$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft File: RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft (raw, json) Hash identifier: 86LApqZ0HuXJsnWP80PNT/ISWDgp4nyA4in8hXHgZfQ= Subject key identifier: 42:FE:3B:2F:4D:F4:21:86:EA:6F:6D:9E:2C:0D:F9:F8:4B:2B:89:D5 Authority key identifier: 44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5 Certificate issuer: /CN=A91DEB01/serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft Manifest number: 0C Signing time: Fri 17 Oct 2025 11:26:32 +0000 Manifest this update: Fri 17 Oct 2025 11:26:31 +0000 Manifest next update: Fri 24 Oct 2025 11:26:31 +0000 Files and hashes: 1: RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl (hash: Py95MyFDljOiwunpwU4noIHZHg4Btt28YrFr3OEF4N0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB01, serialNumber=447D5983BF0DB911AD8FDCB674145F6C58F83CD5 Validity Not Before: Oct 17 11:26:31 2025 GMT Not After : Oct 24 11:26:31 2025 GMT Subject: CN=68f227e8-4b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:cd:ea:03:f8:ed:a9:35:1c:d5:80:5e:25:de: 22:a8:d3:18:b9:2b:a3:ae:2f:6a:7d:a9:34:93:84: 83:9d:9b:85:c2:3a:18:bb:94:a0:f5:e1:1d:f6:e3: fc:76:ff:ae:75:ee:5a:08:5e:4c:c6:6a:4b:22:0e: c0:4a:21:b9:45:6a:d6:6c:a7:d8:42:dd:e9:55:9a: 53:00:d6:a6:2e:27:63:67:5d:c3:c2:2a:4e:9d:fc: d2:92:8d:5b:8e:89:47:ef:55:62:5c:c5:75:4c:b9: ea:64:3e:b2:0d:e8:c3:1e:1f:ee:ac:4a:e0:7c:cf: d3:ea:d6:e5:96:46:4f:bf:81:43:b2:14:f4:3e:77: 44:5c:96:82:e3:b1:00:f8:fb:9a:4a:54:65:0a:d2: 62:96:2b:2f:e6:e8:53:98:09:a3:36:82:d4:75:2c: 23:27:61:15:1d:b4:8a:d5:63:05:d3:3f:9d:a3:d8: ab:4c:ae:c5:39:86:6c:43:bf:90:92:43:3d:23:8f: 74:19:7c:b4:cf:67:bf:4e:69:23:5e:90:7d:2e:c3: c6:05:32:ef:13:9c:c4:8f:11:1b:1e:40:00:28:d7: 3c:b8:44:df:10:55:56:68:fd:1c:a7:d6:ca:60:00: 1a:28:f9:75:00:82:ec:0b:1f:6d:6b:f9:9c:c8:f5: f8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FE:3B:2F:4D:F4:21:86:EA:6F:6D:9E:2C:0D:F9:F8:4B:2B:89:D5 X509v3 Authority Key Identifier: keyid:44:7D:59:83:BF:0D:B9:11:AD:8F:DC:B6:74:14:5F:6C:58:F8:3C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RH1Zg78NuRGtj9y2dBRfbFj4PNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB01/32EE0A6E99E911F0978D4072C4F9AE02/RH1Zg78NuRGtj9y2dBRfbFj4PNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:a8:ae:83:f3:27:a2:bc:57:94:da:3e:0f:ab:a2:f1:56:63: 