$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json) Hash identifier: 8mOFccfL8EuZn6Z7EFZa9c7f+xTa3x30fApAo8fmc34= Subject key identifier: 5A:1B:B5:51:2E:F0:8B:0A:23:EB:98:05:A5:19:A0:75:32:BB:77:B9 Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft Manifest number: 01DD Signing time: Tue 04 Nov 2025 23:18:08 +0000 Manifest this update: Tue 04 Nov 2025 23:18:07 +0000 Manifest next update: Tue 11 Nov 2025 23:18:07 +0000 Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: a9vLfmEOL0z1mwhByNKaW8UYY+J32stw9OZUPif9kqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Validity Not Before: Nov 4 23:18:07 2025 GMT Not After : Nov 11 23:18:07 2025 GMT Subject: CN=690a89af-4597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:22:a5:a7:13:9c:12:46:81:b9:b9:06:7d:fc: d0:4a:64:52:29:d2:39:8e:33:09:e3:25:a8:74:b7: d3:aa:0a:0f:43:55:7f:0a:04:64:87:e6:86:bb:d8: 99:d0:ac:0b:4f:58:cf:76:03:20:d3:db:44:1d:c6: 88:a0:80:6a:3f:94:59:7a:21:2d:6f:95:80:88:80: ac:63:9a:e5:26:22:0b:8f:f3:aa:bf:1c:ea:99:d7: ea:bc:7f:b4:ae:0e:b5:4a:0a:a4:1f:2c:c4:07:17: 26:3b:ed:e4:bc:ec:f1:cb:b0:f3:5c:a2:ff:de:59: 91:70:fa:c0:fe:fc:f9:74:1d:77:7c:71:fd:f7:fb: 70:f5:eb:1c:0a:9d:3a:a0:19:6f:c8:3d:25:a2:f7: c0:c8:7c:1b:78:07:d6:1b:a8:69:d2:a6:8d:22:60: c0:97:f6:33:f0:3b:b9:e0:dc:4a:4f:b6:9b:f6:0f: 07:0f:2e:37:79:da:e1:c9:e6:30:3b:55:61:35:80: f5:f6:65:3b:e4:bf:6e:15:8f:30:72:d6:4e:ce:10: 36:0e:50:30:9f:fb:83:21:d6:b3:7f:e1:af:51:10: 67:66:c7:4d:7a:da:bf:31:ca:ff:5b:3b:5b:1e:ed: 66:3d:29:a9:39:16:73:e2:c7:b7:80:fb:ba:3f:e0: ef:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1B:B5:51:2E:F0:8B:0A:23:EB:98:05:A5:19:A0:75:32:BB:77:B9 X509v3 Authority Key Identifier: keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c6:5b:a2:23:41:22:2a:bd:be:32:71:87:ab:f6:d9:5e:43: 56:13:20:ab:fc:ab:8b:f3:90:7d:a7:0d:e8:9a:9a:2f:e6:9a: 17:b8:48:e9:16:7a:c1:06:75:20:b1:77:a5:2b:b5:72:32:45: fd:98:85:1e:34:f1:ae:b4:39:7b:d0:ce:41:55:ee:58:ca:95: 5d:c0:75:53:80:1f:d8:f6:5c:8a:2a:d6:14:6e:48:d9:37:86: e9:36:e9:6c:80:74:7f:34:35:ea:51:7b:1b:83:44:b1:c7:e5: 89:9c:48:ea:2c:12:8a:b6:48:1a:ec:8e:c8:56:6b:5b:a5:4d: a4:9c:f9:2f:8a:f0:41:ad:5c:ab:26:9a:10:0a:17:c6:72:9a: 65:2d:e9:74:42:9e:3e:b3:b1:7e:28:b0:59:6c:c4:79:4a:64: 28:5a:3a:0c:c2:05:25:d4:9f:81:4f:bd:b7:ba:7c:62:1d:25: e1:63:15:e0:24:ec:0c:be:fd:98:be:75:0e:00:39:fe:38:8a: 28:57:be:39:58:2c:06:ab:88:9a:ac:7f:7b:e9:55:1c:16:e0: 3a:70:1e:e8:8a:58:23:69:ba:cf:53:17:94:71:9c:5a:19:76: 95:90:6f:75:1b:8d:d4:89:6d:5c:08:ff:73:e4:79:97:d9:85: c2:f2:6d:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKDFCRkNENTk1QUQ1RkZEQjlDMDQzNzM3QkNBRkVDNzJF MDQ2QzZCRUUwHhcNMjUxMTA0MjMxODA3WhcNMjUxMTExMjMxODA3WjAYMRYwFAYD VQQDEw02OTBhODlhZi00NTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7iKlpxOcEkaBubkGffzQSmRSKdI5jjMJ4yWodLfTqgoPQ1V/CgRkh+aGu9iZ 0KwLT1jPdgMg09tEHcaIoIBqP5RZeiEtb5WAiICsY5rlJiILj/OqvxzqmdfqvH+0 rg61SgqkHyzEBxcmO+3kvOzxy7DzXKL/3lmRcPrA/vz5dB13fHH99/tw9escCp06 oBlvyD0lovfAyHwbeAfWG6hp0qaNImDAl/Yz8Du54NxKT7ab9g8HDy43edrhyeYw O1VhNYD19mU75L9uFY8wctZOzhA2DlAwn/uDIdazf+GvURBnZsdNetq/Mcr/Wztb Hu1mPSmpORZz4se3gPu6P+DvkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFobtVEu 8IsKI+uYBaUZoHUyu3e5MB8GA1UdIwQYMBaAFBv81ZWtX/25wENze8r+xy4EbGvu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi85MUZFMDU2QURG RkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9ibkFRM043eXY3SExnUnNh LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dfelZsYTFmX2JuQVEzTjd5djdITGdSc2EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTMyMi85MUZFMDU2QURGRkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9i bkFRM043eXY3SExnUnNhLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOxluiI0EiKr2+MnGHq/bZXkNWEyCr/KuL85B9pw3ompov5poXuEjp FnrBBnUgsXelK7VyMkX9mIUeNPGutDl70M5BVe5YypVdwHVTgB/Y9lyKKtYUbkjZ N4bpNulsgHR/NDXqUXsbg0Sxx+WJnEjqLBKKtkga7I7IVmtbpU2knPkvivBBrVyr JpoQChfGcpplLel0Qp4+s7F+KLBZbMR5SmQoWjoMwgUl1J+BT723unxiHSXhYxXg JOwMvv2YvnUOADn+OIooV745WCwGq4iarH976VUcFuA6cB7oilgjabrPUxeUcZxa GXaVkG91G43UiW1cCP9z5HmX2YXC8m0R -----END CERTIFICATE-----Generated at Wed Nov 5 16:29:29 2025 by rpki-client