$ rpki-client -vvf rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft File: F7t0v8FLOUo_7aIb2MhcQePFu_E.mft (raw, json) Hash identifier: 3zidCnXVM6COM3+Y5VfbxdvdPy7kc8+qTTYTTke2Hrs= Subject key identifier: 52:17:2A:47:B6:F0:53:84:D5:DD:67:DB:6C:59:73:64:8D:F9:AA:BE Authority key identifier: 17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1 Certificate issuer: /CN=A912BFC5/serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1 Certificate serial: 34D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft Manifest number: 34D9 Signing time: Tue 04 Nov 2025 14:16:28 +0000 Manifest this update: Tue 04 Nov 2025 14:16:27 +0000 Manifest next update: Tue 11 Nov 2025 14:16:27 +0000 Files and hashes: 1: F7t0v8FLOUo_7aIb2MhcQePFu_E.crl (hash: U6JqSDUUIZCtK+ah5ebBwfYAJHnG3QPZhGx0QnseaUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13529 (0x34d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BFC5, serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1 Validity Not Before: Nov 4 14:16:27 2025 GMT Not After : Nov 11 14:16:27 2025 GMT Subject: CN=690a0abb-30b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5f:6f:47:ab:49:15:4b:da:a7:28:05:f8:2b: 5c:c5:d4:8a:5a:43:d0:bf:70:99:b6:e5:0f:5f:4d: a4:00:8a:c6:11:82:09:2e:2e:b6:1d:f7:dd:6b:20: f2:b6:b2:96:75:11:ad:a0:6a:46:54:75:dd:7c:6f: f3:7b:c3:9e:8c:db:1a:ed:88:a3:5e:d5:98:7d:f3: d6:01:ff:75:95:74:c5:2b:22:fb:42:f2:92:ce:c4: f9:aa:7e:a8:10:59:36:39:a0:54:6d:53:08:6e:05: e9:8b:8c:38:b7:78:4f:02:28:44:45:7b:c0:61:72: 7a:30:22:3c:f9:c0:2b:7f:ed:7f:74:07:c5:4c:58: 02:8c:29:7c:b7:32:dc:84:af:7d:fc:18:01:97:4d: 08:ab:3b:bb:ad:60:c4:ed:88:37:76:6e:62:e3:68: d9:55:aa:ce:a3:0f:ee:db:55:17:b9:43:9e:24:5c: 5a:b2:26:1b:9c:e9:07:b0:1e:af:88:86:dc:82:d0: 14:84:57:4c:48:eb:60:f0:93:c3:ba:0e:6c:18:a7: b0:e8:b5:d2:f6:14:63:1d:f5:7c:ae:63:d9:e5:20: bc:eb:ed:d4:60:81:54:e0:f1:85:74:6c:67:ef:bd: 39:e6:04:6f:a3:b1:86:f0:45:77:cb:5a:0e:40:6e: e9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:17:2A:47:B6:F0:53:84:D5:DD:67:DB:6C:59:73:64:8D:F9:AA:BE X509v3 Authority Key Identifier: keyid:17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:7c:be:93:c5:41:cc:71:9e:96:90:4e:d2:44:64:f2:05:76: ff:64:15:4a:21:5b:70:21:33:28:db:3a:19:61:17:b3:a9:f9: 66:b7:1e:b3:47:66:7d:a6:c6:b2:20:a0:ff:56:b2:b5:c2:96: 43:7b:0c:c2:05:19:3a:cb:2f:47:a0:7c:7b:3d:f4:e8:cf:32: 76:bf:b8:7a:59:31:08:a5:07:44:58:78:11:62:81:19:b2:4b: 62:21:21:8d:b8:5e:68:7c:0b:9e:87:e3:a1:50:83:55:11:82: e6:09:21:c6:26:fc:ec:69:7b:95:bd:7b:93:25:f6:34:a3:cd: d3:40:6e:a1:fd:e8:dc:bf:00:4c:60:bd:c9:16:3a:e8:54:23: b5:1c:d6:61:36:1e:b1:d8:14:0d:d4:f8:38:3f:56:7f:b1:74: d7:c3:57:c4:dd:d5:cd:92:25:04:78:86:bd:12:11:24:03:57: 15:ea:ed:54:78:6d:7e:4c:f8:92:2f:28:cb:12:6f:21:f0:24: e5:d6:51:8c:16:c0:09:ef:60:e0:4a:d2:db:0c:96:df:aa:cf: 48:8d:ba:16:a4:06:56:9d:a2:c4:71:a1:57:8f:89:5d:91:32: a4:98:1a:a5:89:24:7d:52:61:c4:9c:6c:16:51:9d:84:de:8b: 60:7f:a9:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJGQzUxMTAvBgNVBAUTKDE3QkI3NEJGQzE0QjM5NEEzRkVEQTIxQkQ4Qzg1QzQx RTNDNUJCRjEwHhcNMjUxMTA0MTQxNjI3WhcNMjUxMTExMTQxNjI3WjAYMRYwFAYD VQQDEw02OTBhMGFiYi0zMGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx19vR6tJFUvapygF+CtcxdSKWkPQv3CZtuUPX02kAIrGEYIJLi62HffdayDy trKWdRGtoGpGVHXdfG/ze8OejNsa7YijXtWYffPWAf91lXTFKyL7QvKSzsT5qn6o EFk2OaBUbVMIbgXpi4w4t3hPAihERXvAYXJ6MCI8+cArf+1/dAfFTFgCjCl8tzLc hK99/BgBl00Iqzu7rWDE7Yg3dm5i42jZVarOow/u21UXuUOeJFxasiYbnOkHsB6v iIbcgtAUhFdMSOtg8JPDug5sGKew6LXS9hRjHfV8rmPZ5SC86+3UYIFU4PGFdGxn 77055gRvo7GG8EV3y1oOQG7p2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFIXKke2 8FOE1d1n22xZc2SN+aq+MB8GA1UdIwQYMBaAFBe7dL/BSzlKP+2iG9jIXEHjxbvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkZDNS8wRDVDNzk0ODFE NkExMUUyQkIyMUIyQTcwOEIwMkNEMi9GN3QwdjhGTE9Vb183YUliMk1oY1FlUEZ1 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y3dDB2OEZMT1VvXzdhSWIyTWhjUWVQRnVfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkZDNS8wRDVDNzk0ODFENkExMUUyQkIyMUIyQTcwOEIwMkNEMi9GN3QwdjhGTE9V b183YUliMk1oY1FlUEZ1X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2fL6TxUHMcZ6WkE7SRGTyBXb/ZBVKIVtwITMo2zoZYRezqflmtx6z R2Z9psayIKD/VrK1wpZDewzCBRk6yy9HoHx7PfTozzJ2v7h6WTEIpQdEWHgRYoEZ sktiISGNuF5ofAueh+OhUINVEYLmCSHGJvzsaXuVvXuTJfY0o83TQG6h/ejcvwBM YL3JFjroVCO1HNZhNh6x2BQN1Pg4P1Z/sXTXw1fE3dXNkiUEeIa9EhEkA1cV6u1U eG1+TPiSLyjLEm8h8CTl1lGMFsAJ72DgStLbDJbfqs9IjboWpAZWnaLEcaFXj4ld kTKkmBqliSR9UmHEnGwWUZ2E3otgf6kf -----END CERTIFICATE-----Generated at Wed Nov 5 10:25:28 2025 by rpki-client