$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft File: inZEBFIzrjjTDTW4JtlbLntDfZw.mft (raw, json) Hash identifier: vzqCIBU6rfyDi54x8hdFi5r9iLCLCpsgbmrX6PyjquM= Subject key identifier: 4F:18:42:DA:FE:61:05:0A:5D:48:5A:A2:6C:BE:0D:94:50:6C:16:D3 Authority key identifier: 8A:76:44:04:52:33:AE:38:D3:0D:35:B8:26:D9:5B:2E:7B:43:7D:9C Certificate issuer: /CN=A919BC3B/serialNumber=8A7644045233AE38D30D35B826D95B2E7B437D9C Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inZEBFIzrjjTDTW4JtlbLntDfZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft Manifest number: FB Signing time: Mon 03 Nov 2025 05:09:12 +0000 Manifest this update: Mon 03 Nov 2025 05:09:12 +0000 Manifest next update: Mon 10 Nov 2025 05:09:12 +0000 Files and hashes: 1: inZEBFIzrjjTDTW4JtlbLntDfZw.crl (hash: Adedr7BzU+rrw2EBO2fAQnO0CpCW0s1k1slOscPbcMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.crl rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inZEBFIzrjjTDTW4JtlbLntDfZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BC3B, serialNumber=8A7644045233AE38D30D35B826D95B2E7B437D9C Validity Not Before: Nov 3 05:09:12 2025 GMT Not After : Nov 10 05:09:12 2025 GMT Subject: CN=690838f8-4a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6c:b8:69:b1:1a:d3:96:2b:38:ce:f4:4c:98: 8e:87:87:e8:9e:e0:17:1c:4d:fd:70:ce:9e:70:e7: 45:3d:7f:29:e1:3a:a5:1d:58:58:82:35:27:d7:5e: 1e:4f:44:93:31:ba:ec:0c:0c:4e:ea:00:c9:ad:62: 08:e3:9f:44:2f:82:01:90:27:23:4b:b3:6f:3a:de: ff:c7:d0:7a:bb:52:a9:38:47:d8:c3:1c:24:d8:03: 35:53:a7:4a:fd:dc:3a:42:8a:63:38:29:d3:d6:3d: 9a:e0:40:0a:93:ec:40:34:f2:0d:9e:32:8b:18:ae: 95:28:20:c1:b4:11:1b:f7:e0:93:43:b0:a4:b5:ff: 00:ba:07:23:8e:00:4e:18:e7:78:6a:94:9a:18:d2: 03:aa:a2:6f:2b:d1:e3:cb:fd:eb:55:86:51:a6:64: 90:94:81:92:43:7c:9a:0a:2f:dd:95:c7:7d:30:79: 75:04:50:ff:ea:3d:8d:51:89:d5:fd:80:ab:16:3a: eb:65:05:50:84:84:db:4a:8b:ac:b9:cc:87:72:74: ed:c2:f5:9a:8e:e3:7c:bf:2b:da:90:a2:c7:ea:cb: 8d:8e:e9:46:dc:d4:a9:7e:84:a1:3c:6a:f7:38:cc: 49:3e:7e:5b:f7:44:0e:b7:02:b4:11:41:92:06:50: b9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:18:42:DA:FE:61:05:0A:5D:48:5A:A2:6C:BE:0D:94:50:6C:16:D3 X509v3 Authority Key Identifier: keyid:8A:76:44:04:52:33:AE:38:D3:0D:35:B8:26:D9:5B:2E:7B:43:7D:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inZEBFIzrjjTDTW4JtlbLntDfZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:6d:ef:31:20:32:3d:3c:65:6f:5f:8e:7b:3f:70:be:eb:08: