$ rpki-client -vvf rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft File: 67hSKipPZGizmgkPciqw63Doi4I.mft (raw, json) Hash identifier: ksT7J4610JShHsy0djhwt3Bm/btuP3MyeV1CdGtCCw0= Subject key identifier: CB:FC:89:08:DD:7A:64:D0:04:26:92:5C:18:3F:0F:BE:76:88:21:AF Authority key identifier: EB:B8:52:2A:2A:4F:64:68:B3:9A:09:0F:72:2A:B0:EB:70:E8:8B:82 Certificate issuer: /CN=A917E27F/serialNumber=EBB8522A2A4F6468B39A090F722AB0EB70E88B82 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft Manifest number: 30 Signing time: Mon 03 Nov 2025 07:38:04 +0000 Manifest this update: Mon 03 Nov 2025 07:38:03 +0000 Manifest next update: Mon 10 Nov 2025 07:38:03 +0000 Files and hashes: 1: 67hSKipPZGizmgkPciqw63Doi4I.crl (hash: sIo3gJ+jZdjmlWpB7BP84UZFJA3+FXXdAASto1UTVXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.crl rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E27F, serialNumber=EBB8522A2A4F6468B39A090F722AB0EB70E88B82 Validity Not Before: Nov 3 07:38:03 2025 GMT Not After : Nov 10 07:38:03 2025 GMT Subject: CN=69085bdc-7590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:52:df:70:dd:0a:27:f9:72:02:f8:07:20:89: 40:3c:f1:61:d7:07:3a:76:13:44:d9:ce:3b:4d:e9: 7d:c6:8e:5e:fc:31:17:c3:6d:d1:c9:c5:38:81:60: e9:bb:9b:f3:3f:d8:f2:d5:a2:80:d1:0e:d2:6b:ac: b0:b1:1b:e7:74:05:da:72:eb:c2:54:e5:fa:be:93: 8c:d4:78:2c:68:ca:c1:fa:0e:fa:1b:9f:80:cc:82: 93:6f:2c:0f:87:35:95:4f:98:fe:8c:af:14:8e:79: ee:6f:fd:7c:b7:c5:04:55:b2:0e:75:54:9e:18:5b: 26:e8:8a:be:07:5e:ff:f4:d0:be:2d:55:8c:bb:bf: 69:1e:09:8d:a4:a5:48:79:29:fd:e3:fc:86:c3:32: 9c:0e:21:64:92:a0:da:5d:49:e7:62:f8:2c:56:37: 46:7e:bc:d4:97:35:77:0e:4a:04:b1:e3:1a:a0:5f: d6:cd:4d:ee:b4:af:a3:dc:b5:d2:c3:e4:67:6c:cb: 33:37:65:11:3b:24:04:67:63:81:e8:c1:99:b0:70: 94:ab:40:8e:58:1c:4c:c5:cd:5a:48:68:43:4f:e0: 77:be:58:28:88:bf:4b:42:e9:39:1e:e1:de:3b:4d: e6:f5:cd:52:61:84:eb:53:1d:55:2a:a9:d6:6a:f3: 8c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FC:89:08:DD:7A:64:D0:04:26:92:5C:18:3F:0F:BE:76:88:21:AF X509v3 Authority Key Identifier: keyid:EB:B8:52:2A:2A:4F:64:68:B3:9A:09:0F:72:2A:B0:EB:70:E8:8B:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67hSKipPZGizmgkPciqw63Doi4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E27F/7F75C21872B711F09C04690DC4F9AE02/67hSKipPZGizmgkPciqw63Doi4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:11:de:0a:6b:fd:e5:99:74:ea:40:77:a9:8c:14:f7:db:f2: