$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft File: _DR_mfrUz-7KsxUhAkJ3GusIbXU.mft (raw, json) Hash identifier: z+dWtOXCmZmaSrXp2rVAAoVuYW0S6skhc8PViVnG4NE= Subject key identifier: 51:B5:8C:CE:43:0C:D7:47:5E:85:B0:14:E8:C0:7E:76:73:4B:F5:3B Authority key identifier: FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75 Certificate issuer: /CN=A91F7EFC/serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75 Certificate serial: 48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft Manifest number: 48 Signing time: Sun 19 Oct 2025 10:50:32 +0000 Manifest this update: Sun 19 Oct 2025 10:50:32 +0000 Manifest next update: Sun 26 Oct 2025 10:50:32 +0000 Files and hashes: 1: _DR_mfrUz-7KsxUhAkJ3GusIbXU.crl (hash: 3ek7g56THdKJBTZZhteSIo+CiRxTIEbZuIMciywr3KI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7EFC, serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75 Validity Not Before: Oct 19 10:50:32 2025 GMT Not After : Oct 26 10:50:32 2025 GMT Subject: CN=68f4c278-3cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:38:ff:59:4f:91:d5:1d:71:3a:c5:63:03:18: fe:98:c5:40:1b:c2:9c:e8:ad:5c:2a:fd:9d:7e:52: a1:17:c1:9e:a3:5c:b9:75:f1:9c:07:d8:80:99:e1: cb:b4:08:39:dd:10:43:17:51:80:58:50:02:00:d4: b3:d2:c9:60:b4:c7:e5:eb:6e:22:99:37:84:58:68: d8:70:fc:c4:ad:e7:93:03:57:46:81:8f:8e:cc:aa: 88:c6:ec:72:ea:3f:c9:fe:84:23:5a:98:0d:b6:4a: 70:5c:c1:c3:58:83:fa:d2:85:ab:da:d5:df:79:6a: 24:f0:08:3c:48:ef:07:88:77:6c:86:52:ba:19:e3: a0:aa:50:e3:96:8d:26:6c:39:76:ee:95:ab:1d:68: 57:56:38:eb:3c:10:70:93:a0:99:b6:5e:46:12:1d: fc:0f:bc:c8:c0:2d:07:e3:2d:47:55:52:42:ed:f0: aa:2f:3b:5d:83:01:35:c5:a2:48:24:76:54:a9:bc: 07:c9:91:31:20:46:28:b0:32:81:2e:ab:1d:b0:0c: 56:18:d3:3b:c0:94:ab:6a:00:90:ab:fc:11:95:81: 16:70:10:ce:64:c6:f7:16:54:1f:d8:1a:6b:79:59: ab:51:03:1d:90:91:8f:60:95:ef:a5:6c:7d:50:8e: 57:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B5:8C:CE:43:0C:D7:47:5E:85:B0:14:E8:C0:7E:76:73:4B:F5:3B X509v3 Authority Key Identifier: keyid:FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:bc:53:a6:de:29:3a:66:5b:41:af:8f:66:11:ac:33:1b:f3: 2f:9b:e5:36:e9:e2:ba:b2:1c:e7:ed:65:6c:07:c3:7c:df:91: 24:83:49:2d:fd:13:17:f0:16:81:e5:cc:67:35:bc:5f:7f:1d: 48:6c:09:25:e1:e1:d2:08:80:f4:ae:4e:e2:41:4f:2c:5e:33: 76:69:9b:06:22:ae:c7:0c:06:ae:32:38:03:ca:7a:cf:51:23: 26:79:d6:6b:d5:d9:2a:99:fc:2c:2f:20:c1:54:3f:b3:70:99: 0d:26:59:50:6e:82:5d:18:f6:5e:0a:35:e4:54:f1:95:06:5c: 80:dc:ac:65:fc:a2:69:cb:52:d8:6f:ac:7c:f9:a1:59:ef:26: 12:0a:6d:8d:c3:70:ca:62:c3:32:46:13:f9:af:73:9e:08:55: 34:ba:d1:9e:f6:4d:0c:8b:c0:08:a2:5e:cd:6c:b8:a6:8b:71: 52:df:56:45:28:74:3a:85:4b:c9:d1:4c:14:e6:09:70:80:ab: e9:dd:a8:4b:5b:77:06:a3:a9:62:6f:f5:5f:3e:d8:7c:c3:28: cb:9a:81:f8:09:00:05:b3:0d:ea:ba:cb:84:89:f5:6e:18:0c: 12:c4:73:6e:7c:34:9d:3b:68:62:06:12:6d:c6:90:87:20:ad: d0:02:be:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG N0VGQzExMC8GA1UEBRMoRkMzNDdGOTlGQUQ0Q0ZFRUNBQjMxNTIxMDI0Mjc3MUFF QjA4NkQ3NTAeFw0yNTEwMTkxMDUwMzJaFw0yNTEwMjYxMDUwMzJaMBgxFjAUBgNV BAMTDTY4ZjRjMjc4LTNjZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgOP9ZT5HVHXE6xWMDGP6YxUAbwpzorVwq/Z1+UqEXwZ6jXLl18ZwH2ICZ4cu0 CDndEEMXUYBYUAIA1LPSyWC0x+XrbiKZN4RYaNhw/MSt55MDV0aBj47MqojG7HLq P8n+hCNamA22SnBcwcNYg/rShava1d95aiTwCDxI7weId2yGUroZ46CqUOOWjSZs OXbulasdaFdWOOs8EHCToJm2XkYSHfwPvMjALQfjLUdVUkLt8KovO12DATXFokgk dlSpvAfJkTEgRiiwMoEuqx2wDFYY0zvAlKtqAJCr/BGVgRZwEM5kxvcWVB/YGmt5 WatRAx2QkY9gle+lbH1QjlfZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUbWMzkMM 10dehbAU6MB+dnNL9TswHwYDVR0jBBgwFoAU/DR/mfrUz+7KsxUhAkJ3GusIbXUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3RUZDLzFEOTM4MkVDNDVC QzExRjBBQjk3Q0MwOUM0RjlBRTAyL19EUl9tZnJVei03S3N4VWhBa0ozR3VzSWJY VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0RSX21mclV6LTdLc3hVaEFrSjNHdXNJYlhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 RUZDLzFEOTM4MkVDNDVCQzExRjBBQjk3Q0MwOUM0RjlBRTAyL19EUl9tZnJVei03 S3N4VWhBa0ozR3VzSWJYVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIm8U6beKTpmW0Gvj2YRrDMb8y+b5Tbp4rqyHOftZWwHw3zfkSSDSS39 ExfwFoHlzGc1vF9/HUhsCSXh4dIIgPSuTuJBTyxeM3ZpmwYirscMBq4yOAPKes9R IyZ51mvV2SqZ/CwvIMFUP7NwmQ0mWVBugl0Y9l4KNeRU8ZUGXIDcrGX8omnLUthv rHz5oVnvJhIKbY3DcMpiwzJGE/mvc54IVTS60Z72TQyLwAiiXs1suKaLcVLfVkUo dDqFS8nRTBTmCXCAq+ndqEtbdwajqWJv9V8+2HzDKMuagfgJAAWzDeq6y4SJ9W4Y DBLEc258NJ07aGIGEm3GkIcgrdACvjE= -----END CERTIFICATE-----Generated at Sun Oct 19 23:24:06 2025 by rpki-client