$ rpki-client -vvf rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft File: mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft (raw, json) Hash identifier: 0YHp7oy9XhqA4HaESKFTJILKH6gZJb3ohjoDehroTus= Subject key identifier: BB:A5:BE:6E:08:D1:B2:B1:7D:D4:E0:32:30:59:44:62:E7:67:5F:48 Authority key identifier: 99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 Certificate issuer: /CN=A915F598/serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Certificate serial: 34B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft Manifest number: 34B3 Signing time: Tue 04 Nov 2025 15:22:16 +0000 Manifest this update: Tue 04 Nov 2025 15:22:16 +0000 Manifest next update: Tue 11 Nov 2025 15:22:16 +0000 Files and hashes: 1: mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl (hash: OFuUjoSuwzAIaR0pRvRcu9vDnz9DG/G5g53e49W7uqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13492 (0x34b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F598, serialNumber=9976FB716D2FA39BBD473C6B34F1F3BD681A53E7 Validity Not Before: Nov 4 15:22:16 2025 GMT Not After : Nov 11 15:22:16 2025 GMT Subject: CN=690a1a28-6433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:94:fa:93:1a:2e:37:6c:c6:52:8e:20:f8:f3: ea:ea:ef:40:8e:31:f3:fb:b3:c5:80:2e:07:a3:8a: 52:f0:56:31:49:f5:32:ae:52:ac:19:27:e2:4c:22: 0c:04:f8:a6:d7:3d:0d:a2:74:3b:c0:3c:b2:64:64: 55:a8:af:01:fb:4e:93:06:93:65:d4:88:3a:5c:c6: d5:0b:64:1f:b4:3a:eb:de:4d:a9:95:fb:96:8c:82: 46:50:ce:bc:40:e3:80:9e:9a:2a:f5:89:80:42:5e: 77:23:cc:13:81:9c:b2:1d:45:45:9e:d1:d9:a9:3c: 14:72:1d:4c:97:1c:dd:83:a0:8e:73:34:dc:19:99: a9:e2:a4:65:b6:f4:04:ad:78:49:ca:36:b9:13:e0: b9:41:26:a4:dd:eb:fe:4f:a1:74:e1:67:5f:59:6a: 1b:26:b1:a7:81:ba:ef:41:cf:b8:3f:b5:83:df:45: 5a:64:2b:8d:10:67:5d:65:71:72:56:e3:03:01:f1: 31:49:d6:a2:76:38:40:21:7f:4c:29:a7:14:ae:2b: c5:2a:17:f6:75:0c:f8:5d:34:dd:c7:87:68:fd:b5: fc:f7:ed:dc:52:3a:72:ae:94:7f:06:32:fa:04:cc: 79:7f:a2:fe:65:32:af:06:1a:7d:47:ce:78:16:fc: 47:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A5:BE:6E:08:D1:B2:B1:7D:D4:E0:32:30:59:44:62:E7:67:5F:48 X509v3 Authority Key Identifier: keyid:99:76:FB:71:6D:2F:A3:9B:BD:47:3C:6B:34:F1:F3:BD:68:1A:53:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F598/3E1D1B22233311E2858CBCC508B02CD2/mXb7cW0vo5u9RzxrNPHzvWgaU-c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:ca:13:c6:45:7b:7f:d3:52:bc:f6:5d:38:95:1e:77:ed:48: 67:4b:5e:77:67:a9:24:13:8b:4d:57:3b:c8:a6:1c:aa:c2:f3: 62:6d:c8:ef:69:cc:e8:80:db:eb:88:5a:f4:92:d7:c4:1c:1b: 49:93:2e:12:6c:67:b1:79:b7:96:5e:91:49:42:0e:cf:22:76: e9:47:b0:8c:2c:c0:38:1d:53:3e:55:66:1b:3b:2f:ee:7e:5a: 0b:d3:04:56:5a:a2:9f:7f:3e:c6:e3:fe:ca:de:92:cd:32:6d: fb:36:75:22:83:47:e0:95:5a:40:df:e7:f4:a5:59:2a:3c:cf: 2a:02:f4:2f:f9:f7:7b:76:c8:1a:0e:66:a9:33:b6:7d:ec:6f: 3a:25:77:13:69:99:dd:b5:b0:01:c9:fe:fb:9f:de:17:46:c4: 3e:6b:98:6c:df:72:f2:61:47:98:83:8c:64:4a:8d:7a:22:08: 23:a9:86:05:3d:f2:df:4b:8b:00:ba:79:09:89:f8:18:3e:aa: a3:6d:67:18:36:cb:bc:9c:87:4b:67:bc:83:5e:f2:f0:31:69: 61:03:30:a3:5b:0a:c7:4d:ad:a7:91:93:52:ba:f8:f5:25:cc: b0:f3:d3:ff:55:f5:62:5b:d6:cd:bd:b8:bd:83:22:0a:31:b3: c3:2a:a7:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY1OTgxMTAvBgNVBAUTKDk5NzZGQjcxNkQyRkEzOUJCRDQ3M0M2QjM0RjFGM0JE NjgxQTUzRTcwHhcNMjUxMTA0MTUyMjE2WhcNMjUxMTExMTUyMjE2WjAYMRYwFAYD VQQDEw02OTBhMWEyOC02NDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JT6kxouN2zGUo4g+PPq6u9AjjHz+7PFgC4Ho4pS8FYxSfUyrlKsGSfiTCIM BPim1z0NonQ7wDyyZGRVqK8B+06TBpNl1Ig6XMbVC2QftDrr3k2plfuWjIJGUM68 QOOAnpoq9YmAQl53I8wTgZyyHUVFntHZqTwUch1Mlxzdg6COczTcGZmp4qRltvQE rXhJyja5E+C5QSak3ev+T6F04WdfWWobJrGngbrvQc+4P7WD30VaZCuNEGddZXFy VuMDAfExSdaidjhAIX9MKacUrivFKhf2dQz4XTTdx4do/bX89+3cUjpyrpR/BjL6 BMx5f6L+ZTKvBhp9R854FvxHdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLulvm4I 0bKxfdTgMjBZRGLnZ19IMB8GA1UdIwQYMBaAFJl2+3FtL6ObvUc8azTx871oGlPn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjU5OC8zRTFEMUIyMjIz MzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cwdm81dTlSenhyTlBIenZXZ2FV LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21YYjdjVzB2bzV1OVJ6eHJOUEh6dldnYVUtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjU5OC8zRTFEMUIyMjIzMzMxMUUyODU4Q0JDQzUwOEIwMkNEMi9tWGI3Y1cwdm81 dTlSenhyTlBIenZXZ2FVLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvyhPGRXt/01K89l04lR537UhnS153Z6kkE4tNVzvIphyqwvNibcjv aczogNvriFr0ktfEHBtJky4SbGexebeWXpFJQg7PInbpR7CMLMA4HVM+VWYbOy/u floL0wRWWqKffz7G4/7K3pLNMm37NnUig0fglVpA3+f0pVkqPM8qAvQv+fd7dsga DmapM7Z97G86JXcTaZndtbAByf77n94XRsQ+a5hs33LyYUeYg4xkSo16IggjqYYF PfLfS4sAunkJifgYPqqjbWcYNsu8nIdLZ7yDXvLwMWlhAzCjWwrHTa2nkZNSuvj1 Jcyw89P/VfViW9bNvbi9gyIKMbPDKqdx -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:21 2025 by rpki-client