$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft File: S0Nd1JrBEcPde6D08IaF8hZRWFk.mft (raw, json) Hash identifier: nUByDjS4GRhImCj5RTzX3DWAjxeR3OriA0u3/Fi9rf4= Subject key identifier: 98:7A:27:94:A9:D7:FC:3C:7B:36:D2:13:B2:9D:A6:28:9C:DF:4B:4B Authority key identifier: 4B:43:5D:D4:9A:C1:11:C3:DD:7B:A0:F4:F0:86:85:F2:16:51:58:59 Certificate issuer: /CN=A91DC33B/serialNumber=4B435DD49AC111C3DD7BA0F4F08685F216515859 Certificate serial: 16C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft Manifest number: 16EC Signing time: Sun 02 Nov 2025 16:40:16 +0000 Manifest this update: Sun 02 Nov 2025 16:40:15 +0000 Manifest next update: Sun 09 Nov 2025 16:40:15 +0000 Files and hashes: 1: S0Nd1JrBEcPde6D08IaF8hZRWFk.crl (hash: nsvd1BMIGg1NnprpF8abYeCf59bVBY+y2DtSKW6DHcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.crl rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5826 (0x16c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC33B, serialNumber=4B435DD49AC111C3DD7BA0F4F08685F216515859 Validity Not Before: Nov 2 16:40:15 2025 GMT Not After : Nov 9 16:40:15 2025 GMT Subject: CN=6907896f-1ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ae:77:8c:39:95:16:0c:82:0b:bf:c8:ca:72: f6:5d:79:d7:e4:a8:55:39:bc:eb:31:a8:b2:78:72: fe:ad:ee:0d:d3:01:d4:8a:e2:88:df:5d:e6:9a:bf: 8d:cf:a3:2a:2f:4e:f8:5e:48:1c:1d:b8:e7:d7:26: 49:5b:bf:61:c7:b5:28:08:1f:1f:24:ea:97:cf:83: 6c:33:dc:b1:bc:ad:47:f6:b8:37:83:60:a5:04:66: 6f:9b:70:f2:92:38:44:2c:8c:ca:8a:36:32:4f:32: 95:95:d3:69:0f:35:c9:14:09:cf:29:03:58:33:83: 77:9c:c5:f9:0e:c0:90:c1:d2:4a:ef:77:53:2a:aa: 4c:69:61:d5:81:ab:b2:3c:67:4c:34:57:49:de:54: d7:b1:c4:d5:4f:da:fe:ef:46:b0:44:78:30:4c:b5: 4a:1b:45:02:83:06:ad:ed:a7:70:84:cc:2c:54:97: fb:59:fe:55:ab:9c:50:16:ad:1c:59:25:93:e7:59: f7:e3:f4:99:8f:bd:1f:58:a9:4d:7d:5a:1b:7a:a3: ba:25:2e:0a:2a:eb:be:66:b6:ce:be:20:a0:40:41: 4f:25:5a:4e:08:94:eb:7c:8d:62:f4:65:a4:ce:fb: 55:d9:f0:be:f3:de:bd:be:07:85:da:5b:47:58:04: dc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7A:27:94:A9:D7:FC:3C:7B:36:D2:13:B2:9D:A6:28:9C:DF:4B:4B X509v3 Authority Key Identifier: keyid:4B:43:5D:D4:9A:C1:11:C3:DD:7B:A0:F4:F0:86:85:F2:16:51:58:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9f:69:32:56:e3:e9:46:e1:6f:95:35:15:5b:c2:f6:d1:3e: 