$ rpki-client -vvf rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft File: pC2IwS1kcYPHe_xK74KM8pRLnsY.mft (raw, json) Hash identifier: rXhgilyA49ztl/mvfJmQ0IWTe1wE21yAiVByb6W1TXk= Subject key identifier: 92:47:AB:45:F6:F8:06:CB:AE:8C:C8:BB:13:28:EB:F5:C0:01:08:75 Authority key identifier: A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 Certificate issuer: /CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft Manifest number: 023A Signing time: Wed 05 Nov 2025 01:55:07 +0000 Manifest this update: Wed 05 Nov 2025 01:55:07 +0000 Manifest next update: Wed 12 Nov 2025 01:55:06 +0000 Files and hashes: 1: pC2IwS1kcYPHe_xK74KM8pRLnsY.crl (hash: 4eoJs00RYZMxzuwghK5WBCls7fALCZ6nExr1ZNBe6uM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C756, serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Validity Not Before: Nov 5 01:55:07 2025 GMT Not After : Nov 12 01:55:06 2025 GMT Subject: CN=690aae7b-9b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:35:d1:fc:f5:ed:4b:8c:45:37:69:4c:b5:77: 22:91:df:c9:17:92:57:83:05:7d:0e:fc:00:14:32: ee:94:e5:ff:92:f1:ae:c1:b7:9b:a9:e2:58:21:81: 54:98:3d:2e:7e:70:32:e3:f9:2b:99:af:0c:98:52: d2:08:6c:2b:b1:e6:01:c2:28:4e:d4:a4:94:fb:d4: 74:0f:54:fb:c5:31:03:3e:da:90:b4:20:c0:d1:e7: 01:4c:da:87:75:c3:b1:9c:5a:5b:1c:2c:34:5c:84: 98:a4:98:3a:3e:18:15:f9:b0:20:75:78:db:c8:12: 1d:42:9b:b2:04:d8:71:0b:71:ea:f3:3c:b6:94:ca: 19:ab:f5:62:6e:0c:b9:5f:99:65:d3:01:b3:1a:1f: 20:93:03:07:7d:37:20:12:c8:d5:45:c5:9f:1e:00: 45:2e:05:e8:92:aa:c0:6d:fe:84:53:89:e9:60:db: 19:f0:fc:a5:7e:9a:30:77:e3:2d:88:33:84:3a:61: 25:0e:e7:65:db:e9:a4:17:18:b7:b7:97:9f:49:6b: 71:da:af:be:3a:c3:ce:0c:9d:f8:0c:c5:87:e4:a6: 39:d1:a0:2f:64:9d:9a:10:7e:2e:e5:dd:df:9a:5e: 00:42:8f:4c:91:67:e5:c1:f4:26:83:5e:16:cd:ea: bc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:47:AB:45:F6:F8:06:CB:AE:8C:C8:BB:13:28:EB:F5:C0:01:08:75 X509v3 Authority Key Identifier: keyid:A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9e:f9:2d:71:de:44:c6:91:e3:f7:d1:c1:2e:d5:1a:b7:ff: d9:02:d4:78:90:d0:b3:3d:bc:b5:df:74:df:25:f2:b0:cd:e0: e5:e4:ca:ab:9e:7b:df:6c:30:7e:e9:5d:67:c5:5c:6d:04:05: 90:08:90:60:e0:e9:59:87:82:29:c7:ba:7a:2b:ec:38:51:83: 05:d1:b4:1a:46:d7:35:19:40:31:9b:a8:14:c2:65:6e:e7:bc: c5:73:f4:4e:10:66:c2:5f:16:af:93:7e:84:2a:3b:ec:96:c3: e5:86:85:db:b3:86:a5:32:16:5b:84:32:33:d6:aa:b1:5e:5d: d1:26:eb:c6:e3:40:56:44:d4:e4:93:43:b0:1f:c7:84:6c:2f: 2b:99:37:3c:cb:d7:4d:fc:c2:d3:0c:09:8e:e6:d2:8f:4f:4c: df:5d:cb:4d:81:f8:30:fa:67:09:99:96:5e:51:41:ab:65:2d: b8:a7:96:2e:ec:24:c5:cb:64:d6:08:ad:fc:c5:a5:02:1b:ae: 2f:78:5f:9e:93:a7:cd:c0:ce:4b:61:ef:ee:c1:b2:d8:e0:c6: 4c:67:ac:1e:7b:38:fc:3e:89:47:58:5e:1e:3e:3f:f1:54:b5: 02:7f:e7:c6:4a:06:9e:2b:6d:78:b5:9f:7a:db:6b:3e:54:77: f2:ab:63:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3NTYxMTAvBgNVBAUTKEE0MkQ4OEMxMkQ2NDcxODNDNzdCRkM0QUVGODI4Q0Yy OTQ0QjlFQzYwHhcNMjUxMTA1MDE1NTA3WhcNMjUxMTEyMDE1NTA2WjAYMRYwFAYD VQQDEw02OTBhYWU3Yi05YjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjXR/PXtS4xFN2lMtXcikd/JF5JXgwV9DvwAFDLulOX/kvGuwbebqeJYIYFU mD0ufnAy4/krma8MmFLSCGwrseYBwihO1KSU+9R0D1T7xTEDPtqQtCDA0ecBTNqH dcOxnFpbHCw0XISYpJg6PhgV+bAgdXjbyBIdQpuyBNhxC3Hq8zy2lMoZq/Vibgy5 X5ll0wGzGh8gkwMHfTcgEsjVRcWfHgBFLgXokqrAbf6EU4npYNsZ8Pylfpowd+Mt iDOEOmElDudl2+mkFxi3t5efSWtx2q++OsPODJ34DMWH5KY50aAvZJ2aEH4u5d3f ml4AQo9MkWflwfQmg14Wzeq8BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJHq0X2 +AbLrozIuxMo6/XAAQh1MB8GA1UdIwQYMBaAFKQtiMEtZHGDx3v8Su+CjPKUS57G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qzc1Ni8zMzc0NTQ2RTRC NjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZUEhlX3hLNzRLTThwUkxu c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BDMkl3UzFrY1lQSGVfeEs3NEtNOHBSTG5zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qzc1Ni8zMzc0NTQ2RTRCNjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZ UEhlX3hLNzRLTThwUkxuc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/nvktcd5ExpHj99HBLtUat//ZAtR4kNCzPby133TfJfKwzeDl5Mqr nnvfbDB+6V1nxVxtBAWQCJBg4OlZh4Ipx7p6K+w4UYMF0bQaRtc1GUAxm6gUwmVu 57zFc/ROEGbCXxavk36EKjvslsPlhoXbs4alMhZbhDIz1qqxXl3RJuvG40BWRNTk k0OwH8eEbC8rmTc8y9dN/MLTDAmO5tKPT0zfXctNgfgw+mcJmZZeUUGrZS24p5Yu 7CTFy2TWCK38xaUCG64veF+ek6fNwM5LYe/uwbLY4MZMZ6weezj8PolHWF4ePj/x VLUCf+fGSgaeK214tZ9622s+VHfyq2Nn -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:55 2025 by rpki-client