$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft File: 1ex0z8jA_QV81Og74-tX8GHcWPg.mft (raw, json) Hash identifier: +eleINlfNhA5lYSVpJxlqSh4xsrfabeQGOK4mp89URA= Subject key identifier: 2A:3C:1D:6A:76:F6:CF:A1:C9:B9:2D:9B:36:EC:84:4D:44:F2:07:7F Authority key identifier: D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8 Certificate issuer: /CN=A91D313B/serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft Manifest number: F1 Signing time: Wed 05 Nov 2025 05:26:53 +0000 Manifest this update: Wed 05 Nov 2025 05:26:53 +0000 Manifest next update: Wed 12 Nov 2025 05:26:53 +0000 Files and hashes: 1: 1ex0z8jA_QV81Og74-tX8GHcWPg.crl (hash: s0BbEQ93JFxtLGY2IStXuyseyezIZn+RE+btIlavsQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D313B, serialNumber=D5EC74CFC8C0FD057CD4E83BE3EB57F061DC58F8 Validity Not Before: Nov 5 05:26:53 2025 GMT Not After : Nov 12 05:26:53 2025 GMT Subject: CN=690ae01d-b150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:12:17:f1:80:a2:35:76:c3:7a:f2:a5:af:20: 62:05:48:5d:15:da:cb:a0:88:ea:01:1d:f9:d6:ad: a0:d3:be:5e:b7:3d:27:c4:66:7d:f4:d6:a2:67:53: bd:ce:45:2a:ff:91:22:03:bb:e5:79:2e:4d:93:55: 75:88:f8:88:9d:62:f6:c5:c8:2e:95:ec:b3:63:20: f0:89:38:28:79:d1:39:70:68:a1:e1:d1:d0:fd:87: 0c:7d:52:59:94:b3:68:26:24:a2:d9:9a:cf:af:b7: 0f:f1:64:50:a2:ab:c2:60:32:0b:41:fe:37:e6:8d: b0:28:21:e1:0b:6b:f7:bd:d6:41:e2:07:5a:0e:16: 76:81:9b:b5:d5:3e:ff:87:cd:60:7a:df:3b:34:94: 01:42:40:a8:e9:d7:4b:5a:bf:4e:18:5c:99:fa:88: fd:a8:25:2d:36:b6:40:be:29:30:62:78:d0:7d:f2: 1a:44:00:dd:1b:3a:ab:26:09:e6:29:64:37:1c:d0: cc:58:11:f1:6a:47:55:a0:92:06:c6:de:7e:3c:34: 92:85:b4:c8:fc:2c:8a:95:f8:6e:fb:1b:20:c1:78: 18:7d:13:56:f9:87:d9:d3:fa:be:a9:e5:b0:a9:f2: 56:20:8a:b8:91:a4:69:f1:6c:fc:ee:e2:6d:0f:76: dd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3C:1D:6A:76:F6:CF:A1:C9:B9:2D:9B:36:EC:84:4D:44:F2:07:7F X509v3 Authority Key Identifier: keyid:D5:EC:74:CF:C8:C0:FD:05:7C:D4:E8:3B:E3:EB:57:F0:61:DC:58:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ex0z8jA_QV81Og74-tX8GHcWPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/D5BFEC1447DB11EFAEA4B02DC4F9AE02/1ex0z8jA_QV81Og74-tX8GHcWPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:ae:2c:73:21:b7:d9:61:c2:92:c5:2b:13:ef:7e:55:c2:cc: 8e:1c:45:f5:67:bd:e8:09:10:23:6f:76:53:cf:28:7b:ad:f8: 