$ rpki-client -vvf rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft File: PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft (raw, json) Hash identifier: opqQdmqJRItVwQCYCYXHrhwSmy9guI15oT6M92wE0nM= Subject key identifier: 5D:74:51:70:24:6C:B1:AC:D9:6E:C0:AA:E2:DE:DB:82:42:C0:D0:63 Authority key identifier: 3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2 Certificate issuer: /CN=A9173FAC/serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft Manifest number: 6D Signing time: Mon 03 Nov 2025 06:55:52 +0000 Manifest this update: Mon 03 Nov 2025 06:55:52 +0000 Manifest next update: Mon 10 Nov 2025 06:55:52 +0000 Files and hashes: 1: PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl (hash: jKku0A7ZSVbOzx/+5yDPyd+nVP5a015FH4zELuy7KWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173FAC, serialNumber=3F1A8EA3D2ADC6ECB2360E0C376CE559B9FF71F2 Validity Not Before: Nov 3 06:55:52 2025 GMT Not After : Nov 10 06:55:52 2025 GMT Subject: CN=690851f8-4611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:25:1c:07:8a:0e:f7:0a:39:65:4d:11:17:3e: 7a:aa:ad:dd:3f:6c:c6:fd:ff:e6:06:ac:4f:6d:e8: 63:a1:7a:bd:f6:19:65:8a:ce:3f:93:7c:b5:49:f7: 2e:38:ca:50:ac:b3:12:c0:d1:11:24:29:7e:14:14: df:79:ab:97:6f:6f:4a:e3:a3:98:fd:b2:10:6d:8b: 0d:df:c2:18:65:b2:13:ae:8e:83:ab:54:5d:ce:06: c9:6b:62:01:1a:01:ec:07:3a:60:ef:a1:1e:6e:d8: 83:75:d1:aa:f8:3c:61:77:d7:15:2a:40:89:d1:fa: c6:b3:8b:01:e5:28:06:f4:79:1e:7d:d2:1f:ab:74: 47:53:6d:e2:4e:01:24:45:70:50:2f:97:af:9b:34: 84:5c:e2:fa:6c:c0:5e:d5:bf:46:1d:01:09:4c:06: 9b:51:d9:ca:8d:ff:29:c8:a3:55:12:05:6e:f5:d8: 21:ff:23:2f:87:10:dd:c9:07:ad:83:33:75:b7:c5: 59:a2:0e:42:c2:80:0a:16:99:e8:3b:3f:6f:6c:cd: ce:2b:4a:ee:24:62:de:36:e9:3e:51:aa:11:2a:4a: 01:dd:e6:3e:6d:7c:27:5b:8c:d6:d3:a2:d9:4a:70: 11:09:68:65:b1:5d:52:80:80:2e:d3:32:ea:26:30: 5b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:74:51:70:24:6C:B1:AC:D9:6E:C0:AA:E2:DE:DB:82:42:C0:D0:63 X509v3 Authority Key Identifier: keyid:3F:1A:8E:A3:D2:AD:C6:EC:B2:36:0E:0C:37:6C:E5:59:B9:FF:71:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PxqOo9KtxuyyNg4MN2zlWbn_cfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173FAC/B8F5C76A101811F080BCC348C4F9AE02/PxqOo9KtxuyyNg4MN2zlWbn_cfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:02:66:bc:06:2f:10:da:bc:b2:c3:59:fc:d7:eb:eb:c8:fe: