$ rpki-client -vvf rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft File: clTejLmzOZRVQ9h-jrBW8VPVH1A.mft (raw, json) Hash identifier: zAeozp5Bwt6h+d728cOW//0lxgVQ+LpHW+/u4j/bUo8= Subject key identifier: BC:80:45:8E:82:25:56:11:2C:02:A1:39:3A:1A:59:A6:A6:7D:84:7D Authority key identifier: 72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50 Certificate issuer: /CN=A9198166/serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50 Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft Manifest number: 023C Signing time: Wed 05 Nov 2025 01:55:28 +0000 Manifest this update: Wed 05 Nov 2025 01:55:28 +0000 Manifest next update: Wed 12 Nov 2025 01:55:27 +0000 Files and hashes: 1: clTejLmzOZRVQ9h-jrBW8VPVH1A.crl (hash: OlMVlwKdO1VzC23/uW2foEa2MNh4ncQVfKmzdkaEtPU=) 2: A968BCA24C8511ED94579477C4F9AE02.roa (hash: IDoZUSrFV6jx6DSWfjQN2kUHclLhHXH1mPFI6HDO2bY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:55:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198166, serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50 Validity Not Before: Nov 5 01:55:28 2025 GMT Not After : Nov 12 01:55:27 2025 GMT Subject: CN=690aae90-7211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1a:79:36:bd:4d:eb:b4:38:08:67:c5:24:8a: c4:09:f8:83:c8:8b:bf:4f:7b:ff:28:06:e3:42:fd: d3:47:09:ee:6a:10:ea:64:e9:6e:4b:43:e7:c4:2e: 70:3e:62:44:42:da:e5:c8:cd:d8:f1:c7:07:fd:c1: de:47:c9:35:d1:a4:b9:eb:f8:82:cc:5a:7d:7c:0c: 90:7e:a1:85:84:d8:4d:f3:b7:b5:b8:84:ff:12:77: 07:8b:1f:11:b9:ac:93:13:82:5c:5e:df:4a:70:7f: bb:b9:e3:6e:57:93:04:0c:f6:e8:16:b2:3d:6f:49: 1d:65:41:8c:41:65:cf:21:f0:73:d2:43:ce:48:28: 27:dc:0a:7b:69:bf:ad:2b:22:76:8b:51:b5:a9:d5: 36:a8:26:80:93:0e:41:ab:7d:5f:19:a5:a9:8c:45: 1d:66:28:e1:27:4c:84:27:66:f9:e4:a6:98:05:a5: c2:7d:2c:d8:19:15:83:32:b8:e1:6f:7e:a2:b1:b8: 1e:78:1d:39:b6:dd:6a:b4:74:1a:72:18:03:9e:ec: 47:67:63:7e:56:56:21:8a:f0:4f:34:bd:1d:22:b9: 95:7f:6a:ba:e5:1d:54:8d:5c:52:d1:7b:8f:ac:63: 96:f0:a8:8d:23:19:45:2c:28:9b:d2:f8:3d:69:0f: bf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:80:45:8E:82:25:56:11:2C:02:A1:39:3A:1A:59:A6:A6:7D:84:7D X509v3 Authority Key Identifier: keyid:72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:08:3d:ca:9a:89:40:b2:24:11:7c:e1:d8:60:d9:ac:9a:67: 22:6a:8c:5b:ce:08:9f:4f:1c:c0:f7:c8:52:92:e2:11:1c:3b: 73:4d:39:fb:af:ad:2e:eb:8f:16:7a:9f:78:4a:4b:23:04:80: d6:bd:80:ad:3f:5f:a5:e4:18:cb:f5:9d:04:f8:ad:6a:16:eb: 86:f1:48:81:c5:52:e6:53:87:4e:46:20:a0:50:0d:d2:54:59: df:21:82:07:96:30:b8:7c:a6:c4:2f:8c:f0:66:57:ee:fd:df: 06:27:1f:13:c8:3f:58:6f:03:de:e2:1b:e8:9d:e5:6c:e9:42: 9e:a8:33:86:33:ee:94:fa:ba:f5:5c:02:d1:64:1b:cc:17:90: ba:6a:4e:e6:3c:11:74:bd:49:2a:4f:0f:6d:b9:cd:8f:45:95: e5:cd:2f:93:8b:41:7c:10:a7:18:23:ff:42:3f:94:f7:ee:f5: aa:c7:35:17:fc:cd:0a:fb:9d:d8:a2:44:35:5a:e1:9d:4a:5a: 6d:68:b8:ac:f5:e0:b0:7f:53:c3:0a:32:35:f9:e7:66:d4:2a: 8b:3d:a8:b8:22:2d:81:cc:41:87:bf:1e:f7:73:5b:ea:01:52: 8e:56:d4:54:57:65:e7:19:a6:ee:7d:33:f6:0e:ce:ce:04:b1: 2e:b5:d1:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgxNjYxMTAvBgNVBAUTKDcyNTRERThDQjlCMzM5OTQ1NTQzRDg3RThFQjA1NkYx NTNENTFGNTAwHhcNMjUxMTA1MDE1NTI4WhcNMjUxMTEyMDE1NTI3WjAYMRYwFAYD VQQDEw02OTBhYWU5MC03MjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7xp5Nr1N67Q4CGfFJIrECfiDyIu/T3v/KAbjQv3TRwnuahDqZOluS0PnxC5w PmJEQtrlyM3Y8ccH/cHeR8k10aS56/iCzFp9fAyQfqGFhNhN87e1uIT/EncHix8R uayTE4JcXt9KcH+7ueNuV5MEDPboFrI9b0kdZUGMQWXPIfBz0kPOSCgn3Ap7ab+t KyJ2i1G1qdU2qCaAkw5Bq31fGaWpjEUdZijhJ0yEJ2b55KaYBaXCfSzYGRWDMrjh b36isbgeeB05tt1qtHQachgDnuxHZ2N+VlYhivBPNL0dIrmVf2q65R1UjVxS0XuP rGOW8KiNIxlFLCib0vg9aQ+/6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyARY6C JVYRLAKhOToaWaamfYR9MB8GA1UdIwQYMBaAFHJU3oy5szmUVUPYfo6wVvFT1R9Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE2Ni8zRTYxMjI5NDRD ODIxMUVEOUIwM0Q0NDlDNEY5QUUwMi9jbFRlakxtek9aUlZROWgtanJCVzhWUFZI MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsVGVqTG16T1pSVlE5aC1qckJXOFZQVkgxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODE2Ni8zRTYxMjI5NDRDODIxMUVEOUIwM0Q0NDlDNEY5QUUwMi9jbFRlakxtek9a UlZROWgtanJCVzhWUFZIMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhCD3KmolAsiQRfOHYYNmsmmciaoxbzgifTxzA98hSkuIRHDtzTTn7 r60u648Wep94SksjBIDWvYCtP1+l5BjL9Z0E+K1qFuuG8UiBxVLmU4dORiCgUA3S VFnfIYIHljC4fKbEL4zwZlfu/d8GJx8TyD9YbwPe4hvoneVs6UKeqDOGM+6U+rr1 XALRZBvMF5C6ak7mPBF0vUkqTw9tuc2PRZXlzS+Ti0F8EKcYI/9CP5T37vWqxzUX /M0K+53YokQ1WuGdSlptaLis9eCwf1PDCjI1+edm1CqLPai4Ii2BzEGHvx73c1vq AVKOVtRUV2XnGabufTP2Ds7OBLEutdG4 -----END CERTIFICATE-----Generated at Wed Nov 5 19:49:46 2025 by rpki-client