$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft File: CO_XGTj3-dyHpp9cs_hMektyoAo.mft (raw, json) Hash identifier: 97EkBETQ6lUIVYzwSzBW2LShEDtC9putgyob0yVPMow= Subject key identifier: 6C:23:DB:3E:F7:66:FA:C2:D1:75:E9:DA:B1:10:23:2E:3E:21:4E:9D Authority key identifier: 08:EF:D7:19:38:F7:F9:DC:87:A6:9F:5C:B3:F8:4C:7A:4B:72:A0:0A Certificate issuer: /CN=A91218BB/serialNumber=08EFD71938F7F9DC87A69F5CB3F84C7A4B72A00A Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft Manifest number: 9E Signing time: Wed 05 Nov 2025 06:30:47 +0000 Manifest this update: Wed 05 Nov 2025 06:30:47 +0000 Manifest next update: Wed 12 Nov 2025 06:30:47 +0000 Files and hashes: 1: CO_XGTj3-dyHpp9cs_hMektyoAo.crl (hash: AM4DGBZyQvPIUmNzy7H02HMZqjmCKe/SLl4E4btPorg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.crl rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91218BB, serialNumber=08EFD71938F7F9DC87A69F5CB3F84C7A4B72A00A Validity Not Before: Nov 5 06:30:47 2025 GMT Not After : Nov 12 06:30:47 2025 GMT Subject: CN=690aef17-4e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4a:a1:f5:2c:52:07:a9:86:a9:be:e9:a4:14: a1:74:07:ef:fc:15:89:df:c3:e3:e8:be:a3:49:00: 11:c4:74:89:f1:d6:f1:e2:af:ce:e5:d9:77:32:9e: 91:d3:fd:c4:8c:1b:c6:23:b5:8b:5f:df:1d:2c:e4: 05:b5:4f:cc:e7:76:a6:4e:7c:88:47:c6:2d:2e:1e: 19:64:14:72:06:7e:5d:d0:fd:63:d7:69:b3:82:a7: ed:eb:67:65:99:51:7c:0a:bd:3c:e2:00:26:bf:f2: 64:54:86:91:37:05:4e:b7:3a:c8:6f:83:be:20:d1: b2:19:6b:68:0a:e2:f4:14:14:63:a4:92:5b:be:e6: c8:4f:b1:98:9b:cc:ab:27:ff:cb:b4:9f:52:1f:6e: 82:cc:fb:76:a7:24:6e:59:5a:6d:f7:a6:b3:46:2e: f7:57:e2:95:46:af:ea:84:cf:0c:51:77:2f:15:9a: 9c:9e:0d:2b:63:38:db:c0:c7:69:0e:b3:42:a8:98: 4b:aa:8a:e0:31:c2:6d:a1:1a:97:45:a5:a0:71:b1: 85:f9:71:bc:ab:1f:07:95:be:d8:18:b2:05:88:9a: b8:11:f4:85:94:49:f5:b2:2d:46:1b:bf:cb:30:83: 8a:3b:c3:c2:a7:57:7b:d2:1f:b3:83:e1:83:10:a7: ad:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:23:DB:3E:F7:66:FA:C2:D1:75:E9:DA:B1:10:23:2E:3E:21:4E:9D X509v3 Authority Key Identifier: keyid:08:EF:D7:19:38:F7:F9:DC:87:A6:9F:5C:B3:F8:4C:7A:4B:72:A0:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:2b:d7:df:e2:95:b9:73:98:95:8f:6a:b5:bd:5c:0a:7f:37: dc:f2:c0:b5:11:99:5b:93:13:3e:eb:c5:13:18:cc:d7:dd:3b: