$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft File: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft (raw, json) Hash identifier: Lcv1+idjBfBTnvvcwgc58qZUzsOyplYwB2Sh+17Na3Q= Subject key identifier: A2:A9:3B:4A:CB:A8:A1:CC:93:97:79:C8:4F:F5:89:25:9A:41:EA:BB Authority key identifier: E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE Certificate issuer: /CN=A91FCEB1/serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE Certificate serial: 074B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft Manifest number: 2207 Signing time: Mon 20 Oct 2025 16:11:09 +0000 Manifest this update: Mon 20 Oct 2025 16:11:09 +0000 Manifest next update: Mon 27 Oct 2025 16:11:09 +0000 Files and hashes: 1: 5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl (hash: +xiM+9DrVXBhxawr3IbkczZv0i6fXfQBCBHh3V/0ak8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1867 (0x74b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=E73FB8868DD3B461EA1A673C7A36945235E9CAAE Validity Not Before: Oct 20 16:11:09 2025 GMT Not After : Oct 27 16:11:09 2025 GMT Subject: CN=68f65f1d-1c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0b:77:cb:4d:1a:00:eb:c3:62:44:b8:e0:b1: f3:07:ce:bf:76:8d:5e:29:6a:60:49:1c:fa:43:da: 4f:f5:65:0e:04:10:1c:63:5b:46:7a:db:f1:e6:4d: 85:2b:77:e3:9e:e0:33:c8:80:53:ad:60:2f:4f:96: e3:f2:6d:4f:c2:ac:cf:c6:69:41:2d:cd:e5:f6:5d: bf:19:31:8a:0a:d4:1f:48:ee:17:d3:7e:1f:99:a9: b8:e6:0b:2f:51:0d:90:3d:08:1b:78:02:0e:1f:63: 6f:5c:aa:69:43:0a:38:f5:cb:2d:f1:c7:53:6e:e4: ee:a1:bc:8c:77:22:08:5b:42:4b:cc:17:91:91:81: be:09:bf:a9:7e:85:bd:eb:43:9c:82:b2:ee:75:9f: 2e:ad:03:d9:60:c0:0c:72:15:71:83:ed:f0:b0:38: 0d:5f:9e:de:69:d4:77:69:3f:00:99:f3:fe:e5:b1: 02:ec:8e:47:5b:92:90:11:ac:f6:f8:60:cb:da:35: c1:43:12:8b:8e:ec:b5:4c:1d:3e:fe:70:60:d7:4d: 3f:33:d2:fe:7a:97:61:c1:9a:42:c4:2e:0f:9a:b2: cc:a4:08:4f:52:ef:a2:3f:37:53:72:7c:4f:bc:7b: f3:54:08:42:6f:e5:8d:a5:05:fc:71:1b:80:d6:e2: 07:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A9:3B:4A:CB:A8:A1:CC:93:97:79:C8:4F:F5:89:25:9A:41:EA:BB X509v3 Authority Key Identifier: keyid:E7:3F:B8:86:8D:D3:B4:61:EA:1A:67:3C:7A:36:94:52:35:E9:CA:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5z-4ho3TtGHqGmc8ejaUUjXpyq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/5z-4ho3TtGHqGmc8ejaUUjXpyq4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:bd:ce:9d:81:dd:ec:98:3b:d4:99:84:9c:7d:ee:a7:cc:e3: 24:fc:8a:94:48:5a:21:28:53:8b:1d:a6:49:25:a0:c0:63:b5: 53:2a:0f:7a:5f:83:26:5e:b7:35:34:75:e3:13:14:24:41:a3: ef:92:bf:01:47:98:42:34:86:aa:9b:29:98:44:37:b4:20:9b: a5:f7:17:ee:d9:a5:d2:a9:2b:d4:48:8c:09:a6:14:cf:c1:9d: d9:85:e6:fb:2e:78:52:4a:cd:41:91:80:21:13:5c:da:be:98: fc:29:e5:88:98:a3:49:32:dd:8e:97:19:74:cb:66:b3:52:52: 52:94:92:a2:82:6f:22:eb:d1:65:1b:e7:6a:62:fb:2a:60:1a: d7:5a:22:82:ab:7c:ba:2e:0c:2f:14:21:c4:95:b8:a2:10:2d: bf:25:d4:0a:f1:c4:e7:10:47:ae:09:8c:f3:8a:98:2f:c3:2d: 53:69:64:75:ef:01:a3:4d:a4:f0:4b:15:a0:12:fe:f2:57:c7: 31:25:2f:54:93:d4:ef:54:27:72:f3:c2:72:56:0a:82:46:7a: cd:81:ad:04:d7:1e:ed:e0:d9:69:54:68:11:d4:56:a9:0c:ed: 1e:8f:8c:82:31:6a:05:2a:5e:1a:b4:2a:16:70:fa:2d:cf:c7: 82:46:35:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKEU3M0ZCODg2OEREM0I0NjFFQTFBNjczQzdBMzY5NDUy MzVFOUNBQUUwHhcNMjUxMDIwMTYxMTA5WhcNMjUxMDI3MTYxMTA5WjAYMRYwFAYD VQQDEw02OGY2NWYxZC0xYzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwt3y00aAOvDYkS44LHzB86/do1eKWpgSRz6Q9pP9WUOBBAcY1tGetvx5k2F K3fjnuAzyIBTrWAvT5bj8m1PwqzPxmlBLc3l9l2/GTGKCtQfSO4X034fmam45gsv UQ2QPQgbeAIOH2NvXKppQwo49cst8cdTbuTuobyMdyIIW0JLzBeRkYG+Cb+pfoW9 60OcgrLudZ8urQPZYMAMchVxg+3wsDgNX57eadR3aT8AmfP+5bEC7I5HW5KQEaz2 +GDL2jXBQxKLjuy1TB0+/nBg100/M9L+epdhwZpCxC4PmrLMpAhPUu+iPzdTcnxP vHvzVAhCb+WNpQX8cRuA1uIHrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKpO0rL qKHMk5d5yE/1iSWaQeq7MB8GA1UdIwQYMBaAFOc/uIaN07Rh6hpnPHo2lFI16cqu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS85QzE0QjQwNjNB MjExMUU3OUFBMEQ1MUNDNEY5QUUwMi81ei00aG8zVHRHSHFHbWM4ZWphVVVqWHB5 cTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzV6LTRobzNUdEdIcUdtYzhlamFVVWpYcHlxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS85QzE0QjQwNjNBMjExMUU3OUFBMEQ1MUNDNEY5QUUwMi81ei00aG8zVHRH SHFHbWM4ZWphVVVqWHB5cTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTvc6dgd3smDvUmYScfe6nzOMk/IqUSFohKFOLHaZJJaDAY7VTKg96 X4MmXrc1NHXjExQkQaPvkr8BR5hCNIaqmymYRDe0IJul9xfu2aXSqSvUSIwJphTP wZ3Zheb7LnhSSs1BkYAhE1zavpj8KeWImKNJMt2Olxl0y2azUlJSlJKigm8i69Fl G+dqYvsqYBrXWiKCq3y6LgwvFCHElbiiEC2/JdQK8cTnEEeuCYzzipgvwy1TaWR1 7wGjTaTwSxWgEv7yV8cxJS9Uk9TvVCdy88JyVgqCRnrNga0E1x7t4NlpVGgR1Fap DO0ej4yCMWoFKl4atCoWcPotz8eCRjUI -----END CERTIFICATE-----Generated at Tue Oct 21 00:03:38 2025 by rpki-client