$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft File: l0tKVlSG4EjQwXaY1yJ2cM88mac.mft (raw, json) Hash identifier: u/gAkA9gzNFurRIpXnRVAVPcGjMT8xXax3o0Z7UeP3Q= Subject key identifier: 58:8B:C3:0E:24:2F:F7:7B:E3:6F:68:DC:77:55:CD:53:04:0C:7E:8D Authority key identifier: 97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7 Certificate issuer: /CN=A916069A/serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft Manifest number: B9 Signing time: Mon 03 Nov 2025 05:57:33 +0000 Manifest this update: Mon 03 Nov 2025 05:57:33 +0000 Manifest next update: Mon 10 Nov 2025 05:57:33 +0000 Files and hashes: 1: l0tKVlSG4EjQwXaY1yJ2cM88mac.crl (hash: d9iKB6RZt203QhOwN0vgf0WmcZBfzEz6Fi387H21bF0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916069A, serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7 Validity Not Before: Nov 3 05:57:33 2025 GMT Not After : Nov 10 05:57:33 2025 GMT Subject: CN=6908444d-57e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8c:17:c5:cd:f1:52:33:86:3e:3a:97:11:1a: 7f:c5:44:58:b0:80:d3:f7:26:25:c2:71:c8:67:58: 9b:79:2b:f7:4b:61:b9:46:13:fe:97:a0:cd:94:e2: e9:9f:52:c8:35:db:54:d2:97:f4:2c:bc:46:2b:22: 92:c8:c6:32:9f:54:e0:a9:a5:60:40:48:d1:76:35: 8e:b4:ad:8a:79:bc:32:43:6f:f1:1e:9e:5e:93:44: b7:42:d7:32:6c:82:de:a6:2d:f2:1c:4d:3c:49:7b: 5e:86:d1:ff:02:b5:11:ae:7a:21:d0:46:bd:c2:8e: 59:6b:9d:92:6a:8f:1f:41:84:c5:81:4e:c6:a0:c6: dc:92:dc:11:c2:dd:15:7f:d1:69:a6:dd:c9:67:40: 7d:4a:92:8b:12:62:87:11:73:14:e6:1b:91:60:5f: ed:a4:ec:06:c6:d8:96:6a:3b:1c:2d:df:ac:4d:ac: 20:4c:e8:d1:ed:36:2d:69:21:aa:dd:db:e1:db:5e: a0:5e:be:c8:8e:82:f5:0e:a6:71:07:90:a5:ed:89: e8:be:53:d4:6c:82:f8:46:09:10:c7:b6:eb:0c:b7: 18:02:09:d1:81:f1:25:b3:03:79:d5:ad:75:cf:d6: 25:1d:15:b6:47:55:f0:68:db:55:db:d4:cf:2d:ad: 3d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8B:C3:0E:24:2F:F7:7B:E3:6F:68:DC:77:55:CD:53:04:0C:7E:8D X509v3 Authority Key Identifier: keyid:97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e9:3a:b1:bf:4e:e3:d4:3a:4c:69:4b:53:63:75:ec:19:d6: c0:a7:bd:43:c7:33:78:fc:1a:a3:76:ff:8c:fb:65:9d:95:4d: a7:1b:b4:72:6a:81:b9:0d:b3:52:e8:f6:1d:59:ee:ec:92:2f: 47:63:d4:57:50:5e:02:a8:e8:5d:0f:51:5e:31:3a:9b:d7:2d: 46:6a:4e:ac:f8:d1:60:f1:88:90:e9:62:95:6a:af:e7:ca:98: ec:9f:b9:36:41:10:0c:15:67:54:42:86:85:d4:01:08:38:a1: 2e:a4:9a:f3:52:97:9b:a2:6f:b7:a0:cb:14:3c:6f:4b:a8:d1: 5e:8d:f4:ec:59:9d:b9:7f:e0:e7:33:fd:02:97:b8:e9:14:7d: 88:1b:ff:af:20:4d:81:f0:40:ea:07:75:3c:c0:f4:b7:4a:9f: 59:f4:4e:8e:01:0d:73:01:29:1b:db:41:b5:17:d1:19:2f:5a: ae:cc:77:8f:f7:99:2f:3d:62:11:2a:96:65:43:07:06:66:09: 15:63:ac:39:34:32:9c:a2:27:a5:93:70:93:12:e6:b7:d9:7c: f3:0c:0c:ae:6e:c4:e1:23:eb:b7:af:ca:66:dd:81:ac:a3:ba: ee:57:fc:78:b2:f6:70:5e:20:a6:8f:16:ad:c0:8b:64:0e:16: 81:66:0f:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2OUExMTAvBgNVBAUTKDk3NEI0QTU2NTQ4NkUwNDhEMEMxNzY5OEQ3MjI3Njcw Q0YzQzk5QTcwHhcNMjUxMTAzMDU1NzMzWhcNMjUxMTEwMDU1NzMzWjAYMRYwFAYD VQQDEw02OTA4NDQ0ZC01N2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4wXxc3xUjOGPjqXERp/xURYsIDT9yYlwnHIZ1ibeSv3S2G5RhP+l6DNlOLp n1LINdtU0pf0LLxGKyKSyMYyn1TgqaVgQEjRdjWOtK2KebwyQ2/xHp5ek0S3Qtcy bILepi3yHE08SXtehtH/ArURrnoh0Ea9wo5Za52Sao8fQYTFgU7GoMbcktwRwt0V f9Fppt3JZ0B9SpKLEmKHEXMU5huRYF/tpOwGxtiWajscLd+sTawgTOjR7TYtaSGq 3dvh216gXr7IjoL1DqZxB5Cl7YnovlPUbIL4RgkQx7brDLcYAgnRgfElswN51a11 z9YlHRW2R1XwaNtV29TPLa099QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiLww4k L/d7429o3HdVzVMEDH6NMB8GA1UdIwQYMBaAFJdLSlZUhuBI0MF2mNcidnDPPJmn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDY5QS8zNkQ1RDYyQzlC RjAxMUVGODFDOTAyNjdDNEY5QUUwMi9sMHRLVmxTRzRFalF3WGFZMXlKMmNNODht YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wwdEtWbFNHNEVqUXdYYVkxeUoyY004OG1hYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDY5QS8zNkQ1RDYyQzlCRjAxMUVGODFDOTAyNjdDNEY5QUUwMi9sMHRLVmxTRzRF alF3WGFZMXlKMmNNODhtYWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN6Tqxv07j1DpMaUtTY3XsGdbAp71DxzN4/Bqjdv+M+2WdlU2nG7Ry aoG5DbNS6PYdWe7ski9HY9RXUF4CqOhdD1FeMTqb1y1Gak6s+NFg8YiQ6WKVaq/n ypjsn7k2QRAMFWdUQoaF1AEIOKEupJrzUpebom+3oMsUPG9LqNFejfTsWZ25f+Dn M/0Cl7jpFH2IG/+vIE2B8EDqB3U8wPS3Sp9Z9E6OAQ1zASkb20G1F9EZL1quzHeP 95kvPWIRKpZlQwcGZgkVY6w5NDKcoielk3CTEua32XzzDAyubsThI+u3r8pm3YGs o7ruV/x4svZwXiCmjxatwItkDhaBZg8v -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:01 2025 by rpki-client