$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft File: mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft (raw, json) Hash identifier: e8wIhaoa2AZjGohrPoDLPm8bug26N4g+dywh8LM0ynI= Subject key identifier: B6:B4:EF:CE:9C:8D:FD:0C:CE:59:56:8C:79:A3:BD:87:5C:D2:EE:EC Authority key identifier: 99:C1:06:E8:7F:E1:D6:41:1A:EC:71:F8:03:94:62:2C:88:1A:AA:D9 Certificate issuer: /CN=A914B1DB/serialNumber=99C106E87FE1D6411AEC71F80394622C881AAAD9 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft Manifest number: F4 Signing time: Wed 05 Nov 2025 05:23:05 +0000 Manifest this update: Wed 05 Nov 2025 05:23:04 +0000 Manifest next update: Wed 12 Nov 2025 05:23:04 +0000 Files and hashes: 1: mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl (hash: iVKFelrfQsAv7gGi6bWE9H2Qqp89PUyvR9QsQ0EKtN4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB, serialNumber=99C106E87FE1D6411AEC71F80394622C881AAAD9 Validity Not Before: Nov 5 05:23:04 2025 GMT Not After : Nov 12 05:23:04 2025 GMT Subject: CN=690adf39-b939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:86:75:ab:50:90:11:36:a5:76:2e:80:de:79: 81:60:ab:20:8b:2e:35:3c:05:99:80:a8:87:32:8c: 89:d7:66:fa:3c:23:b3:71:67:7e:41:86:23:76:84: 59:49:44:8f:a9:26:fd:f3:a1:29:de:8d:9c:54:75: 83:0f:38:aa:65:28:84:c9:8e:29:f2:d8:e5:58:13: a5:2e:48:bd:22:aa:3a:60:9f:65:e9:76:c1:59:df: e9:b7:fe:77:f5:70:cd:07:19:b4:cb:27:0a:56:ba: 56:d5:80:21:1d:f2:4f:c6:3c:c9:ea:79:70:b6:e5: cd:ca:48:d4:3c:dc:9a:d1:e9:22:b4:7c:8b:41:ce: 9b:02:3e:24:be:de:2a:76:39:b4:67:df:15:d9:e3: 5c:2e:66:1a:d6:8c:ec:ec:af:fb:0b:42:0b:52:5a: 2c:fe:33:02:4f:12:07:ea:ae:2d:aa:37:98:15:82: 53:79:62:8f:f7:53:1f:64:c2:e1:92:bb:ac:22:6c: b3:a2:c1:8c:ef:3f:fa:31:0c:a1:30:a2:7c:d4:ae: 6c:66:73:1a:72:b6:5f:bb:3e:ed:2c:4f:a7:ec:6d: ab:05:84:9d:1c:e0:c1:e6:01:05:81:d0:a3:83:f8: 0b:ce:56:8c:49:0c:c8:28:6d:fa:73:e2:c1:ca:1b: 8e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B4:EF:CE:9C:8D:FD:0C:CE:59:56:8C:79:A3:BD:87:5C:D2:EE:EC X509v3 Authority Key Identifier: keyid:99:C1:06:E8:7F:E1:D6:41:1A:EC:71:F8:03:94:62:2C:88:1A:AA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:30:38:1e:33:cc:68:d7:93:70:64:e6:06:e6:2c:97:ce:ad: 8b:db:d8:3a:eb:85:a4:3f:5e:f3:71:0f:3d:fa:e0:f6:87:1c: f1:ad:8a:d2:b2:7d:a6:53:a1:1d:48:41:30:cf:56:3f:38:52: cc:c6:79:72:83:84:3d:f8:9b:78:d2:44:dd:76:f8:38:ef:5f: aa:8b:b2:af:b7:fd:ff:a7:ca:4e:9b:5b:35:56:a8:38:ab:b2: 33:ce:67:eb:27:02:e3:99:63:a1:cb:0d:e7:99:ea:a3:a2:e5: 3e:c3:88:61:81:cc:52:d6:0c:a1:0a:d2:cf:4e:d0:b2:16:64: 94:1f:4a:b3:33:3a:00:59:20:71:19:45:18:ca:4d:57:4d:70: 17:94:0e:d6:87:1c:9c:59:1e:5b:72:93:1b:6c:8e:0f:ba:3d: ed:1f:39:00:3b:cf:ae:d6:14:ad:1d:a7:36:cc:8e:b0:bc:a6: df:c4:e4:93:11:5a:87:77:69:02:9d:b8:4e:11:ce:59:dd:7d: 8d:19:5a:ff:8e:8b:2b:17:c7:8c:35:60:d6:b7:26:20:e0:2c: 6b:90:54:71:2d:81:40:a6:a4:c6:86:ff:01:df:c1:69:6b:4e: 4e:74:e5:fa:94:25:20:26:dc:86:8b:01:1d:93:74:c4:de:0d: 63:c3:af:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxREIxMTAvBgNVBAUTKDk5QzEwNkU4N0ZFMUQ2NDExQUVDNzFGODAzOTQ2MjJD ODgxQUFBRDkwHhcNMjUxMTA1MDUyMzA0WhcNMjUxMTEyMDUyMzA0WjAYMRYwFAYD VQQDEw02OTBhZGYzOS1iOTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIZ1q1CQETaldi6A3nmBYKsgiy41PAWZgKiHMoyJ12b6PCOzcWd+QYYjdoRZ SUSPqSb986Ep3o2cVHWDDziqZSiEyY4p8tjlWBOlLki9Iqo6YJ9l6XbBWd/pt/53 9XDNBxm0yycKVrpW1YAhHfJPxjzJ6nlwtuXNykjUPNya0ekitHyLQc6bAj4kvt4q djm0Z98V2eNcLmYa1ozs7K/7C0ILUlos/jMCTxIH6q4tqjeYFYJTeWKP91MfZMLh krusImyzosGM7z/6MQyhMKJ81K5sZnMacrZfuz7tLE+n7G2rBYSdHODB5gEFgdCj g/gLzlaMSQzIKG36c+LByhuOawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLa0786c jf0MzllWjHmjvYdc0u7sMB8GA1UdIwQYMBaAFJnBBuh/4dZBGuxx+AOUYiyIGqrZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjFEQi8zNjUxNDBFRTQz MTAxMUVGODY4QjJCODFDNEY5QUUwMi9tY0VHNkhfaDFrRWE3SEg0QTVSaUxJZ2Fx dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21jRUc2SF9oMWtFYTdISDRBNVJpTElnYXF0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjFEQi8zNjUxNDBFRTQzMTAxMUVGODY4QjJCODFDNEY5QUUwMi9tY0VHNkhfaDFr RWE3SEg0QTVSaUxJZ2FxdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOMDgeM8xo15NwZOYG5iyXzq2L29g664WkP17zcQ89+uD2hxzxrYrS sn2mU6EdSEEwz1Y/OFLMxnlyg4Q9+Jt40kTddvg471+qi7Kvt/3/p8pOm1s1Vqg4 q7IzzmfrJwLjmWOhyw3nmeqjouU+w4hhgcxS1gyhCtLPTtCyFmSUH0qzMzoAWSBx GUUYyk1XTXAXlA7WhxycWR5bcpMbbI4Puj3tHzkAO8+u1hStHac2zI6wvKbfxOST EVqHd2kCnbhOEc5Z3X2NGVr/josrF8eMNWDWtyYg4CxrkFRxLYFApqTGhv8B38Fp a05OdOX6lCUgJtyGiwEdk3TE3g1jw69U -----END CERTIFICATE-----Generated at Wed Nov 5 07:52:28 2025 by rpki-client