$ rpki-client -vvf rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft File: EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft (raw, json) Hash identifier: b72CEnYSs2BC6mnnx0Ua+i4eN6h9T76EfLQKRhehKPs= Subject key identifier: D1:38:D9:D1:45:F7:F2:E2:97:D2:1A:7C:76:6F:E7:12:D7:00:94:8A Authority key identifier: 11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6 Certificate issuer: /CN=A919D6D8/serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6 Certificate serial: 08B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft Manifest number: 13BA Signing time: Tue 04 Nov 2025 19:26:02 +0000 Manifest this update: Tue 04 Nov 2025 19:26:01 +0000 Manifest next update: Tue 11 Nov 2025 19:26:01 +0000 Files and hashes: 1: EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl (hash: 8IIGL4+PQcn/AMtaI1berWP1yE42WZE5NVlCeUtSv4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2232 (0x8b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D6D8, serialNumber=11D8D8DC5D9678DE0330967A2F381D4F67BB55B6 Validity Not Before: Nov 4 19:26:01 2025 GMT Not After : Nov 11 19:26:01 2025 GMT Subject: CN=690a5349-05e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5c:83:84:58:10:6b:8a:c2:86:5c:e6:1b:8c: c5:36:72:91:47:5a:fd:31:0f:6f:0b:14:11:3e:92: ec:3a:8c:cb:e1:8e:32:91:a1:6a:10:09:ec:0f:34: 4e:0f:27:95:8f:d8:b9:3d:3f:64:2e:07:6f:47:03: 00:33:19:3e:c4:a2:47:3e:d0:23:d8:31:9a:2e:0c: 5b:ae:88:67:f5:ef:d8:8c:51:a1:dc:65:37:c1:aa: ec:13:02:d2:be:42:f2:12:9c:b6:77:dd:26:df:a4: c0:56:d0:3c:6f:3c:04:d4:a9:3c:ee:92:07:9f:fc: 30:c9:11:d8:a7:d7:c7:06:51:93:77:82:08:69:df: 31:51:d2:b1:df:33:51:ef:29:0d:46:f5:04:43:82: e1:6e:fc:d8:dc:47:59:0b:78:8f:1c:1d:a6:a9:f9: bd:b2:22:3d:d8:20:19:be:7b:47:00:ea:20:e1:c2: 14:9c:d3:a8:2e:94:0d:2e:fe:19:2f:d8:9e:dd:f9: 80:63:a4:6f:30:ca:a8:95:4f:a7:04:ea:95:fd:7a: 33:e2:99:74:d9:c2:6a:c9:83:38:08:a2:0c:dc:b3: 6b:67:f8:06:3c:a8:ac:ad:fc:f2:98:bd:8b:3e:7f: 32:fd:95:3c:40:76:69:65:a3:af:77:aa:ad:a2:71: b1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:38:D9:D1:45:F7:F2:E2:97:D2:1A:7C:76:6F:E7:12:D7:00:94:8A X509v3 Authority Key Identifier: keyid:11:D8:D8:DC:5D:96:78:DE:03:30:96:7A:2F:38:1D:4F:67:BB:55:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D6D8/A03796DE51C011EAB265E880C4F9AE02/EdjY3F2WeN4DMJZ6LzgdT2e7VbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:68:8b:96:37:cb:e7:94:e4:4c:d4:4f:88:d8:d0:e8:ea:d7: 