$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft File: dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft (raw, json) Hash identifier: 4+qBorrdv+UWouviJFHK+57Sl1riNPxGwAT5EmfKZ1g= Subject key identifier: BB:D1:96:F1:0C:B8:81:9D:D1:35:FA:22:77:76:C2:EC:DB:38:28:48 Authority key identifier: 75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97 Certificate issuer: /CN=A91FC705/serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997 Certificate serial: 057D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft Manifest number: 057D Signing time: Sun 19 Oct 2025 00:55:47 +0000 Manifest this update: Sun 19 Oct 2025 00:55:46 +0000 Manifest next update: Sun 26 Oct 2025 00:55:46 +0000 Files and hashes: 1: dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl (hash: 7dPz0lzWnYJwqZWo2TLuJfUTcV+lw6mHHZhPKqRAO5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1405 (0x57d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC705, serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997 Validity Not Before: Oct 19 00:55:46 2025 GMT Not After : Oct 26 00:55:46 2025 GMT Subject: CN=68f43712-b850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:e3:31:76:86:e8:5d:19:12:ba:00:9a:d7: 9e:32:26:60:e6:03:b1:92:66:8c:dc:86:dd:24:4a: a4:9b:93:ce:ce:6c:89:d9:88:05:ba:81:62:59:dc: d9:89:6a:fa:36:3c:b2:08:e3:ee:12:27:92:c5:f3: 46:f3:7e:bd:e3:eb:0f:0d:66:b6:80:ad:fa:82:0b: 28:fc:12:93:c2:ee:d1:d9:af:af:bf:21:cc:53:67: 74:e0:34:ed:ae:cc:c4:8b:64:78:6e:e1:c4:e9:bf: 53:97:20:66:df:77:09:a5:01:a5:5d:32:4c:89:ea: 6a:ed:cf:83:a7:36:d4:c5:42:9b:94:d8:fe:0e:21: 9c:dc:e4:3a:f4:a5:ce:81:04:f7:7e:45:ab:a6:a5: 7b:50:ab:e0:6f:99:56:72:de:07:6d:2f:52:2d:49: 82:7e:2e:41:4c:8f:58:21:f2:0b:97:f3:72:bf:30: a7:ab:63:21:e0:23:ec:f4:be:62:38:82:9f:d0:94: 00:8a:89:d7:87:21:32:b3:ff:24:37:57:5a:5a:65: e9:c1:69:9a:8b:2f:e9:57:01:2b:d7:29:40:87:5f: ac:35:47:57:8f:bc:f3:c4:b1:85:bd:a0:72:da:60: 9d:96:0e:cd:0c:a0:30:c8:b8:e3:b8:2c:aa:06:21: 07:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D1:96:F1:0C:B8:81:9D:D1:35:FA:22:77:76:C2:EC:DB:38:28:48 X509v3 Authority Key Identifier: keyid:75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:06:fd:6f:bb:9f:ac:d6:fa:38:ae:fe:4d:c9:70:a1:02:0a: 5d:91:2a:87:a7:9e:72:b3:8b:9a:41:86:62:29:77:aa:6e:55: ce:8c:b3:9b:2a:64:52:c4:d2:6a:7c:f3:8e:31:3a:ae:0e:82: 57:0a:5a:3d:a9:de:93:ec:91:8f:ff:9f:46:0c:99:f9:aa:ff: 13:c3:4c:3a:60:f3:31:ed:24:85:ff:b4:05:e8:6c:5f:c0:a9: 8c:cd:70:10:da:34:76:08:42:7a:e4:b3:13:c7:dd:51:a8:d3: 93:38:cc:25:71:1e:78:58:df:f3:f7:df:ce:38:44:39:4e:2c: a0:97:05:9a:97:c8:40:f5:ad:71:e5:bb:2a:1a:2e:37:bf:54: ca:b0:cb:a0:ff:ee:41:8c:7b:53:70:79:f1:b8:31:75:ac:60: be:cf:61:a8:a9:17:52:81:20:66:be:fa:cf:8e:35:d5:89:8a: 21:13:58:76:38:53:ee:94:ac:7e:b4:1c:c5:d2:1f:4c:ed:e5: b9:93:8d:08:43:cc:a9:cc:48:29:f3:64:0b:b0:31:cd:38:53: b8:95:b0:35:7d:48:75:59:22:71:ab:88:a7:6d:10:7f:0c:8d: bc:26:9b:01:7b:19:e2:f3:c6:21:60:08:f9:59:75:9f:65:20: 4f:f2:87:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM3MDUxMTAvBgNVBAUTKDc1Rjc3MkU0MDZDNUY0NkQzRThCRjI3QUMxRjI1RkNG NjRFOTc5OTcwHhcNMjUxMDE5MDA1NTQ2WhcNMjUxMDI2MDA1NTQ2WjAYMRYwFAYD VQQDEw02OGY0MzcxMi1iODUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsp3jMXaG6F0ZEroAmteeMiZg5gOxkmaM3IbdJEqkm5POzmyJ2YgFuoFiWdzZ iWr6NjyyCOPuEieSxfNG83694+sPDWa2gK36ggso/BKTwu7R2a+vvyHMU2d04DTt rszEi2R4buHE6b9TlyBm33cJpQGlXTJMiepq7c+DpzbUxUKblNj+DiGc3OQ69KXO gQT3fkWrpqV7UKvgb5lWct4HbS9SLUmCfi5BTI9YIfILl/NyvzCnq2Mh4CPs9L5i OIKf0JQAionXhyEys/8kN1daWmXpwWmaiy/pVwEr1ylAh1+sNUdXj7zzxLGFvaBy 2mCdlg7NDKAwyLjjuCyqBiEHTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvRlvEM uIGd0TX6Ind2wuzbOChIMB8GA1UdIwQYMBaAFHX3cuQGxfRtPovyesHyX89k6XmX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzcwNS82RTI3N0JCMkY1 QkQxMUVCQjlGOERCMTFDNEY5QUUwMi9kZmR5NUFiRjlHMC1pX0o2d2ZKZnoyVHBl WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmZHk1QWJGOUcwLWlfSjZ3ZkpmejJUcGVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzcwNS82RTI3N0JCMkY1QkQxMUVCQjlGOERCMTFDNEY5QUUwMi9kZmR5NUFiRjlH MC1pX0o2d2ZKZnoyVHBlWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoBv1vu5+s1vo4rv5NyXChAgpdkSqHp55ys4uaQYZiKXeqblXOjLOb KmRSxNJqfPOOMTquDoJXClo9qd6T7JGP/59GDJn5qv8Tw0w6YPMx7SSF/7QF6Gxf wKmMzXAQ2jR2CEJ65LMTx91RqNOTOMwlcR54WN/z99/OOEQ5TiyglwWal8hA9a1x 5bsqGi43v1TKsMug/+5BjHtTcHnxuDF1rGC+z2GoqRdSgSBmvvrPjjXViYohE1h2 OFPulKx+tBzF0h9M7eW5k40IQ8ypzEgp82QLsDHNOFO4lbA1fUh1WSJxq4inbRB/ DI28JpsBexni88YhYAj5WXWfZSBP8ofc -----END CERTIFICATE-----Generated at Mon Oct 20 16:04:36 2025 by rpki-client