$ rpki-client -vvf rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft File: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft (raw, json) Hash identifier: retR+lYcnKRt6Z7c1MyRms3352OFVgkV8nJf8I+0b10= Subject key identifier: 04:20:47:ED:74:5C:A8:48:9A:D2:A8:AC:9A:2A:1E:BC:BF:82:9D:42 Authority key identifier: B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 Certificate issuer: /CN=A916988B/serialNumber=B58368616439C750D2C696643952ED4F15036594 Certificate serial: 0692 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft Manifest number: 0692 Signing time: Tue 04 Nov 2025 22:15:29 +0000 Manifest this update: Tue 04 Nov 2025 22:15:28 +0000 Manifest next update: Tue 11 Nov 2025 22:15:28 +0000 Files and hashes: 1: tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl (hash: 1x1e2Yf2l6uYXQ5KJWtAImTQ8X5vBRMj+B5f+08UBkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1682 (0x692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916988B, serialNumber=B58368616439C750D2C696643952ED4F15036594 Validity Not Before: Nov 4 22:15:28 2025 GMT Not After : Nov 11 22:15:28 2025 GMT Subject: CN=690a7b00-8b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d5:47:b5:db:4f:31:8c:14:0f:1b:50:be:3f: a2:7c:a4:11:9c:6e:85:bf:f7:4c:8f:40:db:e9:56: 63:05:56:22:81:c0:c1:bb:d1:03:8a:ae:b8:b6:40: 05:df:e8:da:af:66:2f:17:cb:1f:8c:18:44:6c:a4: 37:ac:c8:2f:4f:34:66:52:4c:90:28:d2:54:30:ae: a9:70:4d:01:ab:60:0c:b4:33:22:71:35:3d:5e:15: 49:f2:12:3c:d2:5a:8b:ab:62:d1:9e:e2:3d:46:a0: f0:e4:38:62:da:ac:a7:1e:ad:07:7d:7d:02:3e:28: 66:76:b7:b6:83:fd:66:c3:f3:74:dd:3c:33:af:02: 23:25:2b:d4:56:73:dc:fb:0c:ec:31:2c:3d:2f:01: a7:4f:be:7e:75:94:47:b6:f1:77:b6:43:e5:3a:61: 56:c8:fd:73:9d:86:de:61:2a:6a:4e:7a:1a:24:46: 63:a4:01:27:83:1c:21:ce:02:b0:d7:54:8b:67:65: 03:18:d8:5b:bd:85:4b:c1:a3:a3:5e:f8:ac:9f:53: 85:c5:17:13:88:2c:e5:86:6f:c9:85:18:86:96:68: 68:37:3a:46:99:94:e7:71:08:0c:b8:42:43:72:66: b9:67:6c:4d:1d:cf:f8:43:af:74:a0:12:eb:e9:0e: 77:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:20:47:ED:74:5C:A8:48:9A:D2:A8:AC:9A:2A:1E:BC:BF:82:9D:42 X509v3 Authority Key Identifier: keyid:B5:83:68:61:64:39:C7:50:D2:C6:96:64:39:52:ED:4F:15:03:65:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916988B/467EE69E8D6D11EB9840E05FC4F9AE02/tYNoYWQ5x1DSxpZkOVLtTxUDZZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:10:ab:00:93:b7:6a:89:22:8b:24:99:5e:5d:db:2d:b1:f3: 89:36:4f:da:16:83:5f:f2:3a:64:71:8b:ce:fc:76:0e:0f:31: e5:c8:88:d2:ca:d2:55:4b:fd:cc:a8:15:2c:cd:01:f2:1f:eb: e9:0f:59:fd:1d:8c:f4:42:09:45:de:1b:1e:2a:10:11:89:52: 27:a0:13:6f:51:16:d1:08:24:71:7f:d8:5a:cf:67:28:cd:65: 1a:ba:12:59:87:da:73:f7:5c:15:30:55:07:3a:54:9f:78:2b: b8:f3:75:58:22:34:7f:ee:4d:38:4d:39:ed:5b:63:36:3d:bd: 47:3d:13:54:90:40:dc:87:d0:8a:f8:65:85:50:ff:93:41:8d: 4b:87:79:68:1c:74:29:e7:9a:1d:3d:41:1c:e9:9a:51:5e:6a: 97:71:59:23:5e:02:3a:4d:54:ba:27:fa:17:7b:c4:06:4c:e7: 87:6d:16:de:37:22:6c:b6:25:7c:fa:9e:89:c8:26:87:36:95: ca:bc:80:94:b0:d5:65:65:7d:d1:4e:16:1b:12:ae:48:4f:c9: 48:0e:3d:ae:12:1d:a7:e1:ac:f1:86:7f:29:7b:12:9c:27:00: 36:a1:52:84:62:c2:36:2d:19:e4:65:97:76:85:1b:ac:d8:5c: 12:d8:4c:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4OEIxMTAvBgNVBAUTKEI1ODM2ODYxNjQzOUM3NTBEMkM2OTY2NDM5NTJFRDRG MTUwMzY1OTQwHhcNMjUxMTA0MjIxNTI4WhcNMjUxMTExMjIxNTI4WjAYMRYwFAYD VQQDEw02OTBhN2IwMC04YjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttVHtdtPMYwUDxtQvj+ifKQRnG6Fv/dMj0Db6VZjBVYigcDBu9EDiq64tkAF 3+jar2YvF8sfjBhEbKQ3rMgvTzRmUkyQKNJUMK6pcE0Bq2AMtDMicTU9XhVJ8hI8 0lqLq2LRnuI9RqDw5Dhi2qynHq0HfX0CPihmdre2g/1mw/N03TwzrwIjJSvUVnPc +wzsMSw9LwGnT75+dZRHtvF3tkPlOmFWyP1znYbeYSpqTnoaJEZjpAEngxwhzgKw 11SLZ2UDGNhbvYVLwaOjXvisn1OFxRcTiCzlhm/JhRiGlmhoNzpGmZTncQgMuEJD cma5Z2xNHc/4Q690oBLr6Q53+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQgR+10 XKhImtKorJoqHry/gp1CMB8GA1UdIwQYMBaAFLWDaGFkOcdQ0saWZDlS7U8VA2WU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTg4Qi80NjdFRTY5RThE NkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgxRFN4cFprT1ZMdFR4VURa WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RZTm9ZV1E1eDFEU3hwWmtPVkx0VHhVRFpaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTg4Qi80NjdFRTY5RThENkQxMUVCOTg0MEUwNUZDNEY5QUUwMi90WU5vWVdRNXgx RFN4cFprT1ZMdFR4VURaWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmEKsAk7dqiSKLJJleXdstsfOJNk/aFoNf8jpkcYvO/HYODzHlyIjS ytJVS/3MqBUszQHyH+vpD1n9HYz0QglF3hseKhARiVInoBNvURbRCCRxf9haz2co zWUauhJZh9pz91wVMFUHOlSfeCu483VYIjR/7k04TTntW2M2Pb1HPRNUkEDch9CK +GWFUP+TQY1Lh3loHHQp55odPUEc6ZpRXmqXcVkjXgI6TVS6J/oXe8QGTOeHbRbe NyJstiV8+p6JyCaHNpXKvICUsNVlZX3RThYbEq5IT8lIDj2uEh2n4azxhn8pexKc JwA2oVKEYsI2LRnkZZd2hRus2FwS2ExQ -----END CERTIFICATE-----Generated at Wed Nov 5 04:48:14 2025 by rpki-client