$ rpki-client -vvf rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft File: t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft (raw, json) Hash identifier: qW3tm6xV1+D6nv6gskpiAQtpn21OLOWgEobHqNlQA7s= Subject key identifier: 5E:A9:16:C4:8D:96:4A:BC:66:E5:14:AA:7B:68:8F:88:3E:C4:86:F9 Authority key identifier: B7:51:98:EC:B4:B5:C6:E8:D1:E5:65:AF:F8:94:3F:8A:F4:AF:77:FF Certificate issuer: /CN=A911EE4C/serialNumber=B75198ECB4B5C6E8D1E565AFF8943F8AF4AF77FF Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1GY7LS1xujR5WWv-JQ_ivSvd_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft Manifest number: 10 Signing time: Mon 03 Nov 2025 07:56:03 +0000 Manifest this update: Mon 03 Nov 2025 07:56:03 +0000 Manifest next update: Mon 10 Nov 2025 07:56:02 +0000 Files and hashes: 1: t1GY7LS1xujR5WWv-JQ_ivSvd_8.crl (hash: mxNiKs5/+AzacNDpJmTFdNJHUsqhNl3jAt++OxufMX0=) 2: 8D06A40AA1DE11F0A041111BC4F9AE02.roa (hash: CtuQzwGllfJ59SjM+rzLZycPJacOoACuk/ktiuBDrZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.crl rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1GY7LS1xujR5WWv-JQ_ivSvd_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EE4C, serialNumber=B75198ECB4B5C6E8D1E565AFF8943F8AF4AF77FF Validity Not Before: Nov 3 07:56:03 2025 GMT Not After : Nov 10 07:56:02 2025 GMT Subject: CN=69086013-1b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:26:17:36:c4:be:4c:fe:47:24:d0:61:4a:bf: c2:5c:2f:28:82:fe:4f:1a:94:b7:99:fb:f4:c9:d5: f6:57:96:a6:ee:e4:7f:d5:5a:44:62:61:a3:2f:b7: f5:2e:8a:62:b2:d2:a0:9a:38:71:1a:78:0d:eb:67: 03:b9:e6:de:6a:be:17:b7:d6:ce:e0:1b:e1:06:84: e6:a8:1c:ce:fa:7e:50:11:a3:16:2f:e9:88:18:fd: e7:65:b4:1d:bf:33:db:cc:62:cf:bd:ca:9a:6a:ba: 90:f1:a4:da:f1:37:1d:83:62:71:72:8f:7f:e2:1f: 0a:97:73:06:2c:4e:67:25:af:06:50:15:22:3f:31: 4c:93:8a:86:25:98:0c:68:58:04:7f:89:5b:bb:fa: 68:73:7b:f5:6c:fc:04:bc:ae:04:7b:6b:2e:d3:62: e9:2d:70:ab:85:ca:2d:b5:6d:5f:21:5b:e5:25:8d: dd:82:66:c7:9d:91:6a:e4:96:15:e1:4a:32:c1:b6: aa:a4:10:68:3f:b9:df:7f:ec:e4:11:83:ee:a6:4d: 02:27:e6:4c:d1:93:0e:e6:91:f7:96:a6:9f:bc:e8: b4:a1:c6:30:6c:a7:c0:4c:04:1c:49:14:83:c0:01: f3:42:7a:bd:3b:94:ae:3a:95:9b:a0:f5:32:44:19: 9f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A9:16:C4:8D:96:4A:BC:66:E5:14:AA:7B:68:8F:88:3E:C4:86:F9 X509v3 Authority Key Identifier: keyid:B7:51:98:EC:B4:B5:C6:E8:D1:E5:65:AF:F8:94:3F:8A:F4:AF:77:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1GY7LS1xujR5WWv-JQ_ivSvd_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:56:1e:17:af:bc:7d:88:c7:e0:85:32:2f:8b:04:d6:06:f6: