$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft File: UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft (raw, json) Hash identifier: Dt6aLEgvQI77uifLtkt1fRrtjVfL8zJLm3hYBawcRGs= Subject key identifier: 28:D7:89:DA:61:B9:6A:BE:DB:53:9F:15:7B:5B:6A:4D:54:FD:09:45 Authority key identifier: 50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A Certificate issuer: /CN=A916ED18/serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Certificate serial: 197B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft Manifest number: 197B Signing time: Tue 04 Nov 2025 16:29:22 +0000 Manifest this update: Tue 04 Nov 2025 16:29:21 +0000 Manifest next update: Tue 11 Nov 2025 16:29:21 +0000 Files and hashes: 1: UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl (hash: BJCreQlJ1RQRHSODngjNcY46BG3uj0SgWYl0ZSzYOl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6523 (0x197b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18, serialNumber=503D2765113CB6D13B986FBB4CB79FF18CAB775A Validity Not Before: Nov 4 16:29:21 2025 GMT Not After : Nov 11 16:29:21 2025 GMT Subject: CN=690a29e2-cde6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4c:78:61:09:99:30:75:4e:3c:1b:be:ef:61: ca:c2:fc:71:64:7e:b6:f2:4d:5d:3d:cf:86:e8:67: b2:99:3d:de:8f:e8:2b:1f:2d:16:a8:ff:ea:05:75: 9e:52:e8:74:21:c1:11:91:12:1e:bc:28:39:48:d6: ec:26:13:df:2e:ab:71:df:73:8a:85:3b:77:6b:72: 21:16:cb:a4:85:20:b5:82:3f:8f:dd:af:1b:4c:d8: 88:bb:ed:76:7b:4a:b3:23:3a:43:4d:bd:2b:ff:39: bd:21:d5:d8:94:dc:9f:a0:bb:8c:c8:6f:af:bc:69: 6d:af:c0:39:d2:56:3f:28:b4:38:2a:16:25:85:65: 25:d1:15:bf:95:38:5d:7d:eb:02:d1:c0:cb:a9:b9: 99:c9:4f:34:0b:2a:a3:e2:d7:4c:4d:21:63:d4:6d: 21:16:4a:cc:54:3a:8a:b7:c4:3e:96:84:f9:47:34: 54:8a:ac:31:f5:48:4d:e9:23:6b:45:fe:cf:14:61: fa:88:fc:7b:ae:5e:ae:b7:cc:7f:61:bd:a7:86:a7: 80:f2:92:97:3e:d4:c0:99:8d:96:9b:da:e9:32:df: 2b:72:6b:08:f5:af:b7:a3:c1:49:38:47:ed:dc:e8: 23:ae:68:b6:2b:98:de:4a:c0:a4:0f:8c:6f:9c:0a: 02:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D7:89:DA:61:B9:6A:BE:DB:53:9F:15:7B:5B:6A:4D:54:FD:09:45 X509v3 Authority Key Identifier: keyid:50:3D:27:65:11:3C:B6:D1:3B:98:6F:BB:4C:B7:9F:F1:8C:AB:77:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UD0nZRE8ttE7mG-7TLef8Yyrd1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/F727FE9E7AF811E7898A6F2EC4F9AE02/UD0nZRE8ttE7mG-7TLef8Yyrd1o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:d9:f8:9c:5f:f0:82:c6:12:00:3d:90:f8:a3:86:f3:13:98: ba:2f:71:a7:f1:4a:62:a8:8c:ec:fa:62:6e:a4:a0:0d:66:40: 21:03:4f:2f:14:b3:e0:be:f5:76:c8:66:6c:aa:86:48:37:dc: 09:4c:1c:b3:28:d3:53:06:91:6c:8f:65:e9:b4:a7:6a:9a:19: 34:4d:ed:40:ed:7d:c5:c7:9d:9e:7a:51:e5:41:de:04:f9:49: ac:5b:a2:bc:0c:4e:73:a3:f4:27:40:e7:91:50:26:bf:3f:2f: 87:7a:ca:48:d0:70:97:00:b5:2a:34:db:54:f5:42:73:8a:76: 39:d8:c6:42:1d:72:fb:3a:e9:cc:df:84:0b:01:16:91:ad:91: 83:a4:a9:18:77:ee:23:17:2d:30:e3:ce:9b:96:16:19:a0:a1: 77:f8:dd:c2:8f:d6:8a:b9:10:c4:6c:6d:4c:84:6d:f9:42:95: eb:0e:80:f1:02:73:ce:21:84:85:9f:3a:66:27:6b:5c:f2:e0: 32:ea:50:d6:46:44:c7:85:00:1d:65:8d:6e:c1:ea:7e:d1:03: 12:43:f6:5a:6b:d4:eb:cd:86:27:da:4f:a1:e5:ad:f4:54:f1: c8:8e:e5:51:c6:44:ee:25:ae:48:33:bd:e0:a7:c8:b7:e5:98: e2:57:0e:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDUwM0QyNzY1MTEzQ0I2RDEzQjk4NkZCQjRDQjc5RkYx OENBQjc3NUEwHhcNMjUxMTA0MTYyOTIxWhcNMjUxMTExMTYyOTIxWjAYMRYwFAYD VQQDEw02OTBhMjllMi1jZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEx4YQmZMHVOPBu+72HKwvxxZH628k1dPc+G6GeymT3ej+grHy0WqP/qBXWe Uuh0IcERkRIevCg5SNbsJhPfLqtx33OKhTt3a3IhFsukhSC1gj+P3a8bTNiIu+12 e0qzIzpDTb0r/zm9IdXYlNyfoLuMyG+vvGltr8A50lY/KLQ4KhYlhWUl0RW/lThd fesC0cDLqbmZyU80Cyqj4tdMTSFj1G0hFkrMVDqKt8Q+loT5RzRUiqwx9UhN6SNr Rf7PFGH6iPx7rl6ut8x/Yb2nhqeA8pKXPtTAmY2Wm9rpMt8rcmsI9a+3o8FJOEft 3Ogjrmi2K5jeSsCkD4xvnAoCzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCjXidph uWq+21OfFXtbak1U/QlFMB8GA1UdIwQYMBaAFFA9J2URPLbRO5hvu0y3n/GMq3da MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GNzI3RkU5RTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0RTdtRy03VExlZjhZeXJk MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1VEMG5aUkU4dHRFN21HLTdUTGVmOFl5cmQxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GNzI3RkU5RTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9VRDBuWlJFOHR0 RTdtRy03VExlZjhZeXJkMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo2ficX/CCxhIAPZD4o4bzE5i6L3Gn8UpiqIzs+mJupKANZkAhA08v FLPgvvV2yGZsqoZIN9wJTByzKNNTBpFsj2XptKdqmhk0Te1A7X3Fx52eelHlQd4E +UmsW6K8DE5zo/QnQOeRUCa/Py+HespI0HCXALUqNNtU9UJzinY52MZCHXL7OunM 34QLARaRrZGDpKkYd+4jFy0w486blhYZoKF3+N3Cj9aKuRDEbG1MhG35QpXrDoDx AnPOIYSFnzpmJ2tc8uAy6lDWRkTHhQAdZY1uwep+0QMSQ/Zaa9TrzYYn2k+h5a30 VPHIjuVRxkTuJa5IM73gp8i35ZjiVw6D -----END CERTIFICATE-----Generated at Tue Nov 4 21:18:42 2025 by rpki-client