$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft File: iYrzg32E84lHqDXAY8hI1wGI7IY.mft (raw, json) Hash identifier: DKQB+jfH38ilm0EoRsciimgDWRTb4hwe69ofr+34Vo8= Subject key identifier: 79:B9:7D:91:E7:FA:FA:8A:94:98:66:3E:C6:F2:8B:91:13:1E:F7:8D Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 Certificate issuer: /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Certificate serial: 0827 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft Manifest number: 094F Signing time: Sun 02 Nov 2025 20:52:02 +0000 Manifest this update: Sun 02 Nov 2025 20:52:01 +0000 Manifest next update: Sun 09 Nov 2025 20:52:01 +0000 Files and hashes: 1: iYrzg32E84lHqDXAY8hI1wGI7IY.crl (hash: S241u//2XPF5d+1BMcK+TsjYBl5tIgH7+h/yucnwUI0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2087 (0x827) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E9F4, serialNumber=898AF3837D84F38947A835C063C848D70188EC86 Validity Not Before: Nov 2 20:52:01 2025 GMT Not After : Nov 9 20:52:01 2025 GMT Subject: CN=6907c472-513e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5b:7e:29:6e:c9:d8:e5:f8:e7:33:0f:ad:f8: 59:39:8f:12:f3:26:dd:d0:88:20:fe:f6:08:87:8a: ce:f2:4e:d5:71:27:6d:78:2c:c6:61:da:2b:c8:10: 84:11:80:37:96:38:cd:dd:90:e4:d3:eb:07:77:ba: 59:41:99:d1:02:63:01:3e:0a:34:70:17:19:d0:66: 61:3b:77:d9:a8:5a:db:23:8c:0c:e1:e2:a8:14:68: e7:33:99:47:4d:7c:46:31:71:ff:cd:56:45:82:27: d0:a8:10:ec:24:de:61:d9:e7:7b:56:3b:1d:a6:5c: f7:db:a6:7d:2a:ca:91:f6:68:ae:5b:67:c8:20:c8: a7:1e:91:70:36:5d:ae:7a:50:a4:de:99:b2:b9:4a: 9b:53:52:ed:98:0b:d4:71:85:2e:34:d3:bd:a8:bf: 59:36:7a:3e:02:dd:b8:ca:84:c6:09:e6:91:3e:25: fa:9b:a3:88:a3:6f:ad:2f:03:f8:fa:7e:86:55:bc: f1:9a:fe:d9:ee:e3:3d:b4:64:99:91:9b:26:4f:ad: 67:89:92:ad:6c:66:79:80:ab:04:b6:ef:47:57:82: 26:56:55:8c:80:4b:2f:b8:f6:29:23:d8:75:a8:0d: 8b:88:b7:5b:5a:ee:7e:7f:d0:eb:c1:75:a5:1c:1d: 0d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B9:7D:91:E7:FA:FA:8A:94:98:66:3E:C6:F2:8B:91:13:1E:F7:8D X509v3 Authority Key Identifier: keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1a:d1:c3:4b:64:02:dc:db:52:c7:57:6e:d6:03:7f:5a:c3: c8:17:c8:d2:f8:e1:7a:38:b4:96:7d:8b:f9:c1:b5:b6:32:4e: 3f:ca:68:4d:ac:4e:4d:37:8a:75:fe:20:4e:82:3f:30:57:38: ee:3b:98:1d:a6:0b:98:d9:b0:db:bd:c8:66:c2:3c:ab:b2:0b: d1:bf:33:43:db:0b:bc:a5:3b:a6:d6:b7:33:a2:22:b4:00:15: 92:ba:d8:67:93:c7:de:0e:03:ff:98:18:5f:17:4a:c8:0c:cc: c2:2b:21:04:17:3a:ed:a9:d6:59:f9:1d:b5:0d:66:45:e9:85: 17:81:bd:9b:b5:fe:28:2c:c6:fd:63:d7:bb:7e:48:ef:35:0f: c5:fc:31:a4:55:b0:42:60:2c:93:20:37:dd:0c:63:44:8d:69: fe:e8:c7:14:84:60:97:b5:25:b5:76:32:32:1d:18:05:aa:09: 5c:66:38:23:3d:62:33:16:4d:39:e6:cf:79:73:63:5d:3e:1f: 4d:e3:2f:15:5e:4b:94:fd:12:a8:8c:f5:86:d8:ab:72:2e:ab: c8:76:1a:ee:7c:a1:f2:aa:24:c9:df:20:63:c6:64:95:e5:96: a4:87:72:70:b9:dc:86:84:9f:2c:cf:dc:23:de:e6:37:25:1a: 18:50:47:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU5RjQxMTAvBgNVBAUTKDg5OEFGMzgzN0Q4NEYzODk0N0E4MzVDMDYzQzg0OEQ3 MDE4OEVDODYwHhcNMjUxMTAyMjA1MjAxWhcNMjUxMTA5MjA1MjAxWjAYMRYwFAYD VQQDEw02OTA3YzQ3Mi01MTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Ft+KW7J2OX45zMPrfhZOY8S8ybd0Igg/vYIh4rO8k7VcSdteCzGYdoryBCE EYA3ljjN3ZDk0+sHd7pZQZnRAmMBPgo0cBcZ0GZhO3fZqFrbI4wM4eKoFGjnM5lH TXxGMXH/zVZFgifQqBDsJN5h2ed7Vjsdplz326Z9KsqR9miuW2fIIMinHpFwNl2u elCk3pmyuUqbU1LtmAvUcYUuNNO9qL9ZNno+At24yoTGCeaRPiX6m6OIo2+tLwP4 +n6GVbzxmv7Z7uM9tGSZkZsmT61niZKtbGZ5gKsEtu9HV4ImVlWMgEsvuPYpI9h1 qA2LiLdbWu5+f9DrwXWlHB0NLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHm5fZHn +vqKlJhmPsbyi5ETHveNMB8GA1UdIwQYMBaAFImK84N9hPOJR6g1wGPISNcBiOyG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2 OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0bEhxRFhBWThoSTF3R0k3 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lZcnpnMzJFODRsSHFEWEFZOGhJMXdHSTdJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0 bEhxRFhBWThoSTF3R0k3SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLGtHDS2QC3NtSx1du1gN/WsPIF8jS+OF6OLSWfYv5wbW2Mk4/ymhN rE5NN4p1/iBOgj8wVzjuO5gdpguY2bDbvchmwjyrsgvRvzND2wu8pTum1rczoiK0 ABWSuthnk8feDgP/mBhfF0rIDMzCKyEEFzrtqdZZ+R21DWZF6YUXgb2btf4oLMb9 Y9e7fkjvNQ/F/DGkVbBCYCyTIDfdDGNEjWn+6McUhGCXtSW1djIyHRgFqglcZjgj PWIzFk055s95c2NdPh9N4y8VXkuU/RKojPWG2KtyLqvIdhrufKHyqiTJ3yBjxmSV 5Zakh3JwudyGhJ8sz9wj3uY3JRoYUEeJ -----END CERTIFICATE-----Generated at Tue Nov 4 08:20:07 2025 by rpki-client