$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft File: RGicZx-u8ZZ896mxozaNi5FLe6c.mft (raw, json) Hash identifier: IFlU0FYgtTOOrNQyCkI8NHuWtQz5+HzfxTeOKfhY0I4= Subject key identifier: 4C:9B:05:CA:05:17:4B:2D:06:17:09:FA:E9:D3:21:DE:D9:B1:85:6A Authority key identifier: 44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 Certificate issuer: /CN=A91EBA46/serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft Manifest number: B9 Signing time: Wed 05 Nov 2025 06:09:30 +0000 Manifest this update: Wed 05 Nov 2025 06:09:29 +0000 Manifest next update: Wed 12 Nov 2025 06:09:29 +0000 Files and hashes: 1: RGicZx-u8ZZ896mxozaNi5FLe6c.crl (hash: 13fsJhQhKbY3OHNCeo4NhQXBWBbP6vLHGG8sLdfErrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=44689C671FAEF1967CF7A9B1A3368D8B914B7BA7 Validity Not Before: Nov 5 06:09:29 2025 GMT Not After : Nov 12 06:09:29 2025 GMT Subject: CN=690aea1a-9b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8e:cc:d9:7e:6e:91:4a:20:1a:e9:1b:cb:33: 53:db:3a:9e:f1:a9:48:06:f6:cd:46:6c:f2:24:f6: af:e4:67:4d:fb:39:fb:d7:ae:ef:12:c8:85:55:b8: 65:b0:8d:8a:27:dd:89:ab:ed:72:c3:3c:be:24:76: 32:7c:9b:19:ac:0a:f1:6a:b1:c6:0f:05:19:25:a9: e3:e4:f9:03:4f:67:1f:cf:8d:19:d8:3d:c9:20:d3: f6:b5:98:17:2d:2b:2a:f3:1b:c7:7c:52:2b:b0:a1: 63:d1:eb:31:ef:35:d6:f1:b2:a8:05:98:67:ba:cc: 5e:1d:de:f9:8d:1d:bd:2d:ce:46:f9:1d:35:fa:0e: 56:83:48:33:87:61:a0:89:78:ef:b4:7e:a3:be:eb: 29:8e:3d:dd:09:6b:57:39:ae:cf:16:7c:78:ee:af: 5f:3a:d6:ec:95:e1:41:4c:1b:1c:f7:b4:e1:0a:83: 7d:71:a8:d5:39:54:47:0b:31:ea:59:7a:85:7a:bd: ee:ef:c3:8d:a8:7f:f8:18:6f:96:7e:07:a0:5b:99: ae:46:39:91:5f:3b:91:9b:2e:97:f7:8d:48:c8:01: d0:7e:ce:5a:6c:b0:b0:47:4f:18:66:c1:59:81:cb: 1b:87:aa:41:b7:c3:37:5f:0f:fa:7c:69:64:72:ee: cf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9B:05:CA:05:17:4B:2D:06:17:09:FA:E9:D3:21:DE:D9:B1:85:6A X509v3 Authority Key Identifier: keyid:44:68:9C:67:1F:AE:F1:96:7C:F7:A9:B1:A3:36:8D:8B:91:4B:7B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGicZx-u8ZZ896mxozaNi5FLe6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/07AE7A969CF611EF8A6C8581C4F9AE02/RGicZx-u8ZZ896mxozaNi5FLe6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:3c:a0:0a:52:7a:e3:2c:38:2c:5b:65:ff:b4:de:52:22:6b: ee:8a:b1:aa:32:d7:1e:01:c3:33:10:e8:c4:6a:9f:38:ae:64: 