$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft File: CdjxREM-7h4qRDmROjZuPDxZBTc.mft (raw, json) Hash identifier: XPLSmd7JJ/vEmI/VcI1746A3OLLBUCNFo8HFc3aGkIE= Subject key identifier: 08:85:05:B6:DE:90:FE:DA:68:2A:7B:58:3E:8D:CB:3A:C8:1B:9E:79 Authority key identifier: 09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 Certificate issuer: /CN=A91E9635/serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Certificate serial: 0CC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft Manifest number: 0CBE Signing time: Sun 02 Nov 2025 18:11:05 +0000 Manifest this update: Sun 02 Nov 2025 18:11:04 +0000 Manifest next update: Sun 09 Nov 2025 18:11:04 +0000 Files and hashes: 1: CdjxREM-7h4qRDmROjZuPDxZBTc.crl (hash: 1bzaSww1cvMjRdNHDD05AtUyAFzQV+2EaNvWnnrFsNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3271 (0xcc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9635, serialNumber=09D8F144433EEE1E2A4439913A366E3C3C590537 Validity Not Before: Nov 2 18:11:04 2025 GMT Not After : Nov 9 18:11:04 2025 GMT Subject: CN=69079eb9-8a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cf:15:b0:5f:f1:75:dc:35:bc:c2:44:6c:98: b8:12:f5:93:67:69:8e:1c:e2:d7:17:f2:0a:6e:1c: f4:48:9a:e5:31:0e:a3:92:af:f8:1d:77:fb:17:af: 8e:8d:88:fc:e5:50:13:8e:0a:96:5b:05:fe:b9:25: 34:d3:65:4b:24:32:45:0e:fa:5c:44:3e:1c:c4:67: 65:35:e6:05:fa:e7:4f:c0:2a:61:18:34:08:e5:bd: ca:9f:b0:d2:1d:b5:98:41:c4:fe:e8:bd:f8:04:d7: eb:9f:e0:92:a0:82:a9:f1:1d:62:79:86:78:18:bc: de:71:c6:fa:f0:05:c9:79:55:32:6c:47:6f:55:92: dd:3c:09:7c:51:11:27:4a:52:69:7b:d6:e5:d3:ab: 94:30:24:f1:41:ed:68:b7:3c:c5:1f:2e:b1:f9:d9: d7:97:53:4f:65:f2:c7:c3:06:14:56:7f:34:b9:2b: f7:8b:54:1c:84:94:22:c4:79:b5:f5:d5:bc:46:69: ff:48:bc:84:d3:c7:0b:04:d4:4e:67:e1:f1:6d:4f: ed:9a:6d:89:7b:fa:05:d8:5f:3c:f0:60:8c:46:6b: c3:3b:73:3e:24:51:1e:07:eb:ae:76:eb:85:90:b4: 90:05:cc:14:00:a6:3f:c9:25:cd:34:d5:38:1b:88: ae:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:85:05:B6:DE:90:FE:DA:68:2A:7B:58:3E:8D:CB:3A:C8:1B:9E:79 X509v3 Authority Key Identifier: keyid:09:D8:F1:44:43:3E:EE:1E:2A:44:39:91:3A:36:6E:3C:3C:59:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CdjxREM-7h4qRDmROjZuPDxZBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9635/BA673990FF2911E994F4F419C4F9AE02/CdjxREM-7h4qRDmROjZuPDxZBTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:eb:0b:be:61:c6:bf:90:b1:eb:bb:6c:52:2f:6e:1e:84:98: 