$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft File: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft (raw, json) Hash identifier: l61EC6wQgBLBhqM411a8LuYGbKlbjGjbtFvt/FDE15E= Subject key identifier: 03:29:43:D7:21:E2:E2:67:3C:35:7D:C7:7B:8F:76:19:52:CF:AF:22 Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC Certificate issuer: /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC Certificate serial: 049B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft Manifest number: 0496 Signing time: Sun 02 Nov 2025 23:59:21 +0000 Manifest this update: Sun 02 Nov 2025 23:59:20 +0000 Manifest next update: Sun 09 Nov 2025 23:59:20 +0000 Files and hashes: 1: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl (hash: QtZEiXmmsVnfEpyWH1gPt3cHQ0H9JNMQ+yMuzJH+XdE=) 2: F5DED02A588511ECAC342433C4F9AE02.roa (hash: H8OBeRqs2B2zDmPzaFX4iRN3UQF65d9TwV3ksnnmLrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1179 (0x49b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F6E, serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC Validity Not Before: Nov 2 23:59:20 2025 GMT Not After : Nov 9 23:59:20 2025 GMT Subject: CN=6907f058-f6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:19:90:e5:2a:01:17:6e:88:72:4e:73:54:5f: 44:f6:e1:2f:2a:85:b6:06:bf:7d:d6:67:ba:21:af: 2f:81:44:70:52:ea:14:e0:47:50:29:12:c6:d2:02: 90:f4:c6:9f:99:7c:44:e2:1b:4b:8f:29:93:e4:25: d2:c0:a8:78:53:19:b6:4a:77:19:ff:3d:3e:89:db: bd:4e:5a:4e:53:c0:66:c5:e1:4f:f6:b6:5f:0e:d4: 1a:1a:33:b1:29:44:6c:10:30:96:5d:99:27:2b:92: 85:8a:76:25:91:19:f4:bf:da:87:7f:6f:e4:35:6e: 0b:ce:c9:ff:99:55:77:15:85:51:ab:df:80:61:3b: e7:76:9a:f6:c5:31:bd:19:89:8c:f9:e2:aa:0f:4c: 32:fd:d8:b9:47:00:94:00:a6:b7:50:d7:9f:2d:7b: ae:83:bb:95:7d:56:60:8d:5e:5c:e3:6e:c8:a0:4d: 70:76:6d:fa:3f:ee:06:e4:21:4b:ca:d6:52:87:c5: 09:61:ff:c8:a2:53:c3:56:60:98:92:1d:08:a7:43: 77:26:a2:d1:aa:51:c7:86:9a:6d:ec:4f:4c:71:dd: 28:5b:08:44:1b:2a:f6:75:87:b3:f7:30:80:45:11: bd:ea:b4:1c:3a:4e:5b:b2:bb:cf:ce:1f:04:a8:68: 74:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:29:43:D7:21:E2:E2:67:3C:35:7D:C7:7B:8F:76:19:52:CF:AF:22 X509v3 Authority Key Identifier: keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:de:2d:23:69:f5:02:d6:1b:24:65:50:14:32:cc:7a:5b:a6: 58:02:2d:fa:b5:5c:1e:67:48:e4:bc:cf:bc:93:c5:5b:2f:13: 59:3f:68:03:c9:31:76:9d:a0:a0:a0:c0:9d:d5:1e:8c:dc:53: 5b:c1:d5:aa:05:e2:03:7b:07:85:c5:c1:c4:27:3e:7f:63:75: 77:7c:db:6c:66:2f:37:78:79:3f:d2:99:7a:3c:9b:50:3d:e5: a4:c3:f9:f3:95:10:a7:99:35:52:21:a3:9a:45:86:b2:ad:fd: 44:34:bd:ce:2e:f7:aa:c5:fb:8e:35:ef:fa:5d:6d:e2:a7:49: 5d:4a:40:66:27:f3:4b:8b:1a:d2:90:d7:db:32:a2:4f:21:fa: 85:02:3f:2a:d2:dc:da:23:e3:9a:99:01:5c:7b:1e:f8:b2:7c: b7:b7:c3:85:8f:11:60:a0:74:6e:d5:e2:52:23:05:2b:24:45: a6:5a:a2:4b:6a:7e:d1:23:99:56:df:73:9d:b4:bd:83:98:2b: 0b:2b:7e:d8:fa:43:e6:c6:c9:62:0b:ad:a0:ea:b6:86:68:3e: b0:e2:3f:df:04:bd:e7:1f:04:42:92:15:fe:8e:db:ff:f5:0a: 3f:ce:e6:d0:42:c7:ce:6e:2d:88:78:20:0c:2e:75:b5:9e:95: 8f:ed:a8:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNkUxMTAvBgNVBAUTKERGNzUyNkE4OEVBNzcwOTRBNjJGMTQzOUZGQjQyMDhG NTAyRjRGRUMwHhcNMjUxMTAyMjM1OTIwWhcNMjUxMTA5MjM1OTIwWjAYMRYwFAYD VQQDEw02OTA3ZjA1OC1mNmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hmQ5SoBF26Ick5zVF9E9uEvKoW2Br991me6Ia8vgURwUuoU4EdQKRLG0gKQ 9MafmXxE4htLjymT5CXSwKh4Uxm2SncZ/z0+idu9TlpOU8BmxeFP9rZfDtQaGjOx KURsEDCWXZknK5KFinYlkRn0v9qHf2/kNW4Lzsn/mVV3FYVRq9+AYTvndpr2xTG9 GYmM+eKqD0wy/di5RwCUAKa3UNefLXuug7uVfVZgjV5c427IoE1wdm36P+4G5CFL ytZSh8UJYf/IolPDVmCYkh0Ip0N3JqLRqlHHhppt7E9Mcd0oWwhEGyr2dYez9zCA RRG96rQcOk5bsrvPzh8EqGh0xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMpQ9ch 4uJnPDV9x3uPdhlSz68iMB8GA1UdIwQYMBaAFN91JqiOp3CUpi8UOf+0II9QL0/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2RS8wNjM1ODYwNjU4 ODMxMUVDQkRCQjRFNkJDNEY5QUUwMi8zM1VtcUk2bmNKU21MeFE1XzdRZ2oxQXZU LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzVW1xSTZuY0pTbUx4UTVfN1FnajFBdlQtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2RS8wNjM1ODYwNjU4ODMxMUVDQkRCQjRFNkJDNEY5QUUwMi8zM1VtcUk2bmNK U21MeFE1XzdRZ2oxQXZULXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB93i0jafUC1hskZVAUMsx6W6ZYAi36tVweZ0jkvM+8k8VbLxNZP2gD yTF2naCgoMCd1R6M3FNbwdWqBeIDeweFxcHEJz5/Y3V3fNtsZi83eHk/0pl6PJtQ PeWkw/nzlRCnmTVSIaOaRYayrf1ENL3OLveqxfuONe/6XW3ip0ldSkBmJ/NLixrS kNfbMqJPIfqFAj8q0tzaI+OamQFcex74sny3t8OFjxFgoHRu1eJSIwUrJEWmWqJL an7RI5lW33OdtL2DmCsLK37Y+kPmxsliC62g6raGaD6w4j/fBL3nHwRCkhX+jtv/ 9Qo/zubQQsfObi2IeCAMLnW1npWP7ag6 -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:34 2025 by rpki-client