$ rpki-client -vvf rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft File: MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft (raw, json) Hash identifier: scf46UlesyITilj6jtKewJSoA+TghZrFpFvxrZEhF50= Subject key identifier: 55:1E:C2:B2:67:25:46:44:38:24:2C:0D:4A:51:3C:9C:A5:8D:71:12 Authority key identifier: 31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF Certificate issuer: /CN=A91222CD/serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF Certificate serial: 1B7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft Manifest number: 1B79 Signing time: Tue 04 Nov 2025 16:21:43 +0000 Manifest this update: Tue 04 Nov 2025 16:21:42 +0000 Manifest next update: Tue 11 Nov 2025 16:21:42 +0000 Files and hashes: 1: MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl (hash: goG0qnVRi0puJMQu8uMWgzqoKcfTmyIrNgIz0cvyxPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:21:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7034 (0x1b7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91222CD, serialNumber=31B3D90457D1FDF83C3574CBD17FC28B2CDD56EF Validity Not Before: Nov 4 16:21:42 2025 GMT Not After : Nov 11 16:21:42 2025 GMT Subject: CN=690a2817-7458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:33:33:06:6b:42:3d:58:85:c2:11:c0:e4:2b: 81:8e:71:b3:4a:d9:80:52:00:b3:cf:c6:bd:c6:9d: 95:68:3e:18:72:bb:6b:e2:e8:59:2d:c6:12:f9:a5: 87:77:8a:a5:68:12:9a:48:c8:6a:0f:9c:f5:df:14: a0:fb:67:f0:2f:2d:a3:4e:05:4d:9c:48:de:85:fe: 28:39:b9:96:00:da:cb:38:93:2e:14:c7:22:81:05: 9b:35:04:91:3f:07:94:5b:67:78:c6:89:33:ef:50: 9a:16:a7:40:86:7d:a8:ef:57:20:de:ee:ee:e9:87: 71:29:37:b8:cc:60:4b:02:88:f3:12:e9:c8:2d:37: 39:27:38:bf:d0:ec:65:56:79:85:50:a7:9a:7a:d3: 60:86:2a:b0:75:dc:86:6a:e5:da:4a:a6:1a:c4:44: bb:0a:4b:ab:52:aa:ab:c6:51:ac:90:15:87:18:91: d9:f1:bb:49:d3:1e:93:7d:0b:99:27:05:d4:df:a0: 12:d5:8e:36:e0:8d:ce:2c:3e:60:0e:64:a6:bd:5d: 03:04:38:30:a9:11:f0:89:b0:0a:44:1c:5f:65:9a: d9:95:10:a0:b3:81:74:2a:c2:58:5c:82:32:f0:ac: 99:ab:c6:0a:4b:01:f7:56:89:34:9a:de:0b:fd:ba: e3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1E:C2:B2:67:25:46:44:38:24:2C:0D:4A:51:3C:9C:A5:8D:71:12 X509v3 Authority Key Identifier: keyid:31:B3:D9:04:57:D1:FD:F8:3C:35:74:CB:D1:7F:C2:8B:2C:DD:56:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MbPZBFfR_fg8NXTL0X_CiyzdVu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91222CD/7E3115C8165A11E7B27F9B46C4F9AE02/MbPZBFfR_fg8NXTL0X_CiyzdVu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c3:4f:cb:ca:7a:27:dd:7d:6d:74:a7:d0:c4:3e:8e:5e:b6: 