$ rpki-client -vvf rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft File: pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft (raw, json) Hash identifier: 2F18P6SH+IglwgYHztlBlj82ckbTwb/wVrOHeJW1li4= Subject key identifier: A6:CB:55:69:7D:F4:6E:19:13:CA:1A:D1:4C:2C:CB:94:25:64:62:39 Authority key identifier: A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90 Certificate issuer: /CN=A9138506/serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990 Certificate serial: 0623 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft Manifest number: 0623 Signing time: Sun 02 Nov 2025 22:44:04 +0000 Manifest this update: Sun 02 Nov 2025 22:44:04 +0000 Manifest next update: Sun 09 Nov 2025 22:44:04 +0000 Files and hashes: 1: pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl (hash: GWkRDlQODRwMqSwSvrxMhLTzCVaxy8aFdbAYjyTjh0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1571 (0x623) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138506, serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990 Validity Not Before: Nov 2 22:44:04 2025 GMT Not After : Nov 9 22:44:04 2025 GMT Subject: CN=6907deb4-e278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9d:11:bf:53:44:8c:19:43:89:84:7d:1d:d6: b8:d6:55:63:ab:f3:42:e6:41:4e:23:8a:09:81:10: 82:a1:83:35:71:24:00:ca:ee:f7:bf:60:7f:f0:83: 09:42:b3:36:eb:20:40:41:30:a6:29:e8:9f:92:4b: 1a:7f:50:0a:0b:ee:c1:88:4f:36:ff:98:38:df:47: 39:a6:f4:b4:96:74:1c:a7:e9:1f:e1:01:ea:d7:b8: a9:48:08:fa:78:df:8b:71:e8:3b:82:fc:a8:6e:5b: 2c:89:3a:3b:e3:1a:54:c8:31:e8:a4:42:ad:e6:89: 83:4a:31:de:0f:d6:fb:d5:b3:73:62:ff:1b:ac:20: e1:2b:cb:27:fa:03:45:11:03:3c:53:37:bc:ff:88: c1:87:e9:91:72:88:97:c8:63:f1:bb:a1:f7:84:50: 3d:a2:9b:2e:78:df:02:d7:04:74:a6:ef:ce:44:0a: 6e:e4:dd:35:df:d2:d2:d0:4e:2d:b0:88:2d:a6:7e: af:e8:27:56:75:6d:91:2f:17:8f:a8:f2:f0:20:89: 58:49:ee:ef:78:4f:bd:54:69:69:e8:07:b0:e6:c8: 4f:61:80:3a:58:fc:2f:b5:e1:96:94:7d:42:f9:f2: dc:66:3b:c7:62:c5:e8:62:27:e6:bd:22:e0:ae:c2: 70:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:CB:55:69:7D:F4:6E:19:13:CA:1A:D1:4C:2C:CB:94:25:64:62:39 X509v3 Authority Key Identifier: keyid:A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:26:2d:77:37:0a:12:38:2c:bc:42:58:44:06:2a:a8:37:04: 3f:b4:d7:46:b3:b0:5c:0c:b6:0e:65:14:f9:8c:3d:d5:e2:6e: 4f:ec:24:b3:38:9d:ab:24:76:53:35:e6:1f:c5:0b:19:05:6a: d7:95:05:a2:1b:22:67:f2:04:31:6b:74:b7:f0:15:17:b7:8c: 73:41:c8:f2:6d:29:03:8d:a2:4e:bc:f5:7e:7f:ac:3e:50:41: 2c:cd:2e:f0:ed:0e:e2:9c:77:86:6e:0f:cb:12:ea:4e:bb:a9: 7e:e0:61:a3:88:d6:63:5f:c8:3d:5a:bf:d9:f0:08:4f:e9:2e: 7f:93:1f:17:40:7f:65:c9:c1:32:3b:9b:b1:3d:43:c0:c6:8c: 97:f2:0e:8d:7e:8c:2b:d8:98:eb:bb:98:24:a0:b3:c9:05:f1: 35:bc:0e:63:71:2e:c4:93:2d:53:c2:6a:a9:24:25:9f:24:b9: fc:f0:98:56:2d:90:81:8c:bc:ba:b9:0c:57:10:2b:15:48:dd: c8:5f:b6:49:b7:83:96:b3:d3:d5:2f:33:2c:53:a1:2e:35:76: a3:12:aa:9f:e2:fb:eb:cb:cf:b3:a6:d4:a5:19:40:38:42:9c: 54:8d:37:9f:1a:55:88:e6:64:12:2d:4d:ed:4a:a8:5c:f7:a0: 06:2a:0f:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1MDYxMTAvBgNVBAUTKEE0RUMxN0I1RkQyRDQ0Q0QyREREMDU1QkY1MzQxMzlG NjhGQzY5OTAwHhcNMjUxMTAyMjI0NDA0WhcNMjUxMTA5MjI0NDA0WjAYMRYwFAYD VQQDEw02OTA3ZGViNC1lMjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZ0Rv1NEjBlDiYR9Hda41lVjq/NC5kFOI4oJgRCCoYM1cSQAyu73v2B/8IMJ QrM26yBAQTCmKeifkksaf1AKC+7BiE82/5g430c5pvS0lnQcp+kf4QHq17ipSAj6 eN+Lceg7gvyoblssiTo74xpUyDHopEKt5omDSjHeD9b71bNzYv8brCDhK8sn+gNF EQM8Uze8/4jBh+mRcoiXyGPxu6H3hFA9opsueN8C1wR0pu/ORApu5N0139LS0E4t sIgtpn6v6CdWdW2RLxePqPLwIIlYSe7veE+9VGlp6Aew5shPYYA6WPwvteGWlH1C +fLcZjvHYsXoYifmvSLgrsJwzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbLVWl9 9G4ZE8oa0Uwsy5QlZGI5MB8GA1UdIwQYMBaAFKTsF7X9LUTNLd0FW/U0E59o/GmQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODUwNi8xNTlFQjY5MkI3 QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJNMHQzUVZiOVRRVG4yajhh WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BPd1h0ZjB0Uk0wdDNRVmI5VFFUbjJqOGFaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODUwNi8xNTlFQjY5MkI3QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJN MHQzUVZiOVRRVG4yajhhWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGJi13NwoSOCy8QlhEBiqoNwQ/tNdGs7BcDLYOZRT5jD3V4m5P7CSz OJ2rJHZTNeYfxQsZBWrXlQWiGyJn8gQxa3S38BUXt4xzQcjybSkDjaJOvPV+f6w+ UEEszS7w7Q7inHeGbg/LEupOu6l+4GGjiNZjX8g9Wr/Z8AhP6S5/kx8XQH9lycEy O5uxPUPAxoyX8g6Nfowr2Jjru5gkoLPJBfE1vA5jcS7Eky1TwmqpJCWfJLn88JhW LZCBjLy6uQxXECsVSN3IX7ZJt4OWs9PVLzMsU6EuNXajEqqf4vvry8+zptSlGUA4 QpxUjTefGlWI5mQSLU3tSqhc96AGKg/I -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:16 2025 by rpki-client