$ rpki-client -vvf rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft File: ijORleLOKXW194maPQLOYu-Rvzk.mft (raw, json) Hash identifier: sxc3sRUMX/aSKOwHhlXrFPgzF/fIdf7zXTvK3lUl8Ms= Subject key identifier: C1:BD:44:4E:5C:79:97:B6:DE:D9:8F:41:50:11:43:1A:4C:F5:89:FB Authority key identifier: 8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39 Certificate issuer: /CN=A91183D4/serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39 Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft Manifest number: 02B7 Signing time: Wed 05 Nov 2025 01:33:42 +0000 Manifest this update: Wed 05 Nov 2025 01:33:41 +0000 Manifest next update: Wed 12 Nov 2025 01:33:41 +0000 Files and hashes: 1: ijORleLOKXW194maPQLOYu-Rvzk.crl (hash: hzvE22eDXq0OhLanYVSNVawvrC84rePm8t3ToDH2g3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91183D4, serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39 Validity Not Before: Nov 5 01:33:41 2025 GMT Not After : Nov 12 01:33:41 2025 GMT Subject: CN=690aa975-e2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b7:77:8d:db:10:0e:af:53:07:fb:d9:7d:20: f5:c8:35:ec:05:4f:64:e3:79:2b:02:fe:a1:47:e4: b0:22:47:5d:e0:cc:16:63:c4:36:81:c0:c7:39:2b: 30:3b:d3:4b:6a:a8:95:16:c0:08:74:89:4b:ac:6e: d4:2c:78:94:38:e7:d6:6b:9b:47:ea:31:2e:79:ec: 33:f1:99:40:dc:79:0b:d4:47:ed:34:cf:1a:84:42: 19:fe:a0:4e:35:ca:00:46:20:4c:a9:fa:d5:da:b4: ce:98:c8:35:b8:1d:76:f0:43:5e:c5:78:83:07:1d: c4:4e:3c:9f:ed:88:68:c7:c7:16:fe:cc:02:c8:5f: c0:e6:74:10:f7:a0:4c:dc:43:a6:7b:bb:09:be:90: 64:c3:4d:54:07:b4:11:d7:3f:19:66:7e:e6:cc:60: 46:d3:22:da:7a:5e:4b:62:02:11:f9:de:33:25:6e: 19:04:69:b8:e9:a7:02:0e:43:dd:29:d0:89:2e:e9: e6:e0:29:e3:2c:94:58:c6:3f:90:cf:41:1d:f8:a6: a1:11:88:11:71:14:87:c0:24:f2:63:cc:81:da:c5: 30:7d:9e:9c:f3:ee:1e:cc:62:c5:47:e6:73:86:88: 9c:13:8c:63:b9:94:6d:58:28:49:65:36:39:cd:1a: 57:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BD:44:4E:5C:79:97:B6:DE:D9:8F:41:50:11:43:1A:4C:F5:89:FB X509v3 Authority Key Identifier: keyid:8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:19:d3:a3:ac:61:9a:91:76:58:4e:1a:89:3c:e3:fc:3b:1d: b0:95:f8:34:bc:5c:29:4b:19:c3:05:b3:4c:70:fb:cc:2b:79: 30:86:8d:12:14:5b:b8:35:b5:68:4f:bb:97:df:3d:69:1d:e8: 89:34:41:57:c1:8e:52:09:82:84:18:af:06:cd:6a:9a:9b:a2: 71:19:fc:f8:b1:63:21:30:b4:ca:02:1a:f7:b6:5c:32:f9:dd: 95:bf:16:07:62:4f:13:cb:d8:5a:14:b7:fa:66:36:fe:a4:a8: 6c:b2:05:0b:73:e0:7f:0e:9c:48:b7:25:5a:2c:a6:d2:38:8d: 4e:9a:38:ac:b5:3b:56:b3:7d:66:b6:b0:7d:b4:bb:28:f1:ef: 6f:59:3f:72:f4:2a:cf:62:7c:fc:15:7f:1b:59:b3:7c:78:82: cc:b8:5a:07:80:97:4a:fa:28:4d:09:1b:6e:da:47:d9:d7:f9: a2:0f:f4:d0:1c:07:f4:d6:7c:3e:29:ea:89:04:33:55:93:98: e3:c2:61:c4:0f:97:b5:08:a1:5a:6b:69:8a:ac:52:45:6e:ed: 41:e1:06:de:7d:e8:35:e5:77:b5:7f:c2:de:0e:55:91:4f:96: b0:15:32:83:87:8a:3b:95:0a:70:4d:15:eb:54:1a:1d:7a:9d: ce:65:1a:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgzRDQxMTAvBgNVBAUTKDhBMzM5MTk1RTJDRTI5NzVCNUY3ODk5QTNEMDJDRTYy RUY5MUJGMzkwHhcNMjUxMTA1MDEzMzQxWhcNMjUxMTEyMDEzMzQxWjAYMRYwFAYD VQQDEw02OTBhYTk3NS1lMmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAobd3jdsQDq9TB/vZfSD1yDXsBU9k43krAv6hR+SwIkdd4MwWY8Q2gcDHOSsw O9NLaqiVFsAIdIlLrG7ULHiUOOfWa5tH6jEueewz8ZlA3HkL1EftNM8ahEIZ/qBO NcoARiBMqfrV2rTOmMg1uB128ENexXiDBx3ETjyf7Yhox8cW/swCyF/A5nQQ96BM 3EOme7sJvpBkw01UB7QR1z8ZZn7mzGBG0yLael5LYgIR+d4zJW4ZBGm46acCDkPd KdCJLunm4CnjLJRYxj+Qz0Ed+KahEYgRcRSHwCTyY8yB2sUwfZ6c8+4ezGLFR+Zz hoicE4xjuZRtWChJZTY5zRpX8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMG9RE5c eZe23tmPQVARQxpM9Yn7MB8GA1UdIwQYMBaAFIozkZXizil1tfeJmj0CzmLvkb85 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODNENC9GNkJFODY5NjE0 QUMxMUVEODNBNzZFNTlDNEY5QUUwMi9pak9SbGVMT0tYVzE5NG1hUFFMT1l1LVJ2 emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lqT1JsZUxPS1hXMTk0bWFQUUxPWXUtUnZ6ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODNENC9GNkJFODY5NjE0QUMxMUVEODNBNzZFNTlDNEY5QUUwMi9pak9SbGVMT0tY VzE5NG1hUFFMT1l1LVJ2emsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7GdOjrGGakXZYThqJPOP8Ox2wlfg0vFwpSxnDBbNMcPvMK3kwho0S FFu4NbVoT7uX3z1pHeiJNEFXwY5SCYKEGK8GzWqam6JxGfz4sWMhMLTKAhr3tlwy +d2VvxYHYk8Ty9haFLf6Zjb+pKhssgULc+B/DpxItyVaLKbSOI1OmjistTtWs31m trB9tLso8e9vWT9y9CrPYnz8FX8bWbN8eILMuFoHgJdK+ihNCRtu2kfZ1/miD/TQ HAf01nw+KeqJBDNVk5jjwmHED5e1CKFaa2mKrFJFbu1B4Qbefeg15Xe1f8LeDlWR T5awFTKDh4o7lQpwTRXrVBodep3OZRoL -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:16 2025 by rpki-client