2c:b9:76:4c:2c:59:ca:3f:3a:8b:e8:61:7e:2f:d6:e6:bd:86: 0a:7c:5f:38:a7:57:2f:f4:a0:81:4f:07:d6:c6:ea:f7:1a:c8: b5:b0:a2:cc:55:53:82:a4:32:92:f2:21:0d:3f:6d:80:b4:90: 1d:07:50:20:d6:6b:e3:ea:a2:6a:b3:cb:16:2f:5c:ce:ca:8e: dc:49:27:a7:52:43:49:8f:ef:43:8e:e2:6d:8d:f0:bc:02:5c: 5d:2f:cc:26:3f:79:12:c4:b1:35:ac:57:1f:ee:8c:cf:93:6e: e5:e1:7d:73:16:99:7c:d2:0b:6d:55:57:09:8d:0f:47:43:ef: 02:af:a0:93:2e:70:cd:5c:57:78:c4:dc:5b:48:e8:ee:3e:3c: 11:58:10:ce:b1:0f:fe:70:a9:bc:67:51:9a:af:0b:dc:59:6a: 21:61:52:c1:4b:77:16:15:f4:0a:b7:3f:23:d4:bc:e0:5c:8d: 14:e7:e9:8a:e4:1c:43:aa:01:12:cf:62:29:4e:f1:23:b3:24: 14:2f:f0:35:60:f9:9a:e4:62:21:83:7c:61:46:a9:35:a2:b2: 9f:aa:39:ba:9f:4a:87:72:e1:f3:1e:ba:c3:ef:08:b9:40:65: c1:1c:c8:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2MzUxMTAvBgNVBAUTKDA5RDhGMTQ0NDMzRUVFMUUyQTQ0Mzk5MTNBMzY2RTND M0M1OTA1MzcwHhcNMjUxMTAyMTgxMTA0WhcNMjUxMTA5MTgxMTA0WjAYMRYwFAYD VQQDEw02OTA3OWViOS04YTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAus8VsF/xddw1vMJEbJi4EvWTZ2mOHOLXF/IKbhz0SJrlMQ6jkq/4HXf7F6+O jYj85VATjgqWWwX+uSU002VLJDJFDvpcRD4cxGdlNeYF+udPwCphGDQI5b3Kn7DS HbWYQcT+6L34BNfrn+CSoIKp8R1ieYZ4GLzeccb68AXJeVUybEdvVZLdPAl8UREn SlJpe9bl06uUMCTxQe1otzzFHy6x+dnXl1NPZfLHwwYUVn80uSv3i1QchJQixHm1 9dW8Rmn/SLyE08cLBNROZ+HxbU/tmm2Je/oF2F888GCMRmvDO3M+JFEeB+uuduuF kLSQBcwUAKY/ySXNNNU4G4iu7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiFBbbe kP7aaCp7WD6NyzrIG555MB8GA1UdIwQYMBaAFAnY8URDPu4eKkQ5kTo2bjw8WQU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTYzNS9CQTY3Mzk5MEZG MjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdoNHFSRG1ST2padVBEeFpC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkanhSRU0tN2g0cVJEbVJPalp1UER4WkJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTYzNS9CQTY3Mzk5MEZGMjkxMUU5OTRGNEY0MTlDNEY5QUUwMi9DZGp4UkVNLTdo NHFSRG1ST2padVBEeFpCVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB26wu+Yca/kLHru2xSL24ehJgsuXZMLFnKPzqL6GF+L9bmvYYKfF84 p1cv9KCBTwfWxur3Gsi1sKLMVVOCpDKS8iENP22AtJAdB1Ag1mvj6qJqs8sWL1zO yo7cSSenUkNJj+9DjuJtjfC8AlxdL8wmP3kSxLE1rFcf7ozPk27l4X1zFpl80gtt VVcJjQ9HQ+8Cr6CTLnDNXFd4xNxbSOjuPjwRWBDOsQ/+cKm8Z1GarwvcWWohYVLB S3cWFfQKtz8j1LzgXI0U5+mK5BxDqgESz2IpTvEjsyQUL/A1YPma5GIhg3xhRqk1 orKfqjm6n0qHcuHzHrrD7wi5QGXBHMht -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:42 2025 by rpki-client