$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft File: U0krmdbQfZSfaQqTaVsUkoIWmi4.mft (raw, json) Hash identifier: 48COrUcVpZ8N1iXFZyj6Y0iyMSTLSTzXGYOBknat1so= Subject key identifier: 9D:6D:6D:CE:C7:D2:E9:65:FE:8A:9B:3E:DA:BC:65:AA:91:44:97:79 Authority key identifier: 53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E Certificate issuer: /CN=A9111623/serialNumber=53492B99D6D07D949F690A93695B149282169A2E Certificate serial: 02 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft Manifest number: 02 Signing time: Fri 17 Oct 2025 07:53:14 +0000 Manifest this update: Fri 17 Oct 2025 07:53:14 +0000 Manifest next update: Fri 24 Oct 2025 07:53:14 +0000 Files and hashes: 1: U0krmdbQfZSfaQqTaVsUkoIWmi4.crl (hash: f/q0t2mJMdeDJ9wbyCJ+dfKW0JwQY+VOmc+cC3xGh58=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:53:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111623, serialNumber=53492B99D6D07D949F690A93695B149282169A2E Validity Not Before: Oct 17 07:53:14 2025 GMT Not After : Oct 24 07:53:14 2025 GMT Subject: CN=68f1f5ea-12d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d1:c1:0d:6c:a7:5d:35:fa:af:b9:e3:69:fe: 45:fe:79:49:75:86:9e:28:33:98:ff:6f:e2:0c:81: e2:26:4a:b7:e6:1f:63:00:32:55:a7:e2:bf:78:6a: ae:cd:f3:c4:41:fe:28:2e:17:5c:eb:fc:26:1b:e0: 71:bb:8b:80:04:a3:3b:c6:d7:06:15:0f:a3:51:41: 92:67:17:f8:0e:fb:35:51:0b:fb:fc:b7:2d:68:48: 37:c1:61:4a:7b:4a:18:4e:2b:a7:81:78:90:23:4c: 19:e3:6f:1b:ad:29:27:27:cd:a6:34:8a:a2:13:6d: ab:cb:7f:ed:be:d4:b6:a4:0c:62:3e:2b:a4:3b:b0: 6d:42:97:77:f2:e0:12:9b:00:f6:2b:6b:c5:f7:fe: 9d:50:8f:96:b5:a7:38:6e:34:c3:91:64:b7:39:fd: 48:e6:a4:4c:e4:b3:06:94:fb:c9:b1:d9:d7:f2:5a: 92:16:ab:42:8d:e6:3b:69:91:1f:46:56:2d:7f:e3: 1c:7a:ee:2f:09:02:5f:f2:d9:91:e9:03:1c:df:15: 34:12:e3:b3:72:f0:44:74:7d:7a:fb:be:11:97:6a: 75:6b:90:5c:08:f4:5a:68:7e:bb:df:2a:e3:2a:fa: b9:0e:9f:e8:cb:f8:85:bb:c8:81:12:3f:f6:11:c8: e5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6D:6D:CE:C7:D2:E9:65:FE:8A:9B:3E:DA:BC:65:AA:91:44:97:79 X509v3 Authority Key Identifier: keyid:53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:a1:7a:b1:ef:3b:82:e7:30:22:63:f7:72:19:d9:5f:fd:96: 60:02:bf:1f:91:bd:f6:2e:37:ad:5d:7e:61:a0:99:7c:bd:6d: 1e:b3:99:21:01:5f:0c:2a:29:bf:5f:db:68:8f:ab:0b:31:98: 34:91:9c:19:01:03:9b:ec:9c:22:e7:e1:f8:5b:72:7e:da:de: 98:1b:d0:50:41:3b:9e:b9:4a:52:c5:04:2a:9e:8e:5d:ab:ce: 7a:93:7a:b1:60:89:df:60:27:61:21:b7:9e:af:b8:8b:77:d4: 8e:bf:2b:a4:9d:07:2e:4d:06:cf:50:00:7d:09:fc:32:af:50: 89:1e:9d:fa:4d:d8:36:65:66:79:9a:36:56:09:cf:c4:45:f9: 2e:8f:b8:34:c4:d6:6f:16:97:1d:b0:99:b3:94:7e:d5:91:9e: 12:c2:dc:55:e4:a6:5d:79:47:c4:74:2c:c7:fe:f6:f0:5e:dd: 17:ec:c7:8e:87:70:cd:b5:ee:5e:10:20:8d:88:2e:4e:12:6e: fd:8e:ed:31:eb:bf:2d:cd:81:df:56:45:a3:31:da:08:cd:5d: c9:fb:2e:2e:a5:dd:87:0b:d1:b7:54:0e:c9:89:e0:b7:43:53: 72:f2:c0:59:e2:e4:20:f0:c9:a5:0b:ac:b5:0c:80:5b:97:24: 81:e2:62:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTYyMzExMC8GA1UEBRMoNTM0OTJCOTlENkQwN0Q5NDlGNjkwQTkzNjk1QjE0OTI4 MjE2OUEyRTAeFw0yNTEwMTcwNzUzMTRaFw0yNTEwMjQwNzUzMTRaMBgxFjAUBgNV BAMTDTY4ZjFmNWVhLTEyZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM0cENbKddNfqvueNp/kX+eUl1hp4oM5j/b+IMgeImSrfmH2MAMlWn4r94aq7N 88RB/iguF1zr/CYb4HG7i4AEozvG1wYVD6NRQZJnF/gO+zVRC/v8ty1oSDfBYUp7 ShhOK6eBeJAjTBnjbxutKScnzaY0iqITbavLf+2+1LakDGI+K6Q7sG1Cl3fy4BKb APYra8X3/p1Qj5a1pzhuNMORZLc5/UjmpEzkswaU+8mx2dfyWpIWq0KN5jtpkR9G Vi1/4xx67i8JAl/y2ZHpAxzfFTQS47Ny8ER0fXr7vhGXanVrkFwI9FpofrvfKuMq +rkOn+jL+IW7yIESP/YRyOU3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnW1tzsfS 6WX+ips+2rxlqpFEl3kwHwYDVR0jBBgwFoAUU0krmdbQfZSfaQqTaVsUkoIWmi4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExNjIzLzkwNzAwMEY2QUIy NDExRjBBRkNFNUQyRkM0RjlBRTAyL1Uwa3JtZGJRZlpTZmFRcVRhVnNVa29JV21p NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVTBrcm1kYlFmWlNmYVFxVGFWc1Vrb0lXbWk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx NjIzLzkwNzAwMEY2QUIyNDExRjBBRkNFNUQyRkM0RjlBRTAyL1Uwa3JtZGJRZlpT ZmFRcVRhVnNVa29JV21pNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIaherHvO4LnMCJj93IZ2V/9lmACvx+RvfYuN61dfmGgmXy9bR6zmSEB XwwqKb9f22iPqwsxmDSRnBkBA5vsnCLn4fhbcn7a3pgb0FBBO565SlLFBCqejl2r znqTerFgid9gJ2Eht56vuIt31I6/K6SdBy5NBs9QAH0J/DKvUIkenfpN2DZlZnma NlYJz8RF+S6PuDTE1m8Wlx2wmbOUftWRnhLC3FXkpl15R8R0LMf+9vBe3Rfsx46H cM217l4QII2ILk4Sbv2O7THrvy3Ngd9WRaMx2gjNXcn7Li6l3YcL0bdUDsmJ4LdD U3LywFni5CDwyaULrLUMgFuXJIHiYh4= -----END CERTIFICATE-----Generated at Sat Oct 18 23:17:55 2025 by rpki-client