$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft File: aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft (raw, json) Hash identifier: riIv2RhUtWXRvh2IkCvtT1dJdy82W6E8Pt698l+d9EM= Subject key identifier: 3B:7E:3B:BA:94:55:CD:88:03:7A:98:B9:B6:1D:0E:A1:19:13:A9:E6 Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03 Certificate issuer: /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03 Certificate serial: 065E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft Manifest number: 07D1 Signing time: Tue 04 Nov 2025 22:51:59 +0000 Manifest this update: Tue 04 Nov 2025 22:51:58 +0000 Manifest next update: Tue 11 Nov 2025 22:51:58 +0000 Files and hashes: 1: aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl (hash: YLvE4Fg9zwEM/rwR9Ra/JFAc/FUFYrFhfdZXJdMg09c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1630 (0x65e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AF7A, serialNumber=6880D323AA3F2D5146050640F321A6129000DF03 Validity Not Before: Nov 4 22:51:58 2025 GMT Not After : Nov 11 22:51:58 2025 GMT Subject: CN=690a838f-0d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f1:1b:ad:97:c1:00:b8:82:1f:50:58:86:a1: 50:db:67:7a:99:dc:cf:b9:d1:d0:54:59:c6:c8:e3: ed:06:bb:28:c9:93:4a:f7:e1:d1:3e:63:ed:80:2c: eb:17:29:c6:f0:e8:fb:21:d9:0c:11:38:d0:84:6d: 9e:03:dc:8c:c1:96:a6:2c:22:af:78:3b:1c:90:93: 05:95:c6:36:c1:b4:54:bb:1e:4d:ec:a2:26:f5:b9: 5e:ae:4c:8a:ec:02:b4:e2:1c:4d:5b:bb:0f:b5:cb: 69:6c:89:48:71:03:57:e0:39:b4:60:44:9e:3c:47: d5:fd:77:33:a5:56:b6:81:ea:12:01:a3:e1:de:e5: 47:f5:79:e8:85:30:b5:0b:99:3c:cf:a8:fd:f6:80: 62:52:bc:9d:3b:d5:a2:34:d8:da:25:20:01:5d:81: b1:fb:36:17:98:25:89:44:29:45:56:07:6c:f0:df: eb:29:73:71:53:5d:a4:68:80:2d:3a:07:cf:c1:20: 21:9e:cc:56:00:8e:21:e9:5f:4a:5a:0d:69:cf:f2: 87:3a:04:0e:df:fb:3e:00:32:57:b8:07:be:5a:20: bb:de:6e:4e:7f:ee:b3:85:97:3a:b0:cf:02:08:c6: e1:0a:33:23:7e:01:64:25:33:58:97:60:b2:fb:50: e1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7E:3B:BA:94:55:CD:88:03:7A:98:B9:B6:1D:0E:A1:19:13:A9:E6 X509v3 Authority Key Identifier: keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b4:a0:5b:a5:6b:55:d2:ec:63:36:56:8f:16:2f:7d:26:86: cc:f8:0a:b2:7e:c9:e4:f8:47:fe:60:af:71:76:54:11:4a:5b: 0c:b5:0e:e3:43:54:1e:2a:29:90:6c:27:fc:22:40:c5:9c:c9: 73:3f:ed:a9:84:7f:07:61:92:87:80:05:41:12:5c:0c:51:c0: 49:ac:66:08:4a:d7:c9:55:a6:56:b6:c4:67:8d:d4:f2:88:a3: 43:53:ae:fb:67:af:04:ac:82:60:9d:cc:d3:46:ec:a6:79:03: 2c:b1:2d:73:71:2f:00:de:4c:47:af:7c:ab:e8:91:9e:65:ec: 98:b8:19:dc:98:89:b2:c1:3a:8d:25:29:16:14:02:ec:57:7d: b8:df:83:41:62:ee:e9:19:b0:10:b0:71:a0:79:0d:61:56:1e: 77:1a:25:09:6b:07:ce:40:23:40:06:9d:a1:a4:b3:85:ea:69: 55:6a:9c:ad:a7:26:81:48:ee:e1:47:06:7c:de:b6:fd:53:28: 19:ac:6d:d8:f5:ac:24:56:9d:9d:b5:70:98:71:a8:f0:0b:4f: ec:81:dd:51:12:48:dd:94:98:0c:53:81:70:be:53:aa:11:77: a4:53:b0:8a:59:d8:39:0b:2c:4a:e3:7f:b1:37:f4:f9:b5:b2: 57:e3:b4:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFGN0ExMTAvBgNVBAUTKDY4ODBEMzIzQUEzRjJENTE0NjA1MDY0MEYzMjFBNjEy OTAwMERGMDMwHhcNMjUxMTA0MjI1MTU4WhcNMjUxMTExMjI1MTU4WjAYMRYwFAYD VQQDEw02OTBhODM4Zi0wZDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPEbrZfBALiCH1BYhqFQ22d6mdzPudHQVFnGyOPtBrsoyZNK9+HRPmPtgCzr FynG8Oj7IdkMETjQhG2eA9yMwZamLCKveDsckJMFlcY2wbRUux5N7KIm9blerkyK 7AK04hxNW7sPtctpbIlIcQNX4Dm0YESePEfV/XczpVa2geoSAaPh3uVH9XnohTC1 C5k8z6j99oBiUrydO9WiNNjaJSABXYGx+zYXmCWJRClFVgds8N/rKXNxU12kaIAt OgfPwSAhnsxWAI4h6V9KWg1pz/KHOgQO3/s+ADJXuAe+WiC73m5Of+6zhZc6sM8C CMbhCjMjfgFkJTNYl2Cy+1DhBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDt+O7qU Vc2IA3qYubYdDqEZE6nmMB8GA1UdIwQYMBaAFGiA0yOqPy1RRgUGQPMhphKQAN8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUY3QS9FMDUzMzMzNkJB QzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi9hSURUSTZvX0xWRkdCUVpBOHlHbUVwQUEz d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FJRFRJNm9fTFZGR0JRWkE4eUdtRXBBQTN3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUY3QS9FMDUzMzMzNkJBQzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi9hSURUSTZvX0xW RkdCUVpBOHlHbUVwQUEzd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAttKBbpWtV0uxjNlaPFi99JobM+Aqyfsnk+Ef+YK9xdlQRSlsMtQ7j Q1QeKimQbCf8IkDFnMlzP+2phH8HYZKHgAVBElwMUcBJrGYIStfJVaZWtsRnjdTy iKNDU677Z68ErIJgnczTRuymeQMssS1zcS8A3kxHr3yr6JGeZeyYuBncmImywTqN JSkWFALsV32434NBYu7pGbAQsHGgeQ1hVh53GiUJawfOQCNABp2hpLOF6mlVapyt pyaBSO7hRwZ83rb9UygZrG3Y9awkVp2dtXCYcajwC0/sgd1REkjdlJgMU4FwvlOq EXekU7CKWdg5CyxK43+xN/T5tbJX47Rs -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:41 2025 by rpki-client