$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft File: Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft (raw, json) Hash identifier: VoNildzBzypEEt3kM9jdcXFr2KJWFvZsxKnPaw3mh1k= Subject key identifier: CB:1F:79:97:E2:FF:7E:8F:38:38:D0:AB:AA:6F:9D:02:6E:BA:23:C5 Authority key identifier: 0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA Certificate issuer: /CN=A91C8EDF/serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft Manifest number: 0228 Signing time: Mon 03 Nov 2025 02:07:15 +0000 Manifest this update: Mon 03 Nov 2025 02:07:15 +0000 Manifest next update: Mon 10 Nov 2025 02:07:15 +0000 Files and hashes: 1: Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl (hash: /PkPbSRgCgu26u1KnFyC0WXIsgQMUYyW5sMFSwJqJIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EDF, serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA Validity Not Before: Nov 3 02:07:15 2025 GMT Not After : Nov 10 02:07:15 2025 GMT Subject: CN=69080e53-5a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f4:43:4e:83:0f:2b:42:6e:0d:7f:48:2f:73: f1:d2:e1:e4:22:4b:c7:e1:d7:84:65:e9:53:22:14: 58:70:52:87:b9:8c:43:41:76:91:87:bb:d3:ab:73: 47:eb:7c:98:a8:ee:5f:51:76:b9:42:94:69:03:81: 78:94:49:51:41:61:b4:b9:97:a2:b8:5a:59:91:fe: f0:58:48:68:48:40:5e:dd:65:33:3e:91:1e:49:5c: 9f:4e:85:0a:2c:41:63:1f:fb:be:ef:37:b8:11:62: 53:e1:ed:04:b1:a3:c6:21:66:37:c5:81:75:cd:08: b5:da:58:f2:75:5b:b5:7d:69:ac:42:12:4d:b5:4e: f2:2c:ef:37:0a:e0:80:4f:97:81:3b:ef:e8:e8:1d: 77:87:73:62:1e:4f:d0:8e:84:0b:a0:b1:75:21:ba: 4e:7d:f2:85:a3:31:91:4a:a2:52:73:3b:6a:44:49: e8:8a:8b:de:3f:ac:c6:cf:04:cd:fc:77:de:1a:4e: 28:ef:4a:13:00:a5:33:c8:a6:fe:c0:c2:00:21:3b: af:bd:42:4b:3a:ed:48:1c:07:a2:93:30:e7:e9:f6: 28:96:fb:46:66:d1:19:78:16:65:10:aa:a8:9e:a7: f9:64:c0:aa:09:98:e8:2c:94:34:78:f1:02:65:e6: b4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1F:79:97:E2:FF:7E:8F:38:38:D0:AB:AA:6F:9D:02:6E:BA:23:C5 X509v3 Authority Key Identifier: keyid:0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:36:48:0e:ca:59:95:b7:fb:6f:f3:f2:15:fe:ce:7d:35:2b: e7:bc:cc:1c:fd:6e:a9:99:d1:b1:72:ff:06:11:11:3e:d5:a8: b3:c3:c4:2a:25:e3:95:4f:93:bb:da:37:77:29:2c:98:d0:83: b2:8b:6e:ce:aa:2b:eb:20:87:6d:9b:25:8f:d3:31:ad:f5:64: 31:0a:25:07:b8:24:05:bd:3a:4c:35:7d:68:9f:0a:37:2f:a3: 1a:ab:37:66:08:46:4e:22:cd:69:5c:74:d3:0d:22:e7:bf:bd: bf:ec:68:5b:63:6f:28:37:ee:73:12:aa:81:ed:cd:33:53:92: 1e:a7:7e:00:38:8b:57:0d:e1:e9:1b:eb:90:b1:81:b0:6c:13: 4d:d2:fd:e9:81:28:fa:48:a3:93:1e:9b:df:42:8c:2b:e6:2e: 16:2b:09:ad:cb:2f:e3:f9:b1:2f:6e:2f:fc:44:41:fe:77:4b: 74:60:fa:fc:3c:84:31:3a:2a:81:36:f3:17:cd:81:4e:a7:5b: 59:de:43:98:fa:14:9a:16:f1:ed:c6:37:5b:21:18:6d:7e:7b: fe:f4:bc:5b:12:e7:87:cf:3d:71:b4:d6:0c:0c:4c:50:d6:88: 56:ae:f2:ee:52:d6:4a:1c:a2:8e:ba:5d:04:31:2d:bc:e7:bd: a6:05:3a:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFREYxMTAvBgNVBAUTKDBBM0NGQzdGMzk1QTM0QkFCRTMxQjhDQTQ2MjNEMzFD NzZBOEQ5RkEwHhcNMjUxMTAzMDIwNzE1WhcNMjUxMTEwMDIwNzE1WjAYMRYwFAYD VQQDEw02OTA4MGU1My01YTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfRDToMPK0JuDX9IL3Px0uHkIkvH4deEZelTIhRYcFKHuYxDQXaRh7vTq3NH 63yYqO5fUXa5QpRpA4F4lElRQWG0uZeiuFpZkf7wWEhoSEBe3WUzPpEeSVyfToUK LEFjH/u+7ze4EWJT4e0EsaPGIWY3xYF1zQi12ljydVu1fWmsQhJNtU7yLO83CuCA T5eBO+/o6B13h3NiHk/QjoQLoLF1IbpOffKFozGRSqJScztqREnoioveP6zGzwTN /HfeGk4o70oTAKUzyKb+wMIAITuvvUJLOu1IHAeikzDn6fYolvtGZtEZeBZlEKqo nqf5ZMCqCZjoLJQ0ePECZea0twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsfeZfi /36PODjQq6pvnQJuuiPFMB8GA1UdIwQYMBaAFAo8/H85WjS6vjG4ykYj0xx2qNn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVERi9GNDZBRERFNjdD NTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9Dano4ZnpsYU5McS1NYmpLUmlQVEhIYW8y Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqejhmemxhTkxxLU1iaktSaVBUSEhhbzJmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEVERi9GNDZBRERFNjdDNTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9Dano4ZnpsYU5M cS1NYmpLUmlQVEhIYW8yZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwNkgOylmVt/tv8/IV/s59NSvnvMwc/W6pmdGxcv8GERE+1aizw8Qq JeOVT5O72jd3KSyY0IOyi27OqivrIIdtmyWP0zGt9WQxCiUHuCQFvTpMNX1onwo3 L6MaqzdmCEZOIs1pXHTTDSLnv72/7GhbY28oN+5zEqqB7c0zU5Iep34AOItXDeHp G+uQsYGwbBNN0v3pgSj6SKOTHpvfQowr5i4WKwmtyy/j+bEvbi/8REH+d0t0YPr8 PIQxOiqBNvMXzYFOp1tZ3kOY+hSaFvHtxjdbIRhtfnv+9LxbEueHzz1xtNYMDExQ 1ohWrvLuUtZKHKKOul0EMS28572mBTo+ -----END CERTIFICATE-----Generated at Tue Nov 4 23:29:27 2025 by rpki-client