f2:94:b9:80:18:7e:ed:71:06:3a:e2:b3:f5:37:99:e8:a3:d8: 71:88:c1:0a:3f:f5:72:5f:02:3f:03:a2:3e:35:a1:f6:a6:32: 1e:95:70:c7:61:2b:fd:ed:59:0f:57:bc:61:e9:7e:94:ff:52: 99:3a:19:e5:eb:e4:ed:3b:90:69:80:27:74:f0:45:e2:51:8c: af:9c:0f:c8:cb:c1:42:33:c6:21:c0:24:cd:44:74:3b:7e:44: 73:60:f6:5a:af:78:7f:50:73:fb:af:23:65:fa:ee:5d:32:aa: c0:28:0f:2e:d0:aa:3a:9e:b8:46:22:5c:34:fa:06:7e:cb:69: c4:c4:99:a5:78:cb:b5:ac:42:92:50:a9:04:99:85:3a:9c:0b: 70:52:23:7f:f0:75:47:6a:f5:15:85:30:ea:b6:0b:95:72:f2: 8c:d4:b4:10:c5:b0:98:25:f0:6c:6f:d3:79:68:92:99:7c:ab: f4:c1:65:05:b3:e0:90:10:f3:3c:29:6b:ed:87:21:a7:fd:b7: c2:24:bc:60:69:98:90:40:0f:68:d5:29:ed:bf:bf:25:e3:14: 45:d3:ca:dd:4a:30:28:0e:59:9c:fe:c1:3e:b6:61:1a:b4:f9: c5:dd:76:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDM0IxMTAvBgNVBAUTKDhBNzY0NDA0NTIzM0FFMzhEMzBEMzVCODI2RDk1QjJF N0I0MzdEOUMwHhcNMjUxMTAzMDUwOTEyWhcNMjUxMTEwMDUwOTEyWjAYMRYwFAYD VQQDEw02OTA4MzhmOC00YTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWy4abEa05YrOM70TJiOh4fonuAXHE39cM6ecOdFPX8p4TqlHVhYgjUn114e T0STMbrsDAxO6gDJrWII459EL4IBkCcjS7NvOt7/x9B6u1KpOEfYwxwk2AM1U6dK /dw6QopjOCnT1j2a4EAKk+xANPINnjKLGK6VKCDBtBEb9+CTQ7Cktf8AugcjjgBO GOd4apSaGNIDqqJvK9Hjy/3rVYZRpmSQlIGSQ3yaCi/dlcd9MHl1BFD/6j2NUYnV /YCrFjrrZQVQhITbSousucyHcnTtwvWajuN8vyvakKLH6suNjulG3NSpfoShPGr3 OMxJPn5b90QOtwK0EUGSBlC5NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8YQtr+ YQUKXUhaomy+DZRQbBbTMB8GA1UdIwQYMBaAFIp2RARSM6440w01uCbZWy57Q32c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkMzQi9DRjM0QzFFRTM5 RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi9pblpFQkZJenJqalREVFc0SnRsYkxudERm WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luWkVCRkl6cmpqVERUVzRKdGxiTG50RGZady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkMzQi9DRjM0QzFFRTM5RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi9pblpFQkZJenJq alREVFc0SnRsYkxudERmWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZbe8xIDI9PGVvX457P3C+6wjylLmAGH7tcQY64rP1N5noo9hxiMEK P/VyXwI/A6I+NaH2pjIelXDHYSv97VkPV7xh6X6U/1KZOhnl6+TtO5BpgCd08EXi UYyvnA/Iy8FCM8YhwCTNRHQ7fkRzYPZar3h/UHP7ryNl+u5dMqrAKA8u0Ko6nrhG Ilw0+gZ+y2nExJmleMu1rEKSUKkEmYU6nAtwUiN/8HVHavUVhTDqtguVcvKM1LQQ xbCYJfBsb9N5aJKZfKv0wWUFs+CQEPM8KWvthyGn/bfCJLxgaZiQQA9o1Sntv78l 4xRF08rdSjAoDlmc/sE+tmEatPnF3XZQ -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:14 2025 by rpki-client