$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft File: -BaXnSqJmynqWV8rVO6jmQokNvk.mft (raw, json) Hash identifier: qcCon6zIEGX+vJ0Ba5IbsmF3UYoLzxdFd/JdiK2WtLU= Subject key identifier: 11:AF:E3:23:77:DC:68:C6:70:59:33:F6:D2:81:A2:E4:F2:D4:1F:7D Authority key identifier: F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9 Certificate issuer: /CN=A91D5DB6/serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9 Certificate serial: 162D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft Manifest number: 162D Signing time: Thu 18 Sep 2025 16:51:25 +0000 Manifest this update: Thu 18 Sep 2025 16:51:25 +0000 Manifest next update: Thu 25 Sep 2025 16:51:25 +0000 Files and hashes: 1: -BaXnSqJmynqWV8rVO6jmQokNvk.crl (hash: 7+G6f17S857qpMFyeX+pLpUjDeIZ++mOhz1nKp4u8XY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5677 (0x162d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5DB6, serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9 Validity Not Before: Sep 18 16:51:25 2025 GMT Not After : Sep 25 16:51:25 2025 GMT Subject: CN=68cc388d-c142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fc:40:59:29:26:ff:74:bb:32:ce:ba:51:85: 87:2e:ea:71:9e:5b:7b:51:ad:26:b4:0d:d4:32:4f: fd:0d:63:a0:20:81:83:c1:0a:df:f0:b2:ba:b7:63: 5a:e6:f4:0d:56:b8:bc:b8:27:bc:6f:11:d2:b4:4e: b4:4a:08:8f:b0:6b:cf:a7:d6:63:8a:24:7d:12:4d: 76:0e:97:9d:20:42:3b:ff:d1:e6:e5:7c:d2:1f:c4: 15:d6:7d:17:43:8a:da:1f:ab:9e:9d:a4:73:3a:50: 1e:a7:72:da:f0:ef:63:af:c6:e9:72:f2:fd:1f:3e: 2c:28:2c:42:47:fb:7c:5f:63:4e:d5:59:96:96:8f: ce:25:3c:e8:06:da:42:38:27:2e:c3:00:2e:38:86: 27:f5:08:42:66:63:fc:35:02:78:04:22:64:7b:1d: 08:78:ad:94:61:ca:ce:c3:13:25:1f:fa:ea:91:2e: 4a:bd:c5:ee:0a:31:41:80:b4:a0:a7:df:95:1c:5c: b0:9b:a2:12:24:67:f3:74:ec:5d:69:24:04:1c:71: 83:00:1a:01:62:43:0e:72:2f:79:bd:ec:7f:2a:ce: 7d:a1:4f:9c:f0:a0:09:35:31:7a:b9:14:14:6f:6d: ec:e6:0b:f1:4f:b6:55:d2:32:dd:d4:cd:9e:e1:d5: 08:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AF:E3:23:77:DC:68:C6:70:59:33:F6:D2:81:A2:E4:F2:D4:1F:7D X509v3 Authority Key Identifier: keyid:F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:38:7b:61:05:ce:fa:0f:24:36:4a:34:59:d9:c6:e6:1e:3c: 5a:91:dc:7c:8f:85:dc:3b:5f:85:2f:42:f8:5c:0a:1d:eb:82: 02:31:a6:02:fe:ef:27:86:6b:36:34:8b:be:96:26:bb:d8:ef: 13:bd:5e:b9:b7:83:96:d2:e3:52:61:ac:a4:23:2c:94:18:5c: 25:f0:2c:2e:38:a4:94:5f:a1:a3:e0:85:60:18:2b:b3:d9:b3: e8:a6:27:f3:b8:4e:76:2f:4e:80:87:5d:95:5f:bf:9e:c0:89: 5a:5d:46:e7:d1:ec:8e:60:5c:9e:2b:1d:09:b4:ed:80:a4:49: 55:f9:e7:9e:86:c5:52:ab:8d:e5:ce:1b:7a:fc:29:94:18:0e: e8:da:4f:4a:78:b0:a0:a4:5e:39:48:93:14:bc:bd:80:02:83: f9:84:42:1a:f3:2e:38:89:47:2c:6b:49:0c:31:6e:3a:cd:50: ff:41:f2:c9:fa:30:a2:9e:5f:16:7d:44:95:21:7a:92:fc:38: 9b:81:30:46:89:49:3b:5f:e7:d8:b3:78:b7:05:f1:da:8e:11: 83:5a:83:40:65:c6:d4:a8:2a:e2:ec:66:77:49:6f:fc:4d:9e: 3f:85:8e:92:2c:de:69:f5:ad:99:00:fe:25:50:54:a5:65:f7: 3a:9c:fe:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVEQjYxMTAvBgNVBAUTKEY4MTY5NzlEMkE4OTlCMjlFQTU5NUYyQjU0RUVBMzk5 MEEyNDM2RjkwHhcNMjUwOTE4MTY1MTI1WhcNMjUwOTI1MTY1MTI1WjAYMRYwFAYD VQQDEw02OGNjMzg4ZC1jMTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfxAWSkm/3S7Ms66UYWHLupxnlt7Ua0mtA3UMk/9DWOgIIGDwQrf8LK6t2Na 5vQNVri8uCe8bxHStE60SgiPsGvPp9ZjiiR9Ek12DpedIEI7/9Hm5XzSH8QV1n0X Q4raH6uenaRzOlAep3La8O9jr8bpcvL9Hz4sKCxCR/t8X2NO1VmWlo/OJTzoBtpC OCcuwwAuOIYn9QhCZmP8NQJ4BCJkex0IeK2UYcrOwxMlH/rqkS5KvcXuCjFBgLSg p9+VHFywm6ISJGfzdOxdaSQEHHGDABoBYkMOci95vex/Ks59oU+c8KAJNTF6uRQU b23s5gvxT7ZV0jLd1M2e4dUI4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGv4yN3 3GjGcFkz9tKBouTy1B99MB8GA1UdIwQYMBaAFPgWl50qiZsp6llfK1Tuo5kKJDb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENURCNi8xM0Y5NkI4MjE4 NjIxMUU4QjFFMzE3MjlDNEY5QUUwMi8tQmFYblNxSm15bnFXVjhyVk82am1Rb2tO dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CYVhuU3FKbXlucVdWOHJWTzZqbVFva052ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NURCNi8xM0Y5NkI4MjE4NjIxMUU4QjFFMzE3MjlDNEY5QUUwMi8tQmFYblNxSm15 bnFXVjhyVk82am1Rb2tOdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJOHthBc76DyQ2SjRZ2cbmHjxakdx8j4XcO1+FL0L4XAod64ICMaYC /u8nhms2NIu+lia72O8TvV65t4OW0uNSYaykIyyUGFwl8CwuOKSUX6Gj4IVgGCuz 2bPopifzuE52L06Ah12VX7+ewIlaXUbn0eyOYFyeKx0JtO2ApElV+eeehsVSq43l zht6/CmUGA7o2k9KeLCgpF45SJMUvL2AAoP5hEIa8y44iUcsa0kMMW46zVD/QfLJ +jCinl8WfUSVIXqS/DibgTBGiUk7X+fYs3i3BfHajhGDWoNAZcbUqCri7GZ3SW/8 TZ4/hY6SLN5p9a2ZAP4lUFSlZfc6nP6u -----END CERTIFICATE-----Generated at Fri Sep 19 04:04:25 2025 by rpki-client