$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft File: 7IR2kVK97dy3D7wh1sbKO_9Il4E.mft (raw, json) Hash identifier: PqmRV1Iwew4QdPCGgvk0/9RoJB4SORSjUZSzVFl5nKI= Subject key identifier: 0B:5A:ED:D4:55:0B:01:1B:89:FB:B0:A2:10:A4:32:8E:B4:DE:63:7A Authority key identifier: EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81 Certificate issuer: /CN=A9189BB3/serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781 Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft Manifest number: 01DD Signing time: Tue 04 Nov 2025 23:09:35 +0000 Manifest this update: Tue 04 Nov 2025 23:09:34 +0000 Manifest next update: Tue 11 Nov 2025 23:09:34 +0000 Files and hashes: 1: 7IR2kVK97dy3D7wh1sbKO_9Il4E.crl (hash: JaMiQveK+b3pwLg0QMmu7W8t6KeoWS686AMykS7XZ9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3, serialNumber=EC84769152BDEDDCB70FBC21D6C6CA3BFF489781 Validity Not Before: Nov 4 23:09:34 2025 GMT Not After : Nov 11 23:09:34 2025 GMT Subject: CN=690a87af-dbd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:03:57:6c:75:07:44:4e:cb:2f:e1:ca:95:01: 59:81:99:a5:cd:ed:df:9b:85:2e:b1:a0:d2:08:e8: 12:da:50:db:b7:9b:a5:e4:1d:6e:26:37:e8:2a:b3: be:b1:84:a6:93:0a:92:13:1a:23:30:ad:23:51:ad: 4e:f4:14:36:a1:da:b4:4d:d8:8f:8e:1c:2b:10:64: 01:4b:66:cd:a7:dd:2d:c3:5d:e4:a6:a9:c7:c2:f6: 09:a9:70:19:33:95:66:db:ee:3e:98:c3:29:dc:fa: 21:a4:a2:2c:b0:99:fe:2b:af:f8:d8:13:e8:17:75: 9d:f4:7c:21:98:a1:47:ef:3b:cd:d3:68:46:b9:5f: 74:89:14:59:91:8b:ce:97:5c:9c:03:ad:b6:a7:2a: b1:14:e0:85:0e:d1:e0:50:9a:f3:43:80:0f:72:ed: 98:d9:d1:8d:71:2e:d0:b2:b4:8a:84:39:89:03:01: 5e:ed:d7:78:b8:c2:09:79:20:46:34:e4:88:f5:0a: 66:28:d4:96:1a:ce:26:b7:0a:a1:14:f3:ad:a5:6d: ff:f0:3e:8a:3d:35:a1:f6:fb:dd:ae:5c:fc:63:c8: b9:a5:c3:0b:f2:8f:73:cb:b6:93:96:54:eb:e7:59: 21:5e:6b:3d:8e:7f:04:ec:b8:d6:ea:ef:22:fc:ff: 63:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5A:ED:D4:55:0B:01:1B:89:FB:B0:A2:10:A4:32:8E:B4:DE:63:7A X509v3 Authority Key Identifier: keyid:EC:84:76:91:52:BD:ED:DC:B7:0F:BC:21:D6:C6:CA:3B:FF:48:97:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7IR2kVK97dy3D7wh1sbKO_9Il4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/E8072D80DFFC11ED95153D31C4F9AE02/7IR2kVK97dy3D7wh1sbKO_9Il4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e4:93:1a:e2:f2:d0:be:e5:88:f7:80:0b:6f:c7:1a:a7:1d:09: e0:6d:da:b0:39:44:ce:57:f4:2e:78:93:3e:2e:02:07:62:9b: bd:d8:52:01:49:d5:45:aa:ff:aa:50:ac:a9:47:e3:81:7b:38: 62:dd:c3:c9:97:12:83:fa:e1:3a:5d:6c:5e:99:33:3a:04:50: ac:cc:00:6a:06:80:2f:75:40:1e:79:ce:38:b0:8d:11:3e:24: 0a:2d:90:fa:2c:06:8a:fa:ff:23:c7:82:f8:27:ce:ba:68:73: 2e:4b:42:d7:f7:6c:c2:f6:d1:fb:d2:0f:fc:0a:f2:e4:61:17: 18:dc:c5:f5:70:24:2e:de:40:f8:08:8b:3b:f0:b5:2b:89:d4: d0:90:04:90:98:60:61:e3:5b:71:ac:db:fc:da:90:09:10:39: ee:f5:ad:db:45:e5:91:a3:34:00:ad:52:d9:cf:d3:eb:ad:30: 98:a6:90:79:2b:b8:fd:e6:f3:cf:1c:e4:fa:86:f7:2b:bf:0f: 2f:e8:d6:05:1d:34:ba:5a:94:f7:ba:93:07:3b:c2:ba:f5:80: 4e:c6:b8:22:8c:e4:e4:1b:ac:51:d5:c8:60:34:a0:4d:88:46: c5:12:a2:c2:12:95:90:f8:24:4b:10:13:c0:68:31:6c:3c:b8: 90:d6:18:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKEVDODQ3NjkxNTJCREVERENCNzBGQkMyMUQ2QzZDQTNC RkY0ODk3ODEwHhcNMjUxMTA0MjMwOTM0WhcNMjUxMTExMjMwOTM0WjAYMRYwFAYD VQQDEw02OTBhODdhZi1kYmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wNXbHUHRE7LL+HKlQFZgZmlze3fm4UusaDSCOgS2lDbt5ul5B1uJjfoKrO+ sYSmkwqSExojMK0jUa1O9BQ2odq0TdiPjhwrEGQBS2bNp90tw13kpqnHwvYJqXAZ M5Vm2+4+mMMp3PohpKIssJn+K6/42BPoF3Wd9HwhmKFH7zvN02hGuV90iRRZkYvO l1ycA622pyqxFOCFDtHgUJrzQ4APcu2Y2dGNcS7QsrSKhDmJAwFe7dd4uMIJeSBG NOSI9QpmKNSWGs4mtwqhFPOtpW3/8D6KPTWh9vvdrlz8Y8i5pcML8o9zy7aTllTr 51khXms9jn8E7LjW6u8i/P9jYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAta7dRV CwEbifuwohCkMo603mN6MB8GA1UdIwQYMBaAFOyEdpFSve3ctw+8IdbGyjv/SJeB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9FODA3MkQ4MERG RkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdkeTNEN3doMXNiS09fOUls NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJUjJrVks5N2R5M0Q3d2gxc2JLT185SWw0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9FODA3MkQ4MERGRkMxMUVEOTUxNTNEMzFDNEY5QUUwMi83SVIya1ZLOTdk eTNEN3doMXNiS09fOUlsNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDkkxri8tC+5Yj3gAtvxxqnHQngbdqwOUTOV/QueJM+LgIHYpu92FIB SdVFqv+qUKypR+OBezhi3cPJlxKD+uE6XWxemTM6BFCszABqBoAvdUAeec44sI0R PiQKLZD6LAaK+v8jx4L4J866aHMuS0LX92zC9tH70g/8CvLkYRcY3MX1cCQu3kD4 CIs78LUridTQkASQmGBh41txrNv82pAJEDnu9a3bReWRozQArVLZz9PrrTCYppB5 K7j95vPPHOT6hvcrvw8v6NYFHTS6WpT3upMHO8K69YBOxrgijOTkG6xR1chgNKBN iEbFEqLCEpWQ+CRLEBPAaDFsPLiQ1hiY -----END CERTIFICATE-----Generated at Wed Nov 5 17:07:34 2025 by rpki-client