$ rpki-client -vvf rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft File: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft (raw, json) Hash identifier: Xo4eNox5iDAeUNeQLKQPX0rngse45q7O9wourOVdPnE= Subject key identifier: 72:CC:C8:B8:1A:1B:B9:81:82:9A:3C:83:C5:82:5A:C3:44:B7:F4:9A Authority key identifier: D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16 Certificate issuer: /CN=A9143684/serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft Manifest number: 01BC Signing time: Tue 04 Nov 2025 15:14:39 +0000 Manifest this update: Tue 04 Nov 2025 15:14:39 +0000 Manifest next update: Tue 11 Nov 2025 15:14:39 +0000 Files and hashes: 1: 0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl (hash: NzWI8PaoX2k1VBamxWzzTrdAMTLrhCRa1KJtsDJUmB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143684, serialNumber=D153F7585F62E9C31512D286888401C1A68DDE16 Validity Not Before: Nov 4 15:14:39 2025 GMT Not After : Nov 11 15:14:39 2025 GMT Subject: CN=690a185f-94db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cd:aa:c8:c9:86:41:b1:54:c9:75:d8:34:69: 98:70:30:b8:a2:b2:46:f6:d4:22:c4:a2:33:cb:63: de:52:a2:e6:2c:1e:5f:77:4e:6d:26:48:2b:4c:bb: 6c:01:12:f8:ed:99:df:85:8c:72:db:88:23:d4:92: 55:ae:11:9f:d6:42:e8:8b:71:23:6f:99:37:5b:4d: ef:1a:09:46:5e:0e:0a:61:6a:76:9a:50:53:f1:8f: c5:b7:17:08:9f:00:90:51:01:be:8c:ec:71:b1:f0: 2a:c0:3d:2b:ff:b7:8a:ee:1d:27:cf:45:f3:5f:7e: 94:dc:e8:14:81:72:9a:f2:50:df:93:18:e3:ac:69: 5c:93:c6:2b:11:d6:22:b2:1d:35:9f:e1:29:18:3b: 1e:58:af:d0:79:48:08:f0:89:a2:5c:72:38:d1:04: 25:a9:3c:4f:85:02:70:91:c5:fa:5c:58:d3:af:69: c5:fe:7b:7f:1a:3b:30:42:94:eb:f8:1a:83:c1:46: 46:85:5c:aa:fe:7b:0f:67:6d:f7:55:65:11:7e:ca: 26:89:e4:d0:e0:18:86:a1:e4:6b:cb:79:db:bf:02: 9d:7a:24:4f:a4:64:cf:0b:27:b1:46:d9:19:8b:38: ac:1c:42:13:55:61:9c:cb:a0:f8:1d:7b:6c:eb:5d: d0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CC:C8:B8:1A:1B:B9:81:82:9A:3C:83:C5:82:5A:C3:44:B7:F4:9A X509v3 Authority Key Identifier: keyid:D1:53:F7:58:5F:62:E9:C3:15:12:D2:86:88:84:01:C1:A6:8D:DE:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0VP3WF9i6cMVEtKGiIQBwaaN3hY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143684/A6C840B22AB011EEAE2E5D1AC4F9AE02/0VP3WF9i6cMVEtKGiIQBwaaN3hY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:fd:a5:62:b2:cb:c8:e2:4b:07:ea:67:87:60:8e:f7:19:6c: 66:29:31:16:78:6b:29:fd:e0:d2:c1:8c:b9:af:49:92:f5:c0: 59:da:d8:e2:3c:5e:46:74:35:03:ec:34:06:70:63:97:a3:60: c1:9a:2f:1f:22:6c:58:6e:9d:8a:2f:82:cc:23:28:aa:a2:c4: 15:25:f9:38:f8:67:7b:fa:36:18:e5:3b:69:36:57:02:6b:0c: d4:91:bf:fe:86:ea:bc:3b:34:3d:f6:fd:58:45:6b:35:62:b2: 86:51:f6:f9:9c:54:d5:07:f4:4c:e1:ac:71:49:2d:85:ea:67: f8:b7:7c:40:9a:f4:a5:da:01:4b:aa:66:d9:cd:0b:43:2c:08: 1c:f1:f1:57:c6:6c:b4:71:a3:17:e3:01:52:04:96:dc:f2:0c: 37:6e:dd:f5:87:77:2a:3c:c6:5d:69:35:de:44:44:43:0b:74: f8:d1:67:4e:8d:f2:5d:79:ee:b2:10:67:70:9b:22:2f:7c:7c: ca:74:e6:23:4b:1b:2a:c2:19:2e:0d:92:83:47:3c:7b:96:3f: 12:cb:c5:60:72:8f:b9:b6:90:7d:16:5b:ce:b3:2b:03:40:e2: 1b:22:23:87:c9:a7:6b:14:e7:71:a6:00:c2:35:4f:aa:49:cd: a4:99:af:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM2ODQxMTAvBgNVBAUTKEQxNTNGNzU4NUY2MkU5QzMxNTEyRDI4Njg4ODQwMUMx QTY4RERFMTYwHhcNMjUxMTA0MTUxNDM5WhcNMjUxMTExMTUxNDM5WjAYMRYwFAYD VQQDEw02OTBhMTg1Zi05NGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2s2qyMmGQbFUyXXYNGmYcDC4orJG9tQixKIzy2PeUqLmLB5fd05tJkgrTLts ARL47ZnfhYxy24gj1JJVrhGf1kLoi3Ejb5k3W03vGglGXg4KYWp2mlBT8Y/FtxcI nwCQUQG+jOxxsfAqwD0r/7eK7h0nz0XzX36U3OgUgXKa8lDfkxjjrGlck8YrEdYi sh01n+EpGDseWK/QeUgI8ImiXHI40QQlqTxPhQJwkcX6XFjTr2nF/nt/GjswQpTr +BqDwUZGhVyq/nsPZ233VWURfsomieTQ4BiGoeRry3nbvwKdeiRPpGTPCyexRtkZ izisHEITVWGcy6D4HXts613QLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLMyLga G7mBgpo8g8WCWsNEt/SaMB8GA1UdIwQYMBaAFNFT91hfYunDFRLShoiEAcGmjd4W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzY4NC9BNkM4NDBCMjJB QjAxMUVFQUUyRTVEMUFDNEY5QUUwMi8wVlAzV0Y5aTZjTVZFdEtHaUlRQndhYU4z aFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBWUDNXRjlpNmNNVkV0S0dpSVFCd2FhTjNoWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzY4NC9BNkM4NDBCMjJBQjAxMUVFQUUyRTVEMUFDNEY5QUUwMi8wVlAzV0Y5aTZj TVZFdEtHaUlRQndhYU4zaFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh/aVissvI4ksH6meHYI73GWxmKTEWeGsp/eDSwYy5r0mS9cBZ2tji PF5GdDUD7DQGcGOXo2DBmi8fImxYbp2KL4LMIyiqosQVJfk4+Gd7+jYY5TtpNlcC awzUkb/+huq8OzQ99v1YRWs1YrKGUfb5nFTVB/RM4axxSS2F6mf4t3xAmvSl2gFL qmbZzQtDLAgc8fFXxmy0caMX4wFSBJbc8gw3bt31h3cqPMZdaTXeRERDC3T40WdO jfJdee6yEGdwmyIvfHzKdOYjSxsqwhkuDZKDRzx7lj8Sy8Vgco+5tpB9FlvOsysD QOIbIiOHyadrFOdxpgDCNU+qSc2kma+z -----END CERTIFICATE-----Generated at Wed Nov 5 00:26:00 2025 by rpki-client