$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft File: 1u0VCduHw0xGCiZBoZt_SE5NxEU.mft (raw, json) Hash identifier: dMHhT8xeCee171Uo63nmmh9poWQTFyDfaSzDC36k+cI= Subject key identifier: 1B:0A:83:BB:A7:F2:9E:1A:C9:FC:E2:77:95:AF:B5:5D:4F:AB:FE:AF Authority key identifier: D6:ED:15:09:DB:87:C3:4C:46:0A:26:41:A1:9B:7F:48:4E:4D:C4:45 Certificate issuer: /CN=A91F5216/serialNumber=D6ED1509DB87C34C460A2641A19B7F484E4DC445 Certificate serial: 021B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft Manifest number: 021B Signing time: Sun 19 Oct 2025 04:21:45 +0000 Manifest this update: Sun 19 Oct 2025 04:21:44 +0000 Manifest next update: Sun 26 Oct 2025 04:21:44 +0000 Files and hashes: 1: 1u0VCduHw0xGCiZBoZt_SE5NxEU.crl (hash: wYxixt4snz46Z7WKv60GkgGvvW+L2q8rgxvOO3Y7X+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.crl rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 539 (0x21b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5216, serialNumber=D6ED1509DB87C34C460A2641A19B7F484E4DC445 Validity Not Before: Oct 19 04:21:44 2025 GMT Not After : Oct 26 04:21:44 2025 GMT Subject: CN=68f46758-259c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:61:26:6e:e0:dd:4b:19:0e:59:f3:0a:0c:4c: c4:6c:72:73:c6:f9:85:de:f2:64:cd:d8:56:ed:49: a0:c9:5b:8c:ae:23:56:55:81:55:eb:2e:32:5f:3f: d0:94:0c:cd:c4:02:6a:6e:79:ef:b4:5c:b5:2d:84: 58:40:0c:1f:bf:cd:68:18:fe:5f:b4:27:66:ce:af: 0e:01:17:ed:2a:e1:e6:e8:46:8f:e9:76:4d:4f:b9: 59:bd:e0:2d:bd:d7:3d:eb:cb:1e:e8:bf:8b:22:d5: 23:80:c2:34:b0:c6:96:55:99:0a:75:6a:07:0b:47: 1e:9c:a7:44:b7:bf:04:11:66:a7:40:e6:55:91:f8: 74:d0:dd:82:af:9a:a3:c4:b1:48:3c:bd:ad:b8:8d: 39:0f:ac:24:8e:ca:9b:47:f6:92:d8:97:63:36:52: 12:f6:7e:30:20:32:06:00:09:57:d3:bd:37:c8:a4: 38:81:e1:8b:69:07:77:ae:b2:7b:16:50:1b:1e:e7: ba:73:0f:af:ce:54:34:50:40:0b:c0:6b:2d:84:7a: fb:30:40:6c:93:b7:3e:55:d6:9f:7e:a1:30:5c:ad: cb:53:38:b2:6f:59:18:51:83:5c:11:7e:31:7d:4a: 54:23:f0:15:21:80:d1:2c:a7:29:15:a1:a7:20:01: 7b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0A:83:BB:A7:F2:9E:1A:C9:FC:E2:77:95:AF:B5:5D:4F:AB:FE:AF X509v3 Authority Key Identifier: keyid:D6:ED:15:09:DB:87:C3:4C:46:0A:26:41:A1:9B:7F:48:4E:4D:C4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:65:b8:ce:3d:42:f2:ac:a0:fc:1f:b6:78:8e:6d:36:e4:7a: 