$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft File: 0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft (raw, json) Hash identifier: gLEoHRBIV5ejg8L3ODb42m0bq/M2NozXUuKn69lthuc= Subject key identifier: A9:F7:6F:9E:85:4C:42:D6:D0:07:04:65:5D:D4:71:BB:BD:56:80:32 Authority key identifier: D1:8F:FC:C5:04:D3:69:3D:7F:8A:38:D8:6D:C1:2E:88:CD:96:0E:56 Certificate issuer: /CN=A91443DC/serialNumber=D18FFCC504D3693D7F8A38D86DC12E88CD960E56 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft Manifest number: 0101 Signing time: Wed 05 Nov 2025 05:13:45 +0000 Manifest this update: Wed 05 Nov 2025 05:13:44 +0000 Manifest next update: Wed 12 Nov 2025 05:13:44 +0000 Files and hashes: 1: 0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl (hash: N3DwJOSxJI629gU4w8L/qiGyIHqyrSynH+W0mXGnuTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91443DC, serialNumber=D18FFCC504D3693D7F8A38D86DC12E88CD960E56 Validity Not Before: Nov 5 05:13:44 2025 GMT Not After : Nov 12 05:13:44 2025 GMT Subject: CN=690add08-48f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ca:36:9e:30:c9:0f:41:f3:29:ac:0b:d2:ed: 41:f9:c4:b9:ec:6b:2e:e5:93:85:58:9c:c0:63:b1: c1:38:b1:95:07:66:ea:16:ef:5a:0e:64:ea:a4:bb: 15:45:3c:9f:7d:d3:0f:87:ae:c0:ca:65:2b:29:00: d0:3e:e4:57:7a:df:c9:02:24:18:74:41:8b:fe:81: 40:77:c4:46:44:15:13:00:cf:8d:80:01:b3:87:58: f7:21:01:cc:c5:c6:e3:1c:53:33:78:19:9f:af:58: 13:9f:1f:0a:1d:87:57:4d:38:30:21:78:6c:0b:d6: dc:fb:ec:49:80:41:ba:52:a6:26:58:42:df:3c:af: 1e:17:7b:c5:d5:0c:c4:9b:0f:e9:5e:e2:11:2e:04: 02:6a:4e:2b:e2:10:41:b6:60:41:40:4d:a4:29:b9: 2d:6f:2d:33:70:b8:aa:75:a1:76:53:ab:61:1f:71: 44:ed:59:64:e9:fd:96:43:42:6d:83:99:74:3f:ba: fd:a0:00:5a:f9:05:de:80:18:00:d1:3a:b7:d8:7d: cf:46:2a:d6:9b:98:7d:1c:c3:4f:d6:05:4c:02:11: 59:dd:ba:5d:a7:80:e0:0a:69:fc:b5:d4:82:2e:70: fd:a3:e2:be:0e:4b:f4:a3:54:94:34:1b:a4:4a:93: 4f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F7:6F:9E:85:4C:42:D6:D0:07:04:65:5D:D4:71:BB:BD:56:80:32 X509v3 Authority Key Identifier: keyid:D1:8F:FC:C5:04:D3:69:3D:7F:8A:38:D8:6D:C1:2E:88:CD:96:0E:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/A065D1EA306211EF978B4764C4F9AE02/0Y_8xQTTaT1_ijjYbcEuiM2WDlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:9b:80:70:71:c1:a9:d6:27:51:6b:40:86:6c:60:dc:7b:61: 94:bb:11:fd:f1:9a:25:ac:b4:7b:bd:07:ce:c4:c1:b3:36:9c: 82:88:66:1e:d9:84:64:01:1a:3e:45:c5:72:eb:69:ba:12:7f: 4b:79:2d:ce:3d:96:e5:31:55:02:e1:73:95:1f:56:77:b1:5a: 9b:52:7b:0a:5f:ab:dd:cc:13:5d:9c:64:8a:db:8a:81:56:cb: 22:b4:6e:a1:52:6e:ab:65:09:7c:bd:c1:13:f0:57:fb:ac:a6: 69:41:06:47:2c:77:28:6b:2c:1d:ef:dc:fb:b4:a2:a8:f5:22: 06:13:27:79:2b:79:da:34:7f:22:f2:89:f2:ef:2d:8c:0d:36: 36:9e:15:ec:c4:af:8e:75:8e:40:e0:b3:b3:de:da:fb:2d:e0: e9:74:0f:28:22:dd:7b:6f:8f:65:ed:56:1d:0b:4b:0b:2a:f9: 0e:6a:1a:9b:64:79:5c:58:6b:37:b5:3f:f3:e3:37:d8:54:42: ab:ae:d3:c4:82:61:2d:17:8f:97:9d:5f:d7:e2:7a:e3:74:37: 83:75:e3:0f:2d:9a:4f:1c:ef:07:6a:65:5c:39:ee:82:36:d0: a3:bd:85:31:3f:aa:bc:de:23:63:27:49:7a:49:9b:ef:1a:4f: 84:59:d5:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzREMxMTAvBgNVBAUTKEQxOEZGQ0M1MDREMzY5M0Q3RjhBMzhEODZEQzEyRTg4 Q0Q5NjBFNTYwHhcNMjUxMTA1MDUxMzQ0WhcNMjUxMTEyMDUxMzQ0WjAYMRYwFAYD VQQDEw02OTBhZGQwOC00OGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMo2njDJD0HzKawL0u1B+cS57Gsu5ZOFWJzAY7HBOLGVB2bqFu9aDmTqpLsV RTyffdMPh67AymUrKQDQPuRXet/JAiQYdEGL/oFAd8RGRBUTAM+NgAGzh1j3IQHM xcbjHFMzeBmfr1gTnx8KHYdXTTgwIXhsC9bc++xJgEG6UqYmWELfPK8eF3vF1QzE mw/pXuIRLgQCak4r4hBBtmBBQE2kKbktby0zcLiqdaF2U6thH3FE7Vlk6f2WQ0Jt g5l0P7r9oABa+QXegBgA0Tq32H3PRirWm5h9HMNP1gVMAhFZ3bpdp4DgCmn8tdSC LnD9o+K+Dkv0o1SUNBukSpNPXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKn3b56F TELW0AcEZV3Ucbu9VoAyMB8GA1UdIwQYMBaAFNGP/MUE02k9f4o42G3BLojNlg5W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDNEQy9BMDY1RDFFQTMw NjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi8wWV84eFFUVGFUMV9pampZYmNFdWlNMldE bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBZXzh4UVRUYVQxX2lqalliY0V1aU0yV0RsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDNEQy9BMDY1RDFFQTMwNjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi8wWV84eFFUVGFU MV9pampZYmNFdWlNMldEbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZm4BwccGp1idRa0CGbGDce2GUuxH98ZolrLR7vQfOxMGzNpyCiGYe 2YRkARo+RcVy62m6En9LeS3OPZblMVUC4XOVH1Z3sVqbUnsKX6vdzBNdnGSK24qB VssitG6hUm6rZQl8vcET8Ff7rKZpQQZHLHcoaywd79z7tKKo9SIGEyd5K3naNH8i 8ony7y2MDTY2nhXsxK+OdY5A4LOz3tr7LeDpdA8oIt17b49l7VYdC0sLKvkOahqb ZHlcWGs3tT/z4zfYVEKrrtPEgmEtF4+XnV/X4nrjdDeDdeMPLZpPHO8HamVcOe6C NtCjvYUxP6q83iNjJ0l6SZvvGk+EWdU3 -----END CERTIFICATE-----Generated at Wed Nov 5 09:19:34 2025 by rpki-client