$ rpki-client -vvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft File: rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json) Hash identifier: e5zTKrZ0Kkfhp4G9E7yixA6ji7FHHDMFpi1VZn/sQAQ= Subject key identifier: 55:BE:7F:75:4E:65:8C:93:C9:9E:0C:22:2C:9A:E9:E2:F6:D0:49:74 Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 Certificate issuer: /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Certificate serial: 34DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft Manifest number: 34DC Signing time: Sun 02 Nov 2025 14:41:13 +0000 Manifest this update: Sun 02 Nov 2025 14:41:13 +0000 Manifest next update: Sun 09 Nov 2025 14:41:13 +0000 Files and hashes: 1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: 5n7YFoD55qRv/q98ctZ2frlKyEn3RDiJNcZzMeONtRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13532 (0x34dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141E28, serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Validity Not Before: Nov 2 14:41:13 2025 GMT Not After : Nov 9 14:41:13 2025 GMT Subject: CN=69076d89-dac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:40:b3:99:68:9a:dc:9c:e5:a0:d0:c3:6f:00: cd:68:79:bf:5e:ff:f2:6c:4e:96:30:63:78:f5:e6: 2e:00:1e:d1:ba:45:7d:c2:94:4f:49:18:9f:ca:b2: 18:5c:4b:dd:9b:42:64:08:d7:70:49:83:30:f9:7f: c3:14:93:f1:ee:b2:41:bd:54:ee:a8:51:e9:43:b0: 28:47:60:a7:47:b4:ea:12:23:0b:e7:8a:88:fa:41: 5e:6d:bb:db:9f:a3:61:1a:e4:14:28:6c:17:e0:c3: 85:58:14:65:c8:8c:c7:f0:22:fd:15:22:2b:2e:a3: 6c:ec:31:5f:07:c6:e3:63:1f:33:02:e6:35:74:36: 65:dd:f4:35:5a:5b:45:91:7e:7b:44:b9:2a:7c:1e: 67:90:03:4d:c4:23:da:df:06:e0:38:53:60:38:32: dd:2a:6e:fe:06:ef:6a:e2:9b:c0:a4:f2:d6:db:81: 91:20:b8:5c:5d:8a:5d:e3:61:bf:6e:bf:bb:89:51: 39:97:03:f7:57:b7:3a:59:f7:76:1c:e5:96:d5:c8: 32:20:2b:ac:0d:9a:9d:9a:02:a5:8c:0c:63:86:e9: 27:5d:c8:31:db:22:fe:fb:de:ea:e8:34:24:e9:98: d0:6a:fb:ee:a7:a6:0d:8b:0d:e6:88:c9:2d:ae:c5: fd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BE:7F:75:4E:65:8C:93:C9:9E:0C:22:2C:9A:E9:E2:F6:D0:49:74 X509v3 Authority Key Identifier: keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:a4:bf:08:89:fd:6c:19:2b:ca:7f:97:bd:11:e3:44:92:b9: 0e:75:a6:8d:dd:20:ac:76:02:2d:7c:98:6f:db:b4:96:fd:ec: 9e:77:a3:5e:59:fb:c0:cb:40:40:de:78:03:de:a4:e4:d4:9a: 46:d8:8b:a9:98:79:78:ea:23:5e:bf:95:f9:3a:cf:3b:a5:8d: e7:52:a3:bc:32:1e:d2:13:fe:0c:32:3e:05:bd:79:72:72:ce: 71:ec:ee:08:aa:e2:61:ed:f4:a6:d9:62:77:42:f1:2c:51:5b: f8:ad:0a:b2:18:3e:09:c3:7c:c8:43:fa:7b:5c:17:c5:5e:1e: 17:ee:aa:54:b6:bb:59:c1:f4:2f:47:25:a5:49:f8:13:f8:e9: 6f:c3:08:c9:e1:45:fb:dd:4d:88:40:63:46:e6:f0:27:ef:1b: 43:0b:38:7c:3c:22:10:3f:d9:0a:8f:ef:b1:38:3a:da:d0:9c: 8e:50:cb:00:2d:18:1c:ad:64:1c:e4:a0:de:d2:58:ca:b3:9e: 7e:a3:ad:d7:b6:c0:78:2c:be:b0:b8:64:d0:f8:96:2c:10:03: d6:42:f1:31:51:d5:0f:a8:7e:4d:7c:35:e3:d9:d6:24:ca:81: 53:ff:fd:45:80:b9:09:35:5b:40:e8:de:ec:9d:bb:9b:c8:0c: 5d:fc:af:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFFMjgxMTAvBgNVBAUTKEFDMTlDNjZCQzRCMzFDRUI5MzBCQTZBRTBENkVCNzQ3 QjEwQUI2MDYwHhcNMjUxMTAyMTQ0MTEzWhcNMjUxMTA5MTQ0MTEzWjAYMRYwFAYD VQQDEw02OTA3NmQ4OS1kYWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UCzmWia3JzloNDDbwDNaHm/Xv/ybE6WMGN49eYuAB7RukV9wpRPSRifyrIY XEvdm0JkCNdwSYMw+X/DFJPx7rJBvVTuqFHpQ7AoR2CnR7TqEiML54qI+kFebbvb n6NhGuQUKGwX4MOFWBRlyIzH8CL9FSIrLqNs7DFfB8bjYx8zAuY1dDZl3fQ1WltF kX57RLkqfB5nkANNxCPa3wbgOFNgODLdKm7+Bu9q4pvApPLW24GRILhcXYpd42G/ br+7iVE5lwP3V7c6Wfd2HOWW1cgyICusDZqdmgKljAxjhuknXcgx2yL++97q6DQk 6ZjQavvup6YNiw3miMktrsX91wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFW+f3VO ZYyTyZ4MIiya6eL20El0MB8GA1UdIwQYMBaAFKwZxmvEsxzrkwumrg1ut0exCrYG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUUyOC84NDU4QjkxMDFE OEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhPdVRDNmF1RFc2M1I3RUt0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JCbkdhOFN6SE91VEM2YXVEVzYzUjdFS3RnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUUyOC84NDU4QjkxMDFEOEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhP dVRDNmF1RFc2M1I3RUt0Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUpL8Iif1sGSvKf5e9EeNEkrkOdaaN3SCsdgItfJhv27SW/eyed6Ne WfvAy0BA3ngD3qTk1JpG2IupmHl46iNev5X5Os87pY3nUqO8Mh7SE/4MMj4FvXly cs5x7O4IquJh7fSm2WJ3QvEsUVv4rQqyGD4Jw3zIQ/p7XBfFXh4X7qpUtrtZwfQv RyWlSfgT+OlvwwjJ4UX73U2IQGNG5vAn7xtDCzh8PCIQP9kKj++xODra0JyOUMsA LRgcrWQc5KDe0ljKs55+o63XtsB4LL6wuGTQ+JYsEAPWQvExUdUPqH5NfDXj2dYk yoFT//1FgLkJNVtA6N7snbubyAxd/K+q -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:08 2025 by rpki-client