5b:f7:62:3e:d6:1e:81:89:c3:ad:f7:12:dc:db:72:81:03:40: 5d:c0:97:57:6e:87:c4:32:18:6a:b8:bf:8d:4f:6c:6d:a0:6c: d1:50:53:be:79:ce:4b:fb:a8:39:85:c4:0d:eb:39:94:ae:13: 73:86:b3:23:5b:5b:59:5c:b3:b5:58:4c:49:d7:dd:89:53:e2: 59:83:55:7f:05:1c:fb:45:b0:fd:bc:0f:8c:44:bf:43:00:69: 07:a4:76:3d:f3:c7:ce:b6:72:d0:85:14:16:37:d0:6d:39:c0: 4c:6a:f9:f6:28:4f:59:47:03:f3:ef:b6:a9:01:f2:82:a6:8f: f3:11:82:86:e0:4d:a8:31:e8:71:99:04:1a:81:34:09:33:0b: f3:18:ee:e7:b2:f5:60:23:5c:10:4a:f7:aa:3c:39:55:93:88: 29:00:18:1c:fb:e4:cd:23:04:7e:ff:f5:b4:04:4e:db:01:1c: 3a:4d:84:20:13:e9:e3:f6:86:84:db:35:85:ad:83:ec:4b:0d: 0b:d4:fe:e7:67:e4:3a:cd:08:b6:b4:dc:72:50:97:e7:b6:e2: 7f:d0:86:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxM0IxMTAvBgNVBAUTKEQ1RUM3NENGQzhDMEZEMDU3Q0Q0RTgzQkUzRUI1N0Yw NjFEQzU4RjgwHhcNMjUxMTA1MDUyNjUzWhcNMjUxMTEyMDUyNjUzWjAYMRYwFAYD VQQDEw02OTBhZTAxZC1iMTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhIX8YCiNXbDevKlryBiBUhdFdrLoIjqAR351q2g075etz0nxGZ99NaiZ1O9 zkUq/5EiA7vleS5Nk1V1iPiInWL2xcguleyzYyDwiTgoedE5cGih4dHQ/YcMfVJZ lLNoJiSi2ZrPr7cP8WRQoqvCYDILQf435o2wKCHhC2v3vdZB4gdaDhZ2gZu11T7/ h81get87NJQBQkCo6ddLWr9OGFyZ+oj9qCUtNrZAvikwYnjQffIaRADdGzqrJgnm KWQ3HNDMWBHxakdVoJIGxt5+PDSShbTI/CyKlfhu+xsgwXgYfRNW+YfZ0/q+qeWw qfJWIIq4kaRp8Wz87uJtD3bdtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCo8HWp2 9s+hybktmzbshE1E8gd/MB8GA1UdIwQYMBaAFNXsdM/IwP0FfNToO+PrV/Bh3Fj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEzQi9ENUJGRUMxNDQ3 REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8xZXgwejhqQV9RVjgxT2c3NC10WDhHSGNX UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFleDB6OGpBX1FWODFPZzc0LXRYOEdIY1dQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzEzQi9ENUJGRUMxNDQ3REIxMUVGQUVBNEIwMkRDNEY5QUUwMi8xZXgwejhqQV9R VjgxT2c3NC10WDhHSGNXUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARrixzIbfZYcKSxSsT735VwsyOHEX1Z73oCRAjb3ZTzyh7rfhb92I+ 1h6BicOt9xLc23KBA0BdwJdXbofEMhhquL+NT2xtoGzRUFO+ec5L+6g5hcQN6zmU rhNzhrMjW1tZXLO1WExJ192JU+JZg1V/BRz7RbD9vA+MRL9DAGkHpHY988fOtnLQ hRQWN9BtOcBMavn2KE9ZRwPz77apAfKCpo/zEYKG4E2oMehxmQQagTQJMwvzGO7n svVgI1wQSveqPDlVk4gpABgc++TNIwR+//W0BE7bARw6TYQgE+nj9oaE2zWFrYPs Sw0L1P7nZ+Q6zQi2tNxyUJfntuJ/0IYY -----END CERTIFICATE-----Generated at Wed Nov 5 11:14:05 2025 by rpki-client