$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft File: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft (raw, json) Hash identifier: 4Xbnv83R5g204vk5ztmPEkVg2nLAzJfoD5hJwAdIUWs= Subject key identifier: 69:1E:41:AB:D8:FD:38:96:61:31:BA:53:7D:46:22:68:93:82:50:6C Authority key identifier: D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2 Certificate issuer: /CN=A91BB629/serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft Manifest number: F3 Signing time: Wed 05 Nov 2025 05:25:39 +0000 Manifest this update: Wed 05 Nov 2025 05:25:39 +0000 Manifest next update: Wed 12 Nov 2025 05:25:39 +0000 Files and hashes: 1: 1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl (hash: foIEeUCmeGlicAfnh68Dw96Ei0URQdAMpj3H11N5Zd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:25:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB629, serialNumber=D6611A342E05E6DCDC19243BD52F88D02B0787D2 Validity Not Before: Nov 5 05:25:39 2025 GMT Not After : Nov 12 05:25:39 2025 GMT Subject: CN=690adfd3-3e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6c:cf:30:37:d1:cb:9f:bf:2b:dd:a7:c5:8f: 6f:a2:5f:ab:48:44:b7:65:54:c3:0d:2f:c0:f3:63: bc:8d:7f:2d:94:59:a3:7d:71:ef:e9:7e:78:ce:48: 14:9a:9d:0d:2d:33:0e:1f:5c:ff:f0:c3:44:bc:b1: 56:55:00:a2:c4:f9:d0:01:13:ca:93:21:74:26:bf: ca:ac:df:9b:ca:f6:ba:ab:41:74:29:b1:25:5f:94: 7e:ed:54:7a:5a:97:e5:6d:65:0c:ab:8b:2e:61:f9: 76:95:65:07:ee:b7:46:d6:6c:cf:5c:24:df:8c:d9: 4f:b6:9c:94:7d:c7:d6:bf:40:f3:f3:17:e9:f0:5e: 86:e8:b0:1a:fd:99:bf:9c:1d:df:43:59:9a:8e:3e: 71:ab:f2:01:5d:be:3a:62:8a:e5:45:89:44:db:6c: f0:b3:f0:b6:5d:14:e9:05:09:6a:be:49:49:c9:e9: ff:36:68:72:71:de:a3:c3:43:f0:c1:cb:53:5c:27: a1:a8:fa:13:98:7f:f8:42:22:25:60:c8:06:1e:f6: 71:ca:23:03:de:22:24:93:ff:17:fc:ec:0c:1b:c1: 52:2a:61:c0:f0:0d:b4:14:7c:98:99:b8:42:f7:3c: 5e:ba:5f:57:f0:27:c2:6d:6b:6c:6c:c0:3c:a3:48: 71:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1E:41:AB:D8:FD:38:96:61:31:BA:53:7D:46:22:68:93:82:50:6C X509v3 Authority Key Identifier: keyid:D6:61:1A:34:2E:05:E6:DC:DC:19:24:3B:D5:2F:88:D0:2B:07:87:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mEaNC4F5tzcGSQ71S-I0CsHh9I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/EAFBB55045B411EF8FDB741DC4F9AE02/1mEaNC4F5tzcGSQ71S-I0CsHh9I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:44:e1:8a:a8:a5:bc:47:7a:e2:27:cb:77:9f:df:99:8b:c0: 73:6d:e8:47:28:8c:2f:91:cc:c1:5c:1b:23:af:46:fd:7b:ea: 41:e1:53:77:a8:af:85:01:e5:ad:53:1c:32:da:73:0c:96:bc: 82:fa:6e:a6:21:ff:b4:7e:27:4a:7b:fb:22:46:dc:7c:0e:aa: c7:50:d0:52:ca:75:81:f1:24:76:d6:63:5c:68:bd:f4:e2:ea: 42:fd:9f:61:b8:48:85:01:33:51:eb:de:89:18:9b:3b:67:a3: 1c:09:7c:9d:2e:36:2d:19:80:c3:58:26:5d:8d:2e:83:e7:b2: a0:cc:0a:e1:37:d5:24:77:26:50:6d:7c:59:c9:65:e0:4c:59: cb:fa:94:32:17:ef:ce:45:a2:42:5a:b6:d6:1e:b9:9b:18:1f: 80:ad:db:9e:38:e7:b6:54:3c:88:19:48:d4:b3:50:c3:a4:a7: 97:f6:20:3f:d7:3d:c2:ce:5d:35:44:82:49:d0:1b:af:c5:96: 26:48:1e:7c:ef:fb:72:7b:c8:5f:3d:32:09:23:e5:f2:e1:19: 56:b3:08:cd:19:92:48:44:92:36:e1:71:05:4e:d1:da:b8:5d: 58:33:b3:24:d9:a4:03:06:ef:56:c5:c0:d0:d8:9f:ef:3e:f0: 8b:29:e1:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI2MjkxMTAvBgNVBAUTKEQ2NjExQTM0MkUwNUU2RENEQzE5MjQzQkQ1MkY4OEQw MkIwNzg3RDIwHhcNMjUxMTA1MDUyNTM5WhcNMjUxMTEyMDUyNTM5WjAYMRYwFAYD VQQDEw02OTBhZGZkMy0zZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8GzPMDfRy5+/K92nxY9vol+rSES3ZVTDDS/A82O8jX8tlFmjfXHv6X54zkgU mp0NLTMOH1z/8MNEvLFWVQCixPnQARPKkyF0Jr/KrN+byva6q0F0KbElX5R+7VR6 WpflbWUMq4suYfl2lWUH7rdG1mzPXCTfjNlPtpyUfcfWv0Dz8xfp8F6G6LAa/Zm/ nB3fQ1majj5xq/IBXb46YorlRYlE22zws/C2XRTpBQlqvklJyen/Nmhycd6jw0Pw wctTXCehqPoTmH/4QiIlYMgGHvZxyiMD3iIkk/8X/OwMG8FSKmHA8A20FHyYmbhC 9zxeul9X8CfCbWtsbMA8o0hx2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkeQavY /TiWYTG6U31GImiTglBsMB8GA1UdIwQYMBaAFNZhGjQuBebc3BkkO9UviNArB4fS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjYyOS9FQUZCQjU1MDQ1 QjQxMUVGOEZEQjc0MURDNEY5QUUwMi8xbUVhTkM0RjV0emNHU1E3MVMtSTBDc0ho OUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFtRWFOQzRGNXR6Y0dTUTcxUy1JMENzSGg5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjYyOS9FQUZCQjU1MDQ1QjQxMUVGOEZEQjc0MURDNEY5QUUwMi8xbUVhTkM0RjV0 emNHU1E3MVMtSTBDc0hoOUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdROGKqKW8R3riJ8t3n9+Zi8BzbehHKIwvkczBXBsjr0b9e+pB4VN3 qK+FAeWtUxwy2nMMlryC+m6mIf+0fidKe/siRtx8DqrHUNBSynWB8SR21mNcaL30 4upC/Z9huEiFATNR696JGJs7Z6McCXydLjYtGYDDWCZdjS6D57KgzArhN9UkdyZQ bXxZyWXgTFnL+pQyF+/ORaJCWrbWHrmbGB+ArdueOOe2VDyIGUjUs1DDpKeX9iA/ 1z3Czl01RIJJ0BuvxZYmSB587/tye8hfPTIJI+Xy4RlWswjNGZJIRJI24XEFTtHa uF1YM7Mk2aQDBu9WxcDQ2J/vPvCLKeE9 -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:11 2025 by rpki-client