ce:ab:f3:51:84:e6:cd:8e:ea:59:53:32:e7:80:89:3d:70:51: 02:a1:08:eb:44:43:73:10:1f:81:9b:65:31:4d:42:30:38:a6: ff:de:3c:69:a3:a1:c8:39:40:72:1a:7e:c8:58:b6:24:b0:02: 9c:74:ed:a4:2c:70:aa:c6:23:27:2c:b2:70:65:b0:3f:8f:15: 06:cf:42:2c:39:11:0d:ef:99:4c:40:d2:24:2c:ed:dc:67:0b: ad:2c:b8:4f:eb:37:e5:e1:5a:3f:15:3c:38:1a:9f:42:e3:bf: e0:5d:e7:fb:a5:04:eb:28:13:bb:46:31:1a:bd:a0:d0:11:92: f7:c5:84:bf:79:1f:3f:4c:52:8f:d6:3f:3b:3d:61:f0:35:8c: 58:5a:d6:86:7b:0f:da:45:6d:b3:19:87:42:c0:7c:5e:c6:07: 8f:d0:b4:76:0c:96:d3:14:29:c9:ae:e0:a5:f6:e6:fd:86:e8: 68:87:2c:ce:ea:1b:11:29:23:87:00:2e:bd:96:ce:fa:4a:7f: 4a:2e:23:e6:92:9d:04:7c:79:19:cc:2a:b1:4c:bf:e8:1b:22: fa:88:be:74:71:db:04:6f:12:5f:ee:88:52:ec:72:22:63:63: 3a:cd:54:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTI3RjExMC8GA1UEBRMoRUJCODUyMkEyQTRGNjQ2OEIzOUEwOTBGNzIyQUIwRUI3 MEU4OEI4MjAeFw0yNTExMDMwNzM4MDNaFw0yNTExMTAwNzM4MDNaMBgxFjAUBgNV BAMTDTY5MDg1YmRjLTc1OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHUt9w3Qon+XIC+AcgiUA88WHXBzp2E0TZzjtN6X3Gjl78MRfDbdHJxTiBYOm7 m/M/2PLVooDRDtJrrLCxG+d0Bdpy68JU5fq+k4zUeCxoysH6Dvobn4DMgpNvLA+H NZVPmP6MrxSOee5v/Xy3xQRVsg51VJ4YWyboir4HXv/00L4tVYy7v2keCY2kpUh5 Kf3j/IbDMpwOIWSSoNpdSedi+CxWN0Z+vNSXNXcOSgSx4xqgX9bNTe60r6PctdLD 5GdsyzM3ZRE7JARnY4HowZmwcJSrQI5YHEzFzVpIaENP4He+WCiIv0tC6Tke4d47 Teb1zVJhhOtTHVUqqdZq84x7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy/yJCN16 ZNAEJpJcGD8PvnaIIa8wHwYDVR0jBBgwFoAU67hSKipPZGizmgkPciqw63Doi4Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMjdGLzdGNzVDMjE4NzJC NzExRjA5QzA0NjkwREM0RjlBRTAyLzY3aFNLaXBQWkdpem1na1BjaXF3NjNEb2k0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNjdoU0tpcFBaR2l6bWdrUGNpcXc2M0RvaTRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MjdGLzdGNzVDMjE4NzJCNzExRjA5QzA0NjkwREM0RjlBRTAyLzY3aFNLaXBQWkdp em1na1BjaXF3NjNEb2k0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH0R3gpr/eWZdOpAd6mMFPfb8s6r81GE5s2O6llTMueAiT1wUQKhCOtE Q3MQH4GbZTFNQjA4pv/ePGmjocg5QHIafshYtiSwApx07aQscKrGIycssnBlsD+P FQbPQiw5EQ3vmUxA0iQs7dxnC60suE/rN+XhWj8VPDgan0Ljv+Bd5/ulBOsoE7tG MRq9oNARkvfFhL95Hz9MUo/WPzs9YfA1jFha1oZ7D9pFbbMZh0LAfF7GB4/QtHYM ltMUKcmu4KX25v2G6GiHLM7qGxEpI4cALr2WzvpKf0ouI+aSnQR8eRnMKrFMv+gb IvqIvnRx2wRvEl/uiFLsciJjYzrNVII= -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:15 2025 by rpki-client