$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft File: _DR_mfrUz-7KsxUhAkJ3GusIbXU.mft (raw, json) Hash identifier: +BW79J2tgnO9uSUt8yNrjNs5Hun/JASsq2F6Bslva54= Subject key identifier: 20:BF:AD:C3:1C:19:93:64:CB:19:75:A4:DB:2F:2C:11:8E:D0:31:0B Authority key identifier: FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75 Certificate issuer: /CN=A91F7EFC/serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft Manifest number: 4F Signing time: Mon 03 Nov 2025 07:18:19 +0000 Manifest this update: Mon 03 Nov 2025 07:18:19 +0000 Manifest next update: Mon 10 Nov 2025 07:18:19 +0000 Files and hashes: 1: _DR_mfrUz-7KsxUhAkJ3GusIbXU.crl (hash: PPJ0ikt4o5JqBS6RTwLxGMBQHsblp9I07fMskhGAH+c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7EFC, serialNumber=FC347F99FAD4CFEECAB315210242771AEB086D75 Validity Not Before: Nov 3 07:18:19 2025 GMT Not After : Nov 10 07:18:19 2025 GMT Subject: CN=6908573b-d2a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a6:85:73:ad:b0:1b:20:16:6a:e0:47:fb:3f: da:47:77:a4:0d:37:46:72:2b:49:c4:e7:85:c0:2e: 90:7b:6b:1d:6c:4b:ac:a6:b9:95:a0:6e:59:62:59: 2a:21:30:ce:55:09:e6:3e:b4:4b:67:c8:03:36:7f: 16:ac:4a:c1:34:32:64:8a:25:dc:49:6d:5e:1e:d3: b3:53:fc:00:69:d3:7a:f3:28:4b:17:80:11:cd:ba: c4:23:25:50:a1:50:65:2f:7e:b0:25:aa:0f:20:26: b3:69:e5:9a:d8:6e:88:ab:59:40:f4:75:4f:a4:f3: 71:ae:86:2e:2a:74:af:a4:6b:94:63:a0:9c:fe:64: 34:27:57:86:ed:ae:a7:86:8a:f7:7f:b1:0c:71:45: 4b:a5:9a:89:a5:d5:61:2c:35:7d:c5:af:01:22:a6: 3f:6c:48:8c:76:b8:c8:4e:29:58:88:ea:42:51:ea: b3:88:91:33:b1:94:2d:f3:03:1b:7a:1d:65:a2:1b: 67:9d:b1:95:b8:41:52:7d:f8:f3:2f:82:c6:d6:2a: 96:84:83:c2:dd:d5:16:5c:d6:f6:c2:46:1b:7a:d5: 1f:ac:48:a0:14:43:98:51:70:ab:9e:99:18:c8:83: 81:10:da:06:f4:31:4a:ee:83:56:10:18:6b:58:81: 8e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BF:AD:C3:1C:19:93:64:CB:19:75:A4:DB:2F:2C:11:8E:D0:31:0B X509v3 Authority Key Identifier: keyid:FC:34:7F:99:FA:D4:CF:EE:CA:B3:15:21:02:42:77:1A:EB:08:6D:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_DR_mfrUz-7KsxUhAkJ3GusIbXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7EFC/1D9382EC45BC11F0AB97CC09C4F9AE02/_DR_mfrUz-7KsxUhAkJ3GusIbXU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:08:d2:c9:69:18:ea:55:8d:78:04:8d:07:86:02:11:f8:81: 