50:c5:93:77:5e:15:bc:5d:59:94:6b:01:58:16:6c:81:5a:e9: df:a1:80:b8:36:5d:e6:5a:75:fc:6e:c6:26:6f:e3:69:e8:8d: 68:2a:12:66:92:ab:49:ac:69:1e:72:2b:53:b7:85:a5:e2:f8: 0b:6c:fa:8a:b9:d0:50:85:9d:e4:b2:03:18:c0:5a:02:13:4b: 05:c1:84:46:cf:bc:dc:fc:9d:55:4d:2f:b2:f2:70:13:ac:aa: 27:f8:96:05:18:f5:e9:2a:40:66:e7:ff:f5:88:1d:93:a4:0d: f3:17:ae:f4:d3:b6:29:b8:73:27:52:15:85:de:71:bb:89:6f: 5b:d1:86:82:85:6a:2d:64:aa:b8:81:a0:78:35:7a:b7:07:89: c6:ce:8d:f5:df:9d:4d:74:13:a0:d3:d5:9a:84:16:0d:8e:f4: 04:22:70:99:9c:4c:5f:23:58:05:51:a0:d6:94:bd:ea:79:3a: 24:48:43:46:ec:bd:b5:6c:86:7b:52:ed:30:b6:c6:87:e8:45: 77:05:e6:a3:ff:d0:ac:53:d1:d2:2d:cc:58:ff:6c:53:5b:0c: c6:f2:df:ce:e1:e1:95:3c:87:06:71:e6:65:b4:9b:bf:fe:af: bf:71:49:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzM0IxMTAvBgNVBAUTKDRCNDM1REQ0OUFDMTExQzNERDdCQTBGNEYwODY4NUYy MTY1MTU4NTkwHhcNMjUxMTAyMTY0MDE1WhcNMjUxMTA5MTY0MDE1WjAYMRYwFAYD VQQDEw02OTA3ODk2Zi0xZmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx653jDmVFgyCC7/IynL2XXnX5KhVObzrMaiyeHL+re4N0wHUiuKI313mmr+N z6MqL074XkgcHbjn1yZJW79hx7UoCB8fJOqXz4NsM9yxvK1H9rg3g2ClBGZvm3Dy kjhELIzKijYyTzKVldNpDzXJFAnPKQNYM4N3nMX5DsCQwdJK73dTKqpMaWHVgauy PGdMNFdJ3lTXscTVT9r+70awRHgwTLVKG0UCgwat7adwhMwsVJf7Wf5Vq5xQFq0c WSWT51n34/SZj70fWKlNfVobeqO6JS4KKuu+ZrbOviCgQEFPJVpOCJTrfI1i9GWk zvtV2fC+8969vgeF2ltHWATcXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJh6J5Sp 1/w8ezbSE7Kdpiic30tLMB8GA1UdIwQYMBaAFEtDXdSawRHD3Xug9PCGhfIWUVhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMzQi9CNEM5RkU5MjA2 RjUxMUU4OTYxOEY0MkZDNEY5QUUwMi9TME5kMUpyQkVjUGRlNkQwOElhRjhoWlJX RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwTmQxSnJCRWNQZGU2RDA4SWFGOGhaUldGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMzQi9CNEM5RkU5MjA2RjUxMUU4OTYxOEY0MkZDNEY5QUUwMi9TME5kMUpyQkVj UGRlNkQwOElhRjhoWlJXRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAan2kyVuPpRuFvlTUVW8L20T5QxZN3XhW8XVmUawFYFmyBWunfoYC4 Nl3mWnX8bsYmb+Np6I1oKhJmkqtJrGkecitTt4Wl4vgLbPqKudBQhZ3ksgMYwFoC E0sFwYRGz7zc/J1VTS+y8nATrKon+JYFGPXpKkBm5//1iB2TpA3zF67007YpuHMn UhWF3nG7iW9b0YaChWotZKq4gaB4NXq3B4nGzo31351NdBOg09WahBYNjvQEInCZ nExfI1gFUaDWlL3qeTokSENG7L21bIZ7Uu0wtsaH6EV3Beaj/9CsU9HSLcxY/2xT WwzG8t/O4eGVPIcGceZltJu//q+/cUkX -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:24 2025 by rpki-client