a1:18:75:8a:be:6b:a2:e2:c8:0f:98:93:19:97:ac:bb:dc:a1: 27:97:c6:b2:8d:e0:3a:2d:fa:91:30:30:3d:0c:69:31:5d:ad: 49:fc:2b:8d:69:31:d1:1f:4e:0a:06:b8:26:f8:36:2c:e3:67: 2d:97:5e:32:2f:2a:48:f7:f7:b2:f8:2b:58:f7:f2:23:d1:4b: bd:b5:dd:bf:04:61:de:fd:8a:d3:3e:b9:59:3a:65:17:87:a5: 40:25:53:8b:1c:27:1d:b7:97:a0:41:0f:24:39:03:72:13:32: cd:ce:cd:2e:0b:75:ab:4a:46:99:96:cb:65:47:3c:bc:52:b1: 0d:72:7c:66:80:78:32:8e:eb:50:18:cd:32:02:64:22:dc:9d: 33:d5:79:5b:ec:a1:71:1c:c6:0f:82:99:59:0c:75:12:c4:b1: ca:a9:38:a8:bc:2a:93:f8:11:f3:3b:c7:b0:5e:aa:b3:6d:12: 4a:ba:36:38:0f:64:5a:22:d2:7a:69:14:aa:93:56:3c:0d:61: 37:de:2a:90:6c:98:59:e3:f5:62:99:4b:d9:b6:67:8a:e7:57: b1:40:4e:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4QkIxMTAvBgNVBAUTKDA4RUZENzE5MzhGN0Y5REM4N0E2OUY1Q0IzRjg0QzdB NEI3MkEwMEEwHhcNMjUxMTA1MDYzMDQ3WhcNMjUxMTEyMDYzMDQ3WjAYMRYwFAYD VQQDEw02OTBhZWYxNy00ZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEqh9SxSB6mGqb7ppBShdAfv/BWJ38Pj6L6jSQARxHSJ8dbx4q/O5dl3Mp6R 0/3EjBvGI7WLX98dLOQFtU/M53amTnyIR8YtLh4ZZBRyBn5d0P1j12mzgqft62dl mVF8Cr084gAmv/JkVIaRNwVOtzrIb4O+INGyGWtoCuL0FBRjpJJbvubIT7GYm8yr J//LtJ9SH26CzPt2pyRuWVpt96azRi73V+KVRq/qhM8MUXcvFZqcng0rYzjbwMdp DrNCqJhLqorgMcJtoRqXRaWgcbGF+XG8qx8Hlb7YGLIFiJq4EfSFlEn1si1GG7/L MIOKO8PCp1d70h+zg+GDEKetBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGwj2z73 ZvrC0XXp2rEQIy4+IU6dMB8GA1UdIwQYMBaAFAjv1xk49/nch6afXLP4THpLcqAK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMThCQi83MUQ1MDYyRUM4 QzUxMUVGOEVDNTU1NjVDNEY5QUUwMi9DT19YR1RqMy1keUhwcDljc19oTWVrdHlv QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPX1hHVGozLWR5SHBwOWNzX2hNZWt0eW9Bby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MThCQi83MUQ1MDYyRUM4QzUxMUVGOEVDNTU1NjVDNEY5QUUwMi9DT19YR1RqMy1k eUhwcDljc19oTWVrdHlvQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEK9ff4pW5c5iVj2q1vVwKfzfc8sC1EZlbkxM+68UTGMzX3TuhGHWK vmui4sgPmJMZl6y73KEnl8ayjeA6LfqRMDA9DGkxXa1J/CuNaTHRH04KBrgm+DYs 42ctl14yLypI9/ey+CtY9/Ij0Uu9td2/BGHe/YrTPrlZOmUXh6VAJVOLHCcdt5eg QQ8kOQNyEzLNzs0uC3WrSkaZlstlRzy8UrENcnxmgHgyjutQGM0yAmQi3J0z1Xlb 7KFxHMYPgplZDHUSxLHKqTiovCqT+BHzO8ewXqqzbRJKujY4D2RaItJ6aRSqk1Y8 DWE33iqQbJhZ4/VimUvZtmeK51exQE5N -----END CERTIFICATE-----Generated at Wed Nov 5 10:02:05 2025 by rpki-client