3b:c1:0d:f6:4e:7b:1c:5b:19:fb:19:dc:fc:1d:86:2d:f0:e1: 7f:19:77:2d:14:35:0d:9b:59:52:39:64:2a:05:4b:73:01:1c: 37:21:c5:10:7d:f2:75:98:26:63:18:6d:3a:a0:32:61:35:a6: de:dc:ce:df:78:ab:2f:88:86:49:7f:13:67:d3:98:61:10:35: 3c:c1:37:f1:92:e3:03:4a:2e:1c:cb:e6:83:48:33:01:76:fc: e3:e8:09:97:04:32:3d:3f:f1:ba:8f:a0:50:a3:c9:89:d8:3f: a2:b3:8b:04:bc:3b:91:4a:57:44:e9:4c:c7:68:f0:50:fd:f2: 1b:14:bd:56:70:be:2e:76:dc:07:96:53:07:58:92:3c:de:a9: 07:d0:1d:10:24:9a:b6:25:b2:65:87:9f:22:a4:58:25:a2:a7: d9:51:59:4c:35:f7:d9:45:4f:90:e5:5d:ae:da:38:87:7d:1d: 76:1e:5e:59:00:13:d4:33:c8:bf:05:5d:fb:68:61:15:0b:a4: 44:a0:75:3e:92:45:f5:9b:c3:37:b7:ef:81:45:ac:d5:a5:c5: df:0c:6e:6d:26:f6:96:c2:1a:f1:88:34:ab:0b:2b:9b:34:52: 83:dd:3a:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RUIwMTExMC8GA1UEBRMoNDQ3RDU5ODNCRjBEQjkxMUFEOEZEQ0I2NzQxNDVGNkM1 OEY4M0NENTAeFw0yNTEwMTcxMTI2MzFaFw0yNTEwMjQxMTI2MzFaMBgxFjAUBgNV BAMTDTY4ZjIyN2U4LTRiOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0zeoD+O2pNRzVgF4l3iKo0xi5K6OuL2p9qTSThIOdm4XCOhi7lKD14R324/x2 /6517loIXkzGaksiDsBKIblFatZsp9hC3elVmlMA1qYuJ2NnXcPCKk6d/NKSjVuO iUfvVWJcxXVMuepkPrIN6MMeH+6sSuB8z9Pq1uWWRk+/gUOyFPQ+d0RcloLjsQD4 +5pKVGUK0mKWKy/m6FOYCaM2gtR1LCMnYRUdtIrVYwXTP52j2KtMrsU5hmxDv5CS Qz0jj3QZfLTPZ79OaSNekH0uw8YFMu8TnMSPERseQAAo1zy4RN8QVVZo/Ryn1spg ABoo+XUAguwLH21r+ZzI9fixAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQv47L030 IYbqb22eLA35+EsridUwHwYDVR0jBBgwFoAURH1Zg78NuRGtj9y2dBRfbFj4PNUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFQjAxLzMyRUUwQTZFOTlF OTExRjA5NzhENDA3MkM0RjlBRTAyL1JIMVpnNzhOdVJHdGo5eTJkQlJmYkZqNFBO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkgxWmc3OE51Ukd0ajl5MmRCUmZiRmo0UE5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF QjAxLzMyRUUwQTZFOTlFOTExRjA5NzhENDA3MkM0RjlBRTAyL1JIMVpnNzhOdVJH dGo5eTJkQlJmYkZqNFBOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABWoroPzJ6K8V5TaPg+rovFWYzvBDfZOexxbGfsZ3Pwdhi3w4X8Zdy0U NQ2bWVI5ZCoFS3MBHDchxRB98nWYJmMYbTqgMmE1pt7czt94qy+Ihkl/E2fTmGEQ NTzBN/GS4wNKLhzL5oNIMwF2/OPoCZcEMj0/8bqPoFCjyYnYP6KziwS8O5FKV0Tp TMdo8FD98hsUvVZwvi523AeWUwdYkjzeqQfQHRAkmrYlsmWHnyKkWCWip9lRWUw1 99lFT5DlXa7aOId9HXYeXlkAE9QzyL8FXftoYRULpESgdT6SRfWbwze374FFrNWl xd8Mbm0m9pbCGvGINKsLK5s0UoPdOi8= -----END CERTIFICATE-----Generated at Sat Oct 18 23:29:07 2025 by rpki-client