$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft File: jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft (raw, json) Hash identifier: TbbEZIAa22fsu2VRTE3uJ1fFryZ00EMEAKoVk9q41IY= Subject key identifier: 20:59:17:56:BE:A0:0B:6B:2F:A6:29:C3:7E:13:DC:C9:7B:D2:1C:EC Authority key identifier: 8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D Certificate issuer: /CN=A91D94CD/serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft Manifest number: 12 Signing time: Mon 03 Nov 2025 07:55:41 +0000 Manifest this update: Mon 03 Nov 2025 07:55:40 +0000 Manifest next update: Mon 10 Nov 2025 07:55:40 +0000 Files and hashes: 1: jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl (hash: 0HyfyasysuzD9O1ivbzJSpYCAPvF+NrKHa0coeplOlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D94CD, serialNumber=8D1CD659E61DB6495B36CE69C49F5A832EDBD59D Validity Not Before: Nov 3 07:55:40 2025 GMT Not After : Nov 10 07:55:40 2025 GMT Subject: CN=69085ffd-8308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8d:63:f4:88:16:09:87:a7:6e:61:80:9e:35: 14:3d:01:28:fb:d5:b0:d6:95:8e:6f:e8:2b:e2:4d: d8:dc:b4:dd:66:4f:26:ee:8e:c9:13:b6:21:f7:9d: b8:1b:40:f5:9a:bf:10:6e:00:de:eb:36:20:94:32: 49:35:09:b7:52:3c:37:35:6b:71:25:f3:fc:96:9a: 7a:88:7a:cc:59:7e:04:54:07:3d:38:f3:1d:fe:1f: 32:80:9f:1b:4d:89:3f:29:de:26:2b:55:27:9c:f1: 5f:b0:31:09:83:7a:af:99:df:e1:7a:12:32:15:7d: ce:22:86:73:8f:aa:e8:49:5b:b7:5b:c3:6f:c4:3f: 6b:78:3e:ab:68:bc:4c:cd:7b:8d:d0:44:39:30:ff: 3f:6a:4d:0d:24:e9:79:be:2b:4b:5d:23:3e:62:3e: f1:3a:b7:f7:d1:c1:b4:bf:2d:d2:b4:d3:f0:15:b9: e6:47:a7:94:a8:bd:4b:de:00:2f:96:97:83:60:72: 77:6b:13:16:e6:f4:d6:88:2a:d8:58:84:71:ba:6f: 93:0c:25:d2:88:00:c0:ce:66:4d:69:4d:51:ca:0e: 1c:68:d0:29:21:d5:19:49:96:a9:e0:62:ec:5b:ef: d4:83:ae:60:09:35:79:7e:31:77:66:e0:59:fc:e5: a5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:59:17:56:BE:A0:0B:6B:2F:A6:29:C3:7E:13:DC:C9:7B:D2:1C:EC X509v3 Authority Key Identifier: keyid:8D:1C:D6:59:E6:1D:B6:49:5B:36:CE:69:C4:9F:5A:83:2E:DB:D5:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRzWWeYdtklbNs5pxJ9agy7b1Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/36AF94729EC811F08CD2AC7BC4F9AE02/jRzWWeYdtklbNs5pxJ9agy7b1Z0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:65:4e:7c:cb:28:22:a3:84:db:29:51:8a:04:0d:a3:d0:24: d8:c9:ed:39:f2:41:9d:41:34:05:8a:3f:1e:29:e0:43:3d:53: 28:78:16:97:af:37:6a:66:90:62:4d:be:88:a7:b5:8a:c7:c8: 36:bf:e3:e5:81:56:c3:4f:11:68:02:21:5f:79:24:0b:2a:c1: d5:2d:c4:a1:56:8a:03:08:e3:b1:07:c3:48:0c:b7:3b:81:0e: c5:f1:32:61:ed:5e:a1:76:fb:a3:7e:39:53:02:b9:09:66:23: 6f:e6:cc:4e:bf:ac:52:d3:7c:59:62:e1:ef:fc:3f:61:e9:63: e4:4e:49:9d:99:fc:83:f0:d7:40:d1:b3:74:12:8c:ca:91:b7: 7a:fd:27:90:07:b9:6d:3b:2e:d8:ad:f0:06:da:04:e9:85:77: 23:43:ea:88:d6:e9:4c:4d:ab:5a:6e:39:f7:98:af:40:bc:4d: b7:26:99:48:e5:a3:33:fb:94:0a:06:87:65:ba:63:30:19:fb: 72:60:44:55:81:06:56:f9:c3:d0:86:85:58:d7:a1:6a:35:d6: ca:9b:df:6d:b9:ff:f8:94:21:8a:d0:d6:4f:60:28:bf:21:c2: c8:7e:fd:a0:dc:5a:d1:ff:07:c0:cb:70:ba:22:24:35:69:95: ea:e8:18:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTRDRDExMC8GA1UEBRMoOEQxQ0Q2NTlFNjFEQjY0OTVCMzZDRTY5QzQ5RjVBODMy RURCRDU5RDAeFw0yNTExMDMwNzU1NDBaFw0yNTExMTAwNzU1NDBaMBgxFjAUBgNV BAMTDTY5MDg1ZmZkLTgzMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfjWP0iBYJh6duYYCeNRQ9ASj71bDWlY5v6CviTdjctN1mTybujskTtiH3nbgb QPWavxBuAN7rNiCUMkk1CbdSPDc1a3El8/yWmnqIesxZfgRUBz048x3+HzKAnxtN iT8p3iYrVSec8V+wMQmDeq+Z3+F6EjIVfc4ihnOPquhJW7dbw2/EP2t4PqtovEzN e43QRDkw/z9qTQ0k6Xm+K0tdIz5iPvE6t/fRwbS/LdK00/AVueZHp5SovUveAC+W l4NgcndrExbm9NaIKthYhHG6b5MMJdKIAMDOZk1pTVHKDhxo0Ckh1RlJlqngYuxb 79SDrmAJNXl+MXdm4Fn85aUnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIFkXVr6g C2svpinDfhPcyXvSHOwwHwYDVR0jBBgwFoAUjRzWWeYdtklbNs5pxJ9agy7b1Z0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5NENELzM2QUY5NDcyOUVD ODExRjA4Q0QyQUM3QkM0RjlBRTAyL2pSeldXZVlkdGtsYk5zNXB4SjlhZ3k3YjFa MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvalJ6V1dlWWR0a2xiTnM1cHhKOWFneTdiMVowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 NENELzM2QUY5NDcyOUVDODExRjA4Q0QyQUM3QkM0RjlBRTAyL2pSeldXZVlkdGts Yk5zNXB4SjlhZ3k3YjFaMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALxlTnzLKCKjhNspUYoEDaPQJNjJ7TnyQZ1BNAWKPx4p4EM9Uyh4Fpev N2pmkGJNvointYrHyDa/4+WBVsNPEWgCIV95JAsqwdUtxKFWigMI47EHw0gMtzuB DsXxMmHtXqF2+6N+OVMCuQlmI2/mzE6/rFLTfFli4e/8P2HpY+ROSZ2Z/IPw10DR s3QSjMqRt3r9J5AHuW07Ltit8AbaBOmFdyND6ojW6UxNq1puOfeYr0C8TbcmmUjl ozP7lAoGh2W6YzAZ+3JgRFWBBlb5w9CGhVjXoWo11sqb3225//iUIYrQ1k9gKL8h wsh+/aDcWtH/B8DLcLoiJDVpleroGNk= -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:02 2025 by rpki-client