$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft File: CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft (raw, json) Hash identifier: /J4mJXp27VfIsSPq3eLPXWdRX9vWHzJRmGfCUA3Bd2U= Subject key identifier: 60:45:31:69:62:26:86:C8:2B:E2:35:46:32:20:5E:C4:81:2D:47:60 Authority key identifier: 09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 Certificate issuer: /CN=A91C612E/serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Certificate serial: 0C57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft Manifest number: 13C7 Signing time: Tue 04 Nov 2025 18:35:55 +0000 Manifest this update: Tue 04 Nov 2025 18:35:55 +0000 Manifest next update: Tue 11 Nov 2025 18:35:55 +0000 Files and hashes: 1: CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl (hash: WLyHcQ4jkS76oaEzcPA1Vgw2NfcWS9I2i/8+TO4wkZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3159 (0xc57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Validity Not Before: Nov 4 18:35:55 2025 GMT Not After : Nov 11 18:35:55 2025 GMT Subject: CN=690a478b-9c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:75:b8:81:29:04:52:29:f2:ac:47:f1:8c:8a: 42:a0:9d:74:a5:59:7c:68:c7:56:15:c9:7c:33:c6: 8a:af:a1:c7:ab:dc:11:fc:df:ec:13:bd:b4:82:c7: 03:9f:75:fa:a4:b8:bb:8e:e2:89:e0:3d:10:fb:db: 4f:98:5f:75:4a:6f:a7:c6:2b:2b:a9:1b:4f:4a:bc: 62:a4:56:a5:91:a5:a7:a1:d7:c1:5f:27:78:8e:5b: 77:0d:03:b3:2b:2d:2c:0c:0b:3f:cb:0b:0e:31:d6: 2f:65:b8:e8:b5:d7:77:c2:21:86:23:75:fc:37:91: 71:21:ed:35:3a:bc:88:f5:8d:6b:b6:c8:7e:fd:c4: 42:b7:3a:a9:de:74:2a:33:73:0a:6c:33:71:83:2a: 9b:32:fe:94:e8:5c:8e:6c:01:7b:9c:ea:d1:a7:fc: 88:12:d9:27:b3:1e:b0:17:72:2d:d3:8f:4a:0b:1e: 93:d8:0c:99:ba:0f:28:0c:df:36:13:3b:05:18:c8: bd:3c:1c:e5:94:0d:39:c8:3c:5b:79:e1:15:f1:9f: 3a:b1:10:96:91:8d:18:44:a0:49:3e:8d:e8:ff:be: 4b:6c:ec:11:ec:03:3f:60:17:c4:33:76:7d:b1:db: 03:35:bf:b0:03:ea:45:2d:2b:33:ef:d2:6a:c8:ba: 10:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:45:31:69:62:26:86:C8:2B:E2:35:46:32:20:5E:C4:81:2D:47:60 X509v3 Authority Key Identifier: keyid:09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:ad:ba:bf:c6:80:2f:2a:68:fa:ff:77:c6:5b:18:f3:ca:0c: 13:6c:97:e5:43:20:2c:3e:b7:e9:5a:83:a1:b5:f7:f1:89:78: ce:ce:d7:bf:9e:e9:be:66:65:09:81:a7:12:32:85:c3:69:ac: 6f:fd:cf:9a:dd:c4:7e:14:5c:cb:fd:c7:a5:aa:9c:d5:2f:b8: fc:9f:a6:b5:ad:1d:dd:11:2f:f4:af:33:7e:74:a3:66:18:8e: 30:0d:d6:9d:b5:84:66:bc:da:c0:16:e0:21:4f:91:b9:7f:8b: 06:6d:50:27:93:40:e4:b9:22:2b:67:a3:d6:cd:e4:8b:81:a5: 84:d6:a9:f4:c2:b4:54:fe:59:19:2d:10:92:f2:6a:42:46:8b: 3b:12:05:df:55:eb:05:a2:00:82:27:ef:13:80:79:03:d0:79: 0e:a8:63:d8:56:84:dd:d3:70:a3:5a:6f:1f:e8:8c:48:ec:26: f6:f6:70:7a:4b:a1:e8:75:4a:53:a4:09:78:07:69:96:64:86: 4f:13:9d:79:ae:72:39:20:9a:ce:fb:38:40:08:af:bf:6e:cf: c8:dd:c1:be:b3:9d:b1:fb:24:28:2d:5e:15:85:ed:fd:cd:76: 02:c7:10:03:35:95:fe:e2:6e:68:bf:04:1f:62:8b:f5:6a:10: 29:64:08:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKDA5NTVEOTFGMkNBQTUyQkI0RjdDNzBGMEU2NTZGMjQz MTRFQUZCRDUwHhcNMjUxMTA0MTgzNTU1WhcNMjUxMTExMTgzNTU1WjAYMRYwFAYD VQQDEw02OTBhNDc4Yi05Yzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HW4gSkEUinyrEfxjIpCoJ10pVl8aMdWFcl8M8aKr6HHq9wR/N/sE720gscD n3X6pLi7juKJ4D0Q+9tPmF91Sm+nxisrqRtPSrxipFalkaWnodfBXyd4jlt3DQOz Ky0sDAs/ywsOMdYvZbjotdd3wiGGI3X8N5FxIe01OryI9Y1rtsh+/cRCtzqp3nQq M3MKbDNxgyqbMv6U6FyObAF7nOrRp/yIEtknsx6wF3It049KCx6T2AyZug8oDN82 EzsFGMi9PBzllA05yDxbeeEV8Z86sRCWkY0YRKBJPo3o/75LbOwR7AM/YBfEM3Z9 sdsDNb+wA+pFLSsz79JqyLoQxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBFMWli JobIK+I1RjIgXsSBLUdgMB8GA1UdIwQYMBaAFAlV2R8sqlK7T3xw8OZW8kMU6vvV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVydFBmSER3NWxieVF4VHEt OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWWFpIeXlxVXJ0UGZIRHc1bGJ5UXhUcS05VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVy dFBmSER3NWxieVF4VHEtOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGrbq/xoAvKmj6/3fGWxjzygwTbJflQyAsPrfpWoOhtffxiXjOzte/ num+ZmUJgacSMoXDaaxv/c+a3cR+FFzL/celqpzVL7j8n6a1rR3dES/0rzN+dKNm GI4wDdadtYRmvNrAFuAhT5G5f4sGbVAnk0DkuSIrZ6PWzeSLgaWE1qn0wrRU/lkZ LRCS8mpCRos7EgXfVesFogCCJ+8TgHkD0HkOqGPYVoTd03CjWm8f6IxI7Cb29nB6 S6HodUpTpAl4B2mWZIZPE515rnI5IJrO+zhACK+/bs/I3cG+s52x+yQoLV4Vhe39 zXYCxxADNZX+4m5ovwQfYov1ahApZAjM -----END CERTIFICATE-----Generated at Wed Nov 5 13:36:27 2025 by rpki-client