$ rpki-client -vvf rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft File: F_XLSRgEUqiWf5wPZjdatwnQ52g.mft (raw, json) Hash identifier: PhuzFMVasRsRkw7UvuabxGTF1eojczLweilt1Jxv0+I= Subject key identifier: 6C:42:14:01:CB:9C:58:40:9B:C4:AF:8C:0D:67:A4:97:BE:5E:FF:7D Authority key identifier: 17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68 Certificate issuer: /CN=A917FD40/serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768 Certificate serial: 0552 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft Manifest number: 05F5 Signing time: Tue 04 Nov 2025 23:28:58 +0000 Manifest this update: Tue 04 Nov 2025 23:28:58 +0000 Manifest next update: Tue 11 Nov 2025 23:28:58 +0000 Files and hashes: 1: F_XLSRgEUqiWf5wPZjdatwnQ52g.crl (hash: WV61BpXUzpeWSlOsWUXjshRRe+qff5Gyosba4anotE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1362 (0x552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FD40, serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768 Validity Not Before: Nov 4 23:28:58 2025 GMT Not After : Nov 11 23:28:58 2025 GMT Subject: CN=690a8c3a-02d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fa:df:3e:fc:c4:d0:07:b6:4b:03:34:0c:bc: 45:6f:e0:e0:2d:70:c5:d0:b0:30:42:6c:5b:17:ff: 98:ac:15:35:b5:3c:24:f5:c8:e3:f3:4c:2c:7d:74: 18:1e:97:22:e9:38:6b:8a:06:75:1b:54:7a:77:f5: 16:79:29:3e:cc:86:a2:84:2f:1c:fe:d8:48:20:ae: 5e:f1:3e:83:d7:26:89:71:a1:e4:2d:59:91:3e:9d: 23:c8:13:ec:c4:b8:b4:85:de:15:0e:65:f6:c8:3a: 03:be:66:17:1a:da:c2:79:47:98:75:0b:5e:79:b1: 2b:37:9d:ed:95:67:a8:11:37:64:e5:81:4c:3c:31: 35:16:36:4c:04:f8:6a:84:ef:66:bf:d9:57:9f:95: 0c:80:7c:c5:49:6d:47:89:5e:3a:08:09:5c:be:12: 14:61:0b:30:fc:c1:bf:8c:55:59:d4:24:0f:5e:72: 14:02:46:0f:81:03:04:07:b9:97:f8:8c:40:7a:62: 68:a2:61:2a:d8:7d:78:16:70:13:b2:1d:d0:06:dc: 46:e0:91:82:c2:90:1b:e9:d0:d6:ed:15:9b:56:11: 72:cb:c9:6f:4f:26:33:52:c5:43:ec:34:e2:d5:d0: cc:8d:77:c1:79:38:03:3a:ab:cb:cc:4a:6f:d5:c1: 13:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:42:14:01:CB:9C:58:40:9B:C4:AF:8C:0D:67:A4:97:BE:5E:FF:7D X509v3 Authority Key Identifier: keyid:17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:f3:5f:43:2e:52:3e:df:35:2a:ec:3b:b3:cf:48:99:b1:47: dc:d8:e5:aa:c3:b0:2b:95:87:1e:25:08:bb:42:2c:88:b5:8f: a2:29:68:26:92:88:4f:60:75:87:41:c0:04:81:24:19:19:92: b5:89:a4:9a:2f:a6:8d:5b:fe:86:1e:b9:77:ed:0b:78:e5:f8: 25:e1:fa:fa:1b:7b:6b:3b:fb:d1:e2:ca:b0:b9:a7:c9:8d:f4: 30:fc:5c:4d:4d:98:f0:cb:fc:51:84:27:18:08:8f:d7:a8:4e: d9:9c:c7:8b:ab:bd:59:d5:d5:b6:ef:44:f9:66:da:07:27:7d: 13:f6:ce:96:03:33:6a:2a:a1:a1:d5:de:b2:3d:4e:b3:1e:86: 9c:18:f1:8a:f7:89:4e:5f:33:15:6e:b2:c0:ba:34:04:76:f6: d0:f9:72:6f:af:b0:e0:b9:36:8a:ec:40:4b:7a:34:2c:87:34: b9:8b:8d:60:ef:b4:07:0d:4c:b8:76:a8:1d:06:dc:52:81:7b: a6:1d:1f:da:0a:14:3e:93:c5:0c:df:da:0f:e1:ff:c1:a8:26: 78:c0:1b:1a:6f:39:f8:2c:21:36:46:ba:0a:d2:c9:90:96:e2: 20:ae:af:3c:4c:78:c0:fc:31:0e:0e:95:d0:34:0e:ff:b1:e6: eb:82:61:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZENDAxMTAvBgNVBAUTKDE3RjVDQjQ5MTgwNDUyQTg5NjdGOUMwRjY2Mzc1QUI3 MDlEMEU3NjgwHhcNMjUxMTA0MjMyODU4WhcNMjUxMTExMjMyODU4WjAYMRYwFAYD VQQDEw02OTBhOGMzYS0wMmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfrfPvzE0Ae2SwM0DLxFb+DgLXDF0LAwQmxbF/+YrBU1tTwk9cjj80wsfXQY Hpci6ThrigZ1G1R6d/UWeSk+zIaihC8c/thIIK5e8T6D1yaJcaHkLVmRPp0jyBPs xLi0hd4VDmX2yDoDvmYXGtrCeUeYdQteebErN53tlWeoETdk5YFMPDE1FjZMBPhq hO9mv9lXn5UMgHzFSW1HiV46CAlcvhIUYQsw/MG/jFVZ1CQPXnIUAkYPgQMEB7mX +IxAemJoomEq2H14FnATsh3QBtxG4JGCwpAb6dDW7RWbVhFyy8lvTyYzUsVD7DTi 1dDMjXfBeTgDOqvLzEpv1cETHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxCFAHL nFhAm8SvjA1npJe+Xv99MB8GA1UdIwQYMBaAFBf1y0kYBFKoln+cD2Y3WrcJ0Odo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkQ0MC9GQzIxOTU1RTBC RDYxMUVDOEY5OUQwNjNDNEY5QUUwMi9GX1hMU1JnRVVxaVdmNXdQWmpkYXR3blE1 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfWExTUmdFVXFpV2Y1d1BaamRhdHduUTUyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkQ0MC9GQzIxOTU1RTBCRDYxMUVDOEY5OUQwNjNDNEY5QUUwMi9GX1hMU1JnRVVx aVdmNXdQWmpkYXR3blE1MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX819DLlI+3zUq7Duzz0iZsUfc2OWqw7ArlYceJQi7QiyItY+iKWgm kohPYHWHQcAEgSQZGZK1iaSaL6aNW/6GHrl37Qt45fgl4fr6G3trO/vR4sqwuafJ jfQw/FxNTZjwy/xRhCcYCI/XqE7ZnMeLq71Z1dW270T5ZtoHJ30T9s6WAzNqKqGh 1d6yPU6zHoacGPGK94lOXzMVbrLAujQEdvbQ+XJvr7DguTaK7EBLejQshzS5i41g 77QHDUy4dqgdBtxSgXumHR/aChQ+k8UM39oP4f/BqCZ4wBsabzn4LCE2RroK0smQ luIgrq88THjA/DEODpXQNA7/sebrgmEt -----END CERTIFICATE-----Generated at Wed Nov 5 11:36:51 2025 by rpki-client