$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft File: 1u0VCduHw0xGCiZBoZt_SE5NxEU.mft (raw, json) Hash identifier: STgPlo4363kKsdY6hCCdhDM4AhMWRkKzTqR8QXaJr8o= Subject key identifier: 7C:A1:46:6F:90:1B:79:4D:3B:09:BE:22:41:68:9C:BA:C5:E6:21:45 Authority key identifier: D6:ED:15:09:DB:87:C3:4C:46:0A:26:41:A1:9B:7F:48:4E:4D:C4:45 Certificate issuer: /CN=A91F5216/serialNumber=D6ED1509DB87C34C460A2641A19B7F484E4DC445 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft Manifest number: 0223 Signing time: Wed 05 Nov 2025 02:08:38 +0000 Manifest this update: Wed 05 Nov 2025 02:08:38 +0000 Manifest next update: Wed 12 Nov 2025 02:08:38 +0000 Files and hashes: 1: 1u0VCduHw0xGCiZBoZt_SE5NxEU.crl (hash: dqNNqxaMzh8Fqq2rUBmQfqOlA8ZnXD2+PvuLAaP5b9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.crl rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5216, serialNumber=D6ED1509DB87C34C460A2641A19B7F484E4DC445 Validity Not Before: Nov 5 02:08:38 2025 GMT Not After : Nov 12 02:08:38 2025 GMT Subject: CN=690ab1a6-0e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e3:81:c4:fd:db:b9:20:49:0b:90:80:1d:5c: 2a:ba:b3:b4:de:4c:d6:23:46:7f:ce:eb:e5:6d:57: 51:68:29:78:7f:9f:15:4e:9f:d9:7f:d8:dd:6c:82: 6a:1f:e8:cc:78:61:4a:d7:0b:53:a2:2e:3c:e9:76: e7:b3:eb:cd:65:22:7f:4e:36:ec:3d:83:c3:6e:14: 2d:71:4c:80:e4:c6:c6:b8:65:81:02:87:bf:d5:25: fd:13:dc:9f:e8:cb:5f:d0:f9:6b:e6:af:e3:59:31: b3:f5:36:17:db:e1:1b:99:80:3b:fb:12:d7:5d:36: 9d:b2:2b:01:71:f1:b6:dc:1c:e7:a0:52:30:34:d5: 0c:53:c7:2c:39:16:bd:57:df:85:a7:1a:61:fd:1f: 72:92:dc:08:a7:0e:e5:7e:76:18:51:92:49:3d:17: 1f:2c:b9:de:98:8d:65:51:1e:88:00:ff:ee:c7:65: 88:74:42:ba:de:34:f8:75:e1:a0:83:1a:d0:08:01: 03:59:12:94:64:0b:cc:7c:fd:5e:48:15:7d:36:eb: 90:8e:1b:46:e1:ce:58:af:b1:0e:8b:a3:e2:77:f8: cf:3e:4e:42:cf:9b:97:9e:09:fd:b3:7c:db:33:b8: 8e:d4:e7:de:7b:8d:f4:5a:00:4d:98:4b:a8:ff:52: 7f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A1:46:6F:90:1B:79:4D:3B:09:BE:22:41:68:9C:BA:C5:E6:21:45 X509v3 Authority Key Identifier: keyid:D6:ED:15:09:DB:87:C3:4C:46:0A:26:41:A1:9B:7F:48:4E:4D:C4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:14:02:19:19:87:01:65:a1:f9:96:fb:57:d1:88:93:c3:2f: 64:28:6b:b0:8b:b0:90:40:d8:ed:1f:ab:f4:1a:9e:cc:18:eb: 