$ rpki-client -vvf rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft File: K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft (raw, json) Hash identifier: u3xe2J2W9/0xOyP0BmiP4EvxHAylGc/u3i9Rw3uwU3w= Subject key identifier: 9C:D1:ED:3A:F8:AE:EA:B3:5D:70:75:65:40:91:86:AD:38:69:00:0A Authority key identifier: 2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 Certificate issuer: /CN=A912F6E3/serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft Manifest number: 93 Signing time: Wed 17 Sep 2025 07:10:57 +0000 Manifest this update: Wed 17 Sep 2025 07:10:57 +0000 Manifest next update: Wed 24 Sep 2025 07:10:56 +0000 Files and hashes: 1: K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl (hash: 1s96R4kQrdNZEi53vSEQWq8rSO46uq0mFBM0shuemFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F6E3, serialNumber=2BF0AE6790D2F01DD1DB67383132DC403B674522 Validity Not Before: Sep 17 07:10:57 2025 GMT Not After : Sep 24 07:10:56 2025 GMT Subject: CN=68ca5f01-11d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ef:1b:60:9f:fd:fc:e6:b5:55:4b:4d:db:25: 26:90:ee:bd:c3:ce:20:42:bd:ae:30:be:b9:86:ed: 89:2e:af:9a:ea:77:44:d1:22:4c:11:aa:97:29:52: 06:5c:1e:e7:cc:ef:17:e5:02:ac:b3:c9:e8:85:ba: db:7b:f6:54:7c:cf:5a:8f:a2:46:ee:8d:e8:4e:89: 76:5c:75:19:05:13:e4:1b:6c:59:ce:43:68:3b:b8: 40:4b:1d:18:4f:f8:57:6d:b3:ba:5a:ac:83:b1:9f: 83:a6:ac:7f:e4:b3:2b:3e:b1:c7:04:fc:1d:d0:6e: 6a:b4:77:62:f9:7f:cf:59:62:68:41:32:f2:86:99: 7f:7b:2e:ca:90:ac:2f:ce:2b:76:07:8c:db:41:68: 7c:4c:91:2b:e5:93:73:56:a6:aa:8e:4f:2d:33:bb: 3f:ff:00:ab:31:b4:53:d7:f0:26:37:c1:a7:5c:84: 77:da:eb:63:dc:36:20:c8:53:aa:d9:ef:55:4f:b6: 53:30:a2:95:23:2c:51:0b:2f:af:ad:54:43:f8:e8: 8f:8e:3e:c7:56:bd:76:40:ed:8c:aa:0d:58:99:b6: 0b:bf:9e:83:87:aa:ab:7e:9e:d7:15:dd:95:65:69: 16:60:13:aa:21:eb:a2:26:61:8f:67:e4:c3:60:44: f0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D1:ED:3A:F8:AE:EA:B3:5D:70:75:65:40:91:86:AD:38:69:00:0A X509v3 Authority Key Identifier: keyid:2B:F0:AE:67:90:D2:F0:1D:D1:DB:67:38:31:32:DC:40:3B:67:45:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K_CuZ5DS8B3R22c4MTLcQDtnRSI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F6E3/F2FB8250B5DD11EF97D9FA34C4F9AE02/K_CuZ5DS8B3R22c4MTLcQDtnRSI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:17:05:26:64:62:a9:64:a2:a1:3d:d0:9e:e6:d7:f5:0b:34: