$ rpki-client -vvf rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft File: 13OnYxe8qx7vA29fbkx7NMSra3s.mft (raw, json) Hash identifier: jV6vnMxZEieOsNHN6Vn/5MeBnqepYRiDQ+BYKcIDGt4= Subject key identifier: EA:F7:20:65:25:F9:78:84:4C:79:75:19:66:F3:20:D0:D7:19:09:14 Authority key identifier: D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B Certificate issuer: /CN=A917AE24/serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B Certificate serial: 04FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft Manifest number: 04FA Signing time: Sun 02 Nov 2025 23:38:35 +0000 Manifest this update: Sun 02 Nov 2025 23:38:34 +0000 Manifest next update: Sun 09 Nov 2025 23:38:34 +0000 Files and hashes: 1: 13OnYxe8qx7vA29fbkx7NMSra3s.crl (hash: 1TDJwuT4woDE3spalFM12fkjzTshxp2KqrElR+zz64k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1274 (0x4fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AE24, serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B Validity Not Before: Nov 2 23:38:34 2025 GMT Not After : Nov 9 23:38:34 2025 GMT Subject: CN=6907eb7a-7ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:78:a1:07:9a:85:b6:76:13:17:a8:c5:c0:2d: 66:d8:c9:7f:a5:ff:c4:0a:99:c2:2d:a3:91:6b:50: 76:7e:df:4c:14:fd:0b:68:d4:79:4e:06:13:fa:18: 02:ce:23:63:11:c6:fc:c5:e6:08:96:0a:8e:54:9b: 36:e2:79:7a:63:f6:b7:8f:fc:d3:c3:58:9f:ed:25: d7:a2:d8:32:7b:44:9e:0a:72:2a:cb:df:da:64:51: cf:9b:1b:7c:78:36:5a:27:fc:15:7b:e0:c5:31:af: 01:4b:0f:f3:31:7b:a8:db:b3:1c:0b:78:ea:62:8d: 7f:60:74:af:c9:55:c5:7a:d7:66:00:e4:d7:6a:f7: 7a:a0:23:88:8e:1c:04:fb:8f:5b:4d:8a:9c:6e:5c: 1d:56:7e:2c:5e:b5:db:d8:f0:9b:19:4e:94:d7:db: 30:93:fe:80:20:56:10:7c:ba:bf:79:21:09:21:13: a6:b1:5e:59:5b:5e:cc:a4:8e:43:6d:69:de:d0:a5: 80:f1:7f:9e:62:01:f9:49:7e:ed:85:ad:ff:a1:39: f2:17:43:14:f9:ca:6e:8e:bd:b8:f6:49:ba:26:f3: 31:3b:50:fb:0a:84:ef:76:67:f7:af:d4:e1:36:68: 96:2d:d5:e6:cc:2c:28:ee:03:53:e9:c4:35:f6:7b: 67:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F7:20:65:25:F9:78:84:4C:79:75:19:66:F3:20:D0:D7:19:09:14 X509v3 Authority Key Identifier: keyid:D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:ba:1d:dd:53:35:c0:13:44:99:be:70:18:87:e2:bd:de:84: c9:c8:63:5e:b5:49:7b:c9:02:d8:93:28:85:3a:df:67:f7:18: 1a:65:a1:d6:d9:ed:59:4b:15:8c:15:14:a9:5d:c1:08:e8:d5: dc:06:32:d4:2b:2e:0d:ab:47:41:75:9e:98:45:61:74:c7:bf: 00:f1:1d:f6:3b:6c:d5:64:09:db:86:9a:95:2a:22:fb:d1:f7: 21:18:ce:4c:86:9a:a2:10:42:d7:25:af:0a:86:fb:10:a0:fb: 81:31:3c:6e:47:1e:55:a0:a2:03:c3:3f:d5:12:9a:22:40:b3: d1:85:75:f6:84:e2:ba:73:20:34:41:f7:a6:8b:f9:18:2e:53: c3:be:52:47:14:bc:fc:d0:77:3e:62:61:7c:98:e9:e8:59:c9: 90:07:90:40:5f:26:8b:42:ce:6e:1a:64:36:8b:83:3e:dc:6c: 7b:b9:db:87:a2:f1:31:da:45:e1:2f:5d:06:f4:04:13:5b:0e: 1b:27:4a:7b:d9:fa:f5:e9:08:87:1e:55:57:7b:64:88:ba:87: 88:9b:56:c0:6f:47:ff:e1:95:22:a7:c8:26:b1:e7:54:d7:00: f7:3c:77:72:f2:ec:9f:2d:f8:e1:ab:5c:0c:7e:7b:87:1b:25: 1e:0c:56:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FFMjQxMTAvBgNVBAUTKEQ3NzNBNzYzMTdCQ0FCMUVFRjAzNkY1RjZFNEM3QjM0 QzRBQjZCN0IwHhcNMjUxMTAyMjMzODM0WhcNMjUxMTA5MjMzODM0WjAYMRYwFAYD VQQDEw02OTA3ZWI3YS03YWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznihB5qFtnYTF6jFwC1m2Ml/pf/ECpnCLaORa1B2ft9MFP0LaNR5TgYT+hgC ziNjEcb8xeYIlgqOVJs24nl6Y/a3j/zTw1if7SXXotgye0SeCnIqy9/aZFHPmxt8 eDZaJ/wVe+DFMa8BSw/zMXuo27McC3jqYo1/YHSvyVXFetdmAOTXavd6oCOIjhwE +49bTYqcblwdVn4sXrXb2PCbGU6U19swk/6AIFYQfLq/eSEJIROmsV5ZW17MpI5D bWne0KWA8X+eYgH5SX7tha3/oTnyF0MU+cpujr249km6JvMxO1D7CoTvdmf3r9Th NmiWLdXmzCwo7gNT6cQ19ntnLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOr3IGUl +XiETHl1GWbzINDXGQkUMB8GA1UdIwQYMBaAFNdzp2MXvKse7wNvX25MezTEq2t7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUUyNC84RUM0MDA5NDMw QTQxMUVDOEJFREI4MkRDNEY5QUUwMi8xM09uWXhlOHF4N3ZBMjlmYmt4N05NU3Jh M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzT25ZeGU4cXg3dkEyOWZia3g3Tk1TcmEzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUUyNC84RUM0MDA5NDMwQTQxMUVDOEJFREI4MkRDNEY5QUUwMi8xM09uWXhlOHF4 N3ZBMjlmYmt4N05NU3JhM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByuh3dUzXAE0SZvnAYh+K93oTJyGNetUl7yQLYkyiFOt9n9xgaZaHW 2e1ZSxWMFRSpXcEI6NXcBjLUKy4Nq0dBdZ6YRWF0x78A8R32O2zVZAnbhpqVKiL7 0fchGM5MhpqiEELXJa8KhvsQoPuBMTxuRx5VoKIDwz/VEpoiQLPRhXX2hOK6cyA0 Qfemi/kYLlPDvlJHFLz80Hc+YmF8mOnoWcmQB5BAXyaLQs5uGmQ2i4M+3Gx7uduH ovEx2kXhL10G9AQTWw4bJ0p72fr16QiHHlVXe2SIuoeIm1bAb0f/4ZUip8gmsedU 1wD3PHdy8uyfLfjhq1wMfnuHGyUeDFYM -----END CERTIFICATE-----Generated at Tue Nov 4 01:03:59 2025 by rpki-client