$ rpki-client -vvf rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft File: 0xR9jSeprR3LgjR_FEsIVeBV4aA.mft (raw, json) Hash identifier: 1Y1PxZkiKKEE3BA6Num9eogHOigxPIRcK5ve6X7BXtY= Subject key identifier: 3B:25:69:2F:87:0A:1E:B8:85:C3:8F:8B:08:D6:7A:02:45:C1:D3:07 Authority key identifier: D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0 Certificate issuer: /CN=A91402E0/serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0 Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft Manifest number: 01AB Signing time: Wed 05 Nov 2025 03:18:06 +0000 Manifest this update: Wed 05 Nov 2025 03:18:06 +0000 Manifest next update: Wed 12 Nov 2025 03:18:06 +0000 Files and hashes: 1: 0xR9jSeprR3LgjR_FEsIVeBV4aA.crl (hash: LeLldZf55lm1lBOdcES9dc22n5bNnzjbEujIvnS2unw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91402E0, serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0 Validity Not Before: Nov 5 03:18:06 2025 GMT Not After : Nov 12 03:18:06 2025 GMT Subject: CN=690ac1ee-9ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:25:dd:12:1c:81:6c:c1:c3:1f:5e:a7:1a:47: 99:2e:b5:fd:e0:95:28:31:74:12:19:8d:ed:98:32: 4c:f8:a3:81:c3:2a:00:3b:1d:8c:91:c7:fb:1b:53: d8:fa:ef:fb:8e:4e:21:d5:4a:31:d2:b3:03:4d:7d: 01:da:b3:93:e6:c1:a6:79:77:d7:d2:29:59:09:57: c7:8d:15:7d:b0:77:17:56:51:28:89:a4:f1:e4:06: db:f1:ce:5c:93:c1:2c:34:07:e7:88:82:3a:5e:04: 99:6b:fd:c3:34:4e:1b:65:c6:5d:16:22:98:9a:3a: a3:ed:87:b1:20:1c:b2:74:c3:d3:2f:a9:58:37:c2: 01:02:6c:6f:28:c9:cc:76:cf:96:16:12:84:80:28: 37:e2:77:cd:21:d0:2b:13:f8:21:e7:0f:d6:ca:75: fc:00:04:e2:12:82:b3:d7:c9:53:3c:08:3d:cf:34: 23:b7:8b:a8:0c:fe:63:6b:7d:43:42:c7:8a:00:92: 48:fc:1b:52:03:97:2b:6f:97:62:71:57:76:72:e5: a7:31:db:4f:9d:76:a0:77:bc:03:5c:67:df:09:bd: 4d:91:9d:75:9d:ad:5e:ad:28:99:df:7c:ca:fe:f6: 74:97:02:2e:5e:80:fe:69:6b:ae:89:a5:63:33:da: 16:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:25:69:2F:87:0A:1E:B8:85:C3:8F:8B:08:D6:7A:02:45:C1:D3:07 X509v3 Authority Key Identifier: keyid:D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:03:d5:13:dd:5a:81:66:e3:ba:49:7f:45:aa:94:59:25:c5: 3f:71:a3:8d:55:79:03:14:ec:72:ec:4c:98:41:17:25:e0:e3: 94:a6:fd:a3:9c:3b:c7:17:d3:58:fe:0f:4f:29:b6:1f:05:5a: 78:1d:7b:88:6b:aa:97:ff:6f:26:fd:c9:df:2c:9b:94:7f:9e: ce:b3:04:9f:14:82:4c:3d:68:65:a1:5f:d8:10:1e:cd:96:c5: 5c:d7:8b:06:db:71:58:e4:00:cb:83:c4:6a:98:9b:74:b3:aa: ec:17:67:dc:70:28:2e:e9:b5:54:34:ba:79:65:d5:66:eb:f8: 2a:30:63:4f:03:5a:63:ef:0d:15:41:dd:3b:fc:d5:b3:fb:5b: 36:43:4a:eb:eb:36:92:be:bd:99:bd:d9:a7:ab:39:c6:61:97: 0e:30:d1:71:64:08:2e:a9:6e:69:bf:17:b5:46:f5:bc:dc:33: 57:6b:c2:d4:43:2f:3f:26:b1:c6:cd:ca:62:4f:b9:ef:f9:e0: e0:37:50:7f:17:87:71:3d:66:c4:41:04:36:5d:44:95:cf:12: dd:da:98:20:6d:f6:16:28:95:cc:1e:81:14:fd:98:1a:da:99: 00:01:2e:af:dd:6d:2b:31:fe:07:2b:d9:dd:34:80:55:91:f7: 93:ad:ec:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAyRTAxMTAvBgNVBAUTKEQzMTQ3RDhEMjdBOUFEMURDQjgyMzQ3RjE0NEIwODU1 RTA1NUUxQTAwHhcNMjUxMTA1MDMxODA2WhcNMjUxMTEyMDMxODA2WjAYMRYwFAYD VQQDEw02OTBhYzFlZS05YmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziXdEhyBbMHDH16nGkeZLrX94JUoMXQSGY3tmDJM+KOBwyoAOx2Mkcf7G1PY +u/7jk4h1Uox0rMDTX0B2rOT5sGmeXfX0ilZCVfHjRV9sHcXVlEoiaTx5Abb8c5c k8EsNAfniII6XgSZa/3DNE4bZcZdFiKYmjqj7YexIByydMPTL6lYN8IBAmxvKMnM ds+WFhKEgCg34nfNIdArE/gh5w/WynX8AATiEoKz18lTPAg9zzQjt4uoDP5ja31D QseKAJJI/BtSA5crb5dicVd2cuWnMdtPnXagd7wDXGffCb1NkZ11na1erSiZ33zK /vZ0lwIuXoD+aWuuiaVjM9oW7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDslaS+H Ch64hcOPiwjWegJFwdMHMB8GA1UdIwQYMBaAFNMUfY0nqa0dy4I0fxRLCFXgVeGg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDJFMC9BQTZCRjQ0MDJC NTgxMUVFOUZEMkYwMUVDNEY5QUUwMi8weFI5alNlcHJSM0xnalJfRkVzSVZlQlY0 YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB4UjlqU2VwclIzTGdqUl9GRXNJVmVCVjRhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDJFMC9BQTZCRjQ0MDJCNTgxMUVFOUZEMkYwMUVDNEY5QUUwMi8weFI5alNlcHJS M0xnalJfRkVzSVZlQlY0YUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyA9UT3VqBZuO6SX9FqpRZJcU/caONVXkDFOxy7EyYQRcl4OOUpv2j nDvHF9NY/g9PKbYfBVp4HXuIa6qX/28m/cnfLJuUf57OswSfFIJMPWhloV/YEB7N lsVc14sG23FY5ADLg8RqmJt0s6rsF2fccCgu6bVUNLp5ZdVm6/gqMGNPA1pj7w0V Qd07/NWz+1s2Q0rr6zaSvr2ZvdmnqznGYZcOMNFxZAguqW5pvxe1RvW83DNXa8LU Qy8/JrHGzcpiT7nv+eDgN1B/F4dxPWbEQQQ2XUSVzxLd2pggbfYWKJXMHoEU/Zga 2pkAAS6v3W0rMf4HK9ndNIBVkfeTrez+ -----END CERTIFICATE-----Generated at Wed Nov 5 11:22:22 2025 by rpki-client