$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft File: DldBdtqmrGyXcGxmecfiTnC6rVc.mft (raw, json) Hash identifier: fC1rfzclr98Gpnf7ku0E6FQkaaJ7zuFBvP/uHPPh9eU= Subject key identifier: 7E:F0:D0:CB:2B:3B:F5:14:C6:19:CF:8E:3B:68:3D:4C:76:1F:95:7E Authority key identifier: 0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 Certificate issuer: /CN=A91C0BDE/serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Certificate serial: 09D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft Manifest number: 12EC Signing time: Thu 18 Sep 2025 20:11:16 +0000 Manifest this update: Thu 18 Sep 2025 20:11:16 +0000 Manifest next update: Thu 25 Sep 2025 20:11:16 +0000 Files and hashes: 1: DldBdtqmrGyXcGxmecfiTnC6rVc.crl (hash: jd+z3wznUE9V63UuQ6+TzQ423Xg5T2UuTGAuJAJiqJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2518 (0x9d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE, serialNumber=0E574176DAA6AC6C97706C6679C7E24E70BAAD57 Validity Not Before: Sep 18 20:11:16 2025 GMT Not After : Sep 25 20:11:16 2025 GMT Subject: CN=68cc6764-1b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9d:d3:e9:36:d2:3b:11:7a:bf:d2:17:f5:6f: 9e:47:77:98:78:c9:e3:60:45:2d:2f:6f:f8:f8:e2: c6:ff:97:50:28:00:ed:59:bb:45:70:49:5f:93:48: d2:02:a1:70:7d:d5:16:80:f8:b9:e4:12:c2:7c:77: d6:a9:e4:88:04:18:97:35:a7:6f:fb:e8:6f:d5:c6: d8:51:b1:0d:e7:12:ac:0c:68:45:bb:09:17:0b:eb: 51:98:6a:37:c8:c2:e4:ed:47:96:4e:bc:3a:66:27: a8:02:c7:9f:7d:1b:4e:46:ba:46:d7:22:db:47:38: 4a:60:90:c2:07:fe:f4:b0:0a:ea:65:fe:d5:53:2b: a6:69:61:42:ec:03:94:16:5b:72:93:0c:68:47:44: e6:50:a7:ac:8a:d8:62:9e:3d:58:6d:6c:1d:a8:69: fb:74:af:78:3e:9b:c1:58:63:20:0b:54:4b:80:da: 31:25:40:ce:1d:88:01:c1:ee:ca:d9:85:50:98:df: 95:a2:24:dd:99:c4:25:7c:1a:c3:d5:78:a9:83:10: 9f:51:33:58:51:23:81:2c:21:a2:6b:0c:3c:a9:6b: 53:96:e8:05:21:c3:9e:24:e5:76:49:0c:30:35:f2: 81:92:22:ba:52:62:a6:8a:5f:22:e5:cf:c2:40:9e: 61:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F0:D0:CB:2B:3B:F5:14:C6:19:CF:8E:3B:68:3D:4C:76:1F:95:7E X509v3 Authority Key Identifier: keyid:0E:57:41:76:DA:A6:AC:6C:97:70:6C:66:79:C7:E2:4E:70:BA:AD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DldBdtqmrGyXcGxmecfiTnC6rVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/DldBdtqmrGyXcGxmecfiTnC6rVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:04:0c:eb:fb:80:7e:72:53:ff:ff:f2:ac:e0:43:67:40:22: 23:87:7a:4e:dd:86:78:2a:1e:09:7c:bd:c5:3e:b8:7a:96:b3: 73:16:03:c3:67:45:24:6b:25:b3:22:cf:67:2c:9c:ac:75:58: 6a:fa:85:a0:43:93:6b:ef:3c:ea:0c:86:94:66:b3:82:9d:27: 2c:ca:bb:da:3f:4b:31:d3:55:01:c9:77:90:61:5c:97:4f:26: b2:08:fc:e6:42:39:01:43:44:ea:1f:f7:cd:53:4b:bc:e9:08: 17:85:34:ee:7a:e3:29:10:24:f6:25:c9:bb:0d:6b:21:77:3b: dc:e5:ce:ea:a3:f3:77:90:5c:bd:a2:6c:41:8b:a1:78:08:7f: f6:ea:c8:40:3e:2d:f1:6d:ee:45:f4:22:80:b2:38:8e:36:db: 7f:f7:ea:c5:4b:04:c1:e0:e2:35:aa:31:a8:02:0c:5a:23:ed: b1:7c:2e:e5:77:c2:e6:2d:e9:90:a1:22:c9:e5:ff:05:79:8d: d7:69:f2:d0:a2:12:db:3f:00:69:26:17:fd:a0:33:2c:22:70: 1b:56:cf:95:53:30:a7:6f:94:d0:db:46:59:ae:b7:45:c7:31: 21:f2:a7:99:27:e9:c7:ce:7e:bc:38:6e:27:d7:15:a5:e9:ee: 57:8e:00:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKDBFNTc0MTc2REFBNkFDNkM5NzcwNkM2Njc5QzdFMjRF NzBCQUFENTcwHhcNMjUwOTE4MjAxMTE2WhcNMjUwOTI1MjAxMTE2WjAYMRYwFAYD VQQDEw02OGNjNjc2NC0xYjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZ3T6TbSOxF6v9IX9W+eR3eYeMnjYEUtL2/4+OLG/5dQKADtWbtFcElfk0jS AqFwfdUWgPi55BLCfHfWqeSIBBiXNadv++hv1cbYUbEN5xKsDGhFuwkXC+tRmGo3 yMLk7UeWTrw6ZieoAseffRtORrpG1yLbRzhKYJDCB/70sArqZf7VUyumaWFC7AOU FltykwxoR0TmUKesithinj1YbWwdqGn7dK94PpvBWGMgC1RLgNoxJUDOHYgBwe7K 2YVQmN+VoiTdmcQlfBrD1XipgxCfUTNYUSOBLCGiaww8qWtTlugFIcOeJOV2SQww NfKBkiK6UmKmil8i5c/CQJ5h5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7w0Msr O/UUxhnPjjtoPUx2H5V+MB8GA1UdIwQYMBaAFA5XQXbapqxsl3BsZnnH4k5wuq1X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJHeVhjR3htZWNmaVRuQzZy VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RsZEJkdHFtckd5WGNHeG1lY2ZpVG5DNnJWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9EbGRCZHRxbXJH eVhjR3htZWNmaVRuQzZyVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvBAzr+4B+clP///Ks4ENnQCIjh3pO3YZ4Kh4JfL3FPrh6lrNzFgPD Z0UkayWzIs9nLJysdVhq+oWgQ5Nr7zzqDIaUZrOCnScsyrvaP0sx01UByXeQYVyX TyayCPzmQjkBQ0TqH/fNU0u86QgXhTTueuMpECT2Jcm7DWshdzvc5c7qo/N3kFy9 omxBi6F4CH/26shAPi3xbe5F9CKAsjiONtt/9+rFSwTB4OI1qjGoAgxaI+2xfC7l d8LmLemQoSLJ5f8FeY3XafLQohLbPwBpJhf9oDMsInAbVs+VUzCnb5TQ20ZZrrdF xzEh8qeZJ+nHzn68OG4n1xWl6e5XjgD3 -----END CERTIFICATE-----Generated at Thu Sep 18 23:27:37 2025 by rpki-client