$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft File: SFseanLJRvLiQ6KAe3DF3V6stzA.mft (raw, json) Hash identifier: 5otIclGjnGdocU8eptZ6mW+9qcL4XqRd+2m456AqPgE= Subject key identifier: 4A:AB:5A:06:83:EA:CB:97:67:2B:46:1F:96:54:B9:95:4D:16:4F:51 Authority key identifier: 48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 Certificate issuer: /CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Certificate serial: 2118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft Manifest number: 2BE5 Signing time: Sun 02 Nov 2025 15:57:07 +0000 Manifest this update: Sun 02 Nov 2025 15:57:06 +0000 Manifest next update: Sun 09 Nov 2025 15:57:06 +0000 Files and hashes: 1: SFseanLJRvLiQ6KAe3DF3V6stzA.crl (hash: 1qJS2Sg0PRdnWKes1m+yY3HQZZgZ+JVscn35LXHCs8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8472 (0x2118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4413, serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730 Validity Not Before: Nov 2 15:57:06 2025 GMT Not After : Nov 9 15:57:06 2025 GMT Subject: CN=69077f53-8c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:10:53:6c:94:f8:21:56:8f:08:9f:5e:cb:82: 2e:ea:56:de:2e:03:c0:bc:e3:de:df:47:8e:78:5f: 64:f0:62:a1:07:cc:73:67:2d:ef:61:ab:ec:ee:9c: 2b:cc:2c:e0:2d:02:f1:fd:ad:cf:cb:6d:1b:e3:63: db:8c:b7:b0:a4:64:2a:9d:92:b0:71:60:ff:9c:99: 91:3d:ee:50:bd:4d:9e:39:30:97:bd:a8:c8:f8:f5: 3f:0f:51:04:bf:6d:46:ee:48:1f:b8:b6:6c:f4:03: 8f:36:4c:aa:f0:ef:94:72:2f:9f:d6:9c:99:df:99: 70:26:7c:c0:b2:ae:fc:e6:df:a5:8a:87:4d:c8:91: fc:a2:e3:41:b1:da:da:e2:15:96:5a:52:30:6e:e9: 9d:78:01:2c:a2:89:96:1d:a3:8f:2c:aa:bb:a9:aa: 61:cd:6a:aa:95:a1:8c:07:75:a8:09:25:d1:79:36: a8:0c:f2:1e:3b:a9:02:67:e4:d9:2d:d5:1a:8a:ca: 28:6b:73:c3:d8:88:ff:31:d3:5f:33:69:ea:7a:0c: f8:ed:86:41:29:83:76:a4:06:b7:74:2b:9a:1a:61: cf:38:6f:18:27:d4:31:2d:94:7c:d5:2f:71:aa:d4: f2:e7:62:84:27:43:fb:8c:6f:37:ee:56:33:ee:4a: 5a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:AB:5A:06:83:EA:CB:97:67:2B:46:1F:96:54:B9:95:4D:16:4F:51 X509v3 Authority Key Identifier: keyid:48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:c0:62:9f:2a:8e:cb:67:51:12:a4:54:b3:14:a3:a0:7e:31: ca:0b:69:ee:bf:b5:92:c8:f6:d1:93:e2:a5:fb:91:c2:3a:eb: 7a:f7:b8:b3:24:40:1b:8a:fd:5f:75:52:48:cb:06:ff:8c:a1: 2d:1e:dc:65:eb:23:21:1c:0e:7c:1a:18:2b:e1:49:71:c3:60: 7d:c2:79:09:39:ed:bc:68:6c:d2:db:98:7b:04:92:22:c2:59: fc:01:5c:cb:06:7f:21:23:dc:26:51:c6:1d:34:9f:ae:49:c7: d5:35:92:1d:29:34:43:45:1b:b5:d2:55:cb:0f:f4:42:9e:1f: 83:d9:c6:48:71:8f:03:65:39:95:fc:97:19:a7:00:83:cc:f2: f5:a7:de:df:f8:c8:59:75:d9:7d:1e:84:1b:4d:78:45:de:21: 6a:0a:41:ef:cf:0a:1b:f7:0f:39:a5:2a:36:f2:5f:0f:d6:11: c3:b5:ce:22:21:91:e4:6f:0a:8a:96:c1:e8:e8:02:b3:06:5a: 63:7a:f2:e0:69:2d:f3:42:88:d2:c1:88:78:bb:54:a8:a7:e5: 94:18:f3:0d:84:0e:41:b9:34:9b:8a:52:b8:9c:b3:79:e8:43: 55:1b:f9:f3:d2:7f:62:f2:56:29:01:62:4e:79:1e:56:77:23: 80:f0:2b:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0MTMxMTAvBgNVBAUTKDQ4NUIxRTZBNzJDOTQ2RjJFMjQzQTI4MDdCNzBDNURE NUVBQ0I3MzAwHhcNMjUxMTAyMTU1NzA2WhcNMjUxMTA5MTU1NzA2WjAYMRYwFAYD VQQDEw02OTA3N2Y1My04YzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxBTbJT4IVaPCJ9ey4Iu6lbeLgPAvOPe30eOeF9k8GKhB8xzZy3vYavs7pwr zCzgLQLx/a3Py20b42PbjLewpGQqnZKwcWD/nJmRPe5QvU2eOTCXvajI+PU/D1EE v21G7kgfuLZs9AOPNkyq8O+Uci+f1pyZ35lwJnzAsq785t+liodNyJH8ouNBsdra 4hWWWlIwbumdeAEsoomWHaOPLKq7qaphzWqqlaGMB3WoCSXReTaoDPIeO6kCZ+TZ LdUaisooa3PD2Ij/MdNfM2nqegz47YZBKYN2pAa3dCuaGmHPOG8YJ9QxLZR81S9x qtTy52KEJ0P7jG837lYz7kpafQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqrWgaD 6suXZytGH5ZUuZVNFk9RMB8GA1UdIwQYMBaAFEhbHmpyyUby4kOigHtwxd1erLcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDQxMy8wODE2RTc1NEZG QjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2TGlRNktBZTNERjNWNnN0 ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NGc2VhbkxKUnZMaVE2S0FlM0RGM1Y2c3R6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDQxMy8wODE2RTc1NEZGQjQxMUU1OTQ0MzEwMkNDNEY5QUUwMi9TRnNlYW5MSlJ2 TGlRNktBZTNERjNWNnN0ekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBywGKfKo7LZ1ESpFSzFKOgfjHKC2nuv7WSyPbRk+Kl+5HCOut697iz JEAbiv1fdVJIywb/jKEtHtxl6yMhHA58Ghgr4Ulxw2B9wnkJOe28aGzS25h7BJIi wln8AVzLBn8hI9wmUcYdNJ+uScfVNZIdKTRDRRu10lXLD/RCnh+D2cZIcY8DZTmV /JcZpwCDzPL1p97f+MhZddl9HoQbTXhF3iFqCkHvzwob9w85pSo28l8P1hHDtc4i IZHkbwqKlsHo6AKzBlpjevLgaS3zQojSwYh4u1Sop+WUGPMNhA5BuTSbilK4nLN5 6ENVG/nz0n9i8lYpAWJOeR5WdyOA8CsP -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:10 2025 by rpki-client