$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft File: cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft (raw, json) Hash identifier: Qof6NQArhbuol58y5Tx60ka2woS1TnytBQPP8IZVWDs= Subject key identifier: 05:8C:6B:6B:9E:7D:CF:EF:82:0B:39:BB:6F:AF:B0:88:4E:23:AE:22 Authority key identifier: 70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1 Certificate issuer: /CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1 Certificate serial: 0945 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft Manifest number: 0907 Signing time: Tue 04 Nov 2025 20:30:09 +0000 Manifest this update: Tue 04 Nov 2025 20:30:08 +0000 Manifest next update: Tue 11 Nov 2025 20:30:08 +0000 Files and hashes: 1: cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl (hash: bL7DZrEGz1KRXZRgR6IlstkulKHRtydaWodkoDJf4E8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:30:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2373 (0x945) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CA4B, serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1 Validity Not Before: Nov 4 20:30:08 2025 GMT Not After : Nov 11 20:30:08 2025 GMT Subject: CN=690a6251-8089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ba:c5:12:a6:22:33:e8:33:fc:5e:6e:18:9c: 85:2f:0a:ec:16:7e:7b:2c:ae:65:f3:cd:76:79:9a: 13:ec:75:ee:6f:b5:aa:d7:10:5b:d7:ef:f6:36:68: 6d:7b:cd:7e:b7:bd:60:06:be:46:0f:81:9e:77:50: ab:85:09:05:a1:01:27:45:be:43:83:07:d5:f5:6e: 82:02:50:a1:6c:9c:2f:7b:ea:43:c0:d2:a6:d2:82: f6:cb:7c:19:99:dd:db:c6:02:24:d5:4e:71:03:74: 87:06:98:55:f3:c1:c4:e3:c6:34:d3:20:83:5e:9f: f1:f0:9b:8d:0c:dc:ff:63:86:2c:83:0e:a1:6d:5f: 0a:7e:89:9a:ed:91:89:d1:19:18:20:be:27:f5:64: 48:2f:72:a7:f6:55:0a:89:ad:77:01:6f:4a:6d:27: 1c:cc:05:7b:6c:b5:c7:16:f6:6f:58:d4:77:71:3d: 03:ad:55:1c:f7:9b:61:f9:5b:a4:47:bf:86:74:b4: f4:12:f0:57:44:af:1f:27:83:3c:dc:4b:c5:6c:aa: c5:fd:89:4a:a0:a9:ae:47:c8:e5:30:66:12:b7:d6: 79:10:41:6f:dd:f9:5c:33:68:75:46:82:87:41:a7: 87:05:f2:37:c6:fb:27:c2:56:61:d4:c7:c4:0c:4a: ba:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:8C:6B:6B:9E:7D:CF:EF:82:0B:39:BB:6F:AF:B0:88:4E:23:AE:22 X509v3 Authority Key Identifier: keyid:70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:69:4f:20:f2:59:b2:c4:65:32:e6:c9:26:8f:f8:27:29:ae: ab:f1:cb:21:49:a4:c3:83:63:5e:ca:7a:0c:68:72:34:3d:cb: 40:d0:19:54:54:27:a1:4f:74:1f:ba:e4:1f:0c:36:ef:7d:e7: 39:4d:08:c9:4f:06:b0:49:92:e0:be:4b:70:bc:97:7c:75:b6: 86:a5:f6:db:3a:a7:aa:5c:28:fd:65:83:e4:81:9e:10:be:53: ed:ab:57:fe:d0:fa:5e:d2:c0:db:af:88:64:0b:a7:6c:a9:1d: 96:ef:1e:1e:d0:13:18:69:2b:16:6c:c7:0b:de:29:4b:fc:d5: 06:96:2e:6b:f8:10:d3:80:37:76:d8:57:7b:15:26:51:60:66: 98:30:8e:7a:92:dd:77:6f:1c:89:43:ad:62:b5:af:64:01:31: bc:a8:90:80:b2:25:58:f0:f1:56:4e:7c:30:f2:3e:8c:79:49: 22:ee:e5:72:4d:3b:40:77:b7:07:36:ce:ac:67:ea:07:5c:af: 60:95:fe:79:af:92:11:0c:89:59:32:9c:7a:6e:23:8d:f9:f1: aa:39:ea:4f:92:99:ca:a2:0f:c1:a5:9e:2c:1b:93:00:49:1e: c2:b5:fa:c5:f0:b0:ea:8b:37:ab:84:52:9d:ff:64:6a:74:15: f4:dd:c2:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBNEIxMTAvBgNVBAUTKDcwOTIxMENGNzYxRUM2N0ZCMzk0RUE1ODk2QTVDNjQ3 QjMwNUVFRjEwHhcNMjUxMTA0MjAzMDA4WhcNMjUxMTExMjAzMDA4WjAYMRYwFAYD VQQDEw02OTBhNjI1MS04MDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAubrFEqYiM+gz/F5uGJyFLwrsFn57LK5l8812eZoT7HXub7Wq1xBb1+/2Nmht e81+t71gBr5GD4Ged1CrhQkFoQEnRb5DgwfV9W6CAlChbJwve+pDwNKm0oL2y3wZ md3bxgIk1U5xA3SHBphV88HE48Y00yCDXp/x8JuNDNz/Y4Ysgw6hbV8Kfoma7ZGJ 0RkYIL4n9WRIL3Kn9lUKia13AW9KbScczAV7bLXHFvZvWNR3cT0DrVUc95th+Vuk R7+GdLT0EvBXRK8fJ4M83EvFbKrF/YlKoKmuR8jlMGYSt9Z5EEFv3flcM2h1RoKH QaeHBfI3xvsnwlZh1MfEDEq6FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWMa2ue fc/vggs5u2+vsIhOI64iMB8GA1UdIwQYMBaAFHCSEM92HsZ/s5TqWJalxkezBe7x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E0Qi9EQzJGMDQzMkJG ODAxMUVBOTZGRTRBNjhDNEY5QUUwMi9jSklRejNZZXhuLXpsT3BZbHFYR1I3TUY3 dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKSVF6M1lleG4temxPcFlscVhHUjdNRjd2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0E0Qi9EQzJGMDQzMkJGODAxMUVBOTZGRTRBNjhDNEY5QUUwMi9jSklRejNZZXhu LXpsT3BZbHFYR1I3TUY3dkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEaU8g8lmyxGUy5skmj/gnKa6r8cshSaTDg2NeynoMaHI0PctA0BlU VCehT3QfuuQfDDbvfec5TQjJTwawSZLgvktwvJd8dbaGpfbbOqeqXCj9ZYPkgZ4Q vlPtq1f+0Ppe0sDbr4hkC6dsqR2W7x4e0BMYaSsWbMcL3ilL/NUGli5r+BDTgDd2 2Fd7FSZRYGaYMI56kt13bxyJQ61ita9kATG8qJCAsiVY8PFWTnww8j6MeUki7uVy TTtAd7cHNs6sZ+oHXK9glf55r5IRDIlZMpx6biON+fGqOepPkpnKog/BpZ4sG5MA SR7CtfrF8LDqizerhFKd/2RqdBX03cIG -----END CERTIFICATE-----Generated at Wed Nov 5 13:35:18 2025 by rpki-client