$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft File: MdxLbDLXteXzqGAXOIWmRfT8AVI.mft (raw, json) Hash identifier: eeBLY4R9R5GlKxGHOQi/rbSt9bHCHG7SwDDTFpJuGGU= Subject key identifier: DD:7F:FD:83:1A:25:F7:C8:6D:3B:7D:23:25:E6:7E:4D:E9:42:EF:36 Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 Certificate issuer: /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft Manifest number: 02F7 Signing time: Mon 03 Nov 2025 02:25:48 +0000 Manifest this update: Mon 03 Nov 2025 02:25:48 +0000 Manifest next update: Mon 10 Nov 2025 02:25:48 +0000 Files and hashes: 1: MdxLbDLXteXzqGAXOIWmRfT8AVI.crl (hash: 9UHMABavhyypL7qS6lQtq3kERnhNlOYHgAREIe48RpU=) 2: C47523F0509D11EFA81FC32AC4F9AE02.roa (hash: d1kPy/eiI5YE+DwwaFZQ8lzq73y437eEPrtNiOguvKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152 Validity Not Before: Nov 3 02:25:48 2025 GMT Not After : Nov 10 02:25:48 2025 GMT Subject: CN=690812ac-2bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:59:d7:75:8c:1f:f2:f6:a1:1d:2c:a5:1d:f5: 52:b5:74:f7:ff:14:63:b9:9d:e5:5e:61:cf:5f:8d: 24:e5:c8:a6:7f:c1:89:b1:37:de:76:a2:8c:5a:8d: c1:37:87:77:71:45:88:84:52:53:76:41:2a:a7:fb: 2f:be:00:a7:c8:6a:0a:ad:f2:16:7e:a5:02:7e:87: 00:6d:f1:f6:24:05:dd:d7:c3:ec:01:36:d0:12:9a: c2:1c:6a:ae:1b:1a:94:67:dd:db:8c:87:30:c8:40: 42:64:d2:0d:e1:c9:d8:a5:13:f2:6a:22:7d:dc:ff: 82:06:0e:26:bb:33:da:2b:d8:cb:da:8a:88:65:39: cc:7f:a0:e3:f9:af:41:7f:05:79:1a:1a:bf:1f:2e: 72:3a:7f:0a:90:52:c4:c4:6f:cd:e1:3f:f0:b5:a3: 67:53:72:bd:b2:dc:75:5f:b6:38:c8:e2:b5:df:ed: 8b:7a:18:dd:2d:93:de:e0:69:f6:1e:d0:89:43:cd: bd:85:e9:2a:3d:50:b6:8b:05:ab:54:0f:4c:8e:3e: dd:e4:dc:7d:d3:df:98:c4:d3:f1:1b:22:d0:fd:1e: 90:62:3c:9f:9c:dc:a5:75:d5:45:e1:96:95:a1:57: cf:98:9c:1d:74:3c:d9:3b:56:a7:d3:20:aa:e7:85: 3d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7F:FD:83:1A:25:F7:C8:6D:3B:7D:23:25:E6:7E:4D:E9:42:EF:36 X509v3 Authority Key Identifier: keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:c5:dc:0c:06:f4:0e:58:ea:28:fc:95:fa:d9:b2:87:dd:64: 81:99:33:4b:75:4a:8f:d4:23:76:85:6d:09:4f:22:24:50:4a: 4d:b4:5b:39:96:51:56:77:92:bc:aa:9a:0f:eb:66:4a:1d:bc: de:e8:11:1c:cf:f6:8c:20:34:8c:3e:ce:28:cf:eb:39:e9:73: 35:18:f6:e6:cf:aa:fa:f9:46:ab:de:d4:69:b4:ba:21:e3:29: dd:73:24:59:64:7e:46:00:c0:4c:1c:10:0e:d2:f8:61:78:63: 89:1d:8d:f0:37:ee:1b:fe:c7:69:39:5a:02:11:cb:ab:26:ac: 6d:3c:8b:e2:dd:ef:a6:f6:7f:0f:51:ee:9c:e0:46:7e:6a:c6: e8:78:54:b6:e0:00:94:ca:08:36:ce:2b:bc:2f:8a:09:f1:15: 6d:44:bb:06:47:9d:eb:4c:48:80:62:b2:7d:28:8a:ff:3c:b4: 0e:d9:5a:34:68:ce:13:34:d7:f8:13:6e:df:af:f5:bf:ba:74: d7:88:f4:aa:93:50:4b:b4:6d:7e:a2:0d:66:00:a9:20:29:3f: ea:ad:43:65:cb:9c:e5:47:67:0d:e3:eb:44:32:8d:e5:dd:13: 26:d9:9b:fc:c1:c3:78:e0:dc:61:d4:e7:27:3d:19:36:cb:d6: b5:0d:27:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDMxREM0QjZDMzJEN0I1RTVGM0E4NjAxNzM4ODVBNjQ1 RjRGQzAxNTIwHhcNMjUxMTAzMDIyNTQ4WhcNMjUxMTEwMDIyNTQ4WjAYMRYwFAYD VQQDEw02OTA4MTJhYy0yYmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA41nXdYwf8vahHSylHfVStXT3/xRjuZ3lXmHPX40k5cimf8GJsTfedqKMWo3B N4d3cUWIhFJTdkEqp/svvgCnyGoKrfIWfqUCfocAbfH2JAXd18PsATbQEprCHGqu GxqUZ93bjIcwyEBCZNIN4cnYpRPyaiJ93P+CBg4muzPaK9jL2oqIZTnMf6Dj+a9B fwV5Ghq/Hy5yOn8KkFLExG/N4T/wtaNnU3K9stx1X7Y4yOK13+2LehjdLZPe4Gn2 HtCJQ829hekqPVC2iwWrVA9Mjj7d5Nx909+YxNPxGyLQ/R6QYjyfnNylddVF4ZaV oVfPmJwddDzZO1an0yCq54U9lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1//YMa JffIbTt9IyXmfk3pQu82MB8GA1UdIwQYMBaAFDHcS2wy17Xl86hgFziFpkX0/AFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRlWHpxR0FYT0lXbVJmVDhB VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01keExiRExYdGVYenFHQVhPSVdtUmZUOEFWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9NZHhMYkRMWHRl WHpxR0FYT0lXbVJmVDhBVkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1xdwMBvQOWOoo/JX62bKH3WSBmTNLdUqP1CN2hW0JTyIkUEpNtFs5 llFWd5K8qpoP62ZKHbze6BEcz/aMIDSMPs4oz+s56XM1GPbmz6r6+Uar3tRptLoh 4yndcyRZZH5GAMBMHBAO0vhheGOJHY3wN+4b/sdpOVoCEcurJqxtPIvi3e+m9n8P Ue6c4EZ+asboeFS24ACUygg2ziu8L4oJ8RVtRLsGR53rTEiAYrJ9KIr/PLQO2Vo0 aM4TNNf4E27fr/W/unTXiPSqk1BLtG1+og1mAKkgKT/qrUNly5zlR2cN4+tEMo3l 3RMm2Zv8wcN44Nxh1OcnPRk2y9a1DSf0 -----END CERTIFICATE-----Generated at Tue Nov 4 07:28:47 2025 by rpki-client