$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft File: CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft (raw, json) Hash identifier: NUa//GgFRslRCVXwfesR6DtnUKzeMSvKHpnEGXgIzIA= Subject key identifier: F1:4E:74:C2:6D:A9:70:7A:F2:65:E6:5F:73:C2:6B:B0:61:CB:FE:01 Authority key identifier: 0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D Certificate issuer: /CN=A9182FE1/serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Certificate serial: 0BFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft Manifest number: 0BF7 Signing time: Sun 02 Nov 2025 18:49:14 +0000 Manifest this update: Sun 02 Nov 2025 18:49:14 +0000 Manifest next update: Sun 09 Nov 2025 18:49:14 +0000 Files and hashes: 1: CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl (hash: T1f+klnt50EMy2730PI79Ab/jGsnSMSGSiEJpWggHtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3068 (0xbfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FE1, serialNumber=0A070D8E3A15FD5ED8E9F79F170C7CFBA69E443D Validity Not Before: Nov 2 18:49:14 2025 GMT Not After : Nov 9 18:49:14 2025 GMT Subject: CN=6907a7aa-dad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c9:cf:bd:23:e3:9c:32:d8:6f:e5:d4:01:cc: cd:5c:0b:fe:ba:e1:7a:b0:0d:c3:73:ab:48:6c:a4: 4c:e1:b4:72:15:14:57:12:79:ef:6c:35:59:0c:f1: 1b:10:d1:22:97:14:ef:db:9e:c6:3d:b7:15:bd:50: 44:73:20:71:09:45:70:53:50:e9:37:50:29:89:0e: 3d:9d:70:3c:e5:c2:2c:28:5c:c6:a4:de:f7:85:cc: 52:fc:53:7e:28:16:fe:c7:39:fa:d3:ca:87:bf:ce: 3e:95:14:3a:53:84:75:12:d7:c2:f1:75:49:f2:70: bf:0e:6b:58:26:98:d3:e3:38:cc:01:86:c7:1e:fc: 95:08:06:85:73:8f:e8:1e:35:c6:77:2f:6e:0e:78: 2b:bc:dd:60:99:be:f4:92:93:13:49:8e:ee:c6:3c: 09:9d:db:35:64:e9:1a:24:a8:fa:81:8a:95:5d:09: b9:f3:1b:f4:48:b4:94:6b:ec:0b:00:d0:1a:73:7c: 43:33:0c:6b:e2:dc:cf:28:b0:76:e4:97:b0:b2:ca: c9:05:6a:cf:4b:9c:13:fa:b8:ce:14:d4:ff:d9:c0: 99:37:e1:20:e6:3d:08:46:fb:e4:39:cf:74:bd:8f: 78:51:7c:a2:40:a6:ed:a9:59:a9:a1:fa:6e:a0:83: 54:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4E:74:C2:6D:A9:70:7A:F2:65:E6:5F:73:C2:6B:B0:61:CB:FE:01 X509v3 Authority Key Identifier: keyid:0A:07:0D:8E:3A:15:FD:5E:D8:E9:F7:9F:17:0C:7C:FB:A6:9E:44:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgcNjjoV_V7Y6fefFwx8-6aeRD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FE1/0375AE6A248111EAB59B5426C4F9AE02/CgcNjjoV_V7Y6fefFwx8-6aeRD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:c3:b2:76:9b:d3:ee:44:2e:fb:20:08:3a:01:d0:8e:0f:33: e0:8a:22:71:2f:e4:67:2f:bd:55:c0:62:c8:a6:aa:47:74:9a: 7d:9b:0e:98:7e:53:00:75:05:a4:72:4e:5f:b9:dc:3a:06:e1: 3a:8d:13:fb:87:43:5c:fe:9c:c1:52:7d:dc:c8:5c:d2:4b:73: ed:e7:bc:4a:ef:0d:ee:4d:4e:1e:d1:bb:d6:90:07:5a:d9:d4: 16:8a:89:57:e7:c1:9f:1c:0c:83:f0:64:53:e9:df:7d:bb:03: 22:45:b5:a1:71:7b:85:aa:3d:2f:af:2a:e6:9e:2e:27:81:1f: 5a:9a:3e:6d:fe:71:88:92:a2:41:d2:94:a3:cf:fc:52:e8:5b: 04:16:b0:83:20:79:06:11:e8:f5:41:60:00:3e:15:b4:29:73: 42:96:59:87:75:1b:bd:9d:24:a2:d6:09:5c:59:3e:ea:da:96: 30:66:b8:08:22:47:69:57:30:22:df:1b:f4:ec:df:34:66:a6: ee:13:b4:d7:b6:04:db:f3:bf:8a:a8:54:12:c4:79:2e:41:97: f4:07:a7:75:38:f5:73:54:0d:27:74:41:60:7c:d9:c6:3a:51: ef:de:22:48:ab:2e:f6:a1:a8:ab:a6:68:51:67:34:7f:3d:1a: 3b:c9:8b:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGRTExMTAvBgNVBAUTKDBBMDcwRDhFM0ExNUZENUVEOEU5Rjc5RjE3MEM3Q0ZC QTY5RTQ0M0QwHhcNMjUxMTAyMTg0OTE0WhcNMjUxMTA5MTg0OTE0WjAYMRYwFAYD VQQDEw02OTA3YTdhYS1kYWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsnPvSPjnDLYb+XUAczNXAv+uuF6sA3Dc6tIbKRM4bRyFRRXEnnvbDVZDPEb ENEilxTv257GPbcVvVBEcyBxCUVwU1DpN1ApiQ49nXA85cIsKFzGpN73hcxS/FN+ KBb+xzn608qHv84+lRQ6U4R1EtfC8XVJ8nC/DmtYJpjT4zjMAYbHHvyVCAaFc4/o HjXGdy9uDngrvN1gmb70kpMTSY7uxjwJnds1ZOkaJKj6gYqVXQm58xv0SLSUa+wL ANAac3xDMwxr4tzPKLB25JewssrJBWrPS5wT+rjOFNT/2cCZN+Eg5j0IRvvkOc90 vY94UXyiQKbtqVmpofpuoINUhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFOdMJt qXB68mXmX3PCa7Bhy/4BMB8GA1UdIwQYMBaAFAoHDY46Ff1e2On3nxcMfPumnkQ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZFMS8wMzc1QUU2QTI0 ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9WN1k2ZmVmRnd4OC02YWVS RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnY05qam9WX1Y3WTZmZWZGd3g4LTZhZVJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MkZFMS8wMzc1QUU2QTI0ODExMUVBQjU5QjU0MjZDNEY5QUUwMi9DZ2NOampvVl9W N1k2ZmVmRnd4OC02YWVSRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzw7J2m9PuRC77IAg6AdCODzPgiiJxL+RnL71VwGLIpqpHdJp9mw6Y flMAdQWkck5fudw6BuE6jRP7h0Nc/pzBUn3cyFzSS3Pt57xK7w3uTU4e0bvWkAda 2dQWiolX58GfHAyD8GRT6d99uwMiRbWhcXuFqj0vryrmni4ngR9amj5t/nGIkqJB 0pSjz/xS6FsEFrCDIHkGEej1QWAAPhW0KXNCllmHdRu9nSSi1glcWT7q2pYwZrgI IkdpVzAi3xv07N80ZqbuE7TXtgTb87+KqFQSxHkuQZf0B6d1OPVzVA0ndEFgfNnG OlHv3iJIqy72oairpmhRZzR/PRo7yYtB -----END CERTIFICATE-----Generated at Tue Nov 4 08:11:00 2025 by rpki-client