$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft File: aCDlNpQmEvNLA3PdH3ftI0_981w.mft (raw, json) Hash identifier: 4cd4L72E+EM2giay9rScZszkjpQEF3pDdLNvzz3G6VA= Subject key identifier: 50:9E:73:BF:A7:94:7E:5C:F3:F8:AB:3C:8C:85:1C:97:28:C6:F5:C6 Authority key identifier: 68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C Certificate issuer: /CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Certificate serial: 0495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft Manifest number: 048E Signing time: Mon 03 Nov 2025 00:01:39 +0000 Manifest this update: Mon 03 Nov 2025 00:01:38 +0000 Manifest next update: Mon 10 Nov 2025 00:01:38 +0000 Files and hashes: 1: aCDlNpQmEvNLA3PdH3ftI0_981w.crl (hash: lPM8JukK0CLAgCDuCVodcgXzZuDkJ9Thit6X6U+9Mr8=) 2: 0DC4BC0C5CDE11ECB486850FC4F9AE02.roa (hash: 252kB+fX+BBhzn4gsCNSBIXgmIL37+s/mdPS5IK/AQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8C9, serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Validity Not Before: Nov 3 00:01:38 2025 GMT Not After : Nov 10 00:01:38 2025 GMT Subject: CN=6907f0e2-6813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:25:4c:38:79:6f:51:60:04:17:28:28:8c: 16:f4:67:fa:b1:f1:14:b3:89:55:7c:c3:98:b1:ac: cc:37:da:cd:c5:93:0b:ee:fd:01:3e:03:f6:5d:f4: ef:1c:45:15:c5:6f:b1:5d:af:27:70:07:8d:b8:bd: a1:72:65:d8:2d:11:a6:58:39:08:28:d8:b1:fb:d3: 90:98:6f:a1:7f:52:64:24:1d:6f:fa:7f:8e:74:b4: 2e:57:45:9f:41:e2:62:8d:4b:c7:21:91:eb:75:86: 4d:88:35:53:b5:2e:c1:b9:50:95:15:e4:6d:ad:5a: d5:a6:20:26:a8:1f:07:78:f0:57:89:d9:b3:e3:54: 6d:ef:4e:c8:68:29:4b:7e:fc:2f:f8:1d:d4:be:d5: 95:6b:a6:b2:86:56:e5:eb:2f:07:3f:6b:31:9c:17: 7c:a1:f2:78:a4:38:6c:02:40:91:b0:55:36:47:67: d5:ce:71:e1:f1:a8:18:64:1d:35:40:00:ff:52:90: 15:a0:d8:62:10:94:e4:69:b9:73:98:d1:77:f0:fe: f5:80:c4:47:26:0d:5d:f7:f2:5b:4c:85:63:65:18: f2:84:ed:59:9c:2e:3a:98:db:1b:e3:4c:b4:de:f9: e4:b3:2d:11:dc:d2:6c:4e:26:6a:fa:f1:18:d1:e0: 69:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9E:73:BF:A7:94:7E:5C:F3:F8:AB:3C:8C:85:1C:97:28:C6:F5:C6 X509v3 Authority Key Identifier: keyid:68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:c0:41:6f:1b:d0:5d:93:25:74:3d:3c:79:fe:97:03:80:43: 76:10:a7:7b:b4:52:7a:70:d6:b8:7b:3a:8a:ae:0f:5f:14:46: 7f:b0:ef:6b:1e:b8:65:46:30:fd:54:71:04:3c:fb:dd:49:80: 1c:73:09:a6:40:3a:6c:fe:67:29:aa:5a:bc:da:85:9d:04:dd: 77:31:01:ad:01:b6:ce:1b:bb:6b:c6:a0:7f:95:51:7b:73:d7: 50:e3:f4:63:86:47:b3:b2:28:60:7e:fd:55:c0:90:3a:01:b9: 74:0d:44:45:ea:0a:e8:44:c5:5d:7c:4d:2a:6f:78:42:0b:f7: ce:1b:1c:57:f0:33:38:50:55:37:56:54:af:bf:3f:67:4b:36: ac:d8:f9:d1:dc:57:9b:98:94:de:da:2d:aa:34:08:eb:cb:8d: 55:62:59:99:6d:79:4b:7c:f0:64:50:ee:38:c3:41:86:0e:7c: b1:1b:aa:75:cf:fa:dd:c6:2f:b6:04:f7:db:40:fb:e6:00:e4: 5f:76:35:50:13:cb:46:9b:f4:5e:84:ba:ac:00:c7:33:4a:38: e8:8b:7c:05:48:41:f2:6c:ac:bb:40:63:d5:f6:4e:2f:e2:c4: bd:8a:65:81:78:83:51:14:71:98:b0:a8:60:0a:14:dd:82:50: 6f:d1:40:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QzkxMTAvBgNVBAUTKDY4MjBFNTM2OTQyNjEyRjM0QjAzNzNERDFGNzdFRDIz NEZGREYzNUMwHhcNMjUxMTAzMDAwMTM4WhcNMjUxMTEwMDAwMTM4WjAYMRYwFAYD VQQDEw02OTA3ZjBlMi02ODEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgQlTDh5b1FgBBcoKIwW9Gf6sfEUs4lVfMOYsazMN9rNxZML7v0BPgP2XfTv HEUVxW+xXa8ncAeNuL2hcmXYLRGmWDkIKNix+9OQmG+hf1JkJB1v+n+OdLQuV0Wf QeJijUvHIZHrdYZNiDVTtS7BuVCVFeRtrVrVpiAmqB8HePBXidmz41Rt707IaClL fvwv+B3UvtWVa6ayhlbl6y8HP2sxnBd8ofJ4pDhsAkCRsFU2R2fVznHh8agYZB01 QAD/UpAVoNhiEJTkablzmNF38P71gMRHJg1d9/JbTIVjZRjyhO1ZnC46mNsb40y0 3vnksy0R3NJsTiZq+vEY0eBpvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCec7+n lH5c8/irPIyFHJcoxvXGMB8GA1UdIwQYMBaAFGgg5TaUJhLzSwNz3R937SNP/fNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhDOS80QjRENzEyQTVD REIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2TkxBM1BkSDNmdEkwXzk4 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FDRGxOcFFtRXZOTEEzUGRIM2Z0STBfOTgxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhDOS80QjRENzEyQTVDREIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2 TkxBM1BkSDNmdEkwXzk4MXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6wEFvG9BdkyV0PTx5/pcDgEN2EKd7tFJ6cNa4ezqKrg9fFEZ/sO9r HrhlRjD9VHEEPPvdSYAccwmmQDps/mcpqlq82oWdBN13MQGtAbbOG7trxqB/lVF7 c9dQ4/Rjhkezsihgfv1VwJA6Abl0DURF6groRMVdfE0qb3hCC/fOGxxX8DM4UFU3 VlSvvz9nSzas2PnR3FebmJTe2i2qNAjry41VYlmZbXlLfPBkUO44w0GGDnyxG6p1 z/rdxi+2BPfbQPvmAORfdjVQE8tGm/RehLqsAMczSjjoi3wFSEHybKy7QGPV9k4v 4sS9imWBeINRFHGYsKhgChTdglBv0UBg -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:59 2025 by rpki-client