d0:20:07:c6:04:8a:08:4a:36:53:f3:50:db:b2:fc:ce:e0:91: 28:10:15:fb:7f:48:d0:6b:f9:0e:2d:74:c7:9e:46:35:de:66: 52:99:56:bf:23:d1:ae:aa:3a:6d:a3:e4:0e:60:07:0f:96:ff: 12:bc:31:03:88:5a:b3:5f:e0:f7:40:f4:e0:ae:b8:73:cc:14: 1e:b2:88:de:65:e8:21:9c:25:f3:06:33:30:b8:f5:a7:34:ba: 31:3b:43:d5:a8:6f:c3:a0:f9:00:a5:ce:48:11:6c:46:86:da: ef:c4:7e:61:a1:11:ae:37:d7:ef:fb:ee:aa:a9:06:61:7c:ae: 4a:24:b3:96:39:34:bb:c1:28:ed:5f:87:ec:0d:b0:75:5e:94: dd:e9:5e:18:78:6f:78:4d:b0:34:ea:47:91:85:96:fb:09:3b: d0:50:59:7c:b1:ce:63:d2:4f:8a:7a:13:9d:ec:1b:05:78:ec: 5a:11:91:ff:8a:dd:68:74:71:2c:ca:79:a5:b3:ad:73:08:71: 21:c0:52:3d:45:1b:ee:f6:a6:62:f8:90:a3:7a:8f:ed:19:a0: c0:02:dc:39:dd:b2:01:f1:4c:96:f5:99:d1:85:e3:f2:ea:08: 06:7a:d1:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0ZBQzExMC8GA1UEBRMoM0YxQThFQTNEMkFEQzZFQ0IyMzYwRTBDMzc2Q0U1NTlC OUZGNzFGMjAeFw0yNTExMDMwNjU1NTJaFw0yNTExMTAwNjU1NTJaMBgxFjAUBgNV BAMTDTY5MDg1MWY4LTQ2MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiJRwHig73CjllTREXPnqqrd0/bMb9/+YGrE9t6GOher32GWWKzj+TfLVJ9y44 ylCssxLA0REkKX4UFN95q5dvb0rjo5j9shBtiw3fwhhlshOujoOrVF3OBslrYgEa AewHOmDvoR5u2IN10ar4PGF31xUqQInR+saziwHlKAb0eR590h+rdEdTbeJOASRF cFAvl6+bNIRc4vpswF7Vv0YdAQlMBptR2cqN/ynIo1USBW712CH/Iy+HEN3JB62D M3W3xVmiDkLCgAoWmeg7P29szc4rSu4kYt426T5RqhEqSgHd5j5tfCdbjNbTotlK cBEJaGWxXVKAgC7TMuomMFunAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXXRRcCRs sazZbsCq4t7bgkLA0GMwHwYDVR0jBBgwFoAUPxqOo9KtxuyyNg4MN2zlWbn/cfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczRkFDL0I4RjVDNzZBMTAx ODExRjA4MEJDQzM0OEM0RjlBRTAyL1B4cU9vOUt0eHV5eU5nNE1OMnpsV2JuX2Nm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHhxT285S3R4dXl5Tmc0TU4yemxXYm5fY2ZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz RkFDL0I4RjVDNzZBMTAxODExRjA4MEJDQzM0OEM0RjlBRTAyL1B4cU9vOUt0eHV5 eU5nNE1OMnpsV2JuX2NmSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH4CZrwGLxDavLLDWfzX6+vI/tAgB8YEighKNlPzUNuy/M7gkSgQFft/ SNBr+Q4tdMeeRjXeZlKZVr8j0a6qOm2j5A5gBw+W/xK8MQOIWrNf4PdA9OCuuHPM FB6yiN5l6CGcJfMGMzC49ac0ujE7Q9Wob8Og+QClzkgRbEaG2u/EfmGhEa431+/7 7qqpBmF8rkoks5Y5NLvBKO1fh+wNsHVelN3pXhh4b3hNsDTqR5GFlvsJO9BQWXyx zmPST4p6E53sGwV47FoRkf+K3Wh0cSzKeaWzrXMIcSHAUj1FG+72pmL4kKN6j+0Z oMAC3DndsgHxTJb1mdGF4/LqCAZ60cA= -----END CERTIFICATE-----Generated at Tue Nov 4 07:19:26 2025 by rpki-client