$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft File: datLjbMBU71ybPn5YlC-BATYixo.mft (raw, json) Hash identifier: mf1565uO0mTsFg9WWV5Pm8CBzRYpXmb9u7qZOlwZles= Subject key identifier: 6D:9F:43:7C:C6:CD:09:ED:3F:C2:1C:8F:52:1F:5A:80:56:21:B8:A2 Authority key identifier: 75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A Certificate issuer: /CN=A91C0CD3/serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft Manifest number: 01BD Signing time: Mon 03 Nov 2025 02:56:46 +0000 Manifest this update: Mon 03 Nov 2025 02:56:46 +0000 Manifest next update: Mon 10 Nov 2025 02:56:46 +0000 Files and hashes: 1: datLjbMBU71ybPn5YlC-BATYixo.crl (hash: BFRCx108MW6nya9bi8WpF8DyYEyWoBXZJKYtfo2SgUc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:56:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0CD3, serialNumber=75AB4B8DB30153BD726CF9F96250BE0404D88B1A Validity Not Before: Nov 3 02:56:46 2025 GMT Not After : Nov 10 02:56:46 2025 GMT Subject: CN=690819ee-1efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:52:21:6c:e3:fe:b5:fb:7f:df:3c:ea:35:49: b8:a5:22:1d:5a:ad:88:bb:85:fe:28:df:95:df:f2: 0d:e8:a4:cb:f9:a6:8a:fb:8a:9a:e3:c3:4a:38:75: 8a:86:7a:59:c5:68:d5:5a:59:e6:ae:e5:4a:1a:71: 34:cf:7a:b3:e0:6a:8f:0d:89:08:27:91:20:25:55: ff:e7:f8:26:05:cc:e0:2f:05:c7:dd:44:f4:7a:8c: 7d:ec:24:e4:f5:04:93:52:53:6b:ea:eb:0d:b6:76: a8:ee:86:fc:7b:0a:69:51:61:32:67:72:be:3d:36: 7a:fd:fc:00:36:48:1c:00:89:e0:32:d7:11:4b:f1: 1c:6a:23:7f:6a:88:d3:78:e7:4f:39:f8:0d:3b:ea: 60:0e:e8:4d:c2:8b:16:ea:0d:8e:79:f2:57:5d:27: 95:3f:4f:f8:59:7c:e2:62:f9:1f:55:25:ec:b4:a0: fc:f0:98:96:63:7d:17:c4:e7:05:d6:5d:c1:ea:2e: 82:21:30:e1:2c:92:2f:8b:64:44:b5:38:79:7d:f4: d2:0d:8b:ab:ed:27:b0:56:6c:d4:12:e3:78:b2:2b: 2a:9a:02:1d:33:c2:77:af:b4:c5:75:19:16:7c:78: 0a:c3:8b:b5:29:43:63:26:8a:ec:2d:66:cb:43:01: ab:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:9F:43:7C:C6:CD:09:ED:3F:C2:1C:8F:52:1F:5A:80:56:21:B8:A2 X509v3 Authority Key Identifier: keyid:75:AB:4B:8D:B3:01:53:BD:72:6C:F9:F9:62:50:BE:04:04:D8:8B:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/datLjbMBU71ybPn5YlC-BATYixo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0CD3/7F600ECA08EF11EEBC9B5D0DC4F9AE02/datLjbMBU71ybPn5YlC-BATYixo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:91:d9:4c:68:25:70:54:f6:1a:ea:41:81:d0:8b:cf:0f:6f: c0:49:1e:bb:c2:5a:23:fb:e2:21:51:eb:19:56:93:17:37:d2: 2e:fb:af:10:86:9d:ff:cc:ab:86:9a:36:b9:c6:62:2a:73:17: 91:cb:1c:0f:9d:f1:be:ec:71:76:e8:c4:a5:9f:dc:84:8a:4a: cb:3e:35:87:e9:49:56:94:cd:c3:6b:41:2b:06:9d:5c:2b:c9: 21:43:b2:85:e6:83:a4:c6:42:4f:1b:e9:2e:63:d6:b7:a5:44: 42:7c:78:99:7d:5f:da:d0:74:2e:3c:10:00:bd:68:04:74:fa: 81:2f:02:e5:37:1b:2c:da:46:07:2c:c8:14:85:89:16:0a:cc: 37:61:83:2c:de:fe:73:97:a8:ea:95:21:a1:ed:82:01:b6:e8: a5:5e:57:ef:f2:3b:67:19:df:1e:0b:f2:49:f9:e4:3b:67:c4: 2b:71:82:2f:f5:6e:56:a7:97:ba:6b:c7:70:da:96:f2:83:cd: 69:5c:30:35:ca:a8:4e:93:3f:81:81:70:68:bf:57:95:ac:f9: 79:67:83:33:6a:7c:50:0f:ac:62:d8:22:a2:5d:a2:80:fc:f7: ff:d7:a3:68:53:2e:62:62:a5:b8:29:b7:70:16:00:8c:23:4a: bc:4e:50:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDRDMxMTAvBgNVBAUTKDc1QUI0QjhEQjMwMTUzQkQ3MjZDRjlGOTYyNTBCRTA0 MDREODhCMUEwHhcNMjUxMTAzMDI1NjQ2WhcNMjUxMTEwMDI1NjQ2WjAYMRYwFAYD VQQDEw02OTA4MTllZS0xZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFIhbOP+tft/3zzqNUm4pSIdWq2Iu4X+KN+V3/IN6KTL+aaK+4qa48NKOHWK hnpZxWjVWlnmruVKGnE0z3qz4GqPDYkIJ5EgJVX/5/gmBczgLwXH3UT0eox97CTk 9QSTUlNr6usNtnao7ob8ewppUWEyZ3K+PTZ6/fwANkgcAIngMtcRS/EcaiN/aojT eOdPOfgNO+pgDuhNwosW6g2OefJXXSeVP0/4WXziYvkfVSXstKD88JiWY30XxOcF 1l3B6i6CITDhLJIvi2REtTh5ffTSDYur7SewVmzUEuN4sisqmgIdM8J3r7TFdRkW fHgKw4u1KUNjJorsLWbLQwGrDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2fQ3zG zQntP8Icj1IfWoBWIbiiMB8GA1UdIwQYMBaAFHWrS42zAVO9cmz5+WJQvgQE2Isa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMENEMy83RjYwMEVDQTA4 RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3MXliUG41WWxDLUJBVFlp eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RhdExqYk1CVTcxeWJQbjVZbEMtQkFUWWl4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MENEMy83RjYwMEVDQTA4RUYxMUVFQkM5QjVEMERDNEY5QUUwMi9kYXRMamJNQlU3 MXliUG41WWxDLUJBVFlpeG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAakdlMaCVwVPYa6kGB0IvPD2/ASR67wloj++IhUesZVpMXN9Iu+68Q hp3/zKuGmja5xmIqcxeRyxwPnfG+7HF26MSln9yEikrLPjWH6UlWlM3Da0ErBp1c K8khQ7KF5oOkxkJPG+kuY9a3pURCfHiZfV/a0HQuPBAAvWgEdPqBLwLlNxss2kYH LMgUhYkWCsw3YYMs3v5zl6jqlSGh7YIBtuilXlfv8jtnGd8eC/JJ+eQ7Z8QrcYIv 9W5Wp5e6a8dw2pbyg81pXDA1yqhOkz+BgXBov1eVrPl5Z4MzanxQD6xi2CKiXaKA /Pf/16NoUy5iYqW4KbdwFgCMI0q8TlAC -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:26 2025 by rpki-client