$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft File: CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft (raw, json) Hash identifier: MtPr4dOLHMpYZZ+HLQmQOMJwXytTkmDotpdBmWkb7Ac= Subject key identifier: E3:F9:FA:4D:99:6B:28:11:4C:3C:20:49:AB:92:69:A7:0D:19:DD:FD Authority key identifier: 0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D Certificate issuer: /CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Certificate serial: 0BFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft Manifest number: 0BF8 Signing time: Tue 04 Nov 2025 18:56:25 +0000 Manifest this update: Tue 04 Nov 2025 18:56:24 +0000 Manifest next update: Tue 11 Nov 2025 18:56:24 +0000 Files and hashes: 1: CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl (hash: rM/lARY73AFyrAR6vP41JFr/wRh46lY2AwbNWw96uqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3069 (0xbfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FE1, serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Validity Not Before: Nov 4 18:56:24 2025 GMT Not After : Nov 11 18:56:24 2025 GMT Subject: CN=690a4c58-c109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1b:70:a4:62:29:10:50:af:a2:b5:53:59:a1: a0:98:37:b6:e5:b6:16:aa:67:04:b9:93:f3:d9:4c: 94:c6:38:d8:51:92:47:1f:e7:f8:f1:09:27:a7:70: ce:88:29:2d:dd:0f:30:81:a6:cc:63:9b:dd:4e:57: fd:ca:e9:1a:07:4c:58:0a:e9:07:b6:64:09:df:22: 92:14:c2:5a:7f:83:cb:9e:ec:64:a6:bf:29:ca:3b: 6f:a5:c0:bd:1e:7e:0e:cb:e5:eb:ba:f6:a9:cf:f9: 5a:6d:47:3a:28:cf:13:78:fe:a8:d9:6d:3d:8c:75: fe:66:b4:c2:ee:45:52:1a:66:38:ec:57:91:b5:e4: b3:33:8f:df:3f:b8:c8:07:cb:67:4c:60:cc:73:1c: 72:af:7e:d4:53:98:19:7c:2a:62:fa:68:35:cd:90: af:89:b3:fb:2e:8e:4e:ed:b5:49:45:c5:8c:be:4b: 2f:95:48:65:d6:88:25:7d:de:39:17:fc:f7:a4:ef: 95:89:48:49:dc:56:95:a9:72:ce:25:b5:c5:05:ea: c5:5b:2f:dc:4f:7c:51:f1:b4:a8:86:de:d0:22:df: 37:9f:fb:a5:00:0b:7b:93:df:dd:9a:ec:ae:22:e4: 0a:0f:2f:6d:1b:f4:15:b1:c8:eb:d8:2f:90:05:d8: dd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F9:FA:4D:99:6B:28:11:4C:3C:20:49:AB:92:69:A7:0D:19:DD:FD X509v3 Authority Key Identifier: keyid:0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:9e:e7:46:17:a3:13:50:53:10:8d:1f:99:07:42:45:1a:fc: ea:63:9b:a3:0a:bc:ab:47:fe:c0:66:78:d2:f4:2b:49:7b:fa: d1:7c:5a:0e:0d:57:b6:dd:18:aa:fd:dc:ad:74:6f:42:35:01: 05:f1:45:0f:7f:ec:2e:1f:18:ad:62:d4:48:ae:00:e1:b6:a6: 8a:4a:54:e7:47:c5:f5:94:59:ac:78:5a:d3:1b:0f:f7:ca:fc: fe:ad:7f:bd:89:43:fa:97:c5:fb:57:24:5d:62:41:d0:1f:ff: a7:a2:48:88:d4:66:a0:39:70:0f:10:aa:4b:86:34:05:6f:b3: 81:89:cb:54:44:fe:00:b7:d9:dd:9f:cd:55:87:8e:1b:fb:73: 63:83:61:06:5a:50:94:28:67:09:81:6f:d4:a2:e2:62:5a:69: 3b:b2:eb:a3:71:a6:7a:16:9e:02:7f:8c:49:de:fa:0e:f2:d0: c0:b2:48:4e:48:91:ee:9f:e1:3b:b4:4e:ae:ff:6b:c0:d4:2f: 22:13:65:ba:96:45:eb:84:71:16:2e:f8:9b:89:11:10:77:35: 80:44:95:e4:53:9f:9c:9e:84:d9:ba:38:d0:37:9f:a1:34:84: 1b:94:2e:d1:35:bf:13:8b:1a:d4:58:a4:b0:21:73:38:9f:42: b2:0f:05:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGRTExMTAvBgNVBAUTKDBBMDcwRDhFM0ExNUZENUVEOEU5Rjc5RjE3MEM3Q0ZC QTY5RTQ0M0QwHhcNMjUxMTA0MTg1NjI0WhcNMjUxMTExMTg1NjI0WjAYMRYwFAYD VQQDEw02OTBhNGM1OC1jMTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxtwpGIpEFCvorVTWaGgmDe25bYWqmcEuZPz2UyUxjjYUZJHH+f48Qknp3DO iCkt3Q8wgabMY5vdTlf9yukaB0xYCukHtmQJ3yKSFMJaf4PLnuxkpr8pyjtvpcC9 Hn4Oy+Xruvapz/labUc6KM8TeP6o2W09jHX+ZrTC7kVSGmY47FeRteSzM4/fP7jI B8tnTGDMcxxyr37UU5gZfCpi+mg1zZCvibP7Lo5O7bVJRcWMvksvlUhl1oglfd45 F/z3pO+ViUhJ3FaVqXLOJbXFBerFWy/cT3xR8bSoht7QIt83n/ulAAt7k9/dmuyu IuQKDy9tG/QVscjr2C+QBdjdXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOP5+k2Z aygRTDwgSauSaacNGd39MB8GA1UdIwQYMBaAFAoHDY46Ff1e2On3nxcMfPumnkQ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZFMS8wMzc1QUU2QTI0 ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9WN1k2ZmVmRnd4OC02YWVS RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnY05qam9WX1Y3WTZmZWZGd3g4LTZhZVJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkZFMS8wMzc1QUU2QTI0ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9W N1k2ZmVmRnd4OC02YWVSRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSnudGF6MTUFMQjR+ZB0JFGvzqY5ujCryrR/7AZnjS9CtJe/rRfFoO DVe23Riq/dytdG9CNQEF8UUPf+wuHxitYtRIrgDhtqaKSlTnR8X1lFmseFrTGw/3 yvz+rX+9iUP6l8X7VyRdYkHQH/+nokiI1GagOXAPEKpLhjQFb7OBictURP4At9nd n81Vh44b+3Njg2EGWlCUKGcJgW/UouJiWmk7suujcaZ6Fp4Cf4xJ3voO8tDAskhO SJHun+E7tE6u/2vA1C8iE2W6lkXrhHEWLvibiREQdzWARJXkU5+cnoTZujjQN5+h NIQblC7RNb8TixrUWKSwIXM4n0KyDwX1 -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:25 2025 by rpki-client