$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft File: AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json) Hash identifier: XrMqBcUBqs8tYnP2zmDTvbeDc9wFyLaG3HeQBH7tQzU= Subject key identifier: 08:E6:20:9E:E9:8C:5D:C9:6B:26:CC:2A:83:C2:23:00:86:1F:36:74 Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E Certificate issuer: /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Certificate serial: 34D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft Manifest number: 34D5 Signing time: Sun 02 Nov 2025 15:12:04 +0000 Manifest this update: Sun 02 Nov 2025 15:12:04 +0000 Manifest next update: Sun 09 Nov 2025 15:12:04 +0000 Files and hashes: 1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: HIW+QA+0Y2+iZHGN95cOhtRYTPSEnZMCX7teV/M39X0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13525 (0x34d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E Validity Not Before: Nov 2 15:12:04 2025 GMT Not After : Nov 9 15:12:04 2025 GMT Subject: CN=690774c4-6cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ba:ee:bb:1e:f4:e0:a0:12:70:50:51:d7:70: 92:c7:92:72:5b:9c:5d:1a:bc:8d:2a:c9:50:d7:57: 21:c5:69:9f:2b:7a:d3:17:c2:1e:52:8f:a7:d1:4f: 90:86:3d:c0:25:e8:71:dc:2c:51:d7:5e:bf:4a:f9: bc:60:0b:8c:73:c1:88:50:d6:8b:41:d0:d8:bb:86: 61:89:da:ec:81:91:2f:c0:aa:e2:cc:09:0a:db:00: 8c:f4:e3:f8:2b:92:7b:00:ad:d3:13:61:c1:f1:aa: 2a:65:e1:8a:d5:87:ac:0f:00:e7:0c:1a:86:21:46: 44:80:cb:be:e0:95:56:87:6e:61:cb:a2:a2:53:ed: 6e:be:2b:f9:e8:3d:30:ae:67:ee:98:7b:3f:91:6c: c3:3b:0f:f4:11:12:d3:c6:46:8b:07:70:4e:ec:14: c3:3f:e6:b7:e5:a8:46:a8:1c:c1:8d:31:49:64:65: c5:1d:c1:1d:68:19:ef:19:1c:ad:57:a8:ba:51:ee: de:68:84:aa:f6:c2:27:58:bc:0c:98:93:3a:2a:8d: 31:68:a9:24:0c:85:c2:1f:75:85:e5:f1:84:e6:45: 1d:1a:15:45:eb:6f:4d:be:f6:5b:81:eb:69:fe:e2: c4:83:3a:01:d4:34:36:46:78:7c:d4:bd:41:f2:3b: 64:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E6:20:9E:E9:8C:5D:C9:6B:26:CC:2A:83:C2:23:00:86:1F:36:74 X509v3 Authority Key Identifier: keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:79:cb:01:60:02:6e:c5:7c:7e:57:fb:fa:0b:3f:cf:38:43: a9:95:aa:73:1b:a3:f5:ea:e2:8d:f3:82:d7:bd:a8:1f:27:7d: f9:36:1f:13:d8:67:06:3f:da:7c:d2:e1:c0:d8:00:46:18:c4: 02:ee:b3:ea:3d:ab:6c:2b:b5:18:b3:8a:92:5f:38:61:f4:9b: 85:be:98:a6:ec:56:85:28:63:16:89:20:5a:1f:9b:b3:7b:d2: 08:d6:37:07:7c:6b:9a:7d:1b:17:a6:99:3f:2d:99:bc:03:29: 69:b2:c8:14:7a:4b:8d:29:20:e6:4d:49:df:0e:e9:c9:d6:f1: ec:f4:ca:c1:c0:08:75:f1:74:7c:d2:d6:cb:c9:88:b7:3c:52: d9:b1:0b:6d:8d:35:61:fd:fd:f1:5b:0f:67:6f:1a:d3:72:92: fe:1f:d3:61:f8:76:90:9f:6e:5f:1f:d9:aa:74:ec:59:21:89: c5:1a:e6:79:0b:cb:5e:79:23:d4:e6:80:89:18:e4:b5:04:1d: 3e:39:6e:3d:a0:2c:5a:5d:f5:8f:3e:4f:0a:f6:9c:1b:e7:d1: e9:9b:ae:94:e8:28:e5:93:22:4f:a1:59:e6:87:60:09:ad:8b: a6:a1:7a:dc:e0:54:2c:96:6d:2c:0e:70:16:bf:e7:0b:9b:02: 88:ee:57:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FCNUUxMTAvBgNVBAUTKDAxMUQ2MUIyMzNBREYzMENEMjQ3NTYyMTI0QkI3MThC QzYzQUQ2NEUwHhcNMjUxMTAyMTUxMjA0WhcNMjUxMTA5MTUxMjA0WjAYMRYwFAYD VQQDEw02OTA3NzRjNC02Y2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLruux704KAScFBR13CSx5JyW5xdGryNKslQ11chxWmfK3rTF8IeUo+n0U+Q hj3AJehx3CxR116/Svm8YAuMc8GIUNaLQdDYu4ZhidrsgZEvwKrizAkK2wCM9OP4 K5J7AK3TE2HB8aoqZeGK1YesDwDnDBqGIUZEgMu+4JVWh25hy6KiU+1uviv56D0w rmfumHs/kWzDOw/0ERLTxkaLB3BO7BTDP+a35ahGqBzBjTFJZGXFHcEdaBnvGRyt V6i6Ue7eaISq9sInWLwMmJM6Ko0xaKkkDIXCH3WF5fGE5kUdGhVF629NvvZbgetp /uLEgzoB1DQ2Rnh81L1B8jtkgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjmIJ7p jF3JaybMKoPCIwCGHzZ0MB8GA1UdIwQYMBaAFAEdYbIzrfMM0kdWISS7cYvGOtZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI1RS9GNTY1QUREMjFE QTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3elNSMVloSkx0eGk4WTYx azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FSMWhzak90OHd6U1IxWWhKTHR4aThZNjFrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUI1RS9GNTY1QUREMjFEQTUxMUUyODNEM0VGOUMwOEIwMkNEMi9BUjFoc2pPdDh3 elNSMVloSkx0eGk4WTYxazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOecsBYAJuxXx+V/v6Cz/POEOplapzG6P16uKN84LXvagfJ335Nh8T 2GcGP9p80uHA2ABGGMQC7rPqPatsK7UYs4qSXzhh9JuFvpim7FaFKGMWiSBaH5uz e9II1jcHfGuafRsXppk/LZm8AylpssgUekuNKSDmTUnfDunJ1vHs9MrBwAh18XR8 0tbLyYi3PFLZsQttjTVh/f3xWw9nbxrTcpL+H9Nh+HaQn25fH9mqdOxZIYnFGuZ5 C8teeSPU5oCJGOS1BB0+OW49oCxaXfWPPk8K9pwb59Hpm66U6CjlkyJPoVnmh2AJ rYumoXrc4FQslm0sDnAWv+cLmwKI7ld8 -----END CERTIFICATE-----Generated at Tue Nov 4 12:40:03 2025 by rpki-client