$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft File: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft (raw, json) Hash identifier: +JKvY2L0Duum2QEZozBbUwd+uZBe25qylMMAERwyNhE= Subject key identifier: B3:5C:25:C9:F7:CF:07:10:74:06:0E:61:F7:B8:DE:85:8A:EB:E1:30 Authority key identifier: B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76 Certificate issuer: /CN=A9154FFD/serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft Manifest number: 05 Signing time: Mon 03 Nov 2025 08:04:32 +0000 Manifest this update: Mon 03 Nov 2025 08:04:31 +0000 Manifest next update: Mon 10 Nov 2025 08:04:31 +0000 Files and hashes: 1: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl (hash: 7aggLu37SF3Ti0uwuitgyQ2G7vB0TFe4EuaiYpTQEHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154FFD, serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76 Validity Not Before: Nov 3 08:04:31 2025 GMT Not After : Nov 10 08:04:31 2025 GMT Subject: CN=6908620f-20c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:41:ed:0a:4e:c0:94:af:d2:3c:c2:67:ad:ea: f7:af:20:6f:c3:61:cd:2c:06:b3:e2:d8:10:2a:c0: ad:e9:60:6e:2a:b0:94:b6:13:d5:e6:ad:6e:4f:df: 69:d5:fb:b2:29:48:a6:3a:96:6a:82:c2:99:d8:98: 47:6a:3d:44:a8:78:93:de:b6:4e:fb:56:7a:30:4e: 46:3a:20:2b:7f:fe:19:40:16:07:76:2d:1b:03:97: ac:9a:89:02:55:83:8e:7d:a9:f8:fd:03:bb:a6:a5: 94:d6:a3:d7:6b:71:56:a4:94:f2:23:17:59:83:b8: 1a:4b:70:88:91:c4:b0:01:ea:2d:cd:fe:51:56:35: 41:5e:d7:89:90:a9:c4:bd:8c:24:44:2f:e7:34:7e: b2:ed:a4:75:e7:99:1f:ef:be:0d:5c:cd:21:83:f7: fd:df:2b:dc:21:38:63:70:18:a4:9f:08:46:ce:af: 8a:97:5a:3f:13:fe:1e:01:73:e0:02:9b:60:c3:4c: 32:2c:5c:e0:08:69:6a:b3:2c:19:ac:07:df:87:1f: 78:7b:00:b4:bf:90:52:56:f2:30:04:ce:c0:b7:83: 14:d0:2d:16:fa:3c:36:61:1a:92:0a:64:2c:fc:21: 99:69:29:66:fd:8d:32:75:df:3e:67:b1:91:75:d0: 28:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5C:25:C9:F7:CF:07:10:74:06:0E:61:F7:B8:DE:85:8A:EB:E1:30 X509v3 Authority Key Identifier: keyid:B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:1b:5d:c5:98:45:66:0e:c6:10:dc:db:68:97:43:7a:59:ef: 61:b1:d2:9f:b7:05:70:8f:8b:16:38:1e:8c:81:04:70:83:8b: d0:2b:72:c9:65:d9:8c:ca:0f:0d:ea:b3:18:7b:33:7a:ce:5d: 00:e0:3e:b3:0e:4d:3a:99:e1:7f:fd:a8:19:11:fe:99:7d:7b: c0:20:56:ee:2d:a2:2a:9a:7a:1d:3f:a7:df:88:2d:4d:ff:a5: 5f:f8:b9:95:12:3b:9b:40:ce:58:ef:89:98:2b:4b:6c:ed:38: 2f:9c:96:3e:32:e3:56:5d:29:f8:5e:4c:b9:fa:0e:6f:4a:4b: e9:42:1f:84:a0:89:76:2e:5a:56:f9:cc:25:9d:cc:7e:90:c7: 17:40:aa:94:84:44:80:82:a6:d0:b4:9a:0f:88:9f:76:94:ca: 38:62:23:34:66:83:1b:5a:2b:a6:2b:73:d2:ff:eb:20:0a:23: ca:68:a5:cc:38:26:5b:64:c3:7b:8c:7e:df:1e:51:96:de:88: f6:91:dd:a3:67:a8:bd:27:6d:1d:39:bd:68:41:ba:91:69:24: 96:2a:5a:de:3e:5c:18:2d:1d:7a:3d:a5:15:70:23:ae:bc:50: 89:1f:56:db:f4:ff:93:f6:8f:e2:03:9c:d8:c4:93:40:78:c3: 84:32:5c:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NEZGRDExMC8GA1UEBRMoQjY3Q0Q0RjMwQURDMTk1MEI5MkRDMzQ5OEY5QjUzNTI2 NjA1QkY3NjAeFw0yNTExMDMwODA0MzFaFw0yNTExMTAwODA0MzFaMBgxFjAUBgNV BAMTDTY5MDg2MjBmLTIwYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0Qe0KTsCUr9I8wmet6vevIG/DYc0sBrPi2BAqwK3pYG4qsJS2E9XmrW5P32nV +7IpSKY6lmqCwpnYmEdqPUSoeJPetk77VnowTkY6ICt//hlAFgd2LRsDl6yaiQJV g459qfj9A7umpZTWo9drcVaklPIjF1mDuBpLcIiRxLAB6i3N/lFWNUFe14mQqcS9 jCREL+c0frLtpHXnmR/vvg1czSGD9/3fK9whOGNwGKSfCEbOr4qXWj8T/h4Bc+AC m2DDTDIsXOAIaWqzLBmsB9+HH3h7ALS/kFJW8jAEzsC3gxTQLRb6PDZhGpIKZCz8 IZlpKWb9jTJ13z5nsZF10CjfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUs1wlyffP BxB0Bg5h97jehYrr4TAwHwYDVR0jBBgwFoAUtnzU8wrcGVC5LcNJj5tTUmYFv3Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0RkZEL0VFRTY4QzY0QjQ4 ODExRjBBNzQyRjU3RUM0RjlBRTAyL3RuelU4d3JjR1ZDNUxjTkpqNXRUVW1ZRnYz WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdG56VTh3cmNHVkM1TGNOSmo1dFRVbVlGdjNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 RkZEL0VFRTY4QzY0QjQ4ODExRjBBNzQyRjU3RUM0RjlBRTAyL3RuelU4d3JjR1ZD NUxjTkpqNXRUVW1ZRnYzWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABEbXcWYRWYOxhDc22iXQ3pZ72Gx0p+3BXCPixY4HoyBBHCDi9Arcsll 2YzKDw3qsxh7M3rOXQDgPrMOTTqZ4X/9qBkR/pl9e8AgVu4toiqaeh0/p9+ILU3/ pV/4uZUSO5tAzljviZgrS2ztOC+clj4y41ZdKfheTLn6Dm9KS+lCH4SgiXYuWlb5 zCWdzH6QxxdAqpSERICCptC0mg+In3aUyjhiIzRmgxtaK6Yrc9L/6yAKI8popcw4 Jltkw3uMft8eUZbeiPaR3aNnqL0nbR05vWhBupFpJJYqWt4+XBgtHXo9pRVwI668 UIkfVtv0/5P2j+IDnNjEk0B4w4QyXCU= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:47 2025 by rpki-client