47:61:ff:b7:df:74:f3:9d:fa:92:b1:d6:b4:47:e8:28:49:53: a2:b6:ba:1e:85:d2:1b:ae:2c:a1:76:00:9e:c3:ec:cd:f8:c6: 6a:94:fc:15:65:10:36:9b:81:6d:41:b4:17:9e:e2:5e:68:37: 49:14:75:f9:45:7a:72:5e:9a:24:20:b2:f3:1b:4a:ae:b3:92: 66:3a:07:62:0d:76:c0:84:c5:24:15:df:13:e2:53:06:fb:cc: e5:7a:c5:8c:35:42:7b:1a:c5:92:d7:6d:8e:2c:5e:ac:cc:8b: 67:ed:03:51:ed:b4:0f:37:c2:a2:08:9c:41:82:da:be:5e:ce: f3:e3:ac:49:e4:de:ae:c0:6d:b1:10:49:a5:e4:5b:9b:83:e3: 68:19:36:53:b8:c9:de:1f:03:00:82:e4:5e:1a:97:fa:14:d4: fe:06:9d:5f:ed:7e:0f:e1:3c:6f:8d:89:4a:13:a5:06:15:ba: 85:58:11:3d:20:29:d3:26:5c:e1:b4:17:a4:11:bb:9a:ef:8b: 07:63:53:dd:0e:9c:d2:e8:26:35:ba:5c:4b:da:db:7b:9e:c6: 8d:29:76:26:91:de:91:2d:6c:b9:b9:e6:0c:ed:b2:55:0e:74: 35:2b:be:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMTYxMTAvBgNVBAUTKEQ2RUQxNTA5REI4N0MzNEM0NjBBMjY0MUExOUI3RjQ4 NEU0REM0NDUwHhcNMjUxMDE5MDQyMTQ0WhcNMjUxMDI2MDQyMTQ0WjAYMRYwFAYD VQQDEw02OGY0Njc1OC0yNTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmEmbuDdSxkOWfMKDEzEbHJzxvmF3vJkzdhW7UmgyVuMriNWVYFV6y4yXz/Q lAzNxAJqbnnvtFy1LYRYQAwfv81oGP5ftCdmzq8OARftKuHm6EaP6XZNT7lZveAt vdc968se6L+LItUjgMI0sMaWVZkKdWoHC0cenKdEt78EEWanQOZVkfh00N2Cr5qj xLFIPL2tuI05D6wkjsqbR/aS2JdjNlIS9n4wIDIGAAlX0703yKQ4geGLaQd3rrJ7 FlAbHue6cw+vzlQ0UEALwGsthHr7MEBsk7c+VdaffqEwXK3LUziyb1kYUYNcEX4x fUpUI/AVIYDRLKcpFaGnIAF75wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsKg7un 8p4ayfzid5WvtV1Pq/6vMB8GA1UdIwQYMBaAFNbtFQnbh8NMRgomQaGbf0hOTcRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi82NjQ1QUNBNjZF MDgxMUVEQkVFRDYyODRDNEY5QUUwMi8xdTBWQ2R1SHcweEdDaVpCb1p0X1NFNU54 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF1MFZDZHVIdzB4R0NpWkJvWnRfU0U1TnhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIxNi82NjQ1QUNBNjZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi8xdTBWQ2R1SHcw eEdDaVpCb1p0X1NFNU54RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClZbjOPULyrKD8H7Z4jm025HpHYf+333TznfqSsda0R+goSVOitroe hdIbriyhdgCew+zN+MZqlPwVZRA2m4FtQbQXnuJeaDdJFHX5RXpyXpokILLzG0qu s5JmOgdiDXbAhMUkFd8T4lMG+8zlesWMNUJ7GsWS122OLF6szItn7QNR7bQPN8Ki CJxBgtq+Xs7z46xJ5N6uwG2xEEml5Fubg+NoGTZTuMneHwMAguReGpf6FNT+Bp1f 7X4P4TxvjYlKE6UGFbqFWBE9ICnTJlzhtBekEbua74sHY1PdDpzS6CY1ulxL2tt7 nsaNKXYmkd6RLWy5ueYM7bJVDnQ1K76q -----END CERTIFICATE-----Generated at Sun Oct 19 23:34:07 2025 by rpki-client