$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft File: SoXPE4hy0-RPkNe28wKPC1BnNMw.mft (raw, json) Hash identifier: iipALtbm1m24HJDm8NSI09RL1SicZrxyz2ZGwkhEHk8= Subject key identifier: 01:B4:18:1E:56:0A:86:CE:B4:28:93:17:36:79:B9:BD:39:3B:5F:A2 Authority key identifier: 4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC Certificate issuer: /CN=A914D0AF/serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC Certificate serial: 0431 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft Manifest number: 0478 Signing time: Mon 03 Nov 2025 00:20:34 +0000 Manifest this update: Mon 03 Nov 2025 00:20:33 +0000 Manifest next update: Mon 10 Nov 2025 00:20:33 +0000 Files and hashes: 1: SoXPE4hy0-RPkNe28wKPC1BnNMw.crl (hash: BSuMkGzkSAE8DdLgZFH9nj/F9oRT0N6/hsTjSOFE4V8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1073 (0x431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D0AF, serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC Validity Not Before: Nov 3 00:20:33 2025 GMT Not After : Nov 10 00:20:33 2025 GMT Subject: CN=6907f551-9830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ef:de:a2:04:90:13:62:25:dd:41:4c:b9:c1: 71:df:d0:da:43:44:f2:9e:ce:9c:3d:95:06:29:65: da:75:e0:4b:68:ec:6c:69:98:af:11:6e:f6:14:89: 92:76:8e:43:fd:50:5c:0d:bf:85:80:05:52:3d:39: 63:a6:d6:38:c5:06:ef:c9:ca:d9:93:28:bb:e4:42: a3:c6:bf:38:db:45:ac:5e:f0:53:a5:f5:82:89:c7: a8:b4:3e:50:ab:87:70:c8:4d:de:cd:2a:1d:f5:71: b9:60:3d:b4:c1:37:83:0a:44:3b:e1:a5:09:44:25: 3b:0c:f0:d8:a3:1c:e1:a2:b3:3f:ef:17:4c:a1:f1: d7:23:7c:67:0d:dd:ef:f3:4a:02:2d:7b:28:a6:2f: cc:13:5b:46:4c:b0:47:b9:b5:3f:45:5b:21:60:6c: af:24:d1:65:2a:41:bd:88:41:18:1d:46:d3:bf:49: 87:f6:e0:08:30:12:b3:51:82:f2:bb:28:6c:48:b7: 66:a9:8a:55:c0:ea:8c:a6:d1:71:b5:77:08:14:66: 0c:e8:cf:33:bc:a2:71:32:6f:d2:d2:d5:a0:4d:aa: be:bf:aa:98:00:ef:28:82:cb:0c:15:4b:e3:7b:49: 23:c1:cb:ba:7a:52:04:b1:a2:98:2e:1b:fc:92:f8: 68:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B4:18:1E:56:0A:86:CE:B4:28:93:17:36:79:B9:BD:39:3B:5F:A2 X509v3 Authority Key Identifier: keyid:4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:a3:eb:ca:41:95:96:1f:5b:23:2a:8b:96:27:59:eb:6d:d6: 28:a2:ec:7c:e4:8f:6f:86:81:e3:dc:a3:ed:cd:e8:9a:e3:1a: a1:ca:25:8b:81:dc:fd:77:fc:2b:bf:21:3b:ad:20:e9:60:ba: 1c:39:ef:95:6f:72:76:70:38:3d:7c:dd:69:a3:e2:84:8d:fa: c5:31:b1:bc:93:4d:0a:e3:8e:2f:1b:58:a4:92:11:5c:16:2d: 4a:95:9c:1d:d3:63:01:15:a3:28:24:c1:82:19:2e:f3:c5:72: ab:7e:37:f4:9c:05:5b:ed:c7:99:52:42:ae:bb:56:be:ff:80: a6:3d:06:96:5b:7b:3b:9c:9e:46:64:89:d7:21:4e:2d:06:45: e3:ef:e3:f8:84:a6:8e:3d:cd:8c:d6:b6:f5:ca:8d:2b:40:92: 4d:c4:57:74:c0:90:01:1a:1c:63:8e:eb:1e:83:da:f4:7f:48: 26:5b:d6:89:6e:fb:ae:a0:32:9c:14:91:b1:bf:8e:90:21:69: 13:cf:2c:20:ee:f4:a8:5d:18:5a:b3:5c:74:e8:83:03:69:9d: fc:66:67:ff:2b:29:1a:04:85:4a:24:d0:71:fa:6e:09:e5:3f: 78:a7:05:7e:9b:ce:a1:84:b1:f7:a4:12:3f:54:f7:94:31:c0: 1c:5d:b1:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQwQUYxMTAvBgNVBAUTKDRBODVDRjEzODg3MkQzRTQ0RjkwRDdCNkYzMDI4RjBC NTA2NzM0Q0MwHhcNMjUxMTAzMDAyMDMzWhcNMjUxMTEwMDAyMDMzWjAYMRYwFAYD VQQDEw02OTA3ZjU1MS05ODMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtu/eogSQE2Il3UFMucFx39DaQ0Tyns6cPZUGKWXadeBLaOxsaZivEW72FImS do5D/VBcDb+FgAVSPTljptY4xQbvycrZkyi75EKjxr8420WsXvBTpfWCiceotD5Q q4dwyE3ezSod9XG5YD20wTeDCkQ74aUJRCU7DPDYoxzhorM/7xdMofHXI3xnDd3v 80oCLXsopi/ME1tGTLBHubU/RVshYGyvJNFlKkG9iEEYHUbTv0mH9uAIMBKzUYLy uyhsSLdmqYpVwOqMptFxtXcIFGYM6M8zvKJxMm/S0tWgTaq+v6qYAO8ogssMFUvj e0kjwcu6elIEsaKYLhv8kvho/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAG0GB5W CobOtCiTFzZ5ub05O1+iMB8GA1UdIwQYMBaAFEqFzxOIctPkT5DXtvMCjwtQZzTM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDBBRi8xRTMzOUIzNjg4 REUxMUVDOEE4QjE2MjhDNEY5QUUwMi9Tb1hQRTRoeTAtUlBrTmUyOHdLUEMxQm5O TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NvWFBFNGh5MC1SUGtOZTI4d0tQQzFCbk5Ndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDBBRi8xRTMzOUIzNjg4REUxMUVDOEE4QjE2MjhDNEY5QUUwMi9Tb1hQRTRoeTAt UlBrTmUyOHdLUEMxQm5OTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1o+vKQZWWH1sjKouWJ1nrbdYooux85I9vhoHj3KPtzeia4xqhyiWL gdz9d/wrvyE7rSDpYLocOe+Vb3J2cDg9fN1po+KEjfrFMbG8k00K444vG1ikkhFc Fi1KlZwd02MBFaMoJMGCGS7zxXKrfjf0nAVb7ceZUkKuu1a+/4CmPQaWW3s7nJ5G ZInXIU4tBkXj7+P4hKaOPc2M1rb1yo0rQJJNxFd0wJABGhxjjuseg9r0f0gmW9aJ bvuuoDKcFJGxv46QIWkTzywg7vSoXRhas1x06IMDaZ38Zmf/KykaBIVKJNBx+m4J 5T94pwV+m86hhLH3pBI/VPeUMcAcXbEE -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:55 2025 by rpki-client