$ rpki-client -vvf rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft File: cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft (raw, json) Hash identifier: WrOEf4jMx475g9L7aeDCDYua7Oc28FrvDJrHPVUle7Y= Subject key identifier: C5:1D:1B:6E:22:27:85:0E:C6:47:F7:4D:9F:C8:D9:E4:94:49:A5:5A Authority key identifier: 72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE Certificate issuer: /CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE Certificate serial: 09E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft Manifest number: 09CE Signing time: Sun 02 Nov 2025 19:58:09 +0000 Manifest this update: Sun 02 Nov 2025 19:58:08 +0000 Manifest next update: Sun 09 Nov 2025 19:58:08 +0000 Files and hashes: 1: cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl (hash: FCq0lYjwRyeGG05KLeUa2yd1Oo/SxU8zN/FYk5dx1kI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2531 (0x9e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143C5C, serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE Validity Not Before: Nov 2 19:58:08 2025 GMT Not After : Nov 9 19:58:08 2025 GMT Subject: CN=6907b7d1-bbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:36:1a:72:fc:14:41:09:2a:d6:3c:cb:0a:81: 17:39:87:7f:7e:35:99:46:e2:7d:98:c6:1f:ab:fa: a5:80:04:44:9e:16:89:0e:70:02:1f:d5:3a:af:d0: 75:8d:46:3a:e4:99:7b:ac:41:d2:89:b8:ec:6c:1b: 83:71:40:79:5b:4f:5d:63:47:7a:88:15:e7:57:35: 24:fd:c6:dc:75:40:26:3c:8c:13:a2:5c:ea:73:8e: 8a:b5:cc:13:bc:5f:5d:5a:63:c9:b8:23:2c:97:51: 26:6f:f6:d1:64:71:d8:37:79:8b:c9:fc:b8:e2:6c: 1d:7f:3a:3f:02:31:7a:45:9b:47:94:5a:53:d5:3a: 3f:85:a0:36:ba:bd:2a:a5:ea:dc:cf:cc:e3:af:a6: e3:13:70:ca:61:58:00:b5:68:c3:79:0a:07:5f:dd: d2:5e:eb:50:cb:48:ff:9a:86:10:01:fe:40:48:43: 3d:60:7e:ee:2d:9d:67:5f:84:68:8f:9d:b0:a8:a6: 88:36:fd:00:09:85:fd:b0:70:c6:1f:62:99:b0:75: a4:6a:8b:0e:4f:9d:ad:99:8f:2c:d2:64:eb:04:78: 27:ab:74:5e:8f:a4:db:ad:7d:27:3b:ca:f9:ce:ba: 72:c1:9c:f6:ff:90:5f:40:6b:02:ee:84:f9:c7:56: 4d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1D:1B:6E:22:27:85:0E:C6:47:F7:4D:9F:C8:D9:E4:94:49:A5:5A X509v3 Authority Key Identifier: keyid:72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:26:00:9f:42:5d:9c:e1:f2:3f:00:fa:35:53:a7:af:68:18: a7:ed:d2:76:d5:f0:07:7e:54:86:dd:e5:be:c6:62:58:95:d3: 1e:d9:27:09:9f:90:6d:9a:04:31:5f:7c:7e:99:50:59:12:e7: a5:c6:32:9c:2f:71:37:a4:05:86:4c:8c:18:72:a7:5b:a7:4e: 2c:35:ec:e2:01:d4:8c:2f:75:41:e6:e4:97:c5:4c:80:c7:71: be:c5:8d:d1:f9:d4:fe:a0:f7:a7:2f:99:b7:96:c6:46:9c:47: 9d:ef:1d:9e:58:b1:ca:d4:12:d5:5a:e0:f1:03:c3:b7:e3:6c: 41:87:20:c8:61:b2:fd:d3:69:58:94:a4:4e:4f:25:7a:8d:c4: c5:d0:75:ea:f8:b8:a0:4e:e4:1c:31:de:00:40:e8:d6:59:0d: 64:c4:bf:05:83:6c:31:7a:44:78:14:22:1f:96:64:c9:31:da: 73:f3:68:61:da:ef:3d:4d:5e:1c:af:e6:ba:9d:46:ab:6d:60: c7:f7:8c:5b:96:7f:24:61:08:10:79:2b:cd:c7:47:00:1f:dc: 3e:ab:ee:70:bc:8f:7a:5b:24:c3:04:af:b9:b3:99:9d:17:a8: 0c:0a:e7:c2:fa:71:d4:26:de:e6:e5:44:4c:74:9d:76:db:aa: 96:2c:3a:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNDNUMxMTAvBgNVBAUTKDcyRjJDQjMzRDc3QzE2Mzg5OUU1MzUwRDhFODAxRTcx NzBFNDg0REUwHhcNMjUxMTAyMTk1ODA4WhcNMjUxMTA5MTk1ODA4WjAYMRYwFAYD VQQDEw02OTA3YjdkMS1iYmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjYacvwUQQkq1jzLCoEXOYd/fjWZRuJ9mMYfq/qlgAREnhaJDnACH9U6r9B1 jUY65Jl7rEHSibjsbBuDcUB5W09dY0d6iBXnVzUk/cbcdUAmPIwTolzqc46KtcwT vF9dWmPJuCMsl1Emb/bRZHHYN3mLyfy44mwdfzo/AjF6RZtHlFpT1To/haA2ur0q percz8zjr6bjE3DKYVgAtWjDeQoHX93SXutQy0j/moYQAf5ASEM9YH7uLZ1nX4Ro j52wqKaINv0ACYX9sHDGH2KZsHWkaosOT52tmY8s0mTrBHgnq3Rej6TbrX0nO8r5 zrpywZz2/5BfQGsC7oT5x1ZNwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUdG24i J4UOxkf3TZ/I2eSUSaVaMB8GA1UdIwQYMBaAFHLyyzPXfBY4meU1DY6AHnFw5ITe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0M1Qy9GNjUyRUZGODk0 RTgxMUVBQjBDMDE2NjhDNEY5QUUwMi9jdkxMTTlkOEZqaVo1VFVOam9BZWNYRGto TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N2TExNOWQ4RmppWjVUVU5qb0FlY1hEa2hONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0M1Qy9GNjUyRUZGODk0RTgxMUVBQjBDMDE2NjhDNEY5QUUwMi9jdkxMTTlkOEZq aVo1VFVOam9BZWNYRGtoTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEJgCfQl2c4fI/APo1U6evaBin7dJ21fAHflSG3eW+xmJYldMe2ScJ n5BtmgQxX3x+mVBZEuelxjKcL3E3pAWGTIwYcqdbp04sNeziAdSML3VB5uSXxUyA x3G+xY3R+dT+oPenL5m3lsZGnEed7x2eWLHK1BLVWuDxA8O342xBhyDIYbL902lY lKROTyV6jcTF0HXq+LigTuQcMd4AQOjWWQ1kxL8Fg2wxekR4FCIflmTJMdpz82hh 2u89TV4cr+a6nUarbWDH94xbln8kYQgQeSvNx0cAH9w+q+5wvI96WyTDBK+5s5md F6gMCufC+nHUJt7m5URMdJ1226qWLDr6 -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:04 2025 by rpki-client