$ rpki-client -vvf rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft File: fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft (raw, json) Hash identifier: yFD1/Udnf74bP10aRpLvT3XqFaq8u2hHYMarAi8f5lM= Subject key identifier: 19:A2:F3:D3:5B:05:36:D9:1D:D8:72:4A:EF:22:89:9F:E2:12:98:DE Authority key identifier: 7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F Certificate issuer: /CN=A914B610/serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F Certificate serial: 34D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft Manifest number: 34D0 Signing time: Tue 04 Nov 2025 15:15:52 +0000 Manifest this update: Tue 04 Nov 2025 15:15:51 +0000 Manifest next update: Tue 11 Nov 2025 15:15:51 +0000 Files and hashes: 1: fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl (hash: 6ILRUj51/XWOJsqDu7vlPqKjs6CO7/tlsd7E1tHpWb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13521 (0x34d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B610, serialNumber=7C728B970429D470097978A16E767B21DC6E3B1F Validity Not Before: Nov 4 15:15:51 2025 GMT Not After : Nov 11 15:15:51 2025 GMT Subject: CN=690a18a8-cf4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fd:e8:c8:92:d8:a6:81:e1:f4:bb:3d:08:0d: e8:1e:10:7e:b4:71:34:79:e4:7a:65:54:51:89:d7: e6:05:6f:36:5f:ca:3c:29:81:12:5e:0f:0d:39:7f: 76:72:1b:0f:e7:c8:e7:4a:e1:01:c1:58:06:70:fe: 4c:44:b9:0a:24:a0:42:2e:2a:69:68:0a:5e:f7:70: b6:a1:9c:9e:f8:38:18:7e:53:db:2b:17:79:bb:b6: 27:1a:fc:fc:a0:65:cf:2f:c6:d4:70:5d:fc:9c:ec: 68:23:b2:66:34:b4:4b:18:46:fa:95:68:9d:e5:fb: 5f:a0:8e:4b:31:36:33:27:32:3c:1e:1b:30:c5:96: f7:b2:3b:54:95:d2:08:96:60:69:61:5c:dd:2c:92: d8:27:be:9b:ea:d2:41:54:c1:f0:8f:a0:40:24:23: ee:4c:93:83:33:3b:ba:2a:e8:e6:25:c3:13:58:4d: 34:09:12:04:40:91:f4:f1:74:c7:21:f3:58:5a:f9: 13:74:4c:d0:16:55:ca:de:98:68:b2:ee:b6:e3:29: d0:5a:7f:40:9a:39:7f:aa:25:3a:4f:66:d1:63:2f: db:aa:62:17:1b:19:29:5c:ee:0d:1f:6e:8a:c0:3d: fa:58:a9:a4:38:b6:16:4a:19:27:e0:ee:d0:dc:c2: aa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A2:F3:D3:5B:05:36:D9:1D:D8:72:4A:EF:22:89:9F:E2:12:98:DE X509v3 Authority Key Identifier: keyid:7C:72:8B:97:04:29:D4:70:09:79:78:A1:6E:76:7B:21:DC:6E:3B:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B610/4393EAE01DA711E2842FDCA008B02CD2/fHKLlwQp1HAJeXihbnZ7IdxuOx8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:5f:ec:2b:f2:ee:42:82:9b:db:b7:64:b3:6e:6f:5c:81:89: 4a:0c:cd:da:b1:4b:c0:38:8e:68:6a:44:b7:76:2f:d7:c3:c0: d2:2d:b7:98:91:0b:df:4a:13:5c:e7:56:7c:c6:53:dc:98:6b: 45:40:8f:26:e7:5f:9d:cd:2a:32:5d:59:9b:61:f6:53:d4:bc: 93:f2:46:cc:f7:ea:b8:52:e7:61:8c:50:ee:fe:d2:a2:2d:8b: 82:09:56:a2:07:91:20:14:42:ce:da:c1:41:08:6e:09:ac:8e: fd:f6:a6:a6:9d:05:da:a0:5c:51:90:2f:f9:38:0c:41:dd:fd: 59:99:e3:25:d4:86:b4:e8:5d:2e:d1:32:36:87:50:4f:10:58: ac:d3:5c:6b:3d:03:3e:02:e0:5e:79:f9:63:51:5f:df:f1:cf: 8e:3d:50:cd:37:d1:1f:86:60:7d:45:86:d6:69:e8:0a:fc:3c: fe:24:c3:88:27:40:24:21:65:ad:78:da:35:9e:9b:f5:0a:49: c9:58:a6:90:ba:65:79:37:ca:69:3e:d5:cb:ff:52:19:d1:9c: d2:71:3c:5c:8f:dc:e1:5b:b7:37:29:9d:b4:ea:7c:16:5b:4a: 58:9b:ca:92:10:4d:96:39:d3:82:d2:a3:b1:b3:6e:9e:b5:b1: fb:8f:33:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI2MTAxMTAvBgNVBAUTKDdDNzI4Qjk3MDQyOUQ0NzAwOTc5NzhBMTZFNzY3QjIx REM2RTNCMUYwHhcNMjUxMTA0MTUxNTUxWhcNMjUxMTExMTUxNTUxWjAYMRYwFAYD VQQDEw02OTBhMThhOC1jZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/3oyJLYpoHh9Ls9CA3oHhB+tHE0eeR6ZVRRidfmBW82X8o8KYESXg8NOX92 chsP58jnSuEBwVgGcP5MRLkKJKBCLippaApe93C2oZye+DgYflPbKxd5u7YnGvz8 oGXPL8bUcF38nOxoI7JmNLRLGEb6lWid5ftfoI5LMTYzJzI8HhswxZb3sjtUldII lmBpYVzdLJLYJ76b6tJBVMHwj6BAJCPuTJODMzu6KujmJcMTWE00CRIEQJH08XTH IfNYWvkTdEzQFlXK3phosu624ynQWn9Amjl/qiU6T2bRYy/bqmIXGxkpXO4NH26K wD36WKmkOLYWShkn4O7Q3MKqnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBmi89Nb BTbZHdhySu8iiZ/iEpjeMB8GA1UdIwQYMBaAFHxyi5cEKdRwCXl4oW52eyHcbjsf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjYxMC80MzkzRUFFMDFE QTcxMUUyODQyRkRDQTAwOEIwMkNEMi9mSEtMbHdRcDFIQUplWGloYm5aN0lkeHVP eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIS0xsd1FwMUhBSmVYaWhiblo3SWR4dU94OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjYxMC80MzkzRUFFMDFEQTcxMUUyODQyRkRDQTAwOEIwMkNEMi9mSEtMbHdRcDFI QUplWGloYm5aN0lkeHVPeDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5X+wr8u5Cgpvbt2Szbm9cgYlKDM3asUvAOI5oakS3di/Xw8DSLbeY kQvfShNc51Z8xlPcmGtFQI8m51+dzSoyXVmbYfZT1LyT8kbM9+q4UudhjFDu/tKi LYuCCVaiB5EgFELO2sFBCG4JrI799qamnQXaoFxRkC/5OAxB3f1ZmeMl1Ia06F0u 0TI2h1BPEFis01xrPQM+AuBeefljUV/f8c+OPVDNN9EfhmB9RYbWaegK/Dz+JMOI J0AkIWWteNo1npv1CknJWKaQumV5N8ppPtXL/1IZ0ZzScTxcj9zhW7c3KZ206nwW W0pYm8qSEE2WOdOC0qOxs26etbH7jzNj -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:30 2025 by rpki-client