$ rpki-client -vvf rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft File: CmH1ryEJpoNhH7ogbyCM7-NImCE.mft (raw, json) Hash identifier: 1VAwf66jlABg4lk9/w7bJFz2rTLxS9NxsSpqYa7JYJE= Subject key identifier: FA:FF:62:FD:4A:D8:40:EB:B4:ED:B0:47:53:84:65:4D:76:9D:85:F5 Authority key identifier: 0A:61:F5:AF:21:09:A6:83:61:1F:BA:20:6F:20:8C:EF:E3:48:98:21 Certificate issuer: /CN=A91559AC/serialNumber=0A61F5AF2109A683611FBA206F208CEFE3489821 Certificate serial: 0ADA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmH1ryEJpoNhH7ogbyCM7-NImCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft Manifest number: 0B40 Signing time: Tue 04 Nov 2025 19:33:57 +0000 Manifest this update: Tue 04 Nov 2025 19:33:57 +0000 Manifest next update: Tue 11 Nov 2025 19:33:57 +0000 Files and hashes: 1: CmH1ryEJpoNhH7ogbyCM7-NImCE.crl (hash: ZF2F7osMKJGMjRRw2Szaal+STTUiqZEjoRzinrz290M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.crl rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmH1ryEJpoNhH7ogbyCM7-NImCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2778 (0xada) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91559AC, serialNumber=0A61F5AF2109A683611FBA206F208CEFE3489821 Validity Not Before: Nov 4 19:33:57 2025 GMT Not After : Nov 11 19:33:57 2025 GMT Subject: CN=690a5525-e16b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a0:3c:df:69:f1:9c:fd:c8:29:27:73:a9:3f: 49:5a:25:ec:47:3b:59:35:b3:0c:02:54:85:62:dc: eb:5e:7f:f1:7f:5d:16:01:91:54:95:95:6f:f3:69: 95:e6:07:05:e7:fe:b8:bb:e9:49:72:23:f6:1a:1a: a5:f9:c5:d9:01:c4:93:6b:29:58:8f:3e:3d:2f:06: b7:76:e0:84:01:33:d2:fa:1b:c5:9c:78:d9:0c:3a: 0d:98:54:ee:2f:8f:b4:b1:41:84:eb:37:08:8e:b1: dc:06:e5:59:0e:ec:f4:25:0b:42:5e:d6:2c:06:06: 46:e4:67:63:88:2b:28:b7:b2:78:af:65:07:1c:ea: a3:74:c8:b9:92:61:9b:9e:fc:b8:a2:72:23:16:de: 2f:46:62:43:38:08:f0:80:b2:4f:15:a3:f6:0f:83: 4f:14:75:40:ce:a3:fc:a0:07:db:12:c8:ed:db:15: c1:0d:ff:f9:86:72:1c:9b:c5:1f:b0:dc:dd:45:45: 70:3b:ff:bf:23:ee:92:f4:8e:0b:ca:ce:c8:15:44: dc:13:72:b5:8a:4a:47:87:d6:15:c3:52:d1:29:4b: 32:2d:c5:6a:77:c4:74:91:14:ae:bd:ae:05:bb:9a: f4:5c:33:5a:e2:92:5d:ce:1a:ec:5c:a3:79:6a:b8: fb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FF:62:FD:4A:D8:40:EB:B4:ED:B0:47:53:84:65:4D:76:9D:85:F5 X509v3 Authority Key Identifier: keyid:0A:61:F5:AF:21:09:A6:83:61:1F:BA:20:6F:20:8C:EF:E3:48:98:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmH1ryEJpoNhH7ogbyCM7-NImCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91559AC/C06135165F8D11EAB500BD64C4F9AE02/CmH1ryEJpoNhH7ogbyCM7-NImCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6b:7a:49:7d:55:8d:06:7b:9c:95:5f:5a:52:57:20:02:4b: