$ rpki-client -vvf rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft File: F_XLSRgEUqiWf5wPZjdatwnQ52g.mft (raw, json) Hash identifier: XeICY8Cp6L1tVrUORTLINg/w6tswi8skqUY9jpF25sU= Subject key identifier: 98:9B:E1:FA:AA:AF:D8:43:32:73:15:2F:F2:86:C6:5E:6F:D6:DE:D0 Authority key identifier: 17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68 Certificate issuer: /CN=A917FD40/serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768 Certificate serial: 0551 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft Manifest number: 05F3 Signing time: Sun 02 Nov 2025 23:23:36 +0000 Manifest this update: Sun 02 Nov 2025 23:23:35 +0000 Manifest next update: Sun 09 Nov 2025 23:23:35 +0000 Files and hashes: 1: F_XLSRgEUqiWf5wPZjdatwnQ52g.crl (hash: a3UF6o4ZE2Ltofi73AXYAJ7N767ldU+5qcO+yCgHMTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1361 (0x551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FD40, serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768 Validity Not Before: Nov 2 23:23:35 2025 GMT Not After : Nov 9 23:23:35 2025 GMT Subject: CN=6907e7f8-d60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1f:b4:19:99:bd:79:85:da:dc:3d:32:1a:5b: 6e:6c:29:65:c5:a3:07:fa:fd:ac:de:27:41:ac:1a: da:59:3d:82:cd:73:d3:87:ef:40:c6:72:9c:b2:bf: 97:35:ad:74:12:4c:13:74:fa:2a:9e:d7:1c:b6:4a: 4e:21:1f:81:f8:0f:7c:71:03:51:09:d5:5b:9f:0f: 64:d5:1e:72:36:12:4a:d7:86:82:21:da:a3:d4:a7: d9:03:ec:b2:64:2f:dc:c8:d2:20:cb:08:a7:f8:56: 63:36:cb:93:82:15:bd:37:d8:93:a7:a4:64:9b:00: 11:ba:7d:49:22:7e:cc:f4:1c:6b:ed:e2:a4:9e:54: ae:b1:32:55:ad:11:aa:97:5c:aa:75:64:7c:d9:47: 5f:a7:36:6a:fc:6c:7b:76:82:23:dd:92:4b:23:f3: b0:49:65:97:78:b0:9a:33:c8:a3:aa:00:3f:8b:f5: 76:a5:db:2c:94:1b:1d:aa:4a:c6:2d:6b:4d:41:ad: 8e:8e:dc:96:92:2e:e9:0b:36:f5:bf:87:56:77:95: 58:d2:c9:96:47:2c:ae:31:62:0a:12:87:dc:b3:98: 52:63:b3:0a:c2:1b:91:ed:4d:bc:37:bf:1e:da:d6: 1a:cd:70:00:62:b1:1f:6c:ea:57:dc:3e:6c:94:26: 7f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9B:E1:FA:AA:AF:D8:43:32:73:15:2F:F2:86:C6:5E:6F:D6:DE:D0 X509v3 Authority Key Identifier: keyid:17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7a:f7:12:91:00:87:7c:30:d2:7d:0c:49:42:c6:40:37:2a: 79:36:28:67:58:73:9f:80:11:35:f5:33:ad:11:8c:05:99:ec: f3:3e:3b:32:1d:64:e9:33:81:c9:c6:5d:45:10:f8:b9:94:7b: 46:b3:81:dc:f0:57:70:e5:0d:4e:a4:2c:8a:c6:cc:ce:ec:03: 9c:0a:60:e2:c3:a1:04:a2:82:c4:0e:c3:d5:32:51:0e:65:87: ab:8c:2c:bb:2a:0c:4e:ca:72:52:0f:9c:5f:8e:e5:61:bb:eb: 59:55:6b:b7:ce:be:e5:70:85:08:c8:bf:b1:7b:35:e2:e8:72: 6c:fc:2d:18:b9:5e:ab:a8:32:4c:27:8d:f0:02:9a:4a:3f:d8: 16:10:1d:c9:d7:58:5a:6e:4e:cd:19:49:68:eb:19:a6:0a:a1: e0:df:1c:eb:ec:c0:5d:fd:02:77:f0:7c:f6:8e:59:f6:9a:90: ef:0f:83:ff:07:2a:c8:a2:fb:6a:59:7f:8e:3a:dd:2e:4a:28: 63:87:3e:46:19:82:8f:98:29:12:e3:77:12:94:72:cd:73:04: f5:46:72:eb:f0:a5:4c:eb:ce:f7:65:eb:37:d9:78:9f:e9:92: c2:51:0c:44:5a:91:ed:e4:a9:4c:b5:5b:d3:fd:3f:a0:63:93: 77:de:d6:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZENDAxMTAvBgNVBAUTKDE3RjVDQjQ5MTgwNDUyQTg5NjdGOUMwRjY2Mzc1QUI3 MDlEMEU3NjgwHhcNMjUxMTAyMjMyMzM1WhcNMjUxMTA5MjMyMzM1WjAYMRYwFAYD VQQDEw02OTA3ZTdmOC1kNjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyx+0GZm9eYXa3D0yGltubCllxaMH+v2s3idBrBraWT2CzXPTh+9AxnKcsr+X Na10EkwTdPoqntcctkpOIR+B+A98cQNRCdVbnw9k1R5yNhJK14aCIdqj1KfZA+yy ZC/cyNIgywin+FZjNsuTghW9N9iTp6RkmwARun1JIn7M9Bxr7eKknlSusTJVrRGq l1yqdWR82UdfpzZq/Gx7doIj3ZJLI/OwSWWXeLCaM8ijqgA/i/V2pdsslBsdqkrG LWtNQa2OjtyWki7pCzb1v4dWd5VY0smWRyyuMWIKEofcs5hSY7MKwhuR7U28N78e 2tYazXAAYrEfbOpX3D5slCZ/NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJib4fqq r9hDMnMVL/KGxl5v1t7QMB8GA1UdIwQYMBaAFBf1y0kYBFKoln+cD2Y3WrcJ0Odo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkQ0MC9GQzIxOTU1RTBC RDYxMUVDOEY5OUQwNjNDNEY5QUUwMi9GX1hMU1JnRVVxaVdmNXdQWmpkYXR3blE1 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfWExTUmdFVXFpV2Y1d1BaamRhdHduUTUyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkQ0MC9GQzIxOTU1RTBCRDYxMUVDOEY5OUQwNjNDNEY5QUUwMi9GX1hMU1JnRVVx aVdmNXdQWmpkYXR3blE1MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/evcSkQCHfDDSfQxJQsZANyp5NihnWHOfgBE19TOtEYwFmezzPjsy HWTpM4HJxl1FEPi5lHtGs4Hc8Fdw5Q1OpCyKxszO7AOcCmDiw6EEooLEDsPVMlEO ZYerjCy7KgxOynJSD5xfjuVhu+tZVWu3zr7lcIUIyL+xezXi6HJs/C0YuV6rqDJM J43wAppKP9gWEB3J11habk7NGUlo6xmmCqHg3xzr7MBd/QJ38Hz2jln2mpDvD4P/ ByrIovtqWX+OOt0uSihjhz5GGYKPmCkS43cSlHLNcwT1RnLr8KVM6873Zes32Xif 6ZLCUQxEWpHt5KlMtVvT/T+gY5N33tZ/ -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:32 2025 by rpki-client