6d:8c:6d:05:f1:19:b8:0e:aa:a5:8d:d3:44:76:c6:5b:14:56: d2:8c:5d:83:3e:40:2d:d1:36:c7:86:a5:ca:51:9e:c6:79:80: c8:59:ce:0e:ef:70:e4:80:7b:ea:c5:9c:dd:64:86:26:f7:34: 96:9e:fe:38:ad:8a:2d:17:ec:c3:02:46:74:28:0b:3e:d8:74: ed:aa:b1:ef:44:9b:e1:7f:fc:84:bd:de:9d:df:ff:70:17:e1: 81:da:34:ab:a5:e4:f4:31:3c:22:62:1c:23:78:39:56:58:f5: 53:84:73:7e:e6:2b:a0:22:5b:34:9d:cc:02:5f:53:9e:1e:cb: 79:79:28:5e:a1:b5:68:c0:63:e9:b5:72:b0:7f:d6:c0:d2:ef: a2:13:12:88:33:81:9a:d6:12:4d:9e:b1:2a:83:1f:21:c6:a7: e4:f8:0b:90:8d:2a:85:74:b4:2d:9b:d3:ef:c1:4f:32:46:89: 56:12:e5:48:05:ee:dc:d3:70:7c:a1:b3:b6:72:44:43:d2:35: b3:f5:fe:ce:eb:49:35:2a:f8:ba:f2:c8:68:bc:9c:92:91:79: 02:9d:d8:ab:d3:ca:3e:40:b0:aa:89:3c:b0:7c:da:21:44:1b: 60:16:80:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIyQ0QxMTAvBgNVBAUTKDMxQjNEOTA0NTdEMUZERjgzQzM1NzRDQkQxN0ZDMjhC MkNERDU2RUYwHhcNMjUxMTA0MTYyMTQyWhcNMjUxMTExMTYyMTQyWjAYMRYwFAYD VQQDEw02OTBhMjgxNy03NDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjMzBmtCPViFwhHA5CuBjnGzStmAUgCzz8a9xp2VaD4Ycrtr4uhZLcYS+aWH d4qlaBKaSMhqD5z13xSg+2fwLy2jTgVNnEjehf4oObmWANrLOJMuFMcigQWbNQSR PweUW2d4xokz71CaFqdAhn2o71cg3u7u6YdxKTe4zGBLAojzEunILTc5Jzi/0Oxl VnmFUKeaetNghiqwddyGauXaSqYaxES7CkurUqqrxlGskBWHGJHZ8btJ0x6TfQuZ JwXU36AS1Y424I3OLD5gDmSmvV0DBDgwqRHwibAKRBxfZZrZlRCgs4F0KsJYXIIy 8KyZq8YKSwH3Vok0mt4L/brjawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUewrJn JUZEOCQsDUpRPJyljXESMB8GA1UdIwQYMBaAFDGz2QRX0f34PDV0y9F/woss3Vbv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjJDRC83RTMxMTVDODE2 NUExMUU3QjI3RjlCNDZDNEY5QUUwMi9NYlBaQkZmUl9mZzhOWFRMMFhfQ2l5emRW dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01iUFpCRmZSX2ZnOE5YVEwwWF9DaXl6ZFZ1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjJDRC83RTMxMTVDODE2NUExMUU3QjI3RjlCNDZDNEY5QUUwMi9NYlBaQkZmUl9m ZzhOWFRMMFhfQ2l5emRWdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKw0/Lynon3X1tdKfQxD6OXrZtjG0F8Rm4DqqljdNEdsZbFFbSjF2D PkAt0TbHhqXKUZ7GeYDIWc4O73DkgHvqxZzdZIYm9zSWnv44rYotF+zDAkZ0KAs+ 2HTtqrHvRJvhf/yEvd6d3/9wF+GB2jSrpeT0MTwiYhwjeDlWWPVThHN+5iugIls0 ncwCX1OeHst5eSheobVowGPptXKwf9bA0u+iExKIM4Ga1hJNnrEqgx8hxqfk+AuQ jSqFdLQtm9PvwU8yRolWEuVIBe7c03B8obO2ckRD0jWz9f7O60k1Kvi68shovJyS kXkCndir08o+QLCqiTywfNohRBtgFoBC -----END CERTIFICATE-----Generated at Wed Nov 5 21:15:51 2025 by rpki-client