$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft File: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft (raw, json) Hash identifier: rt+3qAU+tByGiVm6ldmUQ8hq7ajH+TpDqlscmKD5xrQ= Subject key identifier: E5:8E:49:48:4D:CA:F8:52:67:25:B7:40:FD:A6:43:D4:91:3F:40:5E Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E Certificate issuer: /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Certificate serial: 2156 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft Manifest number: 2156 Signing time: Tue 04 Nov 2025 16:01:34 +0000 Manifest this update: Tue 04 Nov 2025 16:01:34 +0000 Manifest next update: Tue 11 Nov 2025 16:01:34 +0000 Files and hashes: 1: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl (hash: joNNES0u3rLM3h2Zf2E4uJ+R/EgQIrruu1f8jaeyM2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8534 (0x2156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B936, serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Validity Not Before: Nov 4 16:01:34 2025 GMT Not After : Nov 11 16:01:34 2025 GMT Subject: CN=690a235e-3289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:75:61:21:f5:66:43:1f:ab:ce:92:ba:33:b2: 35:7d:18:a8:53:fa:69:ac:fb:b9:12:cc:5e:cc:0d: a3:14:54:98:4e:84:1a:3d:ee:cf:b4:39:53:df:2d: 7b:ce:fa:60:70:ba:bc:11:ff:23:4e:3a:ab:e9:51: 0f:55:74:5d:49:f1:30:87:36:7a:02:95:07:7d:a7: f8:f8:16:78:26:fe:6d:4e:7d:27:de:c6:57:37:44: f1:d9:39:9a:8e:56:49:c9:c8:48:ae:91:e4:85:1b: 08:88:56:56:26:99:1f:cb:b6:7a:db:d2:b8:b2:91: ec:9f:c4:ec:59:29:36:1c:32:ce:cf:ff:dd:1c:33: ee:ae:bd:e2:3a:d3:0b:75:f4:f0:be:50:2d:eb:f1: 38:38:a5:a5:22:79:63:41:66:77:fb:1e:e4:e1:d2: cf:48:db:99:ae:af:5c:a1:c0:38:82:40:98:0c:e3: a0:d8:bc:bc:f5:62:be:94:3f:87:48:6b:22:25:ad: d7:23:41:c2:a3:8b:8a:7c:33:65:68:55:21:7c:6b: 12:d4:1b:19:1b:8b:f0:3c:e4:68:b4:a9:24:de:67: 6a:98:2d:4e:b8:00:88:14:3b:58:68:05:b9:a3:27: 17:c1:74:c7:0b:49:47:ec:eb:ca:ee:d2:3d:6f:39: 19:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8E:49:48:4D:CA:F8:52:67:25:B7:40:FD:A6:43:D4:91:3F:40:5E X509v3 Authority Key Identifier: keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:44:f2:84:9d:3b:36:af:4c:e4:dc:ec:a6:f0:5c:f2:8d:8e: 06:8b:3c:54:42:15:82:58:55:54:47:a7:3e:e1:fc:53:8d:65: 2d:47:4e:35:7a:92:e3:65:e9:c3:f1:ce:1d:22:62:72:ce:49: 89:e1:5b:43:eb:2b:03:b5:6e:35:6c:26:44:d6:fa:fa:e8:a3: b6:0d:47:a3:55:4f:63:c6:2c:85:ca:a3:2b:8b:85:c5:96:c3: 84:89:6c:3f:a6:01:42:87:15:c2:80:ff:67:ef:93:4a:ba:d8: 4b:f1:91:71:c5:24:e2:63:39:75:9b:fd:20:90:7a:12:30:0b: 68:f2:ce:49:65:41:a6:25:11:85:b5:8d:56:5a:a9:c4:e1:03: ea:0c:22:73:79:31:68:92:f3:a7:21:9e:2f:0f:1f:a3:c2:07: 8b:aa:90:9a:dd:fe:e0:e8:d1:3a:67:28:0d:6e:96:1b:f3:79: 86:59:e4:6f:98:1e:16:2a:42:91:ab:1f:f1:18:7d:e0:6e:42: ba:49:6f:36:b0:53:b9:d0:69:c7:b5:b7:67:df:b4:bd:44:2b: 1e:1d:f2:35:96:98:24:5e:c3:4a:d8:ff:e8:70:bd:26:9b:29: 50:31:d1:4a:e2:0f:dc:c2:dd:a2:12:0d:02:07:61:ad:6f:60: 4a:34:af:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5MzYxMTAvBgNVBAUTKDcwNDVBNzE4QkJFQjI4OUYxOEQxRjkzMEZBMzMyRDYz MzJEOTU1NUUwHhcNMjUxMTA0MTYwMTM0WhcNMjUxMTExMTYwMTM0WjAYMRYwFAYD VQQDEw02OTBhMjM1ZS0zMjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3VhIfVmQx+rzpK6M7I1fRioU/pprPu5EsxezA2jFFSYToQaPe7PtDlT3y17 zvpgcLq8Ef8jTjqr6VEPVXRdSfEwhzZ6ApUHfaf4+BZ4Jv5tTn0n3sZXN0Tx2Tma jlZJychIrpHkhRsIiFZWJpkfy7Z629K4spHsn8TsWSk2HDLOz//dHDPurr3iOtML dfTwvlAt6/E4OKWlInljQWZ3+x7k4dLPSNuZrq9cocA4gkCYDOOg2Ly89WK+lD+H SGsiJa3XI0HCo4uKfDNlaFUhfGsS1BsZG4vwPORotKkk3mdqmC1OuACIFDtYaAW5 oycXwXTHC0lH7OvK7tI9bzkZmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWOSUhN yvhSZyW3QP2mQ9SRP0BeMB8GA1UdIwQYMBaAFHBFpxi76yifGNH5MPozLWMy2VVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80MDc1MTIxQUYw Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktKOFkwZmt3LWpNdFl6TFpW VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NFV25HTHZyS0o4WTBma3ctak10WXpMWlZWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjkzNi80MDc1MTIxQUYwQ0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktK OFkwZmt3LWpNdFl6TFpWVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSRPKEnTs2r0zk3Oym8FzyjY4GizxUQhWCWFVUR6c+4fxTjWUtR041 epLjZenD8c4dImJyzkmJ4VtD6ysDtW41bCZE1vr66KO2DUejVU9jxiyFyqMri4XF lsOEiWw/pgFChxXCgP9n75NKuthL8ZFxxSTiYzl1m/0gkHoSMAto8s5JZUGmJRGF tY1WWqnE4QPqDCJzeTFokvOnIZ4vDx+jwgeLqpCa3f7g6NE6ZygNbpYb83mGWeRv mB4WKkKRqx/xGH3gbkK6SW82sFO50GnHtbdn37S9RCseHfI1lpgkXsNK2P/ocL0m mylQMdFK4g/cwt2iEg0CB2Gtb2BKNK/D -----END CERTIFICATE-----Generated at Tue Nov 4 21:31:53 2025 by rpki-client