$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft File: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft (raw, json) Hash identifier: G4wq3h/+k8gu1Xc2cfddExKKVPxgLTvZOm8rlWuSQ/4= Subject key identifier: F2:74:04:E2:F8:E3:B3:B5:69:58:1A:38:E8:0F:27:54:53:85:2F:6E Authority key identifier: 11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 Certificate issuer: /CN=A919FDC0/serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft Manifest number: 36 Signing time: Wed 05 Nov 2025 07:47:17 +0000 Manifest this update: Wed 05 Nov 2025 07:47:17 +0000 Manifest next update: Wed 12 Nov 2025 07:47:17 +0000 Files and hashes: 1: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl (hash: Svsxew8EmNQIssXHRaJN1bMsS3jIsSB/MM8i0G+T0Lo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FDC0, serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Validity Not Before: Nov 5 07:47:17 2025 GMT Not After : Nov 12 07:47:17 2025 GMT Subject: CN=690b0105-5daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d9:4f:b9:0d:35:39:73:dc:fb:46:ce:4c:f9: 52:3d:ea:56:c2:3e:d4:6b:13:db:7e:09:54:66:68: 75:fd:06:91:a9:a0:13:3e:d6:81:38:cf:c0:43:41: 45:e4:e2:6a:30:0f:9d:f2:3a:c4:d4:a7:81:4e:e0: f1:22:d3:d3:3d:72:c5:49:10:4b:bb:5f:81:0e:6d: 0f:3e:08:8c:4a:c5:d0:e9:84:7a:aa:de:22:fa:70: 8e:4d:e8:ab:4d:ea:4e:27:a2:95:2d:81:6c:b2:6f: 9e:87:ad:3b:77:13:43:98:7d:77:05:0a:b2:0e:d3: 1c:f6:64:f5:92:b0:bf:1c:e6:3d:4b:2c:be:b5:87: 71:2d:f9:dd:59:16:18:89:19:6b:36:b1:a3:fb:8a: f4:ef:84:74:75:2f:0f:80:8e:a9:99:cf:a7:68:8f: d2:f2:68:29:90:f3:0b:a1:89:94:fc:a6:1d:44:dc: 90:21:49:c7:94:f2:43:a3:8b:ba:5c:07:13:be:94: 83:e6:07:3c:14:56:67:03:6a:c8:76:d7:30:a4:1b: d3:48:77:23:b8:10:7a:40:27:88:e0:bf:bf:79:98: 70:45:c3:4a:9a:0d:44:ba:23:60:ba:43:c7:24:db: a0:ce:72:28:8e:1c:f2:22:00:48:38:50:72:72:0a: 70:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:74:04:E2:F8:E3:B3:B5:69:58:1A:38:E8:0F:27:54:53:85:2F:6E X509v3 Authority Key Identifier: keyid:11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:10:62:e1:99:7f:11:2c:47:93:c4:d7:01:06:5e:d1:a0:f4: e3:17:91:44:a3:fe:e3:a9:9b:96:46:41:40:82:7a:54:e2:99: d9:35:e7:97:c3:82:92:e1:91:45:20:7b:e5:59:9d:be:bb:89: 31:ec:82:1a:72:91:ce:54:ba:21:80:62:6f:30:bb:81:e3:78: 7d:4e:37:6f:2e:c7:29:12:a9:6d:c5:b3:94:19:36:43:66:df: e9:90:d8:be:58:d6:3c:41:ea:80:3b:ae:3e:1f:31:b6:69:19: 9c:7d:01:cb:fe:6e:c3:06:74:a4:4f:00:da:a5:98:40:1d:58: 87:7c:52:32:30:7b:3f:0f:dd:f0:1a:06:4e:c0:2b:96:af:2a: 1c:84:6a:c9:ab:6b:31:b5:a6:81:87:56:47:60:55:6e:14:0e: 79:75:75:bf:28:45:55:2f:ed:32:91:5d:43:72:52:1d:4e:34: bc:c8:6a:29:54:c5:7a:1d:60:62:f0:87:00:45:22:c6:b6:5e: 8f:d0:c7:52:64:06:3a:5e:3f:52:eb:7d:65:1c:e1:82:85:78: 19:9a:3d:f1:62:0f:f6:cd:8e:f1:12:93:65:79:e9:ea:f7:d2: d6:86:5c:1a:2e:0a:7c:f4:67:83:d1:2d:92:7a:dc:fe:84:9c: 9f:cf:6b:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkRDMDExMC8GA1UEBRMoMTE3QzBENkQxOUJGQkE0OEI1RkE5RTUxN0QwRTY5MjY1 NUM5OEM0NDAeFw0yNTExMDUwNzQ3MTdaFw0yNTExMTIwNzQ3MTdaMBgxFjAUBgNV BAMTDTY5MGIwMTA1LTVkYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/2U+5DTU5c9z7Rs5M+VI96lbCPtRrE9t+CVRmaHX9BpGpoBM+1oE4z8BDQUXk 4mowD53yOsTUp4FO4PEi09M9csVJEEu7X4EObQ8+CIxKxdDphHqq3iL6cI5N6KtN 6k4nopUtgWyyb56HrTt3E0OYfXcFCrIO0xz2ZPWSsL8c5j1LLL61h3Et+d1ZFhiJ GWs2saP7ivTvhHR1Lw+AjqmZz6doj9LyaCmQ8wuhiZT8ph1E3JAhSceU8kOji7pc BxO+lIPmBzwUVmcDash21zCkG9NIdyO4EHpAJ4jgv795mHBFw0qaDUS6I2C6Q8ck 26DOciiOHPIiAEg4UHJyCnBZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8nQE4vjj s7VpWBo46A8nVFOFL24wHwYDVR0jBBgwFoAUEXwNbRm/uki1+p5RfQ5pJlXJjEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGREMwLzMzMTFGMEVFNjlF OTExRjA4MUI2NUI2N0M0RjlBRTAyL0VYd05iUm1fdWtpMS1wNVJmUTVwSmxYSmpF US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRVh3TmJSbV91a2kxLXA1UmZRNXBKbFhKakVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG REMwLzMzMTFGMEVFNjlFOTExRjA4MUI2NUI2N0M0RjlBRTAyL0VYd05iUm1fdWtp MS1wNVJmUTVwSmxYSmpFUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALAQYuGZfxEsR5PE1wEGXtGg9OMXkUSj/uOpm5ZGQUCCelTimdk155fD gpLhkUUge+VZnb67iTHsghpykc5UuiGAYm8wu4HjeH1ON28uxykSqW3Fs5QZNkNm 3+mQ2L5Y1jxB6oA7rj4fMbZpGZx9Acv+bsMGdKRPANqlmEAdWId8UjIwez8P3fAa Bk7AK5avKhyEasmrazG1poGHVkdgVW4UDnl1db8oRVUv7TKRXUNyUh1ONLzIailU xXodYGLwhwBFIsa2Xo/Qx1JkBjpeP1LrfWUc4YKFeBmaPfFiD/bNjvESk2V56er3 0taGXBouCnz0Z4PRLZJ63P6EnJ/Pa/A= -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:25 2025 by rpki-client