$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft File: bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft (raw, json) Hash identifier: 9FRbIcwbhCknF3155Ue2OnAvDMtDf/zgglbGays8kEA= Subject key identifier: C1:40:B5:6D:6E:BE:0B:07:E2:D9:2D:B2:B3:70:7C:AB:DC:F1:C7:32 Authority key identifier: 6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC Certificate issuer: /CN=A9119010/serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Certificate serial: 0C8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft Manifest number: 0CF1 Signing time: Tue 04 Nov 2025 18:37:49 +0000 Manifest this update: Tue 04 Nov 2025 18:37:49 +0000 Manifest next update: Tue 11 Nov 2025 18:37:49 +0000 Files and hashes: 1: bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl (hash: y5/BKTo2co2M1UN6o4XqtBogCikj+q1jSDrt+VOa0jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3211 (0xc8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119010, serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Validity Not Before: Nov 4 18:37:49 2025 GMT Not After : Nov 11 18:37:49 2025 GMT Subject: CN=690a47fd-e65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c4:4a:52:d9:df:52:bf:2d:89:30:b1:91:c2: 72:a7:b7:eb:a1:91:cd:4a:50:b4:31:f7:f3:b3:58: eb:92:8b:3c:bf:24:9f:10:79:c5:f9:22:a6:ad:89: e4:d7:4b:3b:27:1d:5b:d3:c0:e8:0c:f2:ab:bb:c3: 51:81:2c:ab:53:44:04:27:dc:05:fb:a1:9b:3c:32: db:5b:2b:60:02:71:43:f5:35:c3:cd:31:f2:87:47: 0c:3b:b8:9d:b3:59:4c:0b:c3:fe:e9:e2:12:6b:c2: ea:4e:ec:94:69:a0:f3:f0:4a:1f:b0:55:bf:2a:30: 6f:9f:e9:b0:cb:13:62:a4:e5:78:e8:2e:a1:85:1c: c2:f4:8a:80:be:65:29:7d:60:81:f5:a2:d2:25:0d: 7c:93:b4:10:9d:5d:2f:14:43:c5:d5:4c:a7:f7:79: 1a:30:c8:87:a9:0c:4b:b4:ac:61:fc:c5:61:1b:07: 30:ac:0f:53:d4:5b:2d:61:f5:9c:8b:3c:a4:63:7c: d4:9d:19:f5:5a:75:3f:9b:ec:10:bf:d7:ff:ca:de: dc:a0:3e:27:b7:a3:0a:26:d3:fb:df:61:d1:2e:5a: fb:39:b7:36:7c:be:5f:aa:b9:62:d3:1d:a7:8a:9b: 4a:d5:9a:fb:e0:a9:a8:9c:3d:e6:62:3b:1b:73:44: 33:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:40:B5:6D:6E:BE:0B:07:E2:D9:2D:B2:B3:70:7C:AB:DC:F1:C7:32 X509v3 Authority Key Identifier: keyid:6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:d6:2c:59:60:94:b4:67:8f:8c:cb:69:d4:de:2e:d3:7f:aa: b4:48:b7:5d:b5:99:68:9d:49:e2:be:c8:4f:bd:5e:e4:87:ad: 50:94:7e:94:28:5b:b9:1b:7b:96:3e:47:ab:7a:c6:e5:47:64: a0:0b:64:ea:1d:ac:06:5e:cc:ab:e5:b0:32:ff:80:8f:69:f5: 6f:47:7a:a3:a0:2e:e0:c9:a3:e4:3c:98:19:0c:0b:2d:5f:fd: a5:00:e9:2e:42:cf:43:75:b2:55:36:f1:3b:88:e8:45:03:a5: 47:23:df:30:df:da:de:f5:91:7f:9c:8d:14:3a:ce:ec:57:53: 6b:c5:77:ff:4b:c9:76:a3:3b:a0:8e:bd:7b:87:21:18:3e:54: 8d:a3:97:2f:95:0e:ed:08:01:88:9a:24:a2:a1:3c:91:66:b8: a3:1a:b9:32:e4:25:ca:74:77:33:f8:b2:46:8e:13:ac:f8:9a: dc:be:71:f5:aa:b0:05:64:c2:49:40:d7:09:ff:ac:ea:2b:18: 17:49:84:ba:de:17:30:ff:63:48:9a:7e:80:67:7f:c7:d4:d1: 38:0b:b0:26:5e:4e:5e:3f:7d:3b:f9:bd:fd:96:37:6c:01:90: 25:78:47:f3:7d:36:68:37:9c:1a:33:95:c4:18:03:53:ce:e3: 47:d4:b3:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwMTAxMTAvBgNVBAUTKDZDMDVFRUFGM0Y2ODcwNDFENTlBNDlCQTE3MDlCODMw MzJCNzRDREMwHhcNMjUxMTA0MTgzNzQ5WhcNMjUxMTExMTgzNzQ5WjAYMRYwFAYD VQQDEw02OTBhNDdmZC1lNjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18RKUtnfUr8tiTCxkcJyp7froZHNSlC0Mffzs1jrkos8vySfEHnF+SKmrYnk 10s7Jx1b08DoDPKru8NRgSyrU0QEJ9wF+6GbPDLbWytgAnFD9TXDzTHyh0cMO7id s1lMC8P+6eISa8LqTuyUaaDz8EofsFW/KjBvn+mwyxNipOV46C6hhRzC9IqAvmUp fWCB9aLSJQ18k7QQnV0vFEPF1Uyn93kaMMiHqQxLtKxh/MVhGwcwrA9T1FstYfWc izykY3zUnRn1WnU/m+wQv9f/yt7coD4nt6MKJtP732HRLlr7Obc2fL5fqrli0x2n iptK1Zr74KmonD3mYjsbc0QzmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFAtW1u vgsH4tktsrNwfKvc8ccyMB8GA1UdIwQYMBaAFGwF7q8/aHBB1ZpJuhcJuDAyt0zc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTAxMC82QTdFOTQwQTBD M0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NFSFZta202RndtNE1ESzNU TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBWHVyejlvY0VIVm1rbTZGd200TURLM1ROdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTAxMC82QTdFOTQwQTBDM0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NF SFZta202RndtNE1ESzNUTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg1ixZYJS0Z4+My2nU3i7Tf6q0SLddtZlonUnivshPvV7kh61QlH6U KFu5G3uWPkeresblR2SgC2TqHawGXsyr5bAy/4CPafVvR3qjoC7gyaPkPJgZDAst X/2lAOkuQs9DdbJVNvE7iOhFA6VHI98w39re9ZF/nI0UOs7sV1NrxXf/S8l2ozug jr17hyEYPlSNo5cvlQ7tCAGImiSioTyRZrijGrky5CXKdHcz+LJGjhOs+JrcvnH1 qrAFZMJJQNcJ/6zqKxgXSYS63hcw/2NImn6AZ3/H1NE4C7AmXk5eP307+b39ljds AZAleEfzfTZoN5waM5XEGANTzuNH1LPe -----END CERTIFICATE-----Generated at Wed Nov 5 15:45:09 2025 by rpki-client