$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft File: mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft (raw, json) Hash identifier: lgIYrh7Dpa7c1zsMzMYCHl3l2Xt3Ke3i0Y4gKQqvmMY= Subject key identifier: C6:25:33:EE:90:85:B7:60:61:9B:66:13:23:78:89:AF:4D:28:F2:DB Authority key identifier: 99:C1:06:E8:7F:E1:D6:41:1A:EC:71:F8:03:94:62:2C:88:1A:AA:D9 Certificate issuer: /CN=A914B1DB/serialNumber=99C106E87FE1D6411AEC71F80394622C881AAAD9 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft Manifest number: F3 Signing time: Mon 03 Nov 2025 05:12:46 +0000 Manifest this update: Mon 03 Nov 2025 05:12:45 +0000 Manifest next update: Mon 10 Nov 2025 05:12:45 +0000 Files and hashes: 1: mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl (hash: /1bwMC9RKoLCMK6R9/7RFVf+fNg8Iyt23tW4CVkMHbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB, serialNumber=99C106E87FE1D6411AEC71F80394622C881AAAD9 Validity Not Before: Nov 3 05:12:45 2025 GMT Not After : Nov 10 05:12:45 2025 GMT Subject: CN=690839cd-9a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c7:7a:90:e3:cf:e4:c1:86:26:02:a1:db:06: 83:8a:36:44:09:b5:85:f4:56:4d:c3:b9:00:96:a9: 3d:89:12:54:f2:cc:47:bc:19:17:1a:cc:0a:6a:bf: 0f:cf:7c:53:47:d8:09:c6:33:7c:ab:ab:e9:01:27: 9f:97:c1:81:eb:08:6b:30:23:13:4b:9f:5f:cf:12: c1:e9:f1:b6:b4:3d:d5:70:01:30:46:dc:43:0c:dd: 26:2d:f0:35:c4:12:0c:6f:0c:91:3e:1b:3c:14:79: cb:92:7a:2a:ea:27:c8:bf:12:06:58:94:a6:db:18: 65:c3:3e:5f:62:35:5c:24:f4:be:9a:c6:41:2b:07: ae:46:17:9e:2d:0f:90:aa:e5:44:25:e9:6e:98:71: 11:34:1c:c5:bb:f9:a7:f9:f2:02:d4:e6:9a:35:0e: 01:2c:25:e0:44:00:dd:7c:79:f6:a2:f1:72:64:21: a5:be:53:98:1c:b7:a0:2c:41:df:da:23:f4:8a:d5: bc:ae:c6:9f:44:dc:de:3f:ba:ae:49:26:51:30:df: ad:1d:13:44:5d:5d:30:b3:a3:1b:f6:10:47:11:68: 3a:e5:89:ad:ad:22:db:1a:fb:92:7c:ba:66:cc:2a: e3:21:f8:33:86:09:38:f4:74:47:98:2d:1c:9a:47: 5f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:25:33:EE:90:85:B7:60:61:9B:66:13:23:78:89:AF:4D:28:F2:DB X509v3 Authority Key Identifier: keyid:99:C1:06:E8:7F:E1:D6:41:1A:EC:71:F8:03:94:62:2C:88:1A:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:be:fe:f1:d3:8d:ce:e3:13:90:7f:19:67:89:f6:2d:a5:80: 25:81:6e:74:da:26:75:5c:55:d7:7d:e0:05:6e:35:76:ab:d7: 78:12:79:d6:7c:d7:88:36:e8:45:b5:66:ac:34:b8:74:f0:6d: 96:a3:e4:71:8b:73:56:b2:fd:d6:b7:23:6d:c5:99:29:d4:e6: a5:5a:4c:81:5f:a8:4a:74:b0:78:01:43:29:da:f9:8f:b3:06: d7:3a:73:28:0d:fb:6d:fe:e6:00:52:39:f0:59:37:ea:80:5d: 4c:e7:0f:aa:85:0a:b5:3f:d1:6f:05:2f:4c:9b:e5:61:03:f8: d8:26:0c:48:b2:2a:48:bf:ac:a8:5e:36:e5:07:21:12:28:be: b3:1d:b5:3b:53:06:52:47:89:dc:bd:5e:14:31:90:0e:22:f8: 62:41:b2:6a:3d:3b:c6:30:bf:bb:00:b7:b9:3b:80:53:d0:c9: 1d:cb:49:68:ea:5d:d4:40:db:b0:6f:fd:71:8e:64:da:7a:8f: 9b:4d:7c:6f:5d:0c:7e:fa:a0:60:c8:19:c8:39:be:e3:12:19: 49:36:11:63:43:e5:19:ae:ff:1a:e2:97:b2:72:71:ca:d8:9e: 88:70:09:2f:bd:bd:cb:e7:d2:72:43:a2:26:c8:bf:93:91:3a: 8d:56:4e:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxREIxMTAvBgNVBAUTKDk5QzEwNkU4N0ZFMUQ2NDExQUVDNzFGODAzOTQ2MjJD ODgxQUFBRDkwHhcNMjUxMTAzMDUxMjQ1WhcNMjUxMTEwMDUxMjQ1WjAYMRYwFAYD VQQDEw02OTA4MzljZC05YTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Md6kOPP5MGGJgKh2waDijZECbWF9FZNw7kAlqk9iRJU8sxHvBkXGswKar8P z3xTR9gJxjN8q6vpASefl8GB6whrMCMTS59fzxLB6fG2tD3VcAEwRtxDDN0mLfA1 xBIMbwyRPhs8FHnLknoq6ifIvxIGWJSm2xhlwz5fYjVcJPS+msZBKweuRheeLQ+Q quVEJelumHERNBzFu/mn+fIC1OaaNQ4BLCXgRADdfHn2ovFyZCGlvlOYHLegLEHf 2iP0itW8rsafRNzeP7quSSZRMN+tHRNEXV0ws6Mb9hBHEWg65YmtrSLbGvuSfLpm zCrjIfgzhgk49HRHmC0cmkdfXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYlM+6Q hbdgYZtmEyN4ia9NKPLbMB8GA1UdIwQYMBaAFJnBBuh/4dZBGuxx+AOUYiyIGqrZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjFEQi8zNjUxNDBFRTQz MTAxMUVGODY4QjJCODFDNEY5QUUwMi9tY0VHNkhfaDFrRWE3SEg0QTVSaUxJZ2Fx dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21jRUc2SF9oMWtFYTdISDRBNVJpTElnYXF0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjFEQi8zNjUxNDBFRTQzMTAxMUVGODY4QjJCODFDNEY5QUUwMi9tY0VHNkhfaDFr RWE3SEg0QTVSaUxJZ2FxdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfvv7x043O4xOQfxlnifYtpYAlgW502iZ1XFXXfeAFbjV2q9d4EnnW fNeINuhFtWasNLh08G2Wo+Rxi3NWsv3WtyNtxZkp1OalWkyBX6hKdLB4AUMp2vmP swbXOnMoDftt/uYAUjnwWTfqgF1M5w+qhQq1P9FvBS9Mm+VhA/jYJgxIsipIv6yo XjblByESKL6zHbU7UwZSR4ncvV4UMZAOIvhiQbJqPTvGML+7ALe5O4BT0Mkdy0lo 6l3UQNuwb/1xjmTaeo+bTXxvXQx++qBgyBnIOb7jEhlJNhFjQ+UZrv8a4peycnHK 2J6IcAkvvb3L59JyQ6ImyL+TkTqNVk5q -----END CERTIFICATE-----Generated at Tue Nov 4 07:05:54 2025 by rpki-client