$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft File: 09eD7kxpu1Bj-1z1smKLx77DdIo.mft (raw, json) Hash identifier: TzKDQteUFJQWgWziD7D6vowOzMroNVs3efz3J53XpVE= Subject key identifier: 72:70:B3:87:05:C2:7C:5C:A1:19:22:58:39:62:4F:47:48:58:6B:B6 Authority key identifier: D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A Certificate issuer: /CN=A91B9A77/serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft Manifest number: D1 Signing time: Wed 05 Nov 2025 01:25:42 +0000 Manifest this update: Wed 05 Nov 2025 01:25:41 +0000 Manifest next update: Wed 12 Nov 2025 01:25:41 +0000 Files and hashes: 1: 09eD7kxpu1Bj-1z1smKLx77DdIo.crl (hash: 9a75si1gZALVp91hZ54W/tvwQMDMzqc6WF0vR2xxibs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A Validity Not Before: Nov 5 01:25:41 2025 GMT Not After : Nov 12 01:25:41 2025 GMT Subject: CN=690aa795-21f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d4:d1:d5:ea:d9:8d:86:aa:8b:8e:e2:3f:79: ea:92:85:38:9e:b8:80:72:14:73:37:59:22:af:ab: dc:7e:fb:24:f1:27:15:cd:09:60:c5:ad:fb:a1:3b: aa:37:37:d3:b2:57:b4:75:92:b1:2e:9b:92:a4:09: f0:5d:25:9c:31:8c:79:51:34:55:f7:72:ec:88:3e: 1c:d7:95:e8:dd:77:b6:19:4f:47:0d:80:8f:77:ab: 22:f0:99:f7:59:b4:f3:2c:bf:43:02:8a:b5:ea:34: ba:5b:cc:76:de:c7:79:f2:63:b6:c8:c6:e4:80:23: e4:6b:7e:3a:41:3d:a8:9b:fd:d6:1e:b4:5f:7e:46: 31:02:2d:ca:45:8e:04:e1:da:d4:7e:aa:e6:98:b0: a5:dd:23:ab:a7:64:7b:87:c2:20:f2:9a:9a:6b:4d: b2:37:56:71:2b:91:99:0b:d3:d0:d3:94:96:e7:8c: 17:b7:98:74:50:3b:dc:d6:db:da:97:45:c8:b7:37: 62:2b:35:91:b1:bb:06:46:3a:ab:e4:55:fd:eb:9b: aa:61:a3:bc:f0:f6:d6:33:96:a6:2c:e0:27:4c:b1: 6e:2b:53:df:28:c6:dc:1e:28:f9:48:32:e6:b4:c8: 74:17:45:dc:6b:c0:16:ed:a4:f1:ce:7b:cd:e6:de: 5b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:70:B3:87:05:C2:7C:5C:A1:19:22:58:39:62:4F:47:48:58:6B:B6 X509v3 Authority Key Identifier: keyid:D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:06:03:25:6d:71:36:e3:a2:8a:44:3b:9c:ad:04:0e:f3:11: 93:1f:bd:e3:2c:ac:01:66:7a:6e:fe:0e:ae:b9:f2:db:84:09: c5:b0:ea:87:14:f1:9f:0c:e7:f6:0f:d7:13:8e:11:d4:a6:4d: 8e:2e:c9:58:d7:32:99:8c:4e:82:a4:b0:f3:d6:9e:c0:56:a6: 29:75:c8:f1:4a:4b:ec:17:35:f7:4d:c1:77:6d:4a:f7:72:d0: f1:94:b5:81:24:10:be:69:8e:1a:0c:d0:ac:da:72:dd:0b:29: 18:e1:f5:32:b2:d0:44:ae:74:13:ff:99:8b:6c:c7:24:ae:24: 9c:ce:34:77:aa:e6:cb:c8:00:0e:52:ab:d6:eb:8d:c0:9b:48: e9:57:14:2c:d4:71:08:0b:8b:e5:e1:7d:71:c0:d9:e7:d9:3e: ed:0e:2e:6b:51:da:95:35:71:7b:25:1c:18:99:32:8b:59:f4: 9c:a7:d8:33:0e:09:d8:b0:28:77:eb:b9:73:dc:98:48:b7:8f: 76:c4:5f:a8:2e:4f:b5:59:aa:2d:7c:52:c1:28:b2:66:3f:5e: af:8d:72:a0:e8:8a:5c:56:2b:2f:89:67:b0:1c:1c:3b:39:e8: 29:fe:1b:f7:13:47:59:bd:d3:a2:26:94:85:1c:71:b6:e2:65: e5:4b:60:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKEQzRDc4M0VFNEM2OUJCNTA2M0ZCNUNGNUIyNjI4QkM3 QkVDMzc0OEEwHhcNMjUxMTA1MDEyNTQxWhcNMjUxMTEyMDEyNTQxWjAYMRYwFAYD VQQDEw02OTBhYTc5NS0yMWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodTR1erZjYaqi47iP3nqkoU4nriAchRzN1kir6vcfvsk8ScVzQlgxa37oTuq NzfTsle0dZKxLpuSpAnwXSWcMYx5UTRV93LsiD4c15Xo3Xe2GU9HDYCPd6si8Jn3 WbTzLL9DAoq16jS6W8x23sd58mO2yMbkgCPka346QT2om/3WHrRffkYxAi3KRY4E 4drUfqrmmLCl3SOrp2R7h8Ig8pqaa02yN1ZxK5GZC9PQ05SW54wXt5h0UDvc1tva l0XItzdiKzWRsbsGRjqr5FX965uqYaO88PbWM5amLOAnTLFuK1PfKMbcHij5SDLm tMh0F0Xca8AW7aTxznvN5t5bOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJws4cF wnxcoRkiWDliT0dIWGu2MB8GA1UdIwQYMBaAFNPXg+5MabtQY/tc9bJii8e+w3SK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9BQjg1MzQ0MDdB M0YxMUVGQTFDMEUwMTZDNEY5QUUwMi8wOWVEN2t4cHUxQmotMXoxc21LTHg3N0Rk SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzA5ZUQ3a3hwdTFCai0xejFzbUtMeDc3RGRJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9BQjg1MzQ0MDdBM0YxMUVGQTFDMEUwMTZDNEY5QUUwMi8wOWVEN2t4cHUx QmotMXoxc21LTHg3N0RkSW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6BgMlbXE246KKRDucrQQO8xGTH73jLKwBZnpu/g6uufLbhAnFsOqH FPGfDOf2D9cTjhHUpk2OLslY1zKZjE6CpLDz1p7AVqYpdcjxSkvsFzX3TcF3bUr3 ctDxlLWBJBC+aY4aDNCs2nLdCykY4fUystBErnQT/5mLbMckriSczjR3qubLyAAO UqvW643Am0jpVxQs1HEIC4vl4X1xwNnn2T7tDi5rUdqVNXF7JRwYmTKLWfScp9gz DgnYsCh367lz3JhIt492xF+oLk+1WaotfFLBKLJmP16vjXKg6IpcVisviWewHBw7 Oegp/hv3E0dZvdOiJpSFHHG24mXlS2BF -----END CERTIFICATE-----Generated at Wed Nov 5 13:08:08 2025 by rpki-client