42:a3:0f:9a:11:bc:c6:89:4f:e9:31:25:b5:68:09:e4:f5:4e: 62:29:4d:2f:fd:a9:b9:0a:8c:58:0a:dd:c7:d0:28:c0:f8:2f: 97:93:e0:db:9c:08:40:9d:5b:ff:11:25:18:c1:61:e8:6c:78: b7:79:a1:82:dd:66:81:db:3a:3c:a8:58:1f:7d:db:e2:49:09: 9f:2e:07:38:6e:fd:f1:11:35:46:c6:ed:7f:1a:6f:2a:a8:d6: ce:00:3c:33:ae:4b:30:b0:b7:c1:53:54:56:d0:90:4d:63:26: 39:a3:2b:19:82:b8:d5:cd:1a:d2:b7:82:ce:37:75:90:f6:28: c2:96:c5:4e:b3:02:a8:19:21:48:18:14:bf:e2:75:c9:88:92: 5c:f3:0d:f9:02:5e:d5:4d:1e:3c:1a:ab:77:34:84:77:48:45: 27:af:c6:1a:b2:69:df:b8:53:c8:8f:c6:ac:8e:53:75:ed:ad: ef:2f:dc:24:04:da:a3:b8:a6:c6:5b:c0:8a:3d:7b:12:16:fe: e4:a4:5b:91:c4:8c:8d:47:4e:11:75:6a:71:07:51:5e:f1:20: 21:bb:be:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBNDYxMTAvBgNVBAUTKDQ0Njg5QzY3MUZBRUYxOTY3Q0Y3QTlCMUEzMzY4RDhC OTE0QjdCQTcwHhcNMjUxMTA1MDYwOTI5WhcNMjUxMTEyMDYwOTI5WjAYMRYwFAYD VQQDEw02OTBhZWExYS05YjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmo7M2X5ukUogGukbyzNT2zqe8alIBvbNRmzyJPav5GdN+zn7167vEsiFVbhl sI2KJ92Jq+1ywzy+JHYyfJsZrArxarHGDwUZJanj5PkDT2cfz40Z2D3JINP2tZgX LSsq8xvHfFIrsKFj0esx7zXW8bKoBZhnusxeHd75jR29Lc5G+R01+g5Wg0gzh2Gg iXjvtH6jvuspjj3dCWtXOa7PFnx47q9fOtbsleFBTBsc97ThCoN9cajVOVRHCzHq WXqFer3u78ONqH/4GG+WfgegW5muRjmRXzuRmy6X941IyAHQfs5abLCwR08YZsFZ gcsbh6pBt8M3Xw/6fGlkcu7PNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEybBcoF F0stBhcJ+unTId7ZsYVqMB8GA1UdIwQYMBaAFERonGcfrvGWfPepsaM2jYuRS3un MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE0Ni8wN0FFN0E5NjlD RjYxMUVGOEE2Qzg1ODFDNEY5QUUwMi9SR2ljWngtdThaWjg5Nm14b3phTmk1Rkxl NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JHaWNaeC11OFpaODk2bXhvemFOaTVGTGU2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE0Ni8wN0FFN0E5NjlDRjYxMUVGOEE2Qzg1ODFDNEY5QUUwMi9SR2ljWngtdTha Wjg5Nm14b3phTmk1RkxlNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJPKAKUnrjLDgsW2X/tN5SImvuirGqMtceAcMzEOjEap84rmRCow+a EbzGiU/pMSW1aAnk9U5iKU0v/am5CoxYCt3H0CjA+C+Xk+DbnAhAnVv/ESUYwWHo bHi3eaGC3WaB2zo8qFgffdviSQmfLgc4bv3xETVGxu1/Gm8qqNbOADwzrkswsLfB U1RW0JBNYyY5oysZgrjVzRrSt4LON3WQ9ijClsVOswKoGSFIGBS/4nXJiJJc8w35 Al7VTR48Gqt3NIR3SEUnr8YasmnfuFPIj8asjlN17a3vL9wkBNqjuKbGW8CKPXsS Fv7kpFuRxIyNR04RdWpxB1Fe8SAhu74a -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:38 2025 by rpki-client