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d1:9b:81:04:0e:5e:1e:fa:5e:0e:b9:49:4b: 72:1b:f4:a6:0f:6e:e8:37:0d:9a:1a:bb:fe:f8:fd: aa:ad:fe:7e:66:56:57:61:9d:6d:32:ef:ba:60:02: 9e:9d:55:a8:db:db:90:9e:f3:75:ac:67:a6:5d:05: 20:56:0b:97:02:a2:b7:83:64:22:be:d3:c0:28:21: c4:fb:10:02:31:35:8e:05:85:36:c0:20:48:b7:d8: 55:c8:c2:a4:74:30:eb:b2:2b:c3:cd:cf:65:65:6c: e8:6d:22:ab:b8:9a:69:52:61:03:93:20:01:51:0e: f3:ca:11:a5:f9:57:d9:95:5a:11:fe:20:9b:dc:4f: 4a:38:5d:d6:1b:ab:14:d3:b0:c4:4d:9d:73:82:ca: 11:7d:dc:42:08:e7:67:18:34:07:f6:87:3c:f0:0b: 54:5c:76:3b:a3:a3:45:a8:23:32:a4:2f:38:80:99: a6:4c:fb:0f:57:fb:4d:fa:d9:26:45:bd:1d:bd:13: 5b:07:59:9b:a9:2e:6c:01:79:6a:bb:29:54:a9:58: 93:c1:73:42:d7:0e:42:11:49:fa:6f:07:45:18:48: 7e:3b:bf:77:5b:3d:1b:a4:7b:4d:25:2f:e7:ab:09: 2b:4f:a9:80:c6:06:9e:5c:d2:10:40:59:0e:6f:b7: 20:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:39:E6:7E:21:AA:9E:7D:66:60:B3:F2:CF:CF:8A:ED:38:5E:22:78 X509v3 Authority Key Identifier: keyid:46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:fe:c3:40:a4:db:a5:5f:90:e7:f7:fb:2d:d1:bd:49:a4:5f: 8c:61:e1:11:ad:18:2a:c5:1e:df:1d:2f:de:78:c5:55:4c:45: d9:cf:dd:90:5e:10:c6:c1:54:76:9f:64:dc:e4:4f:a6:3a:3f: e5:69:12:82:f7:0e:00:d6:c1:46:41:ff:eb:b9:42:71:a9:17: f5:54:2d:2e:ab:9c:a4:ad:9e:f2:5c:2a:74:fe:82:93:b8:fb: 12:1a:26:33:75:df:c1:7d:40:5d:7b:ac:ca:0a:a3:4e:fa:98: 57:6e:2f:1d:93:92:c0:29:d8:cd:e2:af:39:16:fd:f4:c9:31: a9:36:d2:7d:44:99:42:c1:04:22:31:79:a3:f7:b5:60:61:db: f6:7f:27:ab:b1:df:43:79:b9:63:50:17:b5:84:61:19:5c:91: f0:df:ae:15:f8:a7:2c:b4:a2:30:38:5d:75:74:51:7d:ec:f2: 79:6b:6e:7a:b9:a7:89:94:a1:5d:07:83:95:24:90:a1:55:37: 90:fc:f5:89:c6:cc:58:0b:33:26:ac:87:96:12:db:7a:6e:fe: 83:fc:51:f4:e3:0c:5b:67:58:80:9d:4e:7b:8d:f0:9f:37:19: 55:4d:22:92:d3:d4:1a:01:d0:1d:83:9c:ae:24:84:ec:07:9e: 4b:76:13:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5ODkxMTAvBgNVBAUTKDQ2RDdFM0IyNDI2NTBGNzVGODVDNDU4MTM1ODU4RENE OEM5OUMyMDMwHhcNMjUxMDE5MDczMjQzWhcNMjUxMDI2MDczMjQzWjAYMRYwFAYD VQQDEw02OGY0OTQxYi1hOTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdGbgQQOXh76Xg65SUtyG/SmD27oNw2aGrv++P2qrf5+ZlZXYZ1tMu+6YAKe nVWo29uQnvN1rGemXQUgVguXAqK3g2QivtPAKCHE+xACMTWOBYU2wCBIt9hVyMKk dDDrsivDzc9lZWzobSKruJppUmEDkyABUQ7zyhGl+VfZlVoR/iCb3E9KOF3WG6sU 07DETZ1zgsoRfdxCCOdnGDQH9oc88AtUXHY7o6NFqCMypC84gJmmTPsPV/tN+tkm Rb0dvRNbB1mbqS5sAXlquylUqViTwXNC1w5CEUn6bwdFGEh+O793Wz0bpHtNJS/n qwkrT6mAxgaeXNIQQFkOb7cgfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOM55n4h qp59ZmCz8s/Piu04XiJ4MB8GA1UdIwQYMBaAFEbX47JCZQ91+FxFgTWFjc2MmcID MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzk4OS8zQUFDMEU1OEVD RDAxMUVFOEEyMjRENDlDNEY5QUUwMi9SdGZqc2tKbEQzWDRYRVdCTllXTnpZeVp3 Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J0Zmpza0psRDNYNFhFV0JOWVdOell5WndnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzk4OS8zQUFDMEU1OEVDRDAxMUVFOEEyMjRENDlDNEY5QUUwMi9SdGZqc2tKbEQz WDRYRVdCTllXTnpZeVp3Z00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW/sNApNulX5Dn9/st0b1JpF+MYeERrRgqxR7fHS/eeMVVTEXZz92Q XhDGwVR2n2Tc5E+mOj/laRKC9w4A1sFGQf/ruUJxqRf1VC0uq5ykrZ7yXCp0/oKT uPsSGiYzdd/BfUBde6zKCqNO+phXbi8dk5LAKdjN4q85Fv30yTGpNtJ9RJlCwQQi MXmj97VgYdv2fyersd9DebljUBe1hGEZXJHw364V+KcstKIwOF11dFF97PJ5a256 uaeJlKFdB4OVJJChVTeQ/PWJxsxYCzMmrIeWEtt6bv6D/FH04wxbZ1iAnU57jfCf NxlVTSKS09QaAdAdg5yuJITsB55LdhNH -----END CERTIFICATE-----Generated at Mon Oct 20 10:16:41 2025 by rpki-client