1b:c8:ba:27:28:a6:01:7c:a2:0e:fe:28:40:b1:43:c3:fb:00: c5:85:7b:d7:e3:c7:af:af:de:eb:e7:d2:1c:68:b3:48:41:e0: 17:aa:43:a5:ff:48:ca:5c:e2:94:96:f1:d1:c6:b9:ed:ff:9d: b1:5b:ff:92:81:42:c2:89:ec:99:e7:f5:28:82:d8:b4:c2:9a: 03:ca:1d:a4:93:7e:31:77:1d:cf:7d:63:c6:0d:b1:e7:4b:a7: a1:52:21:a3:a1:2b:51:9a:f7:71:d9:fe:5d:02:ba:c2:bf:b6: 9b:08:25:39:af:0c:4f:c1:dc:0a:d8:78:81:ed:64:fc:3c:ae: 31:f1:84:cd:6d:bc:0a:46:00:57:2e:79:4a:70:98:c5:b1:71: 90:17:32:b4:b3:a9:f0:75:11:71:87:25:d0:46:3f:81:e7:39: 8f:09:46:13:71:c3:d5:72:61:c4:3f:fc:15:fa:22:dd:c6:d3: e5:57:8b:86:f8:42:7d:36:f1:79:86:5f:36:70:3b:68:43:c3: c3:10:8e:f6:d1:0d:8b:3f:cb:14:a7:b5:94:28:3d:2a:e8:6c: 9f:ac:8c:e0:6b:74:5e:6b:41:83:37:5a:06:96:f1:90:38:19: 70:77:5c:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ2RDgxMTAvBgNVBAUTKDExRDhEOERDNUQ5Njc4REUwMzMwOTY3QTJGMzgxRDRG NjdCQjU1QjYwHhcNMjUxMTA0MTkyNjAxWhcNMjUxMTExMTkyNjAxWjAYMRYwFAYD VQQDEw02OTBhNTM0OS0wNWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FyDhFgQa4rChlzmG4zFNnKRR1r9MQ9vCxQRPpLsOozL4Y4ykaFqEAnsDzRO DyeVj9i5PT9kLgdvRwMAMxk+xKJHPtAj2DGaLgxbrohn9e/YjFGh3GU3warsEwLS vkLyEpy2d90m36TAVtA8bzwE1Kk87pIHn/wwyRHYp9fHBlGTd4IIad8xUdKx3zNR 7ykNRvUEQ4LhbvzY3EdZC3iPHB2mqfm9siI92CAZvntHAOog4cIUnNOoLpQNLv4Z L9ie3fmAY6RvMMqolU+nBOqV/Xoz4pl02cJqyYM4CKIM3LNrZ/gGPKisrfzymL2L Pn8y/ZU8QHZpZaOvd6qtonGxfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNE42dFF 9/Lil9IafHZv5xLXAJSKMB8GA1UdIwQYMBaAFBHY2NxdlnjeAzCWei84HU9nu1W2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDZEOC9BMDM3OTZERTUx QzAxMUVBQjI2NUU4ODBDNEY5QUUwMi9FZGpZM0YyV2VONERNSlo2THpnZFQyZTdW YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VkalkzRjJXZU40RE1KWjZMemdkVDJlN1ZiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDZEOC9BMDM3OTZERTUxQzAxMUVBQjI2NUU4ODBDNEY5QUUwMi9FZGpZM0YyV2VO NERNSlo2THpnZFQyZTdWYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXaIuWN8vnlORM1E+I2NDo6tcbyLonKKYBfKIO/ihAsUPD+wDFhXvX 48evr97r59IcaLNIQeAXqkOl/0jKXOKUlvHRxrnt/52xW/+SgULCieyZ5/Uogti0 wpoDyh2kk34xdx3PfWPGDbHnS6ehUiGjoStRmvdx2f5dArrCv7abCCU5rwxPwdwK 2HiB7WT8PK4x8YTNbbwKRgBXLnlKcJjFsXGQFzK0s6nwdRFxhyXQRj+B5zmPCUYT ccPVcmHEP/wV+iLdxtPlV4uG+EJ9NvF5hl82cDtoQ8PDEI720Q2LP8sUp7WUKD0q 6GyfrIzga3Rea0GDN1oGlvGQOBlwd1xW -----END CERTIFICATE-----Generated at Wed Nov 5 21:00:50 2025 by rpki-client