$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft File: B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft (raw, json) Hash identifier: oelSV81rQnqxSkUeHotrPFuL8rHiGn6JahgHYaYpAgI= Subject key identifier: 53:99:D7:AF:0B:31:74:55:64:8A:EA:E0:F5:C1:45:55:E3:A5:F1:FA Authority key identifier: 07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3 Certificate issuer: /CN=A9152E70/serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft Manifest number: 28 Signing time: Sun 02 Nov 2025 23:31:55 +0000 Manifest this update: Sun 02 Nov 2025 23:31:55 +0000 Manifest next update: Sun 09 Nov 2025 23:31:55 +0000 Files and hashes: 1: B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl (hash: z2d9GCICiUueeqKb92J1ZcnuoNSmLgEIBDRLMCX2mno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70, serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3 Validity Not Before: Nov 2 23:31:55 2025 GMT Not After : Nov 9 23:31:55 2025 GMT Subject: CN=6907e9eb-540f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a9:60:da:09:e5:7a:c0:d1:a6:64:98:ac:36: 95:5f:28:40:48:df:8a:cb:f1:13:72:f1:20:0b:c8: 6d:47:67:62:93:6a:df:d2:66:e7:6f:e7:5e:ea:37: b5:67:50:33:71:cc:96:91:5b:44:76:26:8e:f7:1b: 69:92:47:a1:51:b4:20:35:38:19:54:3b:9d:4d:85: 66:ab:44:a4:09:b2:fe:97:eb:9c:d8:55:e6:ce:c6: 77:65:60:81:22:0b:b2:eb:a5:b4:40:6c:e7:72:31: f0:a1:7c:b4:fa:a9:a0:b0:14:56:74:4f:ec:a2:23: 0d:8b:30:13:96:69:70:33:3f:b1:ea:6b:ba:40:04: 3d:30:aa:f2:8a:47:9a:21:30:27:55:de:45:4a:18: f6:be:b2:2e:81:6f:6f:5c:c7:f4:64:95:79:d4:71: 0a:07:41:c6:23:51:6f:67:87:28:e6:95:16:31:6c: 8a:66:b1:0d:1d:1f:ae:e5:e8:6e:23:89:f6:94:99: c2:17:aa:30:2f:33:2f:c9:d8:ea:63:9e:c6:eb:48: c5:35:30:a9:03:a0:4b:dc:12:ce:59:20:ec:49:2b: ca:02:c7:ae:65:d7:0a:01:ca:8b:10:d1:2d:ea:77: 7b:68:a8:f0:f7:15:2e:0a:f3:8f:84:2c:10:82:d1: 0f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:99:D7:AF:0B:31:74:55:64:8A:EA:E0:F5:C1:45:55:E3:A5:F1:FA X509v3 Authority Key Identifier: keyid:07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:44:78:30:be:25:69:fc:a2:ae:8a:e9:23:06:dd:8e:a1:72: 74:f8:ab:44:56:39:f7:75:22:b5:be:51:3b:3d:96:e7:0c:bf: cf:67:ab:df:0e:3f:84:e4:7c:d1:ca:fa:b9:9b:35:db:4c:c2: 76:24:29:76:64:bf:e9:8f:88:f2:a1:60:17:48:76:36:94:2e: 7d:f4:e6:4d:e3:e8:fc:a1:80:79:1d:46:1a:3c:06:6b:80:49: c9:22:a7:11:98:07:da:4e:47:f1:f5:5c:1f:9f:9c:38:91:73: dc:4b:8d:ab:ee:2d:6a:12:0a:e2:6d:75:03:db:f5:8e:ed:c7: 54:15:cc:fc:3d:81:93:2b:ba:31:14:f7:51:8f:a5:fc:54:af: ea:0e:de:d3:88:b6:2a:a3:03:fe:65:91:fd:1a:2f:a4:c0:25: 11:d0:12:14:4b:19:a3:c5:99:cb:59:a5:2d:f0:e9:24:bc:5b: bd:af:8c:0b:9f:18:30:a6:af:f0:d4:64:71:91:e6:b3:b9:3d: 0c:9e:87:cc:e5:51:70:00:58:51:00:1d:0e:90:86:be:41:b0: c8:b3:56:11:b5:f5:59:d8:85:65:1a:12:78:c0:47:cb:ad:77: ed:95:09:b6:1a:a0:f2:36:ad:a6:2a:48:82:15:36:83:13:b6: 1c:d5:14:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MkU3MDExMC8GA1UEBRMoMDdGRTg5NjMwMjAxREVGMzdGNEQ2OEEyMEVEMTMzQTlD M0I2QTJBMzAeFw0yNTExMDIyMzMxNTVaFw0yNTExMDkyMzMxNTVaMBgxFjAUBgNV BAMTDTY5MDdlOWViLTU0MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWqWDaCeV6wNGmZJisNpVfKEBI34rL8RNy8SALyG1HZ2KTat/SZudv517qN7Vn UDNxzJaRW0R2Jo73G2mSR6FRtCA1OBlUO51NhWarRKQJsv6X65zYVebOxndlYIEi C7LrpbRAbOdyMfChfLT6qaCwFFZ0T+yiIw2LMBOWaXAzP7Hqa7pABD0wqvKKR5oh MCdV3kVKGPa+si6Bb29cx/RklXnUcQoHQcYjUW9nhyjmlRYxbIpmsQ0dH67l6G4j ifaUmcIXqjAvMy/J2OpjnsbrSMU1MKkDoEvcEs5ZIOxJK8oCx65l1woByosQ0S3q d3toqPD3FS4K84+ELBCC0Q9RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU5nXrwsx dFVkiurg9cFFVeOl8fowHwYDVR0jBBgwFoAUB/6JYwIB3vN/TWiiDtEzqcO2oqMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyRTcwL0U2MEU5MzdDN0Q4 NjExRjA4RkIwRTg3OUM0RjlBRTAyL0JfNkpZd0lCM3ZOX1RXaWlEdEV6cWNPMm9x TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQl82Sll3SUIzdk5fVFdpaUR0RXpxY08yb3FNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy RTcwL0U2MEU5MzdDN0Q4NjExRjA4RkIwRTg3OUM0RjlBRTAyL0JfNkpZd0lCM3ZO X1RXaWlEdEV6cWNPMm9xTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF1EeDC+JWn8oq6K6SMG3Y6hcnT4q0RWOfd1IrW+UTs9lucMv89nq98O P4TkfNHK+rmbNdtMwnYkKXZkv+mPiPKhYBdIdjaULn305k3j6PyhgHkdRho8BmuA SckipxGYB9pOR/H1XB+fnDiRc9xLjavuLWoSCuJtdQPb9Y7tx1QVzPw9gZMrujEU 91GPpfxUr+oO3tOItiqjA/5lkf0aL6TAJRHQEhRLGaPFmctZpS3w6SS8W72vjAuf GDCmr/DUZHGR5rO5PQyeh8zlUXAAWFEAHQ6Qhr5BsMizVhG19VnYhWUaEnjAR8ut d+2VCbYaoPI2raYqSIIVNoMTthzVFEM= -----END CERTIFICATE-----Generated at Wed Nov 5 00:02:21 2025 by rpki-client