$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft File: U0krmdbQfZSfaQqTaVsUkoIWmi4.mft (raw, json) Hash identifier: xnY/jQXqYbmjYStwIhqK/LOTZARcoYURKAMoch/Zg+c= Subject key identifier: 8A:01:02:88:B8:59:8F:CD:E2:D5:ED:3C:90:ED:CD:29:C0:26:21:8D Authority key identifier: 53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E Certificate issuer: /CN=A9111623/serialNumber=53492B99D6D07D949F690A93695B149282169A2E Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft Manifest number: 03 Signing time: Sun 19 Oct 2025 07:40:55 +0000 Manifest this update: Sun 19 Oct 2025 07:40:55 +0000 Manifest next update: Sun 26 Oct 2025 07:40:55 +0000 Files and hashes: 1: U0krmdbQfZSfaQqTaVsUkoIWmi4.crl (hash: szpphujtIeZQkLjfnaAcEixvyfTMwfJB3laUb+T7WNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111623, serialNumber=53492B99D6D07D949F690A93695B149282169A2E Validity Not Before: Oct 19 07:40:55 2025 GMT Not After : Oct 26 07:40:55 2025 GMT Subject: CN=68f49607-1336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1e:2e:fe:01:64:e7:a8:26:0f:2e:0c:c5:4e: c8:b1:13:cc:93:a2:88:a4:19:ba:5f:06:4d:1d:15: 84:74:07:e8:4e:40:ec:c9:e2:7c:1d:5c:2e:4c:6d: 54:ca:92:cf:d8:c2:9f:a1:1f:30:cb:9b:01:69:83: e5:07:bc:96:f4:8d:06:29:16:ed:90:e4:4c:4a:f9: e2:9c:b5:e0:c0:d9:88:1f:cb:b5:5a:ba:6f:80:af: f6:7d:5c:db:e1:a9:6f:3b:56:f3:3a:30:46:bb:91: 54:fb:68:c2:c9:05:3a:ab:2e:17:51:e3:96:7a:6d: f0:37:4b:b2:0a:69:35:61:a7:1b:98:18:bd:5e:dc: bf:f9:cb:29:84:eb:0f:af:92:11:a5:69:04:ce:3c: 3e:54:56:f4:0b:08:53:1a:e1:b7:cc:40:2e:91:ff: 78:e3:35:83:fd:2f:ab:63:56:6b:93:2f:47:a1:d8: 3d:04:3a:18:66:56:61:db:a1:3b:38:bc:3f:17:90: bf:5c:79:11:21:d5:91:af:c4:13:89:3a:ad:af:18: b0:8b:15:f9:86:7b:eb:c8:f0:e7:ea:ba:28:e4:46: 82:02:81:17:c7:59:7d:23:35:11:5a:f7:5d:a4:ab: d1:21:05:82:cc:28:00:82:e1:9e:0e:82:60:e1:f8: 74:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:01:02:88:B8:59:8F:CD:E2:D5:ED:3C:90:ED:CD:29:C0:26:21:8D X509v3 Authority Key Identifier: keyid:53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:17:18:9b:61:3d:85:bd:20:fe:e1:76:7e:c7:32:3b:43:30: b8:d2:b9:5f:79:0e:3e:8a:95:70:17:82:0a:54:11:e6:fa:3a: 15:f1:62:47:c7:2c:3e:89:4a:65:d0:01:16:d0:87:a0:c7:2a: 7e:62:bc:02:2c:2d:10:77:90:5f:d2:ce:65:aa:e5:0a:17:00: 55:7a:53:f8:3c:de:7d:aa:a5:c8:cf:46:f5:7d:7e:56:78:5e: 92:ab:bc:ca:ed:1b:6c:4c:3e:da:c1:e7:df:d5:69:e9:d2:62: 56:8e:9f:9a:e5:24:e8:df:7a:35:1e:1f:a5:a8:28:02:bd:13: da:c3:31:d6:f0:e9:90:4c:4d:ea:e5:97:20:67:83:72:ff:a2: 0d:c6:e1:ae:12:0d:f8:63:9d:cc:a9:0a:59:c4:80:35:32:e6: 8b:b1:97:f8:3f:7b:c0:c2:54:6e:56:2a:66:3e:76:2c:75:7c: 87:ba:e1:2f:91:75:50:46:41:59:a7:b9:b6:5d:12:95:a3:2a: 2c:93:f9:35:55:c7:91:8b:cd:9a:f3:1e:5a:47:da:dc:de:8a: e1:db:de:35:7d:26:dc:bc:eb:ff:1b:1a:a6:33:c1:b8:db:34: da:dd:b1:6e:43:12:e9:49:b5:b5:8c:e8:23:e6:6f:c4:c5:b0: 19:ab:fb:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTYyMzExMC8GA1UEBRMoNTM0OTJCOTlENkQwN0Q5NDlGNjkwQTkzNjk1QjE0OTI4 MjE2OUEyRTAeFw0yNTEwMTkwNzQwNTVaFw0yNTEwMjYwNzQwNTVaMBgxFjAUBgNV BAMTDTY4ZjQ5NjA3LTEzMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUHi7+AWTnqCYPLgzFTsixE8yTooikGbpfBk0dFYR0B+hOQOzJ4nwdXC5MbVTK ks/Ywp+hHzDLmwFpg+UHvJb0jQYpFu2Q5ExK+eKcteDA2Ygfy7Vaum+Ar/Z9XNvh qW87VvM6MEa7kVT7aMLJBTqrLhdR45Z6bfA3S7IKaTVhpxuYGL1e3L/5yymE6w+v khGlaQTOPD5UVvQLCFMa4bfMQC6R/3jjNYP9L6tjVmuTL0eh2D0EOhhmVmHboTs4 vD8XkL9ceREh1ZGvxBOJOq2vGLCLFfmGe+vI8OfquijkRoICgRfHWX0jNRFa912k q9EhBYLMKACC4Z4OgmDh+HT/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUigECiLhZ j83i1e08kO3NKcAmIY0wHwYDVR0jBBgwFoAUU0krmdbQfZSfaQqTaVsUkoIWmi4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExNjIzLzkwNzAwMEY2QUIy NDExRjBBRkNFNUQyRkM0RjlBRTAyL1Uwa3JtZGJRZlpTZmFRcVRhVnNVa29JV21p NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVTBrcm1kYlFmWlNmYVFxVGFWc1Vrb0lXbWk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx NjIzLzkwNzAwMEY2QUIyNDExRjBBRkNFNUQyRkM0RjlBRTAyL1Uwa3JtZGJRZlpT ZmFRcVRhVnNVa29JV21pNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFcXGJthPYW9IP7hdn7HMjtDMLjSuV95Dj6KlXAXggpUEeb6OhXxYkfH LD6JSmXQARbQh6DHKn5ivAIsLRB3kF/SzmWq5QoXAFV6U/g83n2qpcjPRvV9flZ4 XpKrvMrtG2xMPtrB59/VaenSYlaOn5rlJOjfejUeH6WoKAK9E9rDMdbw6ZBMTerl lyBng3L/og3G4a4SDfhjncypClnEgDUy5ouxl/g/e8DCVG5WKmY+dix1fIe64S+R dVBGQVmnubZdEpWjKiyT+TVVx5GLzZrzHlpH2tzeiuHb3jV9Jty86/8bGqYzwbjb NNrdsW5DEulJtbWM6CPmb8TFsBmr+10= -----END CERTIFICATE-----Generated at Mon Oct 20 17:59:05 2025 by rpki-client