$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft File: cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json) Hash identifier: /N1tqhAhLhyP6iisVlzVlMtPu3fBCCW9XCqzgE+uxKk= Subject key identifier: 5B:5D:AC:AD:AC:81:89:4B:0B:69:73:AF:5F:5F:2A:85:89:36:3D:87 Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft Manifest number: 01B2 Signing time: Wed 05 Nov 2025 03:14:27 +0000 Manifest this update: Wed 05 Nov 2025 03:14:26 +0000 Manifest next update: Wed 12 Nov 2025 03:14:26 +0000 Files and hashes: 1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: 8G1lrLrpN8UGIUg9fyBvMlNMTAskBx14PHqNww2uPx8=) 2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: iHabIHEz/PTHKVI4qhPpj+ZDCYtCE+FTF89syGeIFww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F627, serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Validity Not Before: Nov 5 03:14:26 2025 GMT Not After : Nov 12 03:14:26 2025 GMT Subject: CN=690ac113-e703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ee:0f:c8:f2:cb:47:06:0f:c6:a7:3e:f1:63: 2e:3c:02:31:6d:50:cd:1d:e3:ce:35:55:cf:21:4f: f8:57:71:be:35:60:0c:bb:1d:a1:f5:64:89:04:a4: 95:cd:90:0e:77:ba:f4:7b:11:46:13:67:07:c2:04: 72:78:73:1d:7e:a3:9d:14:dd:c7:1b:ef:f0:da:49: cb:79:2f:2b:2b:47:0c:de:be:16:fb:45:29:a8:e4: 73:24:66:39:c7:d1:58:6e:25:70:85:22:da:9d:0b: d7:38:b8:ef:73:c5:de:4c:fe:e0:01:6d:ec:64:fa: ea:c9:3c:20:de:7a:af:39:3c:7a:ab:f0:69:b1:e2: 39:57:d0:9e:19:9a:c3:40:58:ed:e3:22:5c:16:23: c0:41:21:4b:0a:30:3b:19:7c:53:07:78:97:10:97: fe:4f:6b:b4:07:05:c0:1e:b5:ad:9e:b4:74:90:b1: e5:60:9d:9e:82:c8:f4:cc:b4:7f:1a:f4:c4:2a:df: 5c:90:73:98:ea:b3:6d:8b:51:4f:63:e8:80:ab:20: 40:fa:3e:de:40:42:56:ef:94:01:b6:d7:a1:ac:df: 6b:4a:48:0d:ab:2a:3a:45:27:a4:f0:d9:17:2c:1d: e4:73:8d:c0:c6:c8:09:86:89:53:ca:c5:d1:97:5b: 99:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5D:AC:AD:AC:81:89:4B:0B:69:73:AF:5F:5F:2A:85:89:36:3D:87 X509v3 Authority Key Identifier: keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1e:64:59:43:bf:7e:cb:71:35:6c:ec:b2:95:78:ed:1e:3d: 6a:e2:63:ac:38:52:7a:e4:8a:dd:18:b8:4a:3d:e7:45:82:e9: 7b:55:6e:0f:7b:c5:b5:d5:a7:43:d8:48:94:1f:aa:19:b5:c3: c0:e3:eb:e0:78:30:3a:fb:5a:a6:0c:9f:ad:c9:88:2c:8d:01: ea:ad:73:0a:3b:80:65:26:2c:5b:ee:34:6f:e2:67:93:34:3a: 87:49:9f:f5:81:34:64:0c:41:51:cc:ea:52:98:67:da:dc:14: 35:26:74:4d:49:5e:17:c7:ff:55:5f:23:7f:f8:b2:0b:c1:e6: 1a:09:9c:5e:ce:a4:fc:8c:de:8c:01:9d:fa:fb:c2:3f:db:86: cb:82:ad:8c:27:27:19:54:6f:0f:02:02:75:4f:8d:65:03:a8: 23:d8:28:6a:20:a9:a1:7f:cd:80:dc:9c:66:10:f1:c4:24:53: fe:ff:06:58:b5:a8:13:cf:b0:22:d4:c9:a7:95:23:26:87:d1: e6:22:2f:a3:5a:11:46:06:04:f9:0b:a8:53:48:e7:80:d4:d2: 3a:b8:d6:99:92:3c:f7:24:40:b9:2c:19:25:d4:99:f9:8c:ed: dd:1e:ad:d5:b7:fb:bb:48:a1:fb:28:96:cc:ca:b2:46:8d:5f: 54:d9:54:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4 Qzc2NDBERjYwHhcNMjUxMTA1MDMxNDI2WhcNMjUxMTEyMDMxNDI2WjAYMRYwFAYD VQQDEw02OTBhYzExMy1lNzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApO4PyPLLRwYPxqc+8WMuPAIxbVDNHePONVXPIU/4V3G+NWAMux2h9WSJBKSV zZAOd7r0exFGE2cHwgRyeHMdfqOdFN3HG+/w2knLeS8rK0cM3r4W+0UpqORzJGY5 x9FYbiVwhSLanQvXOLjvc8XeTP7gAW3sZPrqyTwg3nqvOTx6q/BpseI5V9CeGZrD QFjt4yJcFiPAQSFLCjA7GXxTB3iXEJf+T2u0BwXAHrWtnrR0kLHlYJ2egsj0zLR/ GvTEKt9ckHOY6rNti1FPY+iAqyBA+j7eQEJW75QBttehrN9rSkgNqyo6RSek8NkX LB3kc43AxsgJholTysXRl1uZaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtdrK2s gYlLC2lzr19fKoWJNj2HMB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ MFF2WGpZT3BNdzZNZGtEZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdHmRZQ79+y3E1bOyylXjtHj1q4mOsOFJ65IrdGLhKPedFgul7VW4P e8W11adD2EiUH6oZtcPA4+vgeDA6+1qmDJ+tyYgsjQHqrXMKO4BlJixb7jRv4meT NDqHSZ/1gTRkDEFRzOpSmGfa3BQ1JnRNSV4Xx/9VXyN/+LILweYaCZxezqT8jN6M AZ36+8I/24bLgq2MJycZVG8PAgJ1T41lA6gj2ChqIKmhf82A3JxmEPHEJFP+/wZY tagTz7Ai1MmnlSMmh9HmIi+jWhFGBgT5C6hTSOeA1NI6uNaZkjz3JEC5LBkl1Jn5 jO3dHq3Vt/u7SKH7KJbMyrJGjV9U2VRk -----END CERTIFICATE-----Generated at Wed Nov 5 17:56:03 2025 by rpki-client