$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft File: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft (raw, json) Hash identifier: dLDP6UvQTIZ1Q1MyHwZaTpt60msumEMoGI0StfEWIck= Subject key identifier: 42:2B:FB:F3:52:64:CC:53:EC:FF:8C:E8:CD:C1:60:49:FF:1C:C6:4B Authority key identifier: 48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E Certificate issuer: /CN=A918387F/serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E Certificate serial: 0682 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft Manifest number: 0682 Signing time: Tue 04 Nov 2025 22:31:49 +0000 Manifest this update: Tue 04 Nov 2025 22:31:48 +0000 Manifest next update: Tue 11 Nov 2025 22:31:48 +0000 Files and hashes: 1: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl (hash: yJewRwov/Ca/19Rj6X530F1uvLuRPhUhggKcadf/16k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1666 (0x682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918387F, serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E Validity Not Before: Nov 4 22:31:48 2025 GMT Not After : Nov 11 22:31:48 2025 GMT Subject: CN=690a7ed5-2fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:10:aa:a1:09:89:fe:a4:8a:80:50:4f:14:be: a0:55:b4:57:d5:11:2e:67:05:cf:82:a7:d0:92:12: c2:97:42:55:40:cb:70:d3:11:c4:f9:a9:79:99:16: 37:1f:4a:73:ce:52:80:24:b7:a2:53:f2:6b:36:2f: 44:3e:a4:f5:77:fc:21:10:13:39:2a:7a:25:52:cd: 8d:98:97:48:00:6c:49:2d:16:88:01:a4:f7:8f:c6: 51:39:f6:4e:1e:c9:dc:e6:e5:71:8c:8a:45:e0:36: 46:96:2f:6c:0f:ff:b6:c4:2c:1d:37:c2:6d:77:79: 3a:d6:9c:5b:98:9a:2e:b8:f8:97:8c:18:ac:da:bf: dd:d4:ae:d3:88:3b:dd:b2:ff:78:de:73:d4:c9:e8: d0:c5:bf:15:f2:44:07:ae:4f:d5:1d:05:3e:80:5a: 76:7a:1b:42:db:32:94:1a:42:90:c2:5e:80:eb:25: 80:1e:50:74:c4:c9:e6:70:f7:82:08:36:61:02:7e: e6:77:29:b6:85:aa:37:86:bf:5d:d6:a2:49:4c:c9: 55:d8:bb:14:1a:13:0e:95:c2:6e:a7:73:0f:eb:23: e6:c6:aa:1e:89:e5:91:c6:7a:9b:21:43:a0:97:e1: 8f:71:fc:b1:fb:ed:79:60:e0:0f:54:19:6f:54:01: d6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2B:FB:F3:52:64:CC:53:EC:FF:8C:E8:CD:C1:60:49:FF:1C:C6:4B X509v3 Authority Key Identifier: keyid:48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5e:62:14:ca:3b:94:9a:20:73:df:e5:8b:89:9d:91:b9:ad: 87:7f:ac:48:36:79:ee:30:bb:37:19:24:ee:f8:c4:4e:14:7b: 87:1c:f4:3e:ee:27:0f:77:50:f8:14:14:3c:b1:87:a0:25:23: d3:28:5a:be:3c:a5:33:22:86:6d:a1:a8:a1:f7:89:83:2f:54: fc:71:89:6c:a9:be:a8:20:7d:9c:e3:ba:8e:74:cb:d0:ad:7d: 16:e6:fb:f2:e0:ae:2a:5c:28:94:fe:19:9c:a9:83:0d:89:75: 00:19:24:2c:f2:db:27:e1:43:02:a9:05:0b:95:76:92:24:62: 15:e6:45:15:87:e5:63:7d:e7:7e:f4:22:8c:d6:51:89:b3:c0: 04:89:da:09:8f:0a:0d:e4:f3:51:7c:23:41:61:28:cc:39:ea: b6:49:85:52:6c:f4:36:91:64:40:13:64:f4:c8:a7:aa:05:27: da:36:bc:9f:8b:eb:61:6a:a8:44:0f:c3:e2:c8:7e:eb:44:f5: 51:55:c9:ed:42:a3:a5:20:ad:b0:e6:4d:1c:26:85:ff:16:33: 7f:48:f1:76:ed:c6:7b:cb:56:12:7d:94:e4:41:56:ac:8f:0e: 38:c4:89:84:a9:1d:07:92:d8:40:a5:48:a5:a7:26:17:9b:26: ab:c4:2d:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM4N0YxMTAvBgNVBAUTKDQ4MEJDRDlFRUE4OEYwQTZEQTE3REY5ODQzQjlCQTZG NTlDMjdFOUUwHhcNMjUxMTA0MjIzMTQ4WhcNMjUxMTExMjIzMTQ4WjAYMRYwFAYD VQQDEw02OTBhN2VkNS0yZmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hCqoQmJ/qSKgFBPFL6gVbRX1REuZwXPgqfQkhLCl0JVQMtw0xHE+al5mRY3 H0pzzlKAJLeiU/JrNi9EPqT1d/whEBM5KnolUs2NmJdIAGxJLRaIAaT3j8ZROfZO Hsnc5uVxjIpF4DZGli9sD/+2xCwdN8Jtd3k61pxbmJouuPiXjBis2r/d1K7TiDvd sv943nPUyejQxb8V8kQHrk/VHQU+gFp2ehtC2zKUGkKQwl6A6yWAHlB0xMnmcPeC CDZhAn7mdym2hao3hr9d1qJJTMlV2LsUGhMOlcJup3MP6yPmxqoeieWRxnqbIUOg l+GPcfyx++15YOAPVBlvVAHWTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIr+/NS ZMxT7P+M6M3BYEn/HMZLMB8GA1UdIwQYMBaAFEgLzZ7qiPCm2hffmEO5um9Zwn6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mzg3Ri9BQkEyMTk2Qzkz NDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThLYmFGOS1ZUTdtNmIxbkNm cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1NBdk5udXFJOEtiYUY5LVlRN202YjFuQ2ZwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Mzg3Ri9BQkEyMTk2QzkzNDIxMUVCQTM3NjlCNzlDNEY5QUUwMi9TQXZObnVxSThL YmFGOS1ZUTdtNmIxbkNmcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNXmIUyjuUmiBz3+WLiZ2Rua2Hf6xINnnuMLs3GSTu+MROFHuHHPQ+ 7icPd1D4FBQ8sYegJSPTKFq+PKUzIoZtoaih94mDL1T8cYlsqb6oIH2c47qOdMvQ rX0W5vvy4K4qXCiU/hmcqYMNiXUAGSQs8tsn4UMCqQULlXaSJGIV5kUVh+Vjfed+ 9CKM1lGJs8AEidoJjwoN5PNRfCNBYSjMOeq2SYVSbPQ2kWRAE2T0yKeqBSfaNryf i+thaqhED8PiyH7rRPVRVcntQqOlIK2w5k0cJoX/FjN/SPF27cZ7y1YSfZTkQVas jw44xImEqR0HkthApUilpyYXmyarxC1v -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:35 2025 by rpki-client