c6:d8:96:65:db:3c:5c:a2:b7:15:94:a2:11:53:fe:83:7f:8b: c2:59:d9:0c:0d:29:c5:76:ac:7f:75:72:5f:26:04:c1:50:e5: 18:f1:76:bb:e7:7e:cf:51:cd:03:e3:3d:01:f0:50:c9:5c:e1: 75:6c:31:b7:b8:96:68:06:9d:a1:d0:3e:1d:cb:a7:5c:42:55: bf:24:85:6f:85:a7:ed:5b:cf:e5:b8:d9:51:94:0c:f7:f5:8b: e8:bc:81:17:89:52:31:95:b5:4e:b4:32:a6:56:ad:7f:ab:99: ec:da:44:b7:9b:78:7a:5b:1c:fb:05:46:c7:aa:f5:37:1f:53: 45:df:ad:dc:52:bc:8d:57:c2:e4:43:e2:e6:18:32:81:31:83: 06:44:db:f1:35:e8:81:3a:14:ba:69:e3:e6:bb:c8:0f:aa:1d: 94:df:ba:8d:d1:df:77:ba:cb:82:cc:ca:cc:56:84:0b:0e:1a: 81:53:03:43:99:44:2e:65:f0:c6:b1:0c:ca:f4:43:0a:0d:be: 4d:c9:1b:e5:ad:81:54:dc:77:79:18:f0:f1:b3:d8:41:76:3c: da:c1:9e:c4:f6:ea:c8:e5:cb:ff:9b:cd:b9:c3:94:bd:ac:f9: 1f:a9:1f:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY2RTMxMTAvBgNVBAUTKDJCRjBBRTY3OTBEMkYwMUREMURCNjczODMxMzJEQzQw M0I2NzQ1MjIwHhcNMjUwOTE3MDcxMDU3WhcNMjUwOTI0MDcxMDU2WjAYMRYwFAYD VQQDEw02OGNhNWYwMS0xMWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtu8bYJ/9/Oa1VUtN2yUmkO69w84gQr2uML65hu2JLq+a6ndE0SJMEaqXKVIG XB7nzO8X5QKss8nohbrbe/ZUfM9aj6JG7o3oTol2XHUZBRPkG2xZzkNoO7hASx0Y T/hXbbO6WqyDsZ+Dpqx/5LMrPrHHBPwd0G5qtHdi+X/PWWJoQTLyhpl/ey7KkKwv zit2B4zbQWh8TJEr5ZNzVqaqjk8tM7s//wCrMbRT1/AmN8GnXIR32utj3DYgyFOq 2e9VT7ZTMKKVIyxRCy+vrVRD+OiPjj7HVr12QO2Mqg1YmbYLv56Dh6qrfp7XFd2V ZWkWYBOqIeuiJmGPZ+TDYETwIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJzR7Tr4 ruqzXXB1ZUCRhq04aQAKMB8GA1UdIwQYMBaAFCvwrmeQ0vAd0dtnODEy3EA7Z0Ui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjZFMy9GMkZCODI1MEI1 REQxMUVGOTdEOUZBMzRDNEY5QUUwMi9LX0N1WjVEUzhCM1IyMmM0TVRMY1FEdG5S U0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tfQ3VaNURTOEIzUjIyYzRNVExjUUR0blJTSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjZFMy9GMkZCODI1MEI1REQxMUVGOTdEOUZBMzRDNEY5QUUwMi9LX0N1WjVEUzhC M1IyMmM0TVRMY1FEdG5SU0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaFwUmZGKpZKKhPdCe5tf1CzTG2JZl2zxcorcVlKIRU/6Df4vCWdkM DSnFdqx/dXJfJgTBUOUY8Xa7537PUc0D4z0B8FDJXOF1bDG3uJZoBp2h0D4dy6dc QlW/JIVvhaftW8/luNlRlAz39YvovIEXiVIxlbVOtDKmVq1/q5ns2kS3m3h6Wxz7 BUbHqvU3H1NF363cUryNV8LkQ+LmGDKBMYMGRNvxNeiBOhS6aePmu8gPqh2U37qN 0d93usuCzMrMVoQLDhqBUwNDmUQuZfDGsQzK9EMKDb5NyRvlrYFU3Hd5GPDxs9hB djzawZ7E9urI5cv/m825w5S9rPkfqR8B -----END CERTIFICATE-----Generated at Fri Sep 19 00:40:41 2025 by rpki-client