$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft File: jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft (raw, json) Hash identifier: 6NoN/yne4PRzyR3XmInb4eY2qZue3ZKy0wqr2BByzDU= Subject key identifier: DB:08:2E:7A:62:3F:68:73:99:87:9F:A7:3F:8A:A7:67:1C:1F:0B:A6 Authority key identifier: 8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 Certificate issuer: /CN=A91684D0/serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft Manifest number: 022D Signing time: Wed 05 Nov 2025 02:01:39 +0000 Manifest this update: Wed 05 Nov 2025 02:01:38 +0000 Manifest next update: Wed 12 Nov 2025 02:01:38 +0000 Files and hashes: 1: jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl (hash: wh1L8W3OQ33jjkh61CbfRJapDMLFk42CpkgEungpnRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91684D0, serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48 Validity Not Before: Nov 5 02:01:38 2025 GMT Not After : Nov 12 02:01:38 2025 GMT Subject: CN=690ab002-10f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a2:a9:3a:f3:97:ed:11:3d:68:dd:8c:f7:71: 39:b6:bd:8c:58:6a:14:9e:66:f1:ef:9d:2e:56:ff: 78:68:44:08:b3:76:69:ad:79:c7:f2:da:7c:18:91: 42:57:c8:10:b6:da:6c:81:d1:1e:31:84:b7:12:fa: c9:fb:8e:f9:38:b5:92:c3:4f:0c:c1:42:88:aa:30: 8e:44:1e:da:65:1c:21:2a:1b:c4:e7:73:a1:aa:3f: 9e:ef:fe:f9:d9:59:b9:ba:50:27:96:f3:a0:62:3b: 39:f6:00:3d:63:f8:4c:66:09:f6:6e:d9:71:c0:9e: 42:4a:3f:af:14:85:89:04:58:c1:c0:48:b5:5a:9c: cc:4d:23:1b:41:3a:2e:77:c1:5c:ed:98:e4:b9:90: 9a:a2:b3:83:8b:4b:e8:43:10:26:be:6d:fa:18:c8: 3e:ec:50:51:fa:aa:88:f0:0a:05:bd:90:ae:79:56: 59:63:be:f3:3b:59:97:04:25:b8:92:cc:2d:c9:e7: 6a:f4:fa:6d:a0:4f:67:28:97:b8:6e:3c:70:51:5a: 11:ed:04:68:e7:76:e8:13:05:14:61:84:10:6b:79: ba:a4:35:a4:eb:f9:c9:cc:0f:75:2d:15:0f:23:b3: ab:b0:7e:14:7b:55:7a:3a:b2:08:1d:26:77:5e:44: 0e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:08:2E:7A:62:3F:68:73:99:87:9F:A7:3F:8A:A7:67:1C:1F:0B:A6 X509v3 Authority Key Identifier: keyid:8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:74:fa:30:e5:85:d2:65:6e:8e:0e:39:39:0f:b5:3f:0e:85: 56:17:f5:31:89:ff:42:d1:72:2e:53:d5:50:78:46:dd:be:94: 57:df:b8:f3:c7:06:79:bf:cc:0a:98:9d:4b:74:7a:62:53:1e: 81:7f:08:af:a1:df:a6:8e:83:b4:d6:5c:af:34:d7:a2:ac:5e: aa:f8:e3:66:31:b8:f8:27:8a:0d:a0:19:24:cc:af:bb:e6:ac: c6:17:98:78:71:e0:b5:2c:88:8a:da:1a:5c:9b:6d:1e:aa:ba: 1d:d8:64:b2:50:8d:c5:57:1d:27:cc:eb:d2:bf:04:2d:09:8e: 9e:79:99:f4:6e:a5:69:3a:c8:62:d5:09:6f:21:6f:50:62:db: 70:d4:c4:bd:cc:9b:36:0c:71:03:00:d3:07:3a:98:0b:6d:5b: 7a:e1:4b:c8:b2:28:b6:b6:e1:c5:51:92:94:c6:ea:bd:71:6c: d1:9c:ee:08:24:eb:c4:69:63:97:74:33:6a:35:c9:54:8f:a6: 13:f0:36:ea:1c:a0:ac:91:b8:c5:38:00:7f:f0:e9:b0:b0:a1: 7a:b2:76:10:af:3f:1a:e5:e7:68:34:9e:00:89:af:57:c5:3f: 91:cb:0a:63:e7:eb:db:1f:5f:2c:9e:8b:41:32:71:6f:94:67: e2:10:65:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0RDAxMTAvBgNVBAUTKDhDREEwODRFMjNENUI3NTA5QUEzQTkyREFDQTBCMUFE QzlEOUZCNDgwHhcNMjUxMTA1MDIwMTM4WhcNMjUxMTEyMDIwMTM4WjAYMRYwFAYD VQQDEw02OTBhYjAwMi0xMGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKKpOvOX7RE9aN2M93E5tr2MWGoUnmbx750uVv94aEQIs3ZprXnH8tp8GJFC V8gQttpsgdEeMYS3EvrJ+475OLWSw08MwUKIqjCORB7aZRwhKhvE53Ohqj+e7/75 2Vm5ulAnlvOgYjs59gA9Y/hMZgn2btlxwJ5CSj+vFIWJBFjBwEi1WpzMTSMbQTou d8Fc7ZjkuZCaorODi0voQxAmvm36GMg+7FBR+qqI8AoFvZCueVZZY77zO1mXBCW4 kswtyedq9PptoE9nKJe4bjxwUVoR7QRo53boEwUUYYQQa3m6pDWk6/nJzA91LRUP I7OrsH4Ue1V6OrIIHSZ3XkQOTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsILnpi P2hzmYefpz+Kp2ccHwumMB8GA1UdIwQYMBaAFIzaCE4j1bdQmqOpLaygsa3J2ftI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODREMC9EQ0NENThCNjVF OEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQxQ2FvNmt0cktDeHJjblot MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOb0lUaVBWdDFDYW82a3RyS0N4cmNuWi0wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODREMC9EQ0NENThCNjVFOEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9qTm9JVGlQVnQx Q2FvNmt0cktDeHJjblotMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOdPow5YXSZW6ODjk5D7U/DoVWF/Uxif9C0XIuU9VQeEbdvpRX37jz xwZ5v8wKmJ1LdHpiUx6Bfwivod+mjoO01lyvNNeirF6q+ONmMbj4J4oNoBkkzK+7 5qzGF5h4ceC1LIiK2hpcm20eqrod2GSyUI3FVx0nzOvSvwQtCY6eeZn0bqVpOshi 1QlvIW9QYttw1MS9zJs2DHEDANMHOpgLbVt64UvIsii2tuHFUZKUxuq9cWzRnO4I JOvEaWOXdDNqNclUj6YT8DbqHKCskbjFOAB/8OmwsKF6snYQrz8a5edoNJ4Aia9X xT+Rywpj5+vbH18snotBMnFvlGfiEGUf -----END CERTIFICATE-----Generated at Wed Nov 5 08:56:14 2025 by rpki-client