$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft File: SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json) Hash identifier: 1z5GdkSDhuX9DaKtaaxPPTr3K0AaiN6LlTWCs33D0kg= Subject key identifier: FA:09:18:4E:1C:33:D6:3E:2B:EF:42:D6:F5:82:DF:AE:DF:E1:60:EF Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE Certificate issuer: /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Certificate serial: 0900 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft Manifest number: 08FF Signing time: Tue 04 Nov 2025 20:24:19 +0000 Manifest this update: Tue 04 Nov 2025 20:24:19 +0000 Manifest next update: Tue 11 Nov 2025 20:24:19 +0000 Files and hashes: 1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: 1UxdEL8gDRv4Dt26RxvwHKhXRa9RsXVKeNDia2QqCjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2304 (0x900) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADA93, serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Validity Not Before: Nov 4 20:24:19 2025 GMT Not After : Nov 11 20:24:19 2025 GMT Subject: CN=690a60f3-bff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f8:65:44:1c:44:25:94:46:bc:e9:3a:db:4e: c4:d9:b2:cb:cd:ad:92:81:64:2f:1a:14:64:55:98: 8c:e4:a3:c4:48:93:88:6e:35:07:d5:ce:63:d3:96: 06:4c:a1:c5:cd:a0:1d:23:85:1c:a0:04:27:ba:d2: 03:67:79:be:c8:14:14:e6:42:4f:59:c4:e6:49:02: cd:49:fa:b8:a0:88:a0:c3:4d:a1:5c:52:83:a5:92: 38:68:bb:08:1d:3f:f3:f1:81:85:9b:c3:be:23:18: 24:08:e1:c6:2c:69:86:6e:fa:9f:36:6c:d9:c8:6c: 8d:6c:3c:e5:f4:75:42:a4:95:ef:f9:35:2c:5c:9b: f6:f1:49:15:c3:31:3e:c5:4f:67:ab:9a:af:61:fa: 23:6d:72:75:35:a9:b3:04:5c:20:92:00:2e:83:ae: ae:b9:44:cb:c3:aa:a3:ec:af:e2:d5:d1:2d:83:5e: 92:9d:33:58:b2:9f:71:c9:e5:2f:c1:44:40:8e:d4: 4b:b6:3e:bd:04:f0:03:e8:99:5d:1c:71:e1:2d:2d: d9:25:f7:6c:1d:e5:1e:dc:fd:00:72:16:70:3c:1e: df:fc:6a:55:85:29:b4:7c:f0:23:3b:ab:1d:62:42: 2e:0b:df:8d:2d:c0:13:5b:bd:51:48:37:4d:ef:97: d2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:09:18:4E:1C:33:D6:3E:2B:EF:42:D6:F5:82:DF:AE:DF:E1:60:EF X509v3 Authority Key Identifier: keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:b5:5c:a9:04:00:8d:79:ca:58:a6:65:9d:3d:cd:25:0b:8a: 53:3c:c0:23:da:25:a8:7d:ca:6a:28:db:10:5b:75:c4:ca:94: 02:d6:6e:f7:b5:f2:94:1b:f2:0f:70:3f:ab:65:a8:d0:cf:47: 55:44:c4:cb:d2:eb:55:7c:1e:3c:39:f8:bd:7c:1e:23:04:dd: 76:8d:98:0e:87:73:a9:3d:04:a8:0f:34:07:4e:38:a1:18:1a: e1:b6:92:0c:27:af:6d:69:3d:76:96:bd:41:07:66:f7:19:d7: 25:62:63:62:a6:9a:ae:4b:40:eb:a5:49:d2:a8:1b:4b:3a:97: 36:24:1c:01:bd:a0:c4:ce:cd:35:33:5e:4d:5a:92:88:ba:14: ea:bf:d1:51:b3:86:6c:69:a1:26:b3:7e:c4:4b:6e:a9:c3:41: cc:13:f1:f4:48:20:c5:21:1b:f9:c7:75:0e:c2:76:2c:b3:88: c2:54:ea:7d:de:7e:df:43:4c:04:e9:82:58:2a:f0:ad:be:f4: 9a:eb:fe:b5:5c:1b:18:36:fa:c6:db:fb:99:54:fd:31:4d:03: 89:8a:4b:c7:fb:11:d2:0a:6e:aa:e7:32:fc:10:b5:76:b1:98: 64:23:3c:85:66:87:fe:b6:64:e8:1a:c5:9c:de:d4:ff:9d:b5: ff:25:6c:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURBOTMxMTAvBgNVBAUTKDQ4RUY2OEFENTFCQkQ3MTg3RTI0QTBBMzhCQUJCQUE1 RkMxMTEzRUUwHhcNMjUxMTA0MjAyNDE5WhcNMjUxMTExMjAyNDE5WjAYMRYwFAYD VQQDEw02OTBhNjBmMy1iZmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/hlRBxEJZRGvOk6207E2bLLza2SgWQvGhRkVZiM5KPESJOIbjUH1c5j05YG TKHFzaAdI4UcoAQnutIDZ3m+yBQU5kJPWcTmSQLNSfq4oIigw02hXFKDpZI4aLsI HT/z8YGFm8O+IxgkCOHGLGmGbvqfNmzZyGyNbDzl9HVCpJXv+TUsXJv28UkVwzE+ xU9nq5qvYfojbXJ1NamzBFwgkgAug66uuUTLw6qj7K/i1dEtg16SnTNYsp9xyeUv wURAjtRLtj69BPAD6JldHHHhLS3ZJfdsHeUe3P0AchZwPB7f/GpVhSm0fPAjO6sd YkIuC9+NLcATW71RSDdN75fSfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoJGE4c M9Y+K+9C1vWC367f4WDvMB8GA1UdIwQYMBaAFEjvaK1Ru9cYfiSgo4uruqX8ERPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREE5My81Q0NCRDRFMEI2 QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4aC1KS0NqaTZ1NnBmd1JF LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPOW9yVkc3MXhoLUpLQ2ppNnU2cGZ3UkUtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REE5My81Q0NCRDRFMEI2QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4 aC1KS0NqaTZ1NnBmd1JFLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYtVypBACNecpYpmWdPc0lC4pTPMAj2iWofcpqKNsQW3XEypQC1m73 tfKUG/IPcD+rZajQz0dVRMTL0utVfB48Ofi9fB4jBN12jZgOh3OpPQSoDzQHTjih GBrhtpIMJ69taT12lr1BB2b3GdclYmNippquS0DrpUnSqBtLOpc2JBwBvaDEzs01 M15NWpKIuhTqv9FRs4ZsaaEms37ES26pw0HME/H0SCDFIRv5x3UOwnYss4jCVOp9 3n7fQ0wE6YJYKvCtvvSa6/61XBsYNvrG2/uZVP0xTQOJikvH+xHSCm6q5zL8ELV2 sZhkIzyFZof+tmToGsWc3tT/nbX/JWzC -----END CERTIFICATE-----Generated at Wed Nov 5 15:43:16 2025 by rpki-client