$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft File: SIcH43YxSt1UXMZgreziKYZME-A.mft (raw, json) Hash identifier: 4VFGpz5BI/a7Q2kMAViNSC5lDi5BogSjH2StWC4mJ6I= Subject key identifier: 08:ED:D2:B5:C0:2A:99:F2:FE:BF:8C:EF:45:74:D3:25:1B:48:70:C9 Authority key identifier: 48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0 Certificate issuer: /CN=A9193B7A/serialNumber=488707E376314ADD545CC660ADECE229864C13E0 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft Manifest number: 28 Signing time: Mon 03 Nov 2025 07:41:49 +0000 Manifest this update: Mon 03 Nov 2025 07:41:48 +0000 Manifest next update: Mon 10 Nov 2025 07:41:47 +0000 Files and hashes: 1: SIcH43YxSt1UXMZgreziKYZME-A.crl (hash: vm607FNSBAXkM6bPdx6zqgwUidEdYRBOORKah+Z1PCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193B7A, serialNumber=488707E376314ADD545CC660ADECE229864C13E0 Validity Not Before: Nov 3 07:41:48 2025 GMT Not After : Nov 10 07:41:47 2025 GMT Subject: CN=69085cbc-4113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:eb:f6:99:d8:7e:e8:fd:ae:1f:ed:16:9e: b4:ce:cc:8c:b0:24:6c:3f:b6:d4:0c:73:aa:bb:c6: 76:b5:e1:da:1a:84:10:d3:5c:bc:25:ae:20:72:b7: c2:ce:58:06:c1:16:cb:69:6e:16:ec:e6:80:68:d1: ef:f3:49:78:d6:44:4e:a0:98:17:3e:6b:79:a5:d9: b3:d3:74:2c:de:1a:12:a9:14:4d:c2:04:e1:cc:c4: 65:9c:e7:b8:7f:57:db:db:4a:81:32:5a:65:2c:85: 79:d3:60:49:5d:8c:d0:77:9a:f5:49:35:83:80:95: 5b:b1:c1:41:27:2a:0e:8f:c2:96:9f:e9:2d:0f:db: be:f0:39:b5:ed:18:9d:32:fd:b4:66:6f:d0:64:b8: 5f:7a:f4:1b:cc:36:57:31:00:4c:30:b0:39:86:07: 76:0c:3e:c4:c9:57:e2:35:57:dd:57:41:b8:b8:c2: ec:d9:3a:99:63:f7:24:0f:43:8b:90:27:7f:0b:5f: fd:bc:b3:87:a1:0a:d0:0c:7a:09:db:6b:d1:14:9d: e6:b4:85:c7:f2:7a:9f:1c:db:03:c4:51:4b:cd:84: 35:6c:fe:83:af:74:76:27:83:7e:a5:d3:f3:86:b1: dd:e6:36:ed:21:34:37:96:38:40:59:82:8b:76:ba: e4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:ED:D2:B5:C0:2A:99:F2:FE:BF:8C:EF:45:74:D3:25:1B:48:70:C9 X509v3 Authority Key Identifier: keyid:48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:a8:2d:7f:79:c6:09:66:c7:a2:c5:b3:6f:3f:69:68:ac:d9: 6b:ca:ca:a9:82:cd:a1:13:4d:fc:48:21:5c:87:05:14:6d:20: 0c:2c:79:3e:e8:ee:9d:3f:b0:61:97:ff:49:bd:f8:e1:c3:8f: c0:fc:ef:81:1a:71:d3:9c:c0:f1:9a:82:32:b2:5c:9e:b9:9a: 3b:ad:ff:4f:c3:f7:ab:8d:e5:99:f3:ae:d1:4e:bc:3e:a1:99: 0d:41:3b:f2:03:55:23:4b:09:57:3d:f1:24:41:59:24:85:64: e1:25:9e:57:6c:44:1b:13:aa:ae:2b:bb:65:63:8b:18:f7:3b: 24:d0:18:4b:a8:e1:93:f1:3d:bf:f9:1e:5d:96:2c:20:8a:48: 4c:08:d1:00:30:87:fe:a2:95:91:61:5a:c5:ff:79:4d:f7:1d: 59:48:1a:73:e3:e7:c4:0d:81:ac:d4:7b:cc:a7:88:a8:26:8a: 08:e7:8b:28:4d:1a:c0:ff:e2:c6:d1:aa:81:fa:fb:00:d4:88: c5:58:f2:4d:88:36:80:f0:33:04:f1:44:46:f0:e4:0b:55:ac: de:17:d2:c5:ec:2f:37:07:e6:4b:a1:f1:d2:83:ec:8e:90:5e: 3b:91:79:1c:f8:6a:c7:58:4a:6b:fa:16:c1:27:49:05:32:ed: fd:06:63:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0I3QTExMC8GA1UEBRMoNDg4NzA3RTM3NjMxNEFERDU0NUNDNjYwQURFQ0UyMjk4 NjRDMTNFMDAeFw0yNTExMDMwNzQxNDhaFw0yNTExMTAwNzQxNDdaMBgxFjAUBgNV BAMTDTY5MDg1Y2JjLTQxMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDPev2mdh+6P2uH+0WnrTOzIywJGw/ttQMc6q7xna14doahBDTXLwlriByt8LO WAbBFstpbhbs5oBo0e/zSXjWRE6gmBc+a3ml2bPTdCzeGhKpFE3CBOHMxGWc57h/ V9vbSoEyWmUshXnTYEldjNB3mvVJNYOAlVuxwUEnKg6Pwpaf6S0P277wObXtGJ0y /bRmb9BkuF969BvMNlcxAEwwsDmGB3YMPsTJV+I1V91XQbi4wuzZOplj9yQPQ4uQ J38LX/28s4ehCtAMegnba9EUnea0hcfyep8c2wPEUUvNhDVs/oOvdHYng36l0/OG sd3mNu0hNDeWOEBZgot2uuT1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCO3StcAq mfL+v4zvRXTTJRtIcMkwHwYDVR0jBBgwFoAUSIcH43YxSt1UXMZgreziKYZME+Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQjdBL0M5OEQ1NUZBN0RC QjExRjBCQzRENzc2MUM0RjlBRTAyL1NJY0g0M1l4U3QxVVhNWmdyZXppS1laTUUt QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0ljSDQzWXhTdDFVWE1aZ3JlemlLWVpNRS1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz QjdBL0M5OEQ1NUZBN0RCQjExRjBCQzRENzc2MUM0RjlBRTAyL1NJY0g0M1l4U3Qx VVhNWmdyZXppS1laTUUtQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHWoLX95xglmx6LFs28/aWis2WvKyqmCzaETTfxIIVyHBRRtIAwseT7o 7p0/sGGX/0m9+OHDj8D874EacdOcwPGagjKyXJ65mjut/0/D96uN5ZnzrtFOvD6h mQ1BO/IDVSNLCVc98SRBWSSFZOElnldsRBsTqq4ru2Vjixj3OyTQGEuo4ZPxPb/5 Hl2WLCCKSEwI0QAwh/6ilZFhWsX/eU33HVlIGnPj58QNgazUe8yniKgmigjniyhN GsD/4sbRqoH6+wDUiMVY8k2INoDwMwTxREbw5AtVrN4X0sXsLzcH5kuh8dKD7I6Q XjuReRz4asdYSmv6FsEnSQUy7f0GY68= -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:17 2025 by rpki-client