$ rpki-client -vvf rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft File: P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft (raw, json) Hash identifier: Ypl17i4OF68n3bEwSDjsHoGrOvgNfKIJx9pzZ2SatHU= Subject key identifier: 51:42:A7:6F:1F:E7:84:64:D8:73:48:6A:13:F7:6E:52:1B:53:04:14 Authority key identifier: 3F:48:AC:A1:2A:59:27:A7:02:EC:EE:24:41:51:89:19:4E:D4:AA:80 Certificate issuer: /CN=A916A2FB/serialNumber=3F48ACA12A5927A702ECEE24415189194ED4AA80 Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft Manifest number: 4B Signing time: Mon 03 Nov 2025 07:18:56 +0000 Manifest this update: Mon 03 Nov 2025 07:18:55 +0000 Manifest next update: Mon 10 Nov 2025 07:18:55 +0000 Files and hashes: 1: P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl (hash: 1ALQSrm/LNdHZEYStCr/oRH9QCiK+vHnXqkH0oKEuOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A2FB, serialNumber=3F48ACA12A5927A702ECEE24415189194ED4AA80 Validity Not Before: Nov 3 07:18:55 2025 GMT Not After : Nov 10 07:18:55 2025 GMT Subject: CN=6908575f-a359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:ec:48:07:5f:92:86:b0:44:0e:6d:ff:01: b8:d7:0e:0d:7a:00:3f:7a:a5:97:90:9b:98:d0:ef: 0a:5d:77:15:d5:75:a5:b4:94:8c:57:3a:5d:5f:6e: 97:48:c4:73:af:7c:c8:4b:56:5f:84:3c:1c:65:da: 7e:2f:4c:b4:d6:22:c5:20:bf:7c:a7:14:fd:0f:85: 1b:96:e5:16:19:5c:fb:53:14:0c:b8:3c:44:d4:21: 77:51:19:6e:f2:8f:12:4d:f3:71:82:dc:e1:a4:06: de:32:95:79:6b:45:20:a8:4c:d4:c5:c9:a8:9f:43: 60:16:02:f6:78:89:f8:62:a2:41:67:d2:b9:68:86: c1:a7:f9:55:cf:78:e4:f1:5b:7c:6b:b0:3f:c7:6f: 4e:9a:b6:04:12:84:4b:19:4c:e7:42:ff:c1:09:ff: e8:10:2a:bb:7a:d4:8d:97:19:46:6a:2e:bf:ee:24: c4:58:7a:81:61:0d:1e:b1:ce:4a:8b:50:cc:d9:54: 72:82:e0:f1:3c:6b:e9:7a:c2:b4:33:b1:7d:c8:06: de:3d:a5:66:fc:3b:c3:40:3a:ba:53:a4:3e:13:21: 8f:18:79:e8:d9:a7:8c:39:e5:73:07:63:f8:7c:5a: b8:51:a3:a6:18:72:48:7c:fe:de:8a:99:54:2a:ad: 53:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:42:A7:6F:1F:E7:84:64:D8:73:48:6A:13:F7:6E:52:1B:53:04:14 X509v3 Authority Key Identifier: keyid:3F:48:AC:A1:2A:59:27:A7:02:EC:EE:24:41:51:89:19:4E:D4:AA:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:07:b0:3a:99:0a:3b:a5:89:01:65:68:6b:73:6c:d9:c8:a4: ad:ed:4f:a9:e5:e5:04:ef:56:20:75:ad:f8:b4:44:05:57:d1: a9:35:24:eb:28:39:b8:7c:36:15:bf:68:a9:67:76:a0:4d:46: 5c:41:7c:ee:60:d6:d2:b2:f3:c0:2f:5e:96:82:c1:5e:12:54: fb:68:24:6a:57:dd:e9:e3:71:5f:8b:a1:bf:18:8e:b1:25:18: b7:56:52:d0:2e:54:ed:24:c7:e8:c2:d2:7f:29:02:cd:6a:d5: f6:46:c3:ff:d3:74:85:64:47:76:2c:84:fb:f3:79:a4:e4:8b: 51:b0:99:a6:37:e0:5b:12:10:30:71:03:de:7d:3a:f9:3e:10: e6:43:ae:60:fa:7a:2f:bc:70:80:d8:ca:89:66:e3:4d:ad:38: b8:be:d8:d1:47:d7:d5:a2:3a:e0:05:95:44:b4:37:46:b2:e0: e3:8d:ad:ab:5b:8d:07:83:68:06:7e:e0:9a:b6:d7:ef:72:ab: 09:93:ad:b0:cc:63:dd:51:1c:7e:f9:63:51:47:26:a5:5a:e3: 22:9f:ab:35:0d:48:bd:98:95:01:80:e5:1a:8c:1e:d1:22:84: 74:ad:7d:62:7f:66:41:91:96:fc:3f:70:7c:d8:ca:c0:e2:94: ba:ec:fb:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QTJGQjExMC8GA1UEBRMoM0Y0OEFDQTEyQTU5MjdBNzAyRUNFRTI0NDE1MTg5MTk0 RUQ0QUE4MDAeFw0yNTExMDMwNzE4NTVaFw0yNTExMTAwNzE4NTVaMBgxFjAUBgNV BAMTDTY5MDg1NzVmLWEzNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/ROxIB1+ShrBEDm3/AbjXDg16AD96pZeQm5jQ7wpddxXVdaW0lIxXOl1fbpdI xHOvfMhLVl+EPBxl2n4vTLTWIsUgv3ynFP0PhRuW5RYZXPtTFAy4PETUIXdRGW7y jxJN83GC3OGkBt4ylXlrRSCoTNTFyaifQ2AWAvZ4ifhiokFn0rlohsGn+VXPeOTx W3xrsD/Hb06atgQShEsZTOdC/8EJ/+gQKrt61I2XGUZqLr/uJMRYeoFhDR6xzkqL UMzZVHKC4PE8a+l6wrQzsX3IBt49pWb8O8NAOrpTpD4TIY8YeejZp4w55XMHY/h8 WrhRo6YYckh8/t6KmVQqrVOVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUUKnbx/n hGTYc0hqE/duUhtTBBQwHwYDVR0jBBgwFoAUP0isoSpZJ6cC7O4kQVGJGU7UqoAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZBMkZCLzlGOEY5RDAwNDY4 NzExRjBBRjY0Mjc0NEM0RjlBRTAyL1AwaXNvU3BaSjZjQzdPNGtRVkdKR1U3VXFv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUDBpc29TcFpKNmNDN080a1FWR0pHVTdVcW9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZB MkZCLzlGOEY5RDAwNDY4NzExRjBBRjY0Mjc0NEM0RjlBRTAyL1AwaXNvU3BaSjZj QzdPNGtRVkdKR1U3VXFvQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADYHsDqZCjuliQFlaGtzbNnIpK3tT6nl5QTvViB1rfi0RAVX0ak1JOso Obh8NhW/aKlndqBNRlxBfO5g1tKy88AvXpaCwV4SVPtoJGpX3enjcV+Lob8YjrEl GLdWUtAuVO0kx+jC0n8pAs1q1fZGw//TdIVkR3YshPvzeaTki1GwmaY34FsSEDBx A959Ovk+EOZDrmD6ei+8cIDYyolm402tOLi+2NFH19WiOuAFlUS0N0ay4OONratb jQeDaAZ+4Jq21+9yqwmTrbDMY91RHH75Y1FHJqVa4yKfqzUNSL2YlQGA5RqMHtEi hHStfWJ/ZkGRlvw/cHzYysDilLrs+0I= -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:30 2025 by rpki-client