$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft File: Cr_XemhpLv60MkAP_d3XrhsjvCc.mft (raw, json) Hash identifier: lTYouXTqTxroNGkdclaMtyUyunou5P7G3Kyg3ytjNig= Subject key identifier: 5F:A1:DB:8E:B6:3E:3E:BC:65:84:7A:72:42:5E:CE:C2:DE:9F:CE:4E Authority key identifier: 0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27 Certificate issuer: /CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27 Certificate serial: 0510 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft Manifest number: 06B3 Signing time: Tue 04 Nov 2025 23:41:08 +0000 Manifest this update: Tue 04 Nov 2025 23:41:07 +0000 Manifest next update: Tue 11 Nov 2025 23:41:07 +0000 Files and hashes: 1: Cr_XemhpLv60MkAP_d3XrhsjvCc.crl (hash: Q+qcZV4R5MRNNQX2eXw2f6oi9WUPzZAj8GcFZDC48ck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:38:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1296 (0x510) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A8C, serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27 Validity Not Before: Nov 4 23:41:07 2025 GMT Not After : Nov 11 23:41:07 2025 GMT Subject: CN=690a8f13-4bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:65:7f:de:aa:50:a6:76:74:d6:15:c0:78:65: 24:76:f8:bd:75:07:14:b8:80:2f:a5:57:97:88:4d: 1a:30:44:05:a6:15:ea:5a:e9:3b:49:b2:8a:a6:10: 39:06:e2:7b:cf:be:f0:fc:d8:80:11:2a:8d:30:b4: 97:15:78:a0:e2:e1:95:30:0b:d1:42:87:06:de:c0: ec:54:89:c8:fe:85:7b:a1:54:bb:90:6e:5b:bf:21: a8:fb:cb:99:82:36:df:34:24:55:99:e3:a1:86:04: 54:c7:bd:32:e5:38:23:a3:72:4f:e5:28:5e:b8:f7: c7:b5:51:2e:04:b6:95:51:ad:85:6a:2a:03:91:7b: 7b:36:1c:3d:5c:63:d5:0d:11:32:0c:75:88:3c:24: 4e:ee:cd:9d:9f:63:8d:4f:de:bd:87:81:2a:7e:a2: a0:47:08:f0:b6:d6:4a:5f:bd:fe:16:8d:51:a3:09: 77:f6:89:96:fd:07:f5:6e:42:97:38:d4:f4:5f:c5: 47:fb:38:b9:d9:06:78:4c:85:a1:08:21:ce:2e:b8: f4:5d:f6:19:f2:16:f1:f6:5c:95:6f:30:f8:f9:05: 13:46:d1:6e:d8:d6:09:a9:98:20:1d:3b:c0:1b:ca: fc:c7:d0:2b:1a:6f:70:35:89:35:49:eb:c0:41:d4: f1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A1:DB:8E:B6:3E:3E:BC:65:84:7A:72:42:5E:CE:C2:DE:9F:CE:4E X509v3 Authority Key Identifier: keyid:0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:ae:12:07:8a:48:a7:80:ec:ad:22:e2:38:c6:3f:5c:0f:ee: c1:a3:03:7c:fb:90:94:07:c3:2d:06:e9:82:d8:32:cd:f2:2d: 6b:65:3a:2e:0b:cf:75:74:e9:65:8e:c4:2c:3e:99:7c:24:34: 1e:1c:70:6c:96:8a:28:32:5a:4b:a1:24:8b:aa:c3:c5:eb:80: f7:7d:1b:f4:64:fa:42:77:e3:d2:4d:3e:89:44:06:c0:08:e2: aa:40:02:12:04:6b:01:48:79:1b:3c:b3:dd:3c:f0:71:1c:ba: 27:92:33:43:ad:d1:2b:b0:7e:88:43:42:2d:00:21:cd:6d:d0: ac:58:3d:c3:89:27:c6:ad:61:a6:ce:f2:be:24:44:8d:e9:27: b8:95:f8:14:76:63:85:ee:99:87:18:27:f8:56:a5:af:53:26: 7b:c0:3e:b4:1d:72:17:91:ba:f3:34:4b:69:b4:ef:66:fc:9c: ed:54:7b:c0:04:49:df:8f:33:b0:03:92:df:92:4f:f5:a4:fa: d0:a9:6e:5e:18:b9:be:7e:83:79:90:ee:7a:75:b3:3c:e2:5b: 0c:35:00:4b:aa:1d:ca:a3:3a:27:c0:48:09:06:7b:38:20:05: 2a:fd:7c:96:3c:17:e2:e9:8d:ad:58:14:60:38:67:25:88:5c: 85:5c:0a:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBOEMxMTAvBgNVBAUTKDBBQkZENzdBNjg2OTJFRkVCNDMyNDAwRkZEREREN0FF MUIyM0JDMjcwHhcNMjUxMTA0MjM0MTA3WhcNMjUxMTExMjM0MTA3WjAYMRYwFAYD VQQDEw02OTBhOGYxMy00YmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoWV/3qpQpnZ01hXAeGUkdvi9dQcUuIAvpVeXiE0aMEQFphXqWuk7SbKKphA5 BuJ7z77w/NiAESqNMLSXFXig4uGVMAvRQocG3sDsVInI/oV7oVS7kG5bvyGo+8uZ gjbfNCRVmeOhhgRUx70y5Tgjo3JP5SheuPfHtVEuBLaVUa2FaioDkXt7Nhw9XGPV DREyDHWIPCRO7s2dn2ONT969h4EqfqKgRwjwttZKX73+Fo1Rowl39omW/Qf1bkKX ONT0X8VH+zi52QZ4TIWhCCHOLrj0XfYZ8hbx9lyVbzD4+QUTRtFu2NYJqZggHTvA G8r8x9ArGm9wNYk1SevAQdTxJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+h2462 Pj68ZYR6ckJezsLen85OMB8GA1UdIwQYMBaAFAq/13poaS7+tDJAD/3d164bI7wn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2NjBNa0FQX2QzWHJoc2p2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyX1hlbWhwTHY2ME1rQVBfZDNYcmhzanZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2 NjBNa0FQX2QzWHJoc2p2Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAirhIHikingOytIuI4xj9cD+7BowN8+5CUB8MtBumC2DLN8i1rZTou C891dOlljsQsPpl8JDQeHHBsloooMlpLoSSLqsPF64D3fRv0ZPpCd+PSTT6JRAbA COKqQAISBGsBSHkbPLPdPPBxHLonkjNDrdErsH6IQ0ItACHNbdCsWD3DiSfGrWGm zvK+JESN6Se4lfgUdmOF7pmHGCf4VqWvUyZ7wD60HXIXkbrzNEtptO9m/JztVHvA BEnfjzOwA5Lfkk/1pPrQqW5eGLm+foN5kO56dbM84lsMNQBLqh3KozonwEgJBns4 IAUq/XyWPBfi6Y2tWBRgOGcliFyFXArs -----END CERTIFICATE-----Generated at Wed Nov 5 02:17:58 2025 by rpki-client