$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft File: Ae2EH7lRqvolkYDvkpnk02_ffD0.mft (raw, json) Hash identifier: bRlmer9CeftcAN7yW3G9s3YNKIW8cq5HpXU1Dndnfaw= Subject key identifier: 4E:45:EB:D9:59:9A:8B:E3:2B:10:1C:42:D4:66:14:F2:1C:C8:D3:B0 Authority key identifier: 01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D Certificate issuer: /CN=A913D125/serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft Manifest number: 9A Signing time: Mon 03 Nov 2025 06:22:23 +0000 Manifest this update: Mon 03 Nov 2025 06:22:22 +0000 Manifest next update: Mon 10 Nov 2025 06:22:22 +0000 Files and hashes: 1: Ae2EH7lRqvolkYDvkpnk02_ffD0.crl (hash: mFTuSmwK54BCu/hIhRmm2S1UnwuGmA91KX2k1Qszx4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D125, serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D Validity Not Before: Nov 3 06:22:22 2025 GMT Not After : Nov 10 06:22:22 2025 GMT Subject: CN=69084a1e-b066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:87:1e:64:52:f1:88:dc:02:0b:94:b9:29:0d: 1f:ff:29:fd:b3:60:a5:9e:49:5a:d1:56:6c:11:4b: 72:db:b0:43:3e:70:35:74:c8:ed:97:4d:68:06:6f: fc:9f:3d:5e:4b:98:7e:66:b5:29:53:3f:3c:98:f4: ab:65:b6:f8:c3:44:77:db:a2:c2:ae:85:7e:76:e1: 55:cc:a9:a7:87:9a:c0:01:7b:47:bb:a3:6b:db:ce: 69:12:1a:7f:2e:f9:f7:8c:90:7e:3c:79:f8:7c:a3: c8:7d:31:0c:9d:a4:d3:76:07:c8:fc:b4:b0:b0:07: 47:de:52:a2:65:11:12:70:31:79:37:05:25:f6:eb: 0d:86:65:29:85:2f:fd:67:70:f8:85:15:0a:7f:3f: b1:11:7e:35:7e:7c:62:0a:38:bd:c9:21:45:18:e0: 0a:43:94:51:66:96:c5:0c:ce:2e:7d:6c:65:1b:b5: 85:44:b8:b8:53:77:85:82:dc:ca:d9:d9:f4:04:c3: 86:42:4a:76:58:54:ec:88:5e:0b:ed:a5:e5:af:d2: b3:06:bd:80:73:04:b6:50:e5:97:eb:00:bf:60:a0: ad:14:ae:4b:00:84:3a:db:a4:2e:fd:c0:91:8b:03: 7a:d3:18:a1:82:b6:de:94:36:3f:da:59:ee:7b:3f: cb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:45:EB:D9:59:9A:8B:E3:2B:10:1C:42:D4:66:14:F2:1C:C8:D3:B0 X509v3 Authority Key Identifier: keyid:01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:d1:c9:2e:8b:a4:93:f7:98:48:09:e7:0d:47:3f:84:86:b6: 41:88:a3:79:0a:68:52:03:2f:8a:37:ae:2d:4f:00:8f:85:ce: 7a:d9:e9:e2:be:36:93:82:59:43:01:cc:01:24:14:20:87:d4: 00:bc:82:65:d1:9e:0e:42:0f:c3:ee:22:b1:9e:c5:74:63:da: ad:82:47:cb:0c:93:7d:03:cb:c0:e1:a7:89:71:44:8e:45:2f: 32:97:b8:ef:9a:e5:bd:7b:55:14:a1:71:48:cd:61:9d:c4:f6: f5:ad:ce:03:b3:30:4e:92:16:21:64:bd:10:09:3f:f4:53:46: 97:fc:33:5a:58:f4:80:d8:8f:f2:3e:d7:05:83:38:f9:73:5a: 98:e7:37:d7:a8:e5:33:b5:bb:80:15:13:63:a7:b5:fa:c5:b3: 30:01:93:d6:83:74:32:61:e9:25:1b:c8:a3:11:ae:71:62:71: ab:e1:57:9f:c7:be:a8:07:83:08:d8:14:44:b9:74:41:c1:26: 70:0e:80:43:50:bb:94:d4:d8:de:f4:ff:ec:86:fc:f5:3d:ba: e6:81:8e:f3:3f:1f:3d:b5:5a:68:9f:e9:fe:d4:6e:88:75:e3: ff:cd:85:8d:ae:97:5c:17:31:69:ab:17:61:df:f2:c2:ed:ea: db:79:20:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxMjUxMTAvBgNVBAUTKDAxRUQ4NDFGQjk1MUFBRkEyNTkxODBFRjkyOTlFNEQz NkZERjdDM0QwHhcNMjUxMTAzMDYyMjIyWhcNMjUxMTEwMDYyMjIyWjAYMRYwFAYD VQQDEw02OTA4NGExZS1iMDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8YceZFLxiNwCC5S5KQ0f/yn9s2Clnkla0VZsEUty27BDPnA1dMjtl01oBm/8 nz1eS5h+ZrUpUz88mPSrZbb4w0R326LCroV+duFVzKmnh5rAAXtHu6Nr285pEhp/ Lvn3jJB+PHn4fKPIfTEMnaTTdgfI/LSwsAdH3lKiZREScDF5NwUl9usNhmUphS/9 Z3D4hRUKfz+xEX41fnxiCji9ySFFGOAKQ5RRZpbFDM4ufWxlG7WFRLi4U3eFgtzK 2dn0BMOGQkp2WFTsiF4L7aXlr9KzBr2AcwS2UOWX6wC/YKCtFK5LAIQ626Qu/cCR iwN60xihgrbelDY/2lnuez/LdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5F69lZ movjKxAcQtRmFPIcyNOwMB8GA1UdIwQYMBaAFAHthB+5Uar6JZGA75KZ5NNv33w9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDEyNS9GRTc3OEVDOEND MTAxMUVGODczOTZBNkVDNEY5QUUwMi9BZTJFSDdsUnF2b2xrWUR2a3BuazAyX2Zm RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FlMkVIN2xScXZvbGtZRHZrcG5rMDJfZmZEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDEyNS9GRTc3OEVDOENDMTAxMUVGODczOTZBNkVDNEY5QUUwMi9BZTJFSDdsUnF2 b2xrWUR2a3BuazAyX2ZmRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZ0ckui6ST95hICecNRz+EhrZBiKN5CmhSAy+KN64tTwCPhc562eni vjaTgllDAcwBJBQgh9QAvIJl0Z4OQg/D7iKxnsV0Y9qtgkfLDJN9A8vA4aeJcUSO RS8yl7jvmuW9e1UUoXFIzWGdxPb1rc4DszBOkhYhZL0QCT/0U0aX/DNaWPSA2I/y PtcFgzj5c1qY5zfXqOUztbuAFRNjp7X6xbMwAZPWg3QyYeklG8ijEa5xYnGr4Vef x76oB4MI2BREuXRBwSZwDoBDULuU1Nje9P/shvz1PbrmgY7zPx89tVpon+n+1G6I deP/zYWNrpdcFzFpqxdh3/LC7erbeSCi -----END CERTIFICATE-----Generated at Tue Nov 4 12:40:19 2025 by rpki-client