$ rpki-client -vvf rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft File: MfW8lHJxAkr0efYTZGbay_FDhsI.mft (raw, json) Hash identifier: eQCymx+UVdyDINRllxDTutgjwtw4HwxMzC45JKlgk0U= Subject key identifier: 54:E5:32:C0:E5:8F:FE:A0:87:DF:40:13:D1:EA:A7:28:A6:2E:95:BA Authority key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2 Certificate issuer: /CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2 Certificate serial: 34D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft Manifest number: 34D7 Signing time: Tue 04 Nov 2025 14:37:56 +0000 Manifest this update: Tue 04 Nov 2025 14:37:56 +0000 Manifest next update: Tue 11 Nov 2025 14:37:56 +0000 Files and hashes: 1: MfW8lHJxAkr0efYTZGbay_FDhsI.crl (hash: GrqLHoqj6XvcSb7kp8GbrNJve308xNx5C/v9DbFRf8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13527 (0x34d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F4AA, serialNumber=31F5BC947271024AF479F6136466DACBF14386C2 Validity Not Before: Nov 4 14:37:56 2025 GMT Not After : Nov 11 14:37:56 2025 GMT Subject: CN=690a0fc4-88e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5b:cb:41:12:9c:24:7b:05:08:29:f5:b5:99: 87:a9:1e:55:57:e5:6a:af:f9:f6:c1:8f:32:dd:db: 1b:50:f0:fd:3e:50:5d:2c:9b:c5:ae:ac:12:85:7e: ad:6c:60:4e:25:6a:a7:79:45:4e:3f:8f:0f:dd:6d: 8e:16:7e:45:39:62:f1:e6:3c:fc:6a:4a:46:19:72: 62:8d:3b:1b:c8:80:91:75:cd:37:79:54:f3:2c:74: 81:da:0e:a0:d8:0c:b9:8b:53:fd:c8:50:55:49:67: 92:d4:55:da:0c:57:8d:81:a2:e4:cd:eb:5e:b1:33: 08:fd:93:01:7a:50:b0:d0:50:16:3b:50:31:17:ce: dc:c2:da:9e:b5:fc:9f:61:96:8f:20:22:86:12:e4: 01:7a:0b:0a:3d:a7:fe:fa:26:d8:ea:8f:4f:88:5e: aa:09:bb:d1:1a:55:68:d2:ab:6f:c0:d1:2a:dd:08: 04:ef:29:bf:7d:60:89:b4:8e:3d:e9:fa:d5:aa:eb: b1:42:c6:5d:6d:77:0a:fb:c4:1f:00:ba:f1:e8:93: ea:83:0f:fb:68:8e:6a:d8:ac:47:c3:77:43:e0:f8: 9e:7d:2f:93:0b:30:ab:95:8d:ba:a3:a6:a1:20:e6: ed:f9:42:9f:09:67:76:39:0b:94:8a:c2:f6:5f:05: 5e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E5:32:C0:E5:8F:FE:A0:87:DF:40:13:D1:EA:A7:28:A6:2E:95:BA X509v3 Authority Key Identifier: keyid:31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:7b:ce:dd:b3:2b:10:a2:0d:db:b3:b1:8e:a9:92:28:38:0a: 06:5f:0d:da:0f:c3:4e:6d:30:8b:9f:d1:a0:2e:d5:36:00:56: a9:bc:79:82:4a:68:7d:be:47:75:dc:27:61:3d:15:77:92:fd: 14:70:e0:bb:28:1c:b7:6d:84:6e:43:db:82:53:44:18:98:35: b5:89:fd:9e:5b:2e:9e:14:66:c0:0d:fe:15:69:90:59:e5:99: 66:4e:e8:a9:7c:f9:2d:ce:98:98:78:2b:03:24:53:bb:e5:28: 14:1d:c1:1c:c6:91:a2:82:da:37:01:1d:a5:a9:56:af:24:71: 2f:af:9f:7c:01:6d:7c:1a:18:8c:14:e6:5d:50:8a:ab:a9:70: b4:1e:35:6e:38:c8:e7:7a:36:ba:c9:e0:cf:a9:9d:8a:02:c0: 6b:90:35:0d:5d:21:1a:d2:7f:ec:7c:0f:93:09:1a:66:06:3d: 0b:e7:99:8e:48:ca:41:44:73:24:a2:1d:ab:e2:40:10:bd:b9: 9b:c1:d0:a5:9d:cc:ef:ca:69:e1:e8:7b:78:63:63:75:74:18: 51:51:c0:7b:95:66:09:7b:aa:fc:2e:68:6d:ff:d9:1e:de:11: be:d1:7a:05:76:c9:4b:ee:51:05:9f:76:4d:88:6a:d8:e5:7b: 6c:3a:b0:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY0QUExMTAvBgNVBAUTKDMxRjVCQzk0NzI3MTAyNEFGNDc5RjYxMzY0NjZEQUNC RjE0Mzg2QzIwHhcNMjUxMTA0MTQzNzU2WhcNMjUxMTExMTQzNzU2WjAYMRYwFAYD VQQDEw02OTBhMGZjNC04OGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1vLQRKcJHsFCCn1tZmHqR5VV+Vqr/n2wY8y3dsbUPD9PlBdLJvFrqwShX6t bGBOJWqneUVOP48P3W2OFn5FOWLx5jz8akpGGXJijTsbyICRdc03eVTzLHSB2g6g 2Ay5i1P9yFBVSWeS1FXaDFeNgaLkzetesTMI/ZMBelCw0FAWO1AxF87cwtqetfyf YZaPICKGEuQBegsKPaf++ibY6o9PiF6qCbvRGlVo0qtvwNEq3QgE7ym/fWCJtI49 6frVquuxQsZdbXcK+8QfALrx6JPqgw/7aI5q2KxHw3dD4PiefS+TCzCrlY26o6ah IObt+UKfCWd2OQuUisL2XwVePwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTlMsDl j/6gh99AE9HqpyimLpW6MB8GA1UdIwQYMBaAFDH1vJRycQJK9Hn2E2Rm2svxQ4bC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjRBQS9FOUYyQ0E0MDFE OEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFrcjBlZllUWkdiYXlfRkRo c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mVzhsSEp4QWtyMGVmWVRaR2JheV9GRGhzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjRBQS9FOUYyQ0E0MDFEOEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFr cjBlZllUWkdiYXlfRkRoc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwe87dsysQog3bs7GOqZIoOAoGXw3aD8NObTCLn9GgLtU2AFapvHmC Smh9vkd13CdhPRV3kv0UcOC7KBy3bYRuQ9uCU0QYmDW1if2eWy6eFGbADf4VaZBZ 5ZlmTuipfPktzpiYeCsDJFO75SgUHcEcxpGigto3AR2lqVavJHEvr598AW18GhiM FOZdUIqrqXC0HjVuOMjneja6yeDPqZ2KAsBrkDUNXSEa0n/sfA+TCRpmBj0L55mO SMpBRHMkoh2r4kAQvbmbwdClnczvymnh6Ht4Y2N1dBhRUcB7lWYJe6r8Lmht/9ke 3hG+0XoFdslL7lEFn3ZNiGrY5XtsOrAY -----END CERTIFICATE-----Generated at Tue Nov 4 16:02:08 2025 by rpki-client