90:ee:2c:b9:04:88:00:cb:82:6e:49:4b:4c:46:ae:ef:92:42: fa:c8:54:b0:26:89:ce:8d:e1:a6:b6:97:cc:40:1c:05:9e:ee: 98:45:02:e3:0e:1c:d0:fe:60:a8:ec:84:5c:c7:fb:66:27:3f: 01:38:16:e3:17:25:af:70:13:58:82:3d:9e:4b:ac:cf:f9:1d: 2a:a5:b6:78:31:07:9c:9f:ea:8e:aa:24:28:6b:09:4f:a2:e8: 5a:d7:5e:c8:72:1f:48:e1:04:0b:eb:fd:f6:e2:7a:0a:6e:1d: 11:05:79:c8:fc:1a:a6:50:7b:ba:cb:75:88:0f:d7:e6:aa:35: 14:82:f0:a5:18:fa:d3:81:2d:8c:13:5f:b0:25:01:1d:8e:63: ab:17:78:da:11:79:9c:e9:17:3a:d1:0b:96:b8:09:9d:d8:15: 6e:2c:ab:18:8a:48:65:68:5b:98:c7:e9:98:65:2c:d5:e6:1f: 79:61:13:a7:15:7a:27:9a:76:69:eb:4b:00:6e:e4:1d:bf:4f: 5f:b1:32:3a:0a:83:a1:e0:95:8f:f5:df:e2:63:06:2b:c7:9a: 74:15:a3:09:c5:2a:d8:dc:16:c9:89:c1:f7:26:80:bd:d2:10: 1c:4f:71:46 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG N0VGQzExMC8GA1UEBRMoRkMzNDdGOTlGQUQ0Q0ZFRUNBQjMxNTIxMDI0Mjc3MUFF QjA4NkQ3NTAeFw0yNTExMDMwNzE4MTlaFw0yNTExMTAwNzE4MTlaMBgxFjAUBgNV BAMTDTY5MDg1NzNiLWQyYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2poVzrbAbIBZq4Ef7P9pHd6QNN0ZyK0nE54XALpB7ax1sS6ymuZWgblliWSoh MM5VCeY+tEtnyAM2fxasSsE0MmSKJdxJbV4e07NT/ABp03rzKEsXgBHNusQjJVCh UGUvfrAlqg8gJrNp5ZrYboirWUD0dU+k83Guhi4qdK+ka5RjoJz+ZDQnV4btrqeG ivd/sQxxRUulmoml1WEsNX3FrwEipj9sSIx2uMhOKViI6kJR6rOIkTOxlC3zAxt6 HWWiG2edsZW4QVJ9+PMvgsbWKpaEg8Ld1RZc1vbCRht61R+sSKAUQ5hRcKuemRjI g4EQ2gb0MUrug1YQGGtYgY6tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIL+twxwZ k2TLGXWk2y8sEY7QMQswHwYDVR0jBBgwFoAU/DR/mfrUz+7KsxUhAkJ3GusIbXUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3RUZDLzFEOTM4MkVDNDVC QzExRjBBQjk3Q0MwOUM0RjlBRTAyL19EUl9tZnJVei03S3N4VWhBa0ozR3VzSWJY VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0RSX21mclV6LTdLc3hVaEFrSjNHdXNJYlhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3 RUZDLzFEOTM4MkVDNDVCQzExRjBBQjk3Q0MwOUM0RjlBRTAyL19EUl9tZnJVei03 S3N4VWhBa0ozR3VzSWJYVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEUI0slpGOpVjXgEjQeGAhH4gZDuLLkEiADLgm5JS0xGru+SQvrIVLAm ic6N4aa2l8xAHAWe7phFAuMOHND+YKjshFzH+2YnPwE4FuMXJa9wE1iCPZ5LrM/5 HSqltngxB5yf6o6qJChrCU+i6FrXXshyH0jhBAvr/fbiegpuHREFecj8GqZQe7rL dYgP1+aqNRSC8KUY+tOBLYwTX7AlAR2OY6sXeNoReZzpFzrRC5a4CZ3YFW4sqxiK SGVoW5jH6ZhlLNXmH3lhE6cVeieadmnrSwBu5B2/T1+xMjoKg6HglY/13+JjBivH mnQVownFKtjcFsmJwfcmgL3SEBxPcUY= -----END CERTIFICATE-----Generated at Tue Nov 4 16:07:43 2025 by rpki-client