$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft File: cnQCOx-0p0kyj11N-DsN0_B_6UI.mft (raw, json) Hash identifier: tdjerzsmnoy1o0UV8kF32guPr2/vzD93eSDAh/966xI= Subject key identifier: CA:73:BF:BD:F5:0E:FD:7A:E0:DE:5B:A3:24:79:0F:60:FC:32:54:15 Authority key identifier: 72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 Certificate issuer: /CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Certificate serial: 06AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft Manifest number: 06AE Signing time: Sat 18 Oct 2025 23:37:44 +0000 Manifest this update: Sat 18 Oct 2025 23:37:43 +0000 Manifest next update: Sat 25 Oct 2025 23:37:43 +0000 Files and hashes: 1: cnQCOx-0p0kyj11N-DsN0_B_6UI.crl (hash: YFPV4bsNFMKEdBDMDKyXaRhSTNvUSmIiFxKmFrzUKLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1710 (0x6ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFDF3, serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Validity Not Before: Oct 18 23:37:43 2025 GMT Not After : Oct 25 23:37:43 2025 GMT Subject: CN=68f424c7-d2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1e:6e:8d:0a:2e:32:9c:a6:29:94:2f:32:1c: de:fe:d6:0c:d1:44:10:95:ba:27:26:2a:20:56:91: 37:d3:9e:c3:98:d6:ec:2f:da:83:f2:d8:63:eb:eb: 08:6c:06:53:26:e7:28:ff:2d:d2:48:f0:5b:80:08: 35:52:a0:5e:67:05:c1:4d:1d:3a:db:0e:6c:38:7c: 2b:e3:0d:2a:15:7b:db:cb:ea:ad:59:d8:ad:8a:21: ae:d9:2f:ec:13:9c:28:bc:09:f5:d9:d4:15:21:ff: 13:0a:c4:24:df:f9:52:15:75:7e:c5:91:bf:83:0e: 14:fa:0b:1b:b5:eb:dd:38:61:7c:4d:14:22:c2:f7: ae:1e:3a:6a:32:24:85:72:c4:de:3a:73:0b:8b:e3: 6d:48:a9:92:43:b4:4d:0a:3f:5a:d9:59:e2:9e:31: 48:74:94:9f:63:9c:00:e2:72:e6:06:57:2f:ec:0f: d5:7f:d4:0c:d8:6d:ef:f6:3d:a4:2f:44:fd:66:f0: c1:0c:14:1c:50:95:97:d8:1c:7d:79:d8:6c:03:0a: 0b:6f:d6:ce:73:92:34:2c:ee:f0:99:42:0b:e5:f3: 6d:18:a4:03:94:a6:7c:45:ff:50:83:68:1d:df:ac: c5:0b:49:47:a4:87:ae:00:5c:c7:80:69:e9:58:b3: 6d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:73:BF:BD:F5:0E:FD:7A:E0:DE:5B:A3:24:79:0F:60:FC:32:54:15 X509v3 Authority Key Identifier: keyid:72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:b5:54:21:2e:77:f8:56:97:91:e5:50:8a:81:cd:36:26:20: 60:df:31:c3:91:c5:0f:c0:5e:9f:06:9d:e5:d5:aa:72:4d:02: d5:c8:cd:c8:6d:a1:8b:ca:47:06:44:fe:2d:86:3b:56:9c:32: 40:b6:5f:78:a0:3f:23:60:33:d1:79:d3:7e:3f:fc:50:4d:67: 86:68:10:c3:62:5f:98:94:67:3e:69:ce:74:06:a5:d5:2c:5c: 84:b6:12:86:7b:d9:67:61:fc:3a:8c:a6:e8:44:4d:7c:be:8f: a9:94:3c:0c:3d:4f:30:ce:32:3c:c5:42:d5:f6:fd:e5:4e:b3: 52:8d:a4:f2:8a:07:37:e3:1c:a6:25:74:81:2a:dd:bd:0c:e7: cc:d6:86:7b:c3:bf:1e:b8:a2:c2:b2:05:68:28:35:7c:92:cb: ac:95:82:51:46:f7:b9:72:cd:c5:f6:59:87:21:ba:83:8e:77: 4e:ac:cc:15:82:24:67:0c:e8:41:c3:b0:a5:d4:82:09:e0:9f: d2:7b:7e:aa:fe:3e:ff:f2:02:0b:97:0b:0d:a0:86:84:60:5d: b3:8e:b5:11:e7:f5:19:e6:76:f3:4f:b0:e8:da:b8:a3:92:2a: 4c:c6:81:9c:fe:a4:30:16:df:df:ae:b6:2b:7a:63:fb:ac:8f: d3:1c:25:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZERjMxMTAvBgNVBAUTKDcyNzQwMjNCMUZCNEE3NDkzMjhGNUQ0REY4M0IwREQz RjA3RkU5NDIwHhcNMjUxMDE4MjMzNzQzWhcNMjUxMDI1MjMzNzQzWjAYMRYwFAYD VQQDEw02OGY0MjRjNy1kMmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoR5ujQouMpymKZQvMhze/tYM0UQQlbonJiogVpE3057DmNbsL9qD8thj6+sI bAZTJuco/y3SSPBbgAg1UqBeZwXBTR062w5sOHwr4w0qFXvby+qtWditiiGu2S/s E5wovAn12dQVIf8TCsQk3/lSFXV+xZG/gw4U+gsbtevdOGF8TRQiwveuHjpqMiSF csTeOnMLi+NtSKmSQ7RNCj9a2VninjFIdJSfY5wA4nLmBlcv7A/Vf9QM2G3v9j2k L0T9ZvDBDBQcUJWX2Bx9edhsAwoLb9bOc5I0LO7wmUIL5fNtGKQDlKZ8Rf9Qg2gd 36zFC0lHpIeuAFzHgGnpWLNt8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMpzv731 Dv164N5boyR5D2D8MlQVMB8GA1UdIwQYMBaAFHJ0AjsftKdJMo9dTfg7DdPwf+lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkRGMy83NTdEQjc4ODdE NzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAwa3lqMTFOLURzTjBfQl82 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuUUNPeC0wcDBreWoxMU4tRHNOMF9CXzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkRGMy83NTdEQjc4ODdENzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAw a3lqMTFOLURzTjBfQl82VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBotVQhLnf4VpeR5VCKgc02JiBg3zHDkcUPwF6fBp3l1apyTQLVyM3I baGLykcGRP4thjtWnDJAtl94oD8jYDPRedN+P/xQTWeGaBDDYl+YlGc+ac50BqXV LFyEthKGe9lnYfw6jKboRE18vo+plDwMPU8wzjI8xULV9v3lTrNSjaTyigc34xym JXSBKt29DOfM1oZ7w78euKLCsgVoKDV8ksuslYJRRve5cs3F9lmHIbqDjndOrMwV giRnDOhBw7Cl1IIJ4J/Se36q/j7/8gILlwsNoIaEYF2zjrUR5/UZ5nbzT7Do2rij kipMxoGc/qQwFt/frrYremP7rI/THCUp -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:22 2025 by rpki-client