$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft File: 89pR_oC82pcIdSXiBGIeqfVXQZk.mft (raw, json) Hash identifier: Wd8JJI48Bex9Z41MW3QvU5wBq6emxMLOj5LnLtyorOE= Subject key identifier: 0B:C5:FE:4B:16:01:88:EB:9B:D7:D8:F2:DC:9F:F2:15:6A:44:E5:A0 Authority key identifier: F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99 Certificate issuer: /CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199 Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft Manifest number: 01F2 Signing time: Wed 05 Nov 2025 03:03:42 +0000 Manifest this update: Wed 05 Nov 2025 03:03:41 +0000 Manifest next update: Wed 12 Nov 2025 03:03:41 +0000 Files and hashes: 1: 89pR_oC82pcIdSXiBGIeqfVXQZk.crl (hash: VoSpsCE5/dTZBVD2QETxZywr4/zLJRsZZtjp4+xtj2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CDA, serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199 Validity Not Before: Nov 5 03:03:41 2025 GMT Not After : Nov 12 03:03:41 2025 GMT Subject: CN=690abe8d-e892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f7:3a:b1:ae:de:7b:68:6d:dc:61:fc:0c:69: 3b:2e:53:31:b0:a3:34:23:17:3e:fa:1d:fa:5e:25: 12:0e:dc:8e:ef:73:e8:1c:60:f8:a5:3c:31:3e:a9: c9:de:f6:b5:2d:43:b6:24:d5:10:c1:b5:fa:a2:b6: 13:8a:25:6d:47:d3:f8:a1:e0:f0:52:20:74:2d:58: 40:72:fc:df:b5:43:7a:a2:08:50:33:fc:4c:3a:9d: 50:4b:ae:8e:ba:a5:56:dd:81:ba:cd:15:a2:a4:19: 52:95:79:f1:c9:39:2f:24:17:46:4e:2b:d0:bc:5e: cc:56:b6:3a:53:2e:8c:a5:7a:41:d2:ae:d4:21:b2: 1a:64:8f:aa:a0:3b:75:26:cf:77:97:86:34:25:b6: fd:9c:58:d0:0f:0a:5b:54:8f:5f:b7:e0:58:86:a0: e2:b1:de:19:97:e5:9a:44:a9:5e:87:b3:24:c1:91: 95:3b:b4:6b:d4:c4:dc:46:a5:02:e9:41:8d:25:e0: f3:84:17:70:61:b7:35:e1:41:94:57:8e:11:1a:46: 3c:af:d5:de:d7:a9:6d:88:a3:38:19:fa:96:b4:a7: ca:2c:d7:05:61:3d:b0:fe:da:ad:97:1f:4c:a3:58: 9f:a1:5a:b8:01:20:ed:9e:22:a9:b9:20:de:38:08: 91:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C5:FE:4B:16:01:88:EB:9B:D7:D8:F2:DC:9F:F2:15:6A:44:E5:A0 X509v3 Authority Key Identifier: keyid:F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:43:f0:09:ca:e0:81:3c:88:7d:2b:0b:29:3a:25:13:9c:97: 3a:58:33:dd:bd:35:87:3a:f0:6c:b4:9e:16:0d:86:19:22:0d: 17:70:62:40:7e:7e:44:01:ed:f2:40:8f:b8:d7:73:e8:40:70: c5:44:82:4f:dd:6e:80:54:82:05:a7:bb:97:65:68:d2:e6:13: a7:37:eb:be:4d:75:98:d0:44:6c:b2:b8:31:e7:0b:99:fd:88: 8d:4b:c0:d2:c8:7f:b6:7f:b3:7e:5a:5c:18:d2:5e:4a:24:3c: cb:6f:64:3a:67:ea:fd:68:08:a7:c4:b5:c9:8f:4c:02:20:bf: 42:d5:c6:af:78:ac:e6:85:cf:df:54:40:b7:65:72:a0:53:e6: fc:df:a5:10:19:62:97:d7:eb:f1:6b:57:59:24:aa:a8:11:2f: 3a:6f:26:66:18:1e:7e:ec:5a:f4:f0:8f:61:20:70:aa:ce:f9: 67:00:47:75:2a:0d:f9:1f:8d:e2:28:2d:f0:57:22:cc:43:f4: dd:26:0c:f6:45:17:07:83:fe:58:bd:6e:af:5f:e7:90:2e:ad: 1b:2e:ab:b4:5f:1c:da:8c:16:3e:71:b8:14:49:54:62:0d:f2: a0:93:f5:5e:bf:a2:a2:91:73:3d:78:61:8f:e5:07:9a:f3:e9: 3b:15:e3:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDREExMTAvBgNVBAUTKEYzREE1MUZFODBCQ0RBOTcwODc1MjVFMjA0NjIxRUE5 RjU1NzQxOTkwHhcNMjUxMTA1MDMwMzQxWhcNMjUxMTEyMDMwMzQxWjAYMRYwFAYD VQQDEw02OTBhYmU4ZC1lODkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fc6sa7ee2ht3GH8DGk7LlMxsKM0Ixc++h36XiUSDtyO73PoHGD4pTwxPqnJ 3va1LUO2JNUQwbX6orYTiiVtR9P4oeDwUiB0LVhAcvzftUN6oghQM/xMOp1QS66O uqVW3YG6zRWipBlSlXnxyTkvJBdGTivQvF7MVrY6Uy6MpXpB0q7UIbIaZI+qoDt1 Js93l4Y0Jbb9nFjQDwpbVI9ft+BYhqDisd4Zl+WaRKleh7MkwZGVO7Rr1MTcRqUC 6UGNJeDzhBdwYbc14UGUV44RGkY8r9Xe16ltiKM4GfqWtKfKLNcFYT2w/tqtlx9M o1ifoVq4ASDtniKpuSDeOAiRmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvF/ksW AYjrm9fY8tyf8hVqROWgMB8GA1UdIwQYMBaAFPPaUf6AvNqXCHUl4gRiHqn1V0GZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NEQS80OUIyN0Q4QTA1 NEQxMUVFOURGQzE2MjRDNEY5QUUwMi84OXBSX29DODJwY0lkU1hpQkdJZXFmVlhR WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5cFJfb0M4MnBjSWRTWGlCR0llcWZWWFFaay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0NEQS80OUIyN0Q4QTA1NEQxMUVFOURGQzE2MjRDNEY5QUUwMi84OXBSX29DODJw Y0lkU1hpQkdJZXFmVlhRWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOQ/AJyuCBPIh9KwspOiUTnJc6WDPdvTWHOvBstJ4WDYYZIg0XcGJA fn5EAe3yQI+413PoQHDFRIJP3W6AVIIFp7uXZWjS5hOnN+u+TXWY0ERssrgx5wuZ /YiNS8DSyH+2f7N+WlwY0l5KJDzLb2Q6Z+r9aAinxLXJj0wCIL9C1caveKzmhc/f VEC3ZXKgU+b836UQGWKX1+vxa1dZJKqoES86byZmGB5+7Fr08I9hIHCqzvlnAEd1 Kg35H43iKC3wVyLMQ/TdJgz2RRcHg/5YvW6vX+eQLq0bLqu0XxzajBY+cbgUSVRi DfKgk/Vev6KikXM9eGGP5Qea8+k7FePR -----END CERTIFICATE-----Generated at Wed Nov 5 23:06:02 2025 by rpki-client