$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft File: U0krmdbQfZSfaQqTaVsUkoIWmi4.mft (raw, json) Hash identifier: /YLQ26KImgA+2uvHr3KHpwN21mXBdlzUgECwVGsNAJ0= Subject key identifier: 34:63:9D:16:D0:14:F8:C7:DC:EE:42:BE:DA:00:EE:BC:5B:E6:01:5E Authority key identifier: 53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E Certificate issuer: /CN=A9111623/serialNumber=53492B99D6D07D949F690A93695B149282169A2E Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft Manifest number: 0B Signing time: Wed 05 Nov 2025 04:52:30 +0000 Manifest this update: Wed 05 Nov 2025 04:52:30 +0000 Manifest next update: Wed 12 Nov 2025 04:52:30 +0000 Files and hashes: 1: U0krmdbQfZSfaQqTaVsUkoIWmi4.crl (hash: INMQiQ0t2a7OEwflgyvUqCXSX10tf1pRMQUtvimgKyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111623, serialNumber=53492B99D6D07D949F690A93695B149282169A2E Validity Not Before: Nov 5 04:52:30 2025 GMT Not After : Nov 12 04:52:30 2025 GMT Subject: CN=690ad80e-349c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:04:6d:59:bd:d8:40:46:f7:d0:c8:b7:ac: dd:8e:ef:07:a7:c3:ff:5a:1f:10:ec:6e:fe:97:3b: 4e:8b:2b:92:e2:c9:30:4f:ef:f8:3c:45:d5:44:9f: 1b:c8:5c:75:d2:32:cc:80:50:9f:14:a5:5c:d2:52: 31:60:49:8b:09:aa:c5:a0:34:66:90:99:1e:f6:45: 8d:55:74:21:69:42:b9:9f:17:c3:37:ae:53:e6:b2: b9:65:43:58:47:2f:f9:6f:58:08:6a:9a:17:a9:ee: 1a:ce:55:35:45:b0:e3:60:f7:21:c0:92:c0:cb:7e: f5:40:9a:bd:c6:ef:62:7d:e1:33:3c:b2:93:bb:aa: 8e:8b:02:2e:97:7e:f8:5a:1a:50:d2:3e:03:ec:32: a0:e1:28:ae:5e:16:1a:55:15:ad:9b:73:4e:75:65: 09:90:6d:57:71:af:5b:52:29:bb:fb:f6:b9:85:43: 9f:18:c8:f8:9d:06:1d:53:8c:54:82:f6:cd:cd:75: f5:6d:53:19:a3:a8:5f:17:e8:19:cb:cd:ab:f1:52: d1:22:fd:79:26:66:8f:56:ed:85:0e:66:54:92:53: 0f:f8:18:34:7b:6b:01:41:5e:85:cb:3d:38:71:7c: 24:97:b1:ca:c9:2c:40:4d:99:9d:6c:6f:83:c4:02: 41:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:63:9D:16:D0:14:F8:C7:DC:EE:42:BE:DA:00:EE:BC:5B:E6:01:5E X509v3 Authority Key Identifier: keyid:53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:07:e2:a6:a6:e8:c4:9d:10:6f:50:b2:c0:0a:d4:fa:a0:64: c9:00:71:db:9e:dc:8f:af:f1:e2:23:4d:74:47:79:52:08:df: 16:1f:23:88:15:0c:fa:1c:08:dd:01:8c:81:d2:80:9c:85:3c: 08:ae:27:98:43:4c:58:f8:3e:e9:4f:63:4e:cd:57:9a:01:f1: 20:84:7c:87:6d:f6:da:cd:d7:97:46:90:21:36:bd:e0:b8:ab: 0b:0d:81:04:fd:97:03:97:d2:f1:0e:e8:2a:2d:06:84:70:5c: de:38:d9:ec:1d:20:95:da:c6:a0:ce:22:fa:5c:18:09:af:88: 3d:80:55:c8:8c:cb:08:b8:4f:69:be:51:c5:c3:68:5f:86:6f: d2:04:7f:1b:9a:07:bf:5e:6a:f1:48:7f:34:3c:da:21:73:9b: 36:72:91:c7:6e:3d:cd:72:ea:e7:12:74:30:3e:47:38:70:8d: b2:ce:e5:aa:65:2a:b9:83:50:37:2a:47:eb:1f:49:c0:ea:77: e0:81:a0:ed:2a:47:b4:c4:cd:5f:60:25:ad:c1:20:09:b3:7a: eb:66:fa:13:63:e7:cc:91:8a:ea:f6:0f:27:56:31:01:e6:df: 22:48:dc:14:19:a2:fe:a2:35:82:27:ed:0e:a6:b7:7e:b2:d6: ca:86:f6:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTYyMzExMC8GA1UEBRMoNTM0OTJCOTlENkQwN0Q5NDlGNjkwQTkzNjk1QjE0OTI4 MjE2OUEyRTAeFw0yNTExMDUwNDUyMzBaFw0yNTExMTIwNDUyMzBaMBgxFjAUBgNV BAMTDTY5MGFkODBlLTM0OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9+wRtWb3YQEb30Mi3rN2O7wenw/9aHxDsbv6XO06LK5LiyTBP7/g8RdVEnxvI XHXSMsyAUJ8UpVzSUjFgSYsJqsWgNGaQmR72RY1VdCFpQrmfF8M3rlPmsrllQ1hH L/lvWAhqmhep7hrOVTVFsONg9yHAksDLfvVAmr3G72J94TM8spO7qo6LAi6Xfvha GlDSPgPsMqDhKK5eFhpVFa2bc051ZQmQbVdxr1tSKbv79rmFQ58YyPidBh1TjFSC 9s3NdfVtUxmjqF8X6BnLzavxUtEi/XkmZo9W7YUOZlSSUw/4GDR7awFBXoXLPThx fCSXscrJLEBNmZ1sb4PEAkHjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNGOdFtAU +Mfc7kK+2gDuvFvmAV4wHwYDVR0jBBgwFoAUU0krmdbQfZSfaQqTaVsUkoIWmi4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExNjIzLzkwNzAwMEY2QUIy NDExRjBBRkNFNUQyRkM0RjlBRTAyL1Uwa3JtZGJRZlpTZmFRcVRhVnNVa29JV21p NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVTBrcm1kYlFmWlNmYVFxVGFWc1Vrb0lXbWk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx NjIzLzkwNzAwMEY2QUIyNDExRjBBRkNFNUQyRkM0RjlBRTAyL1Uwa3JtZGJRZlpT ZmFRcVRhVnNVa29JV21pNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH8H4qam6MSdEG9QssAK1PqgZMkAcdue3I+v8eIjTXRHeVII3xYfI4gV DPocCN0BjIHSgJyFPAiuJ5hDTFj4PulPY07NV5oB8SCEfIdt9trN15dGkCE2veC4 qwsNgQT9lwOX0vEO6CotBoRwXN442ewdIJXaxqDOIvpcGAmviD2AVciMywi4T2m+ UcXDaF+Gb9IEfxuaB79eavFIfzQ82iFzmzZykcduPc1y6ucSdDA+RzhwjbLO5apl KrmDUDcqR+sfScDqd+CBoO0qR7TEzV9gJa3BIAmzeutm+hNj58yRiur2DydWMQHm 3yJI3BQZov6iNYIn7Q6mt36y1sqG9uI= -----END CERTIFICATE-----Generated at Wed Nov 5 23:43:22 2025 by rpki-client