$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft File: tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft (raw, json) Hash identifier: KSUU1fkSKefDQyyUpbI9kns/oGHfZpZdvQ2QJlHUdNc= Subject key identifier: E5:6D:9E:58:12:75:92:6C:E1:8D:2D:1E:80:C9:3F:A2:1A:1B:98:4F Authority key identifier: B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04 Certificate issuer: /CN=A918E85E/serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft Manifest number: 0127 Signing time: Wed 05 Nov 2025 04:46:31 +0000 Manifest this update: Wed 05 Nov 2025 04:46:31 +0000 Manifest next update: Wed 12 Nov 2025 04:46:31 +0000 Files and hashes: 1: tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl (hash: wf+0W2Bj0U4KmYFO+QzO+55tEcOEHLXm3CHrqpWRpCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E85E, serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804 Validity Not Before: Nov 5 04:46:31 2025 GMT Not After : Nov 12 04:46:31 2025 GMT Subject: CN=690ad6a7-0c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7a:61:80:1f:d9:14:52:e9:f1:2e:d7:ed:c6: 4d:38:58:ee:28:77:6a:fe:69:4b:07:6c:21:78:3b: 53:da:04:45:0d:ef:50:fd:aa:bd:a2:b1:0a:dd:4b: eb:8f:fa:b0:b0:f3:a8:da:45:cd:5e:20:12:29:33: 16:7d:d2:97:8c:ef:78:31:86:67:8b:cb:28:2d:16: d7:2f:c3:d2:01:a5:b5:4b:e5:a1:e3:9b:4b:b7:53: 9c:f6:e0:b0:86:ce:56:4f:e1:ac:92:0e:2b:d9:cc: df:96:c4:81:ca:be:b9:c2:86:b3:03:8e:ba:8c:41: 55:98:f6:e3:45:98:f2:77:58:e7:9d:2c:35:b9:93: 25:15:13:21:04:67:2b:55:d9:1b:60:e1:e5:5c:77: b8:78:34:d9:41:81:bf:eb:25:37:36:91:ab:d1:9e: 49:a9:72:8e:2e:9f:91:cc:71:0b:3b:0b:e7:85:8d: a5:f6:6e:83:d9:3a:17:af:5c:7c:3a:10:a6:c1:89: ab:91:a8:d9:e4:09:92:a7:5f:80:a3:3c:7c:5d:d5: 4b:27:f8:43:d0:89:82:af:ef:16:41:f9:ce:0f:da: bb:22:5b:45:4f:30:2f:d1:c4:a8:9c:8e:e2:01:f2: 22:5d:ce:03:c0:0f:c5:8f:a5:a2:ae:a2:71:db:ad: b2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6D:9E:58:12:75:92:6C:E1:8D:2D:1E:80:C9:3F:A2:1A:1B:98:4F X509v3 Authority Key Identifier: keyid:B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:cd:d9:69:5e:59:4b:75:94:42:f4:05:ec:5d:57:6e:98:87: b7:83:bd:f8:41:48:2f:c6:31:ec:be:39:28:1c:5b:92:22:5f: 20:53:71:34:e1:8f:00:1f:98:91:0a:d6:87:42:43:10:50:6c: f9:bc:e3:cd:28:27:51:e0:0f:56:6b:38:d7:20:a6:49:e1:19: b6:4a:af:be:8c:10:82:72:f3:b8:3c:db:48:2b:5f:6c:3d:d9: 6e:b4:e8:bb:f8:a0:77:a1:ae:20:4e:2d:3b:dc:59:89:0f:c6: 78:2a:7b:8f:85:60:f9:b5:80:31:5d:0e:24:3a:10:d4:6a:ec: a3:37:1f:84:a8:b9:d6:80:ed:1e:d0:38:50:09:28:b6:dc:8b: 93:d9:c6:06:a9:aa:2e:d0:4d:f6:ab:a8:67:f4:69:bf:b4:68: fd:a5:6f:2e:32:48:70:6e:e5:fc:4c:6d:c2:81:b9:4e:37:66: d3:a4:4f:cc:7d:1e:f4:41:a7:bc:91:3f:60:04:04:1b:08:74: 25:b1:eb:6e:e1:01:e8:1f:53:bb:88:2a:63:e0:78:49:ed:7c: 78:89:29:e6:aa:ec:d6:48:07:f2:5e:fb:87:f9:2b:0f:21:88: 0b:27:6e:1d:3c:9c:f1:4d:dc:44:12:74:db:89:62:fc:d0:d8: be:c2:05:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4NUUxMTAvBgNVBAUTKEI1M0JDRTE2MUFDRjYzMDVFQzA1NUM1OUE4OTFFODIy QTExRUY4MDQwHhcNMjUxMTA1MDQ0NjMxWhcNMjUxMTEyMDQ0NjMxWjAYMRYwFAYD VQQDEw02OTBhZDZhNy0wYzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHphgB/ZFFLp8S7X7cZNOFjuKHdq/mlLB2wheDtT2gRFDe9Q/aq9orEK3Uvr j/qwsPOo2kXNXiASKTMWfdKXjO94MYZni8soLRbXL8PSAaW1S+Wh45tLt1Oc9uCw hs5WT+Gskg4r2czflsSByr65woazA466jEFVmPbjRZjyd1jnnSw1uZMlFRMhBGcr VdkbYOHlXHe4eDTZQYG/6yU3NpGr0Z5JqXKOLp+RzHELOwvnhY2l9m6D2ToXr1x8 OhCmwYmrkajZ5AmSp1+Aozx8XdVLJ/hD0ImCr+8WQfnOD9q7IltFTzAv0cSonI7i AfIiXc4DwA/Fj6WirqJx262y7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVtnlgS dZJs4Y0tHoDJP6IaG5hPMB8GA1UdIwQYMBaAFLU7zhYaz2MF7AVcWaiR6CKhHvgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg1RS82NTlFOTAxMEVG RjMxMUVFOTc3Q0FDMzFDNEY5QUUwMi90VHZPRmhyUFl3WHNCVnhacUpIb0lxRWUt QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RUdk9GaHJQWXdYc0JWeFpxSkhvSXFFZS1BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg1RS82NTlFOTAxMEVGRjMxMUVFOTc3Q0FDMzFDNEY5QUUwMi90VHZPRmhyUFl3 WHNCVnhacUpIb0lxRWUtQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGzdlpXllLdZRC9AXsXVdumIe3g734QUgvxjHsvjkoHFuSIl8gU3E0 4Y8AH5iRCtaHQkMQUGz5vOPNKCdR4A9WazjXIKZJ4Rm2Sq++jBCCcvO4PNtIK19s PdlutOi7+KB3oa4gTi073FmJD8Z4KnuPhWD5tYAxXQ4kOhDUauyjNx+EqLnWgO0e 0DhQCSi23IuT2cYGqaou0E32q6hn9Gm/tGj9pW8uMkhwbuX8TG3CgblON2bTpE/M fR70Qae8kT9gBAQbCHQlsetu4QHoH1O7iCpj4HhJ7Xx4iSnmquzWSAfyXvuH+SsP IYgLJ24dPJzxTdxEEnTbiWL80Ni+wgWd -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:50 2025 by rpki-client