$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft File: S0Nd1JrBEcPde6D08IaF8hZRWFk.mft (raw, json) Hash identifier: Nbh0bVGAgD9eJNNRxtrnzIpb5NcaUjS7fXexLuQcjvQ= Subject key identifier: 9A:44:E2:21:DB:4C:1B:ED:A6:8A:B0:CE:8C:A8:B5:F7:59:11:9A:46 Authority key identifier: 4B:43:5D:D4:9A:C1:11:C3:DD:7B:A0:F4:F0:86:85:F2:16:51:58:59 Certificate issuer: /CN=A91DC33B/serialNumber=4B435DD49AC111C3DD7BA0F4F08685F216515859 Certificate serial: 16C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft Manifest number: 16EE Signing time: Tue 04 Nov 2025 16:45:51 +0000 Manifest this update: Tue 04 Nov 2025 16:45:51 +0000 Manifest next update: Tue 11 Nov 2025 16:45:51 +0000 Files and hashes: 1: S0Nd1JrBEcPde6D08IaF8hZRWFk.crl (hash: 86bAbtJ9tuZ2fmaUFbiHWOtezjze3SC1Gm/1sGWPH1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.crl rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5827 (0x16c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC33B, serialNumber=4B435DD49AC111C3DD7BA0F4F08685F216515859 Validity Not Before: Nov 4 16:45:51 2025 GMT Not After : Nov 11 16:45:51 2025 GMT Subject: CN=690a2dbf-a7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:13:98:b1:c5:f1:d0:77:bd:dc:c1:70:5c:cd: b6:09:45:c8:ad:ca:22:36:1d:af:a8:3f:b9:46:e2: 48:fa:5c:a5:37:f6:b2:ee:8f:08:c7:a0:11:f3:e7: d4:d9:58:f2:6f:ea:d2:9a:a8:bc:ff:80:ed:8e:2b: 74:c6:74:8b:6f:50:a2:02:72:d2:e0:fe:c3:a5:e8: 78:8c:97:c3:e3:38:54:e8:0a:0d:42:72:06:cc:ea: 10:9f:7b:bf:5f:cb:76:46:1c:36:ab:14:9e:a8:94: b2:75:a6:e8:93:b4:63:12:f5:ca:54:cc:f8:85:44: df:f0:44:d4:89:8f:f7:04:0e:d2:90:7c:02:71:98: 0a:b0:c9:d7:37:41:39:8b:5c:04:cc:28:08:ed:c7: 4f:e5:af:df:61:7e:b6:90:b8:86:24:84:8b:5e:1e: 70:73:22:0e:a7:be:f4:cf:e6:94:94:b1:c9:51:30: ab:fb:d1:37:d7:f8:56:eb:65:db:04:4c:78:b2:5d: 95:9d:4a:96:ef:9a:4b:49:75:33:bd:a8:70:1c:6c: 61:cf:c8:a2:f2:bf:08:fa:51:e5:bf:da:b8:c6:e7: 29:12:ae:81:8a:89:f5:40:67:94:8b:6b:e2:56:0c: 5f:7f:e3:47:a4:1a:4e:19:73:01:09:69:57:85:4e: cf:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:44:E2:21:DB:4C:1B:ED:A6:8A:B0:CE:8C:A8:B5:F7:59:11:9A:46 X509v3 Authority Key Identifier: keyid:4B:43:5D:D4:9A:C1:11:C3:DD:7B:A0:F4:F0:86:85:F2:16:51:58:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:1a:43:ea:5f:59:d6:67:11:9f:f1:95:4a:04:93:e1:70:5a: 