83:f7:6e:d8:34:1d:98:44:0a:e5:b0:47:0e:42:bc:86:b1:9e: 23:ac:08:86:b1:a0:a7:45:53:5a:87:ea:14:aa:1e:96:21:3e: df:8a:0b:33:b6:c3:1d:7b:68:2c:b5:5e:79:95:c4:2a:d3:1b: 2f:02:5d:7c:8b:de:2e:bd:fc:e9:b6:81:f4:82:30:b2:4f:11: 2a:c4:3c:40:5a:6a:3a:56:bc:39:bb:b9:70:e3:15:cb:68:54: 57:d5:42:89:93:1a:35:69:30:c4:13:ac:5e:18:20:02:4c:56: d6:e0:c4:9e:6a:33:23:05:c5:da:52:85:84:72:69:a4:7b:80: dd:67:62:48:11:61:07:28:4c:4a:83:8a:d4:94:85:12:79:32: 70:16:1e:40:12:00:2e:86:2e:c9:84:21:09:58:ca:e5:35:10: a1:fa:25:79:c1:4d:19:d6:fd:d9:07:53:0a:d0:2f:8c:35:69: 61:05:36:4d:ae:a9:f7:da:20:0e:06:d7:2a:08:2d:07:9c:e1: 83:f6:8f:ce:bb:89:bb:4e:49:0c:6d:67:30:29:2c:11:db:68: ab:ec:7b:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMTYxMTAvBgNVBAUTKEQ2RUQxNTA5REI4N0MzNEM0NjBBMjY0MUExOUI3RjQ4 NEU0REM0NDUwHhcNMjUxMTA1MDIwODM4WhcNMjUxMTEyMDIwODM4WjAYMRYwFAYD VQQDEw02OTBhYjFhNi0wZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmuOBxP3buSBJC5CAHVwqurO03kzWI0Z/zuvlbVdRaCl4f58VTp/Zf9jdbIJq H+jMeGFK1wtToi486Xbns+vNZSJ/TjbsPYPDbhQtcUyA5MbGuGWBAoe/1SX9E9yf 6Mtf0Plr5q/jWTGz9TYX2+EbmYA7+xLXXTadsisBcfG23BznoFIwNNUMU8csORa9 V9+Fpxph/R9yktwIpw7lfnYYUZJJPRcfLLnemI1lUR6IAP/ux2WIdEK63jT4deGg gxrQCAEDWRKUZAvMfP1eSBV9NuuQjhtG4c5Yr7EOi6Pid/jPPk5Cz5uXngn9s3zb M7iO1Ofee430WgBNmEuo/1J/IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyhRm+Q G3lNOwm+IkFonLrF5iFFMB8GA1UdIwQYMBaAFNbtFQnbh8NMRgomQaGbf0hOTcRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi82NjQ1QUNBNjZF MDgxMUVEQkVFRDYyODRDNEY5QUUwMi8xdTBWQ2R1SHcweEdDaVpCb1p0X1NFNU54 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF1MFZDZHVIdzB4R0NpWkJvWnRfU0U1TnhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIxNi82NjQ1QUNBNjZFMDgxMUVEQkVFRDYyODRDNEY5QUUwMi8xdTBWQ2R1SHcw eEdDaVpCb1p0X1NFNU54RVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHFAIZGYcBZaH5lvtX0YiTwy9kKGuwi7CQQNjtH6v0Gp7MGOuD927Y NB2YRArlsEcOQryGsZ4jrAiGsaCnRVNah+oUqh6WIT7figsztsMde2gstV55lcQq 0xsvAl18i94uvfzptoH0gjCyTxEqxDxAWmo6Vrw5u7lw4xXLaFRX1UKJkxo1aTDE E6xeGCACTFbW4MSeajMjBcXaUoWEcmmke4DdZ2JIEWEHKExKg4rUlIUSeTJwFh5A EgAuhi7JhCEJWMrlNRCh+iV5wU0Z1v3ZB1MK0C+MNWlhBTZNrqn32iAOBtcqCC0H nOGD9o/Ou4m7TkkMbWcwKSwR22ir7Hvf -----END CERTIFICATE-----Generated at Wed Nov 5 16:36:41 2025 by rpki-client