fd:41:cc:e4:4e:53:89:12:df:a3:1c:77:9b:1d:e0:cf:0c:8f: 5c:29:92:5e:7a:a1:09:03:61:e7:ad:32:f8:8c:ab:98:71:d3: 82:2b:bb:5d:63:86:bb:b5:54:3b:c8:13:b5:e6:1b:14:b1:8f: c5:a2:90:37:cb:75:f0:99:6f:48:8b:3a:00:d0:f6:ff:5f:66: 88:70:52:6f:9a:98:eb:c5:8b:51:53:c8:69:37:e0:11:a8:d3: 71:c3:35:0d:1b:25:cd:9c:5d:86:52:6a:9a:e5:c1:b6:e9:7b: 6e:66:66:40:d1:17:e7:c1:f7:33:7a:31:17:f1:de:f6:8e:3b: 0e:e4:1a:e0:4f:da:e5:eb:5c:b2:83:16:52:e4:ba:85:50:b9: d5:58:36:7c:ba:76:09:98:56:f4:35:e7:44:9b:d8:0a:1f:f5: f2:d4:21:6e:47:9b:08:a9:b9:eb:c7:5a:86:61:07:ac:8b:56: 80:ab:f2:0a:04:d5:aa:cb:e2:e0:bf:07:9e:d0:5e:61:39:4c: 63:83:2c:d1:27:c3:38:9e:b2:d4:32:61:a1:e7:cd:e7:e0:8c: 88:2f:f3:2c:44:bb:e3:45:e7:13:da:d5:0e:3e:0c:db:ba:09: de:64:09:49 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RUU0QzExMC8GA1UEBRMoQjc1MTk4RUNCNEI1QzZFOEQxRTU2NUFGRjg5NDNGOEFG NEFGNzdGRjAeFw0yNTExMDMwNzU2MDNaFw0yNTExMTAwNzU2MDJaMBgxFjAUBgNV BAMTDTY5MDg2MDEzLTFiNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLJhc2xL5M/kck0GFKv8JcLyiC/k8alLeZ+/TJ1fZXlqbu5H/VWkRiYaMvt/Uu imKy0qCaOHEaeA3rZwO55t5qvhe31s7gG+EGhOaoHM76flARoxYv6YgY/edltB2/ M9vMYs+9yppqupDxpNrxNx2DYnFyj3/iHwqXcwYsTmclrwZQFSI/MUyTioYlmAxo WAR/iVu7+mhze/Vs/AS8rgR7ay7TYuktcKuFyi21bV8hW+Uljd2CZsedkWrklhXh SjLBtqqkEGg/ud9/7OQRg+6mTQIn5kzRkw7mkfeWpp+86LShxjBsp8BMBBxJFIPA AfNCer07lK46lZug9TJEGZ+LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXqkWxI2W Srxm5RSqe2iPiD7EhvkwHwYDVR0jBBgwFoAUt1GY7LS1xujR5WWv+JQ/ivSvd/8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFRTRDLzA5MzU5NjE0QTFE RDExRjA5QzQwMjUxM0M0RjlBRTAyL3QxR1k3TFMxeHVqUjVXV3YtSlFfaXZTdmRf OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdDFHWTdMUzF4dWpSNVdXdi1KUV9pdlN2ZF84LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF RTRDLzA5MzU5NjE0QTFERDExRjA5QzQwMjUxM0M0RjlBRTAyL3QxR1k3TFMxeHVq UjVXV3YtSlFfaXZTdmRfOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACdWHhevvH2Ix+CFMi+LBNYG9v1BzOROU4kS36Mcd5sd4M8Mj1wpkl56 oQkDYeetMviMq5hx04Iru11jhru1VDvIE7XmGxSxj8WikDfLdfCZb0iLOgDQ9v9f ZohwUm+amOvFi1FTyGk34BGo03HDNQ0bJc2cXYZSaprlwbbpe25mZkDRF+fB9zN6 MRfx3vaOOw7kGuBP2uXrXLKDFlLkuoVQudVYNny6dgmYVvQ150Sb2Aof9fLUIW5H mwipuevHWoZhB6yLVoCr8goE1arL4uC/B57QXmE5TGODLNEnwziestQyYaHnzefg jIgv8yxEu+NF5xPa1Q4+DNu6Cd5kCUk= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:59 2025 by rpki-client