83:83:c6:58:d9:dd:24:57:1a:f5:48:9e:da:0a:c2:fc:af:26: a4:c3:43:41:59:16:50:40:07:a6:7d:9d:6d:33:35:f5:3b:06: 22:e8:27:7e:7f:db:30:a9:4c:24:cd:c6:15:02:d9:64:c7:c8: f5:bb:17:1a:b3:b5:ff:4c:0a:ed:ef:66:3d:d4:cf:6f:54:13: 8e:58:d6:9e:a1:e6:61:cd:51:b6:0e:45:7f:92:d3:59:24:a7: e1:bd:55:33:8f:aa:fd:c0:e2:c1:09:d6:9d:e4:37:f1:bf:8e: 01:70:5d:d9:e2:fe:95:49:39:0d:e4:3d:4d:e3:93:a5:87:7c: 7e:cd:a3:b3:16:7a:46:5f:53:26:41:5c:e0:94:32:74:91:6e: 4a:e4:43:e7:e8:4e:0a:5a:b1:6a:45:3c:b4:f0:58:c8:ec:ed: c9:90:50:ea:a4:11:54:c0:03:04:db:73:91:c6:6a:6d:50:b0: 00:11:af:0d:d2:90:03:0c:0b:6e:4c:ca:1f:2d:34:66:02:84: 91:00:c2:b2:70:55:b4:9c:46:5e:3e:17:a3:29:30:dd:15:e0: 07:d7:9b:57:84:ba:7f:e1:b9:fe:f5:e7:b4:79:87:b7:aa:07: e3:17:99:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzM0IxMTAvBgNVBAUTKDRCNDM1REQ0OUFDMTExQzNERDdCQTBGNEYwODY4NUYy MTY1MTU4NTkwHhcNMjUxMTA0MTY0NTUxWhcNMjUxMTExMTY0NTUxWjAYMRYwFAYD VQQDEw02OTBhMmRiZi1hN2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtROYscXx0He93MFwXM22CUXIrcoiNh2vqD+5RuJI+lylN/ay7o8Ix6AR8+fU 2Vjyb+rSmqi8/4Dtjit0xnSLb1CiAnLS4P7Dpeh4jJfD4zhU6AoNQnIGzOoQn3u/ X8t2Rhw2qxSeqJSydabok7RjEvXKVMz4hUTf8ETUiY/3BA7SkHwCcZgKsMnXN0E5 i1wEzCgI7cdP5a/fYX62kLiGJISLXh5wcyIOp770z+aUlLHJUTCr+9E31/hW62Xb BEx4sl2VnUqW75pLSXUzvahwHGxhz8ii8r8I+lHlv9q4xucpEq6Bion1QGeUi2vi Vgxff+NHpBpOGXMBCWlXhU7PYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJpE4iHb TBvtpoqwzoyotfdZEZpGMB8GA1UdIwQYMBaAFEtDXdSawRHD3Xug9PCGhfIWUVhZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMzQi9CNEM5RkU5MjA2 RjUxMUU4OTYxOEY0MkZDNEY5QUUwMi9TME5kMUpyQkVjUGRlNkQwOElhRjhoWlJX RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwTmQxSnJCRWNQZGU2RDA4SWFGOGhaUldGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzMzQi9CNEM5RkU5MjA2RjUxMUU4OTYxOEY0MkZDNEY5QUUwMi9TME5kMUpyQkVj UGRlNkQwOElhRjhoWlJXRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFGkPqX1nWZxGf8ZVKBJPhcFqDg8ZY2d0kVxr1SJ7aCsL8ryakw0NB WRZQQAemfZ1tMzX1OwYi6Cd+f9swqUwkzcYVAtlkx8j1uxcas7X/TArt72Y91M9v VBOOWNaeoeZhzVG2DkV/ktNZJKfhvVUzj6r9wOLBCdad5Dfxv44BcF3Z4v6VSTkN 5D1N45Olh3x+zaOzFnpGX1MmQVzglDJ0kW5K5EPn6E4KWrFqRTy08FjI7O3JkFDq pBFUwAME23ORxmptULAAEa8N0pADDAtuTMofLTRmAoSRAMKycFW0nEZePhejKTDd FeAH15tXhLp/4bn+9ee0eYe3qgfjF5mG -----END CERTIFICATE-----Generated at Tue Nov 4 19:08:08 2025 by rpki-client