$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft File: SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json) Hash identifier: p/5Lf9l7yg8P3/p8oUJP0QZkbsUEVh1UNv73905XFzQ= Subject key identifier: BB:0B:67:5F:62:26:F9:4E:48:96:97:95:13:83:B8:74:B0:D9:B7:A4 Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE Certificate issuer: /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Certificate serial: 08FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft Manifest number: 08FE Signing time: Sun 02 Nov 2025 20:16:16 +0000 Manifest this update: Sun 02 Nov 2025 20:16:16 +0000 Manifest next update: Sun 09 Nov 2025 20:16:16 +0000 Files and hashes: 1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: sKdDXXpWExO68gTbrWNXghgNsfDnDZbn8CgWKnFE+/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2303 (0x8ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADA93, serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Validity Not Before: Nov 2 20:16:16 2025 GMT Not After : Nov 9 20:16:16 2025 GMT Subject: CN=6907bc10-f279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c6:6d:2c:09:c4:2e:a7:a9:c2:a2:80:d8:09: 1a:1f:ea:76:6a:fb:4b:08:d7:d4:bc:e9:d1:59:71: b9:41:48:3e:36:66:32:c2:e2:ce:3b:5d:0e:5c:c2: b5:53:99:40:8f:1c:3b:d2:3a:12:69:87:d6:89:3c: b2:f4:99:22:1e:35:fd:d1:c6:59:b9:91:cf:27:18: f7:0d:f7:e3:68:8b:48:ec:0f:87:d4:23:c0:2d:db: 7e:70:54:07:19:d1:07:c1:29:f2:d6:85:7f:b6:cf: 60:94:04:d7:6a:74:06:7d:1d:25:13:e2:e3:61:e3: 17:93:cc:4d:0a:fc:d6:44:e9:43:b5:7d:41:d8:1a: 8a:da:37:ac:12:52:af:c5:55:59:f4:b0:ca:96:8f: 40:54:b7:5d:23:9f:39:8f:78:d2:60:dd:4e:c7:69: 0c:2a:66:8d:75:8d:16:d7:72:59:65:40:fb:b8:11: d0:e7:8a:74:ed:19:47:01:2b:40:0e:fa:55:a2:55: 64:71:05:57:29:10:83:fd:be:3f:84:e2:e0:94:e7: bd:cd:72:fa:22:85:76:e4:68:9b:2a:97:13:a2:9d: 18:71:b9:87:33:9d:6a:3f:4b:2a:0e:06:b8:d5:f3: dd:a7:cb:86:8c:40:77:dc:39:a0:8e:37:58:69:44: 58:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0B:67:5F:62:26:F9:4E:48:96:97:95:13:83:B8:74:B0:D9:B7:A4 X509v3 Authority Key Identifier: keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:fc:fe:bf:f9:c0:ce:76:6a:a4:5a:a2:16:f1:1c:ce:ec:ae: d3:a6:06:9a:b5:74:3e:1a:6d:de:72:bc:80:9c:eb:9e:3a:b5: de:a7:6f:92:91:f1:7e:09:f1:f2:9f:f1:c0:92:ea:35:08:c4: 0a:88:94:c0:c0:2d:06:22:09:52:db:b6:4e:2c:3b:9d:be:03: a3:75:4c:11:6b:e3:75:01:d8:d5:d5:fa:f7:9f:7b:e9:e5:6b: 42:16:44:c0:01:40:03:cc:67:55:6b:ee:d0:ad:e8:d0:d3:9f: 81:ef:ed:12:85:d1:39:94:3a:1b:c7:e8:0f:11:1e:24:24:4e: 9a:3f:42:e6:88:08:97:a9:7d:95:9d:b8:fa:02:de:09:30:c1: d5:0c:cb:ac:80:b4:27:86:b6:46:32:af:1f:8c:24:b9:2e:ca: f1:ee:fa:bd:fd:fe:71:6e:88:0a:a3:3d:21:a5:b0:15:2b:46: 37:2c:83:9a:0d:85:4c:5f:00:b6:16:ce:02:e8:67:6d:0b:f3: 61:44:3f:54:5c:5f:d0:fd:75:e6:3f:2e:58:34:f0:11:43:26: 17:eb:a8:e1:7d:d2:fe:c1:c1:34:6e:3d:d1:97:71:ce:f3:22: 0c:16:1a:04:61:39:ca:fe:7f:a2:d7:f4:01:5d:4c:7c:c5:d3: 83:7e:d2:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURBOTMxMTAvBgNVBAUTKDQ4RUY2OEFENTFCQkQ3MTg3RTI0QTBBMzhCQUJCQUE1 RkMxMTEzRUUwHhcNMjUxMTAyMjAxNjE2WhcNMjUxMTA5MjAxNjE2WjAYMRYwFAYD VQQDEw02OTA3YmMxMC1mMjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8ZtLAnELqepwqKA2AkaH+p2avtLCNfUvOnRWXG5QUg+NmYywuLOO10OXMK1 U5lAjxw70joSaYfWiTyy9JkiHjX90cZZuZHPJxj3DffjaItI7A+H1CPALdt+cFQH GdEHwSny1oV/ts9glATXanQGfR0lE+LjYeMXk8xNCvzWROlDtX1B2BqK2jesElKv xVVZ9LDKlo9AVLddI585j3jSYN1Ox2kMKmaNdY0W13JZZUD7uBHQ54p07RlHAStA DvpVolVkcQVXKRCD/b4/hOLglOe9zXL6IoV25GibKpcTop0YcbmHM51qP0sqDga4 1fPdp8uGjEB33DmgjjdYaURYpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsLZ19i JvlOSJaXlRODuHSw2bekMB8GA1UdIwQYMBaAFEjvaK1Ru9cYfiSgo4uruqX8ERPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREE5My81Q0NCRDRFMEI2 QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4aC1KS0NqaTZ1NnBmd1JF LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPOW9yVkc3MXhoLUpLQ2ppNnU2cGZ3UkUtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REE5My81Q0NCRDRFMEI2QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4 aC1KS0NqaTZ1NnBmd1JFLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo/P6/+cDOdmqkWqIW8RzO7K7TpgaatXQ+Gm3ecryAnOueOrXep2+S kfF+CfHyn/HAkuo1CMQKiJTAwC0GIglS27ZOLDudvgOjdUwRa+N1AdjV1fr3n3vp 5WtCFkTAAUADzGdVa+7QrejQ05+B7+0ShdE5lDobx+gPER4kJE6aP0LmiAiXqX2V nbj6At4JMMHVDMusgLQnhrZGMq8fjCS5Lsrx7vq9/f5xbogKoz0hpbAVK0Y3LIOa DYVMXwC2Fs4C6GdtC/NhRD9UXF/Q/XXmPy5YNPARQyYX66jhfdL+wcE0bj3Rl3HO 8yIMFhoEYTnK/n+i1/QBXUx8xdODftKZ -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:01 2025 by rpki-client