$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft File: FzXLqe4W_oXz0oP6W7lHnZryzIY.mft (raw, json) Hash identifier: w5UP+deG31g0XoU/2XYWzYnhjPfW47n4kLeSwphknVM= Subject key identifier: 16:63:48:3E:DA:56:80:59:38:8E:EA:F7:8F:89:54:2C:90:38:3B:AD Authority key identifier: 17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 Certificate issuer: /CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft Manifest number: 010E Signing time: Wed 17 Sep 2025 05:32:01 +0000 Manifest this update: Wed 17 Sep 2025 05:32:01 +0000 Manifest next update: Wed 24 Sep 2025 05:32:01 +0000 Files and hashes: 1: FzXLqe4W_oXz0oP6W7lHnZryzIY.crl (hash: tx9ipJxs+1r6IJhPNjKejhMnUyu6iSXaTTV7D3Q4SQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91757CB, serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Validity Not Before: Sep 17 05:32:01 2025 GMT Not After : Sep 24 05:32:01 2025 GMT Subject: CN=68ca47d1-9256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4e:c1:13:18:21:53:95:f0:e5:cf:24:58:f1: be:ba:2b:0b:95:ae:31:f3:ac:a1:3f:f1:9b:4c:b0: 00:e8:0c:6e:00:de:1c:f4:21:bc:ac:ef:dd:56:31: 27:2f:41:ee:cf:1c:ec:24:92:e0:02:1a:57:7d:98: f6:2d:20:a3:7a:9e:e4:33:05:69:74:3e:d7:21:36: b1:ad:5d:5e:3f:1c:21:5a:79:81:f8:9f:ad:b4:06: 7a:81:89:87:1e:a5:66:34:b0:28:7f:e6:40:39:0e: 19:36:11:57:fa:34:90:77:a3:8b:91:c1:ac:60:14: 07:01:5b:c1:c1:85:e7:ac:9b:b8:28:fe:72:0a:42: 96:8c:dc:0f:d3:9a:63:49:60:59:11:90:d1:5d:54: 4a:7d:0b:dc:82:79:90:b3:e7:c0:df:56:9b:b1:98: db:c0:e5:95:19:2b:ae:5e:da:0e:f5:cd:fd:db:b9: 8f:ee:fd:3d:37:1b:0a:b0:da:8a:a5:d9:32:45:e9: 13:fb:4a:81:c0:a1:a4:f5:d6:f0:93:21:72:65:fa: 05:92:a2:68:91:25:a4:d2:1d:53:00:84:82:f4:14: 42:14:4c:e7:8c:3f:c0:5e:40:47:36:0a:20:96:d8: c5:49:a1:56:42:18:18:ce:ea:f5:84:5d:7d:c0:b3: 38:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:63:48:3E:DA:56:80:59:38:8E:EA:F7:8F:89:54:2C:90:38:3B:AD X509v3 Authority Key Identifier: keyid:17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:50:d0:7c:86:bc:4b:43:91:66:88:01:e7:b8:7b:5b:a2:62: 56:5f:5c:a8:df:85:fd:87:38:ff:1f:6c:f5:fc:a6:9a:6a:20: 39:d6:b3:44:a7:d2:cf:16:41:4d:db:e2:2d:3a:25:d9:7f:9e: c9:15:78:be:27:29:c7:82:10:1a:28:96:d1:cf:b4:70:86:f7: fd:0b:8f:7e:78:b4:f6:a8:5a:c2:48:8b:f9:c3:04:58:e0:f6: 4b:a6:5a:a3:47:76:c4:14:83:03:85:4e:ef:36:e5:4f:de:66: 1b:fe:8d:34:87:dc:dd:d0:97:ea:82:be:0e:13:df:a1:69:41: 8b:e6:5a:d5:e3:30:a9:18:0a:57:dd:58:77:0c:8d:8a:f2:85: 92:c1:8c:d2:b5:88:78:23:f7:c5:79:a3:2e:f1:ea:b1:64:bd: de:63:f3:fa:a5:52:60:4c:fe:32:c0:9b:b6:8b:af:58:10:a4: 15:4e:ad:d4:e8:d2:84:39:fe:e2:50:1a:9c:82:c3:4d:4d:46: 6f:f4:80:a4:44:96:73:b9:62:e0:18:28:bf:11:2e:ed:44:f1: 43:43:12:f9:27:4d:42:c8:47:96:48:79:81:27:c8:b5:d7:d4: a0:38:cc:ee:65:ed:9e:f1:ba:59:d9:0d:87:b0:8d:eb:0b:a6: 34:98:02:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3Q0IxMTAvBgNVBAUTKDE3MzVDQkE5RUUxNkZFODVGM0QyODNGQTVCQjk0NzlE OUFGMkNDODYwHhcNMjUwOTE3MDUzMjAxWhcNMjUwOTI0MDUzMjAxWjAYMRYwFAYD VQQDEw02OGNhNDdkMS05MjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0k7BExghU5Xw5c8kWPG+uisLla4x86yhP/GbTLAA6AxuAN4c9CG8rO/dVjEn L0HuzxzsJJLgAhpXfZj2LSCjep7kMwVpdD7XITaxrV1ePxwhWnmB+J+ttAZ6gYmH HqVmNLAof+ZAOQ4ZNhFX+jSQd6OLkcGsYBQHAVvBwYXnrJu4KP5yCkKWjNwP05pj SWBZEZDRXVRKfQvcgnmQs+fA31absZjbwOWVGSuuXtoO9c3927mP7v09NxsKsNqK pdkyRekT+0qBwKGk9dbwkyFyZfoFkqJokSWk0h1TAISC9BRCFEznjD/AXkBHNgog ltjFSaFWQhgYzur1hF19wLM4ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZjSD7a VoBZOI7q94+JVCyQODutMB8GA1UdIwQYMBaAFBc1y6nuFv6F89KD+lu5R52a8syG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80RUQyMTJEQ0Yy RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19vWHowb1A2VzdsSG5acnl6 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z6WExxZTRXX29YejBvUDZXN2xIblpyeXpJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTdDQi80RUQyMTJEQ0YyRjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19v WHowb1A2VzdsSG5acnl6SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWUNB8hrxLQ5FmiAHnuHtbomJWX1yo34X9hzj/H2z1/KaaaiA51rNE p9LPFkFN2+ItOiXZf57JFXi+JynHghAaKJbRz7Rwhvf9C49+eLT2qFrCSIv5wwRY 4PZLplqjR3bEFIMDhU7vNuVP3mYb/o00h9zd0Jfqgr4OE9+haUGL5lrV4zCpGApX 3Vh3DI2K8oWSwYzStYh4I/fFeaMu8eqxZL3eY/P6pVJgTP4ywJu2i69YEKQVTq3U 6NKEOf7iUBqcgsNNTUZv9ICkRJZzuWLgGCi/ES7tRPFDQxL5J01CyEeWSHmBJ8i1 19SgOMzuZe2e8bpZ2Q2HsI3rC6Y0mALp -----END CERTIFICATE-----Generated at Thu Sep 18 23:51:40 2025 by rpki-client