$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft File: CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft (raw, json) Hash identifier: zDKfdtPNLlagP6pLGNbg+8k1Kfm2CHxTMONcoyePy04= Subject key identifier: 2F:25:B6:DE:42:07:02:83:B6:B5:17:6B:94:45:80:07:D4:92:46:23 Authority key identifier: 09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99 Certificate issuer: /CN=A918FA35/serialNumber=0958D7C7B57567D965E148048152E2B478FC4399 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft Manifest number: 16 Signing time: Mon 03 Nov 2025 07:52:39 +0000 Manifest this update: Mon 03 Nov 2025 07:52:38 +0000 Manifest next update: Mon 10 Nov 2025 07:52:38 +0000 Files and hashes: 1: CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl (hash: f/vmqyBzy7ejmdkpM2xf0WrW2R/NJH1eqgJVufq2GaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FA35, serialNumber=0958D7C7B57567D965E148048152E2B478FC4399 Validity Not Before: Nov 3 07:52:38 2025 GMT Not After : Nov 10 07:52:38 2025 GMT Subject: CN=69085f47-2757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:80:42:55:b8:a4:f4:9f:9a:8d:22:20:ca:60: 10:d2:1b:27:da:78:aa:4d:02:92:03:ba:ee:fb:22: bd:fd:77:a0:a9:12:69:75:5a:aa:ab:1c:e2:af:51: ae:fa:0f:4f:66:4f:cd:c3:c7:c8:61:6a:7a:a0:4a: 41:6a:9b:67:d1:97:12:71:38:95:f3:fd:90:ca:28: db:94:47:d7:20:16:63:63:9d:8c:2e:d2:3f:73:83: 71:5f:6c:48:30:4d:ec:10:c7:70:49:02:2c:75:f5: 68:19:01:53:9f:79:3a:52:03:cc:10:23:b0:a0:fd: dc:33:2d:63:ef:75:1f:ac:ea:70:5c:a2:b9:cd:5a: 10:18:6a:54:7e:95:70:1e:88:1b:ca:4c:b0:75:9b: 77:c5:40:19:3b:3e:34:dd:c1:c4:3d:52:58:f6:8b: 7d:df:dd:b9:97:41:25:74:3a:3d:40:a5:30:b0:f9: 98:2e:8d:af:32:18:9e:52:91:39:b8:74:43:d0:3f: 85:ec:ca:9b:df:9e:50:ed:09:2b:3d:a9:2a:2c:6d: af:55:f8:e9:81:7e:2b:45:50:cb:2e:82:75:2b:9b: e2:0b:59:00:2a:02:31:90:2a:fd:a5:5c:1d:d9:46: 40:1d:b4:bd:90:65:af:e9:63:48:96:0f:0b:df:78: 9d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:25:B6:DE:42:07:02:83:B6:B5:17:6B:94:45:80:07:D4:92:46:23 X509v3 Authority Key Identifier: keyid:09:58:D7:C7:B5:75:67:D9:65:E1:48:04:81:52:E2:B4:78:FC:43:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/5E4034DE98B911F0B9960B20C4F9AE02/CVjXx7V1Z9ll4UgEgVLitHj8Q5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:90:21:af:1b:99:00:eb:2a:d3:32:21:76:03:57:43:3a:c8: 29:99:5f:46:18:4a:87:3a:30:8d:bf:6c:94:f8:6d:b7:b6:fd: 02:45:88:de:3e:57:20:38:b3:ad:bb:f8:b3:ca:96:dd:db:55: 43:d7:93:31:d7:88:74:9b:72:4c:ae:cd:89:cc:6c:32:fc:b7: c6:fb:41:7a:34:3c:ee:e5:34:c9:0d:e1:7b:0f:ff:a4:40:65: 01:44:79:32:1e:91:3e:94:e7:a1:50:70:56:80:55:5a:a4:1b: ab:77:bb:8b:d7:19:c0:c9:64:fd:d6:40:34:ac:fe:eb:e9:ee: e9:44:64:ea:12:01:9a:e1:c1:ce:51:1f:6e:0c:8a:2d:58:b2: ed:9a:08:53:af:38:d7:9d:4a:cb:8b:31:e0:4b:38:06:01:16: 2c:04:d7:ba:e5:45:e4:7d:0b:a5:dc:83:9c:eb:9c:a4:a2:17: 47:58:a2:75:03:a3:44:70:f1:ca:46:be:be:52:78:fa:99:4c: c0:aa:b7:b5:88:64:2d:01:59:7b:a3:0f:57:f2:8a:3a:d5:a0: 49:4a:03:73:3e:9d:bf:17:e4:5c:a0:ed:aa:8f:74:6d:1a:ac: 48:09:45:1d:04:5a:9f:b3:5c:a0:5c:98:14:83:00:db:04:fa: 02:ca:fa:e0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RkEzNTExMC8GA1UEBRMoMDk1OEQ3QzdCNTc1NjdEOTY1RTE0ODA0ODE1MkUyQjQ3 OEZDNDM5OTAeFw0yNTExMDMwNzUyMzhaFw0yNTExMTAwNzUyMzhaMBgxFjAUBgNV BAMTDTY5MDg1ZjQ3LTI3NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHgEJVuKT0n5qNIiDKYBDSGyfaeKpNApIDuu77Ir39d6CpEml1WqqrHOKvUa76 D09mT83Dx8hhanqgSkFqm2fRlxJxOJXz/ZDKKNuUR9cgFmNjnYwu0j9zg3FfbEgw TewQx3BJAix19WgZAVOfeTpSA8wQI7Cg/dwzLWPvdR+s6nBcornNWhAYalR+lXAe iBvKTLB1m3fFQBk7PjTdwcQ9Ulj2i33f3bmXQSV0Oj1ApTCw+Zguja8yGJ5SkTm4 dEPQP4XsypvfnlDtCSs9qSosba9V+OmBfitFUMsugnUrm+ILWQAqAjGQKv2lXB3Z RkAdtL2QZa/pY0iWDwvfeJ2nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULyW23kIH AoO2tRdrlEWAB9SSRiMwHwYDVR0jBBgwFoAUCVjXx7V1Z9ll4UgEgVLitHj8Q5kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGQTM1LzVFNDAzNERFOThC OTExRjBCOTk2MEIyMEM0RjlBRTAyL0NWalh4N1YxWjlsbDRVZ0VnVkxpdEhqOFE1 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1ZqWHg3VjFaOWxsNFVnRWdWTGl0SGo4UTVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG QTM1LzVFNDAzNERFOThCOTExRjBCOTk2MEIyMEM0RjlBRTAyL0NWalh4N1YxWjls bDRVZ0VnVkxpdEhqOFE1ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHWQIa8bmQDrKtMyIXYDV0M6yCmZX0YYSoc6MI2/bJT4bbe2/QJFiN4+ VyA4s627+LPKlt3bVUPXkzHXiHSbckyuzYnMbDL8t8b7QXo0PO7lNMkN4XsP/6RA ZQFEeTIekT6U56FQcFaAVVqkG6t3u4vXGcDJZP3WQDSs/uvp7ulEZOoSAZrhwc5R H24Mii1Ysu2aCFOvONedSsuLMeBLOAYBFiwE17rlReR9C6Xcg5zrnKSiF0dYonUD o0Rw8cpGvr5SePqZTMCqt7WIZC0BWXujD1fyijrVoElKA3M+nb8X5Fyg7aqPdG0a rEgJRR0EWp+zXKBcmBSDANsE+gLK+uA= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:48 2025 by rpki-client