$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft File: S7U1I5SOxqyZE7LVCcHXspRtnpI.mft (raw, json) Hash identifier: dvFmFmCFqzX5fxRQ67tK+218UD8WJDMZMHyuj9YXQ70= Subject key identifier: 4A:05:38:B5:4B:4C:02:19:95:4D:C7:D7:86:26:52:D3:7D:9E:64:83 Authority key identifier: 4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92 Certificate issuer: /CN=A91AF431/serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft Manifest number: 16 Signing time: Mon 03 Nov 2025 07:52:53 +0000 Manifest this update: Mon 03 Nov 2025 07:52:53 +0000 Manifest next update: Mon 10 Nov 2025 07:52:53 +0000 Files and hashes: 1: S7U1I5SOxqyZE7LVCcHXspRtnpI.crl (hash: QcArrsua5CTbuL+eOJ/0+hi3mtTfh1gHwInSf09BTIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF431, serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92 Validity Not Before: Nov 3 07:52:53 2025 GMT Not After : Nov 10 07:52:53 2025 GMT Subject: CN=69085f55-1406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c7:26:22:dc:45:9b:b3:1f:3e:b4:be:3f:b3: 40:18:ec:e8:c6:07:76:d1:e5:5d:38:26:eb:31:71: ae:d5:6c:4d:dc:4e:05:87:43:23:ed:38:dc:d4:f1: 66:d0:ae:aa:34:51:29:10:2e:e6:c7:be:8b:de:f1: 9c:4d:1c:29:f0:82:73:5f:3d:ae:15:91:f3:8e:dd: 62:9d:32:59:d4:a7:18:54:f1:5e:e3:eb:6d:c2:a0: 5b:38:f4:54:2d:47:fe:e9:a5:58:28:e9:4d:d6:66: 0d:08:b7:e2:8d:ec:86:af:42:d6:13:44:9f:af:d0: 09:bb:d8:b5:a9:81:9a:f2:42:b4:48:05:96:e5:ec: e1:c1:03:e0:6e:a8:b5:01:65:78:83:fa:da:2e:18: a1:ec:fa:98:66:4c:ab:67:59:64:16:4b:ee:41:9b: 97:eb:a8:ac:cc:aa:fe:95:a7:dd:4d:3f:6c:8d:0b: ed:4e:49:aa:18:29:61:ed:1d:e0:97:1a:bc:71:cb: 0d:6f:10:75:ec:9d:b7:7a:ba:a3:d3:e2:7f:a9:d6: cd:17:20:a6:c2:2c:cc:2f:89:8f:de:c0:14:e4:72: 9b:58:5a:72:39:21:6a:d3:12:49:b7:db:70:0a:8f: 85:f7:0c:29:e8:3f:a2:fb:9b:6f:1a:22:4a:8d:13: ee:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:05:38:B5:4B:4C:02:19:95:4D:C7:D7:86:26:52:D3:7D:9E:64:83 X509v3 Authority Key Identifier: keyid:4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:15:80:2f:49:a7:74:37:25:d8:c3:e5:02:c1:68:23:4c:08: f3:dc:3a:74:f5:a1:0c:28:ae:6d:8b:43:3f:c4:0d:11:9c:c3: 0a:1e:bd:5d:8c:47:41:b0:4f:5b:5d:81:e5:0a:84:d7:e9:41: 66:e7:6e:46:b2:c7:4d:ae:cf:c0:7a:fb:f7:36:2f:09:27:9e: 28:60:0c:f6:5c:77:1f:ba:bb:8f:61:b8:8f:c5:da:d2:78:e8: 69:ba:dc:34:b3:51:fd:5e:6f:8b:47:d8:6d:27:5e:69:f5:10: 59:fa:b8:36:e2:65:84:a7:e6:18:d2:28:d0:93:d0:ec:ad:79: e7:4d:d9:aa:5c:86:1e:98:be:1e:18:68:48:f7:5b:2d:51:2a: 8a:84:66:21:c9:78:41:60:ba:ef:3e:9b:ac:d3:87:67:d5:c6: 7a:8e:3e:12:49:cd:49:1b:04:72:62:37:2f:49:58:38:b5:cc: 25:fc:64:3d:20:9f:4d:5e:34:ee:a6:14:27:d7:28:96:59:0f: 7a:b7:1d:6b:9e:da:a6:c9:74:cf:43:11:93:51:e0:1d:45:7a: 25:28:ae:1b:0d:e6:25:04:aa:f0:b8:50:be:a1:46:c6:f0:a0: f3:98:c6:5a:dc:11:2d:04:f1:66:0b:75:a8:e3:bb:92:9d:a1: d8:5c:a6:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjQzMTExMC8GA1UEBRMoNEJCNTM1MjM5NDhFQzZBQzk5MTNCMkQ1MDlDMUQ3QjI5 NDZEOUU5MjAeFw0yNTExMDMwNzUyNTNaFw0yNTExMTAwNzUyNTNaMBgxFjAUBgNV BAMTDTY5MDg1ZjU1LTE0MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYxyYi3EWbsx8+tL4/s0AY7OjGB3bR5V04Jusxca7VbE3cTgWHQyPtONzU8WbQ rqo0USkQLubHvove8ZxNHCnwgnNfPa4VkfOO3WKdMlnUpxhU8V7j623CoFs49FQt R/7ppVgo6U3WZg0It+KN7IavQtYTRJ+v0Am72LWpgZryQrRIBZbl7OHBA+BuqLUB ZXiD+touGKHs+phmTKtnWWQWS+5Bm5frqKzMqv6Vp91NP2yNC+1OSaoYKWHtHeCX Grxxyw1vEHXsnbd6uqPT4n+p1s0XIKbCLMwviY/ewBTkcptYWnI5IWrTEkm323AK j4X3DCnoP6L7m28aIkqNE+6VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSgU4tUtM AhmVTcfXhiZS032eZIMwHwYDVR0jBBgwFoAUS7U1I5SOxqyZE7LVCcHXspRtnpIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGNDMxL0ZGN0QxOERBOTkx ODExRjBCNDUwQ0Y0RkM0RjlBRTAyL1M3VTFJNVNPeHF5WkU3TFZDY0hYc3BSdG5w SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUzdVMUk1U094cXlaRTdMVkNjSFhzcFJ0bnBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG NDMxL0ZGN0QxOERBOTkxODExRjBCNDUwQ0Y0RkM0RjlBRTAyL1M3VTFJNVNPeHF5 WkU3TFZDY0hYc3BSdG5wSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKoVgC9Jp3Q3JdjD5QLBaCNMCPPcOnT1oQworm2LQz/EDRGcwwoevV2M R0GwT1tdgeUKhNfpQWbnbkayx02uz8B6+/c2LwknnihgDPZcdx+6u49huI/F2tJ4 6Gm63DSzUf1eb4tH2G0nXmn1EFn6uDbiZYSn5hjSKNCT0OyteedN2apchh6Yvh4Y aEj3Wy1RKoqEZiHJeEFguu8+m6zTh2fVxnqOPhJJzUkbBHJiNy9JWDi1zCX8ZD0g n01eNO6mFCfXKJZZD3q3HWue2qbJdM9DEZNR4B1FeiUorhsN5iUEqvC4UL6hRsbw oPOYxlrcES0E8WYLdajju5Kdodhcplo= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:53 2025 by rpki-client