b7:4f:fd:65:85:26:08:a8:13:bb:84:a5:17:c2:c5:61:a6:1f: b9:9d:a0:21:13:e6:65:f4:04:66:1f:0d:5a:6d:44:2a:ac:50: e3:02:b3:53:0f:a0:56:09:72:cc:b1:8b:1a:08:7d:d2:83:03: f1:8c:77:62:4d:f1:ac:ac:c0:3e:df:1e:28:a9:74:1f:a7:d0: 94:8a:81:ab:42:ec:97:55:70:ec:de:b2:43:cb:16:4a:cd:35: 20:25:04:a4:11:53:0e:ff:a4:0b:f6:ed:17:8b:ea:05:ae:74: 2c:f0:30:c1:84:d6:c0:63:ff:f6:5b:7a:86:43:79:5e:cc:3f: 11:17:f2:c4:a1:5b:16:08:5a:a5:65:48:82:56:0f:75:98:83: 9e:6d:2c:62:6b:32:1c:86:91:f8:8a:ba:13:13:c7:27:6c:f7: 08:f7:af:42:e0:98:92:db:e1:c4:21:d0:6e:30:0a:f7:f9:17: ab:a0:6f:44:ba:48:22:23:c4:14:87:ba:cf:bc:e9:3f:7e:15: 77:37:fb:18:f7:86:03:20:2f:a8:b2:3c:d1:92:f3:4e:8d:be: ca:42:4e:53:99:c4:bc:dd:e6:46:8b:75:2d:c2:be:e4:fe:64: 63:37:46:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU5QUMxMTAvBgNVBAUTKDBBNjFGNUFGMjEwOUE2ODM2MTFGQkEyMDZGMjA4Q0VG RTM0ODk4MjEwHhcNMjUxMTA0MTkzMzU3WhcNMjUxMTExMTkzMzU3WjAYMRYwFAYD VQQDEw02OTBhNTUyNS1lMTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6A832nxnP3IKSdzqT9JWiXsRztZNbMMAlSFYtzrXn/xf10WAZFUlZVv82mV 5gcF5/64u+lJciP2Ghql+cXZAcSTaylYjz49Lwa3duCEATPS+hvFnHjZDDoNmFTu L4+0sUGE6zcIjrHcBuVZDuz0JQtCXtYsBgZG5GdjiCsot7J4r2UHHOqjdMi5kmGb nvy4onIjFt4vRmJDOAjwgLJPFaP2D4NPFHVAzqP8oAfbEsjt2xXBDf/5hnIcm8Uf sNzdRUVwO/+/I+6S9I4Lys7IFUTcE3K1ikpHh9YVw1LRKUsyLcVqd8R0kRSuva4F u5r0XDNa4pJdzhrsXKN5arj7swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPr/Yv1K 2EDrtO2wR1OEZU12nYX1MB8GA1UdIwQYMBaAFAph9a8hCaaDYR+6IG8gjO/jSJgh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTlBQy9DMDYxMzUxNjVG OEQxMUVBQjUwMEJENjRDNEY5QUUwMi9DbUgxcnlFSnBvTmhIN29nYnlDTTctTklt Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtSDFyeUVKcG9OaEg3b2dieUNNNy1OSW1DRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTlBQy9DMDYxMzUxNjVGOEQxMUVBQjUwMEJENjRDNEY5QUUwMi9DbUgxcnlFSnBv TmhIN29nYnlDTTctTkltQ0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8a3pJfVWNBnuclV9aUlcgAku3T/1lhSYIqBO7hKUXwsVhph+5naAh E+Zl9ARmHw1abUQqrFDjArNTD6BWCXLMsYsaCH3SgwPxjHdiTfGsrMA+3x4oqXQf p9CUioGrQuyXVXDs3rJDyxZKzTUgJQSkEVMO/6QL9u0Xi+oFrnQs8DDBhNbAY//2 W3qGQ3lezD8RF/LEoVsWCFqlZUiCVg91mIOebSxiazIchpH4iroTE8cnbPcI969C 4JiS2+HEIdBuMAr3+ReroG9EukgiI8QUh7rPvOk/fhV3N/sY94YDIC+osjzRkvNO jb7KQk5TmcS83eZGi3Utwr7k/mRjN0ZS -----END CERTIFICATE-----Generated at Wed Nov 5 00:24:14 2025 by rpki-client