$ rpki-client -vvf rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft File: pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft (raw, json) Hash identifier: QZgpi3qJqjTaBTqpbNu7hcMfs74wXN5xkgOQkgafkRc= Subject key identifier: C1:7B:5C:B9:63:CD:7B:15:10:7F:90:33:60:14:5A:F0:1F:D3:23:EE Authority key identifier: A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90 Certificate issuer: /CN=A9138506/serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990 Certificate serial: 0624 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft Manifest number: 0624 Signing time: Tue 04 Nov 2025 22:49:16 +0000 Manifest this update: Tue 04 Nov 2025 22:49:16 +0000 Manifest next update: Tue 11 Nov 2025 22:49:16 +0000 Files and hashes: 1: pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl (hash: xyw4pKu5OpEw/3s0F95qIU2xNkTHjJtQg7+4r4Ba0XM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1572 (0x624) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138506, serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990 Validity Not Before: Nov 4 22:49:16 2025 GMT Not After : Nov 11 22:49:16 2025 GMT Subject: CN=690a82ec-c302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:82:1f:f3:8f:e0:4c:14:c0:16:05:45:7e:43: ee:f7:fe:7e:64:82:42:eb:7e:6e:53:53:15:22:f5: c0:a9:3a:2e:c9:d4:f9:8c:94:7e:d0:fe:65:52:aa: ff:19:94:02:42:37:9e:8c:1e:be:5c:ee:7b:7a:ca: 85:ac:13:7a:05:b5:5a:d7:83:2e:7a:c4:9c:85:c4: 72:d4:8f:ee:a3:2a:84:0d:e0:67:96:4d:af:d9:39: 10:6a:de:a4:89:74:29:4c:42:93:6a:d5:53:52:e7: db:17:a4:a4:ab:d0:52:af:44:8f:a2:a6:d9:47:93: cd:a1:4d:5d:a7:00:38:cd:ca:28:58:8c:96:d3:e5: 1f:aa:9f:45:5b:d5:e7:0f:19:92:57:c7:08:89:71: 28:0f:ce:79:64:57:7f:fb:9b:dc:b3:e1:d5:22:3d: aa:2e:50:81:a4:4d:e4:e5:01:ea:35:44:c9:3e:5c: c6:74:c7:16:bb:72:c6:2b:78:bd:c9:b5:84:40:27: 95:b8:2e:f3:a4:68:29:e5:75:dd:38:db:cf:ef:64: 84:40:25:83:41:6d:63:9a:da:af:0b:12:bf:77:24: a1:68:2d:1d:5e:43:24:cf:86:c3:a0:72:00:c1:1c: b4:92:6e:7e:b7:94:14:42:31:e4:93:52:e2:fb:c8: 0b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7B:5C:B9:63:CD:7B:15:10:7F:90:33:60:14:5A:F0:1F:D3:23:EE X509v3 Authority Key Identifier: keyid:A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:75:87:8a:74:79:60:98:32:92:77:b2:6f:c5:59:03:b1:a9: cb:11:62:fb:09:3b:28:e0:56:09:a9:0e:5e:ab:e6:34:db:1f: 00:c6:57:50:dc:f2:87:3a:a9:82:64:dd:60:7a:c0:ab:44:f6: ca:c9:65:47:8d:c0:b3:09:51:f8:ea:ee:fd:9f:17:07:34:70: ac:d5:df:ba:33:ba:1f:f6:22:91:23:8e:ca:b9:24:02:04:1c: 4d:a6:ca:ea:2f:87:a6:d0:08:89:21:f0:4f:fd:8e:ba:7a:fe: 42:c9:ba:ab:11:4b:60:f2:cb:71:49:f2:6a:c4:ed:e3:1b:9e: f5:b1:5b:eb:e0:b7:c0:e4:30:05:35:b7:7e:a2:bf:06:56:73: 54:58:11:ba:25:50:76:47:f0:53:b4:65:c9:2a:bb:ba:e5:32: fb:62:90:f5:0b:c2:62:35:7e:3a:6e:85:09:da:cd:4e:33:68: bf:c7:c7:88:fd:af:ed:ac:8d:60:cc:22:92:31:b9:15:fc:4d: 27:21:43:25:97:64:42:6d:2f:68:f8:cb:c0:89:0d:b1:a0:c2: 6c:79:c6:e2:8e:c6:96:ca:3f:04:95:a7:b3:ec:9e:cf:99:12: 13:9b:4c:03:9e:30:a3:16:a7:ec:09:2d:a9:cb:08:a8:d3:e4: 3d:bf:1f:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1MDYxMTAvBgNVBAUTKEE0RUMxN0I1RkQyRDQ0Q0QyREREMDU1QkY1MzQxMzlG NjhGQzY5OTAwHhcNMjUxMTA0MjI0OTE2WhcNMjUxMTExMjI0OTE2WjAYMRYwFAYD VQQDEw02OTBhODJlYy1jMzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYIf84/gTBTAFgVFfkPu9/5+ZIJC635uU1MVIvXAqTouydT5jJR+0P5lUqr/ GZQCQjeejB6+XO57esqFrBN6BbVa14MuesSchcRy1I/uoyqEDeBnlk2v2TkQat6k iXQpTEKTatVTUufbF6Skq9BSr0SPoqbZR5PNoU1dpwA4zcooWIyW0+Ufqp9FW9Xn DxmSV8cIiXEoD855ZFd/+5vcs+HVIj2qLlCBpE3k5QHqNUTJPlzGdMcWu3LGK3i9 ybWEQCeVuC7zpGgp5XXdONvP72SEQCWDQW1jmtqvCxK/dyShaC0dXkMkz4bDoHIA wRy0km5+t5QUQjHkk1Li+8gLSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMF7XLlj zXsVEH+QM2AUWvAf0yPuMB8GA1UdIwQYMBaAFKTsF7X9LUTNLd0FW/U0E59o/GmQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODUwNi8xNTlFQjY5MkI3 QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJNMHQzUVZiOVRRVG4yajhh WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BPd1h0ZjB0Uk0wdDNRVmI5VFFUbjJqOGFaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODUwNi8xNTlFQjY5MkI3QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJN MHQzUVZiOVRRVG4yajhhWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsdYeKdHlgmDKSd7JvxVkDsanLEWL7CTso4FYJqQ5eq+Y02x8AxldQ 3PKHOqmCZN1gesCrRPbKyWVHjcCzCVH46u79nxcHNHCs1d+6M7of9iKRI47KuSQC BBxNpsrqL4em0AiJIfBP/Y66ev5CybqrEUtg8stxSfJqxO3jG571sVvr4LfA5DAF Nbd+or8GVnNUWBG6JVB2R/BTtGXJKru65TL7YpD1C8JiNX46boUJ2s1OM2i/x8eI /a/trI1gzCKSMbkV/E0nIUMll2RCbS9o+MvAiQ2xoMJsecbijsaWyj8Elaez7J7P mRITm0wDnjCjFqfsCS2pywio0+Q9vx9u -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:44 2025 by rpki-client