$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft File: SO9orVG71xh-JKCji6u6pfwRE-4.mft (raw, json) Hash identifier: kgXwVWLSrLniMvPoMNsUQwUbI28VUdgm2OULXH0pxGo= Subject key identifier: 40:D6:3A:55:8E:40:40:73:58:F0:36:E4:16:78:EF:55:28:DB:4D:43 Authority key identifier: 48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE Certificate issuer: /CN=A91ADA93/serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Certificate serial: 08F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft Manifest number: 08F6 Signing time: Sat 18 Oct 2025 21:26:37 +0000 Manifest this update: Sat 18 Oct 2025 21:26:36 +0000 Manifest next update: Sat 25 Oct 2025 21:26:36 +0000 Files and hashes: 1: SO9orVG71xh-JKCji6u6pfwRE-4.crl (hash: BsWAhn9D7ahbhTRBCnv56moAbFud4mHmZc9gjvgTYts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2295 (0x8f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADA93, serialNumber=48EF68AD51BBD7187E24A0A38BABBAA5FC1113EE Validity Not Before: Oct 18 21:26:36 2025 GMT Not After : Oct 25 21:26:36 2025 GMT Subject: CN=68f4060d-75e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9f:bf:0b:71:d2:6e:60:3a:aa:fc:b5:5b:0a: c5:e1:9f:2c:42:02:37:65:32:ef:75:01:dd:8f:79: 7a:33:94:89:8c:5f:e3:de:c9:f6:c6:11:22:0f:5d: f6:55:8a:ac:59:cf:c4:b8:74:bb:51:24:63:b4:c5: ac:da:af:af:ad:46:60:fe:72:50:4b:2a:79:e4:1d: 66:44:87:d5:5a:1d:da:a7:54:88:bd:8c:d5:3e:f2: 11:45:a1:8f:1d:6a:07:bf:ff:bc:e3:56:08:98:09: c1:d5:59:e5:36:a0:56:ef:98:94:ab:63:78:3e:cb: c4:a7:9e:17:f7:98:8c:8d:5a:b5:37:dc:0b:d9:2c: 24:67:16:01:72:f9:c4:c5:21:0b:f8:04:cd:e6:02: c8:40:0a:dc:53:9b:bb:0b:db:67:48:56:c8:4d:02: c1:2f:f5:11:19:c0:94:48:ca:57:db:52:3e:9c:86: 1f:39:44:4b:9a:7f:3e:35:2e:ce:f9:d4:f5:21:a0: 34:50:2b:12:9c:1b:18:61:20:1c:13:a3:2a:71:86: 8b:30:1a:b2:85:9e:c0:12:b1:29:29:ef:93:cb:71: c5:a0:77:0e:50:0a:59:4a:93:e3:00:79:75:e9:f1: cc:31:35:9b:c5:2e:24:86:17:16:0b:e8:67:47:db: aa:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D6:3A:55:8E:40:40:73:58:F0:36:E4:16:78:EF:55:28:DB:4D:43 X509v3 Authority Key Identifier: keyid:48:EF:68:AD:51:BB:D7:18:7E:24:A0:A3:8B:AB:BA:A5:FC:11:13:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SO9orVG71xh-JKCji6u6pfwRE-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA93/5CCBD4E0B6AC11EABA83CB86C4F9AE02/SO9orVG71xh-JKCji6u6pfwRE-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:a4:e6:9a:d1:52:bc:cc:66:46:42:4a:b5:42:d5:ad:2b:69: 44:d2:54:ea:e7:fa:c7:46:14:96:a0:be:73:1e:47:d2:34:45: df:ed:dc:35:e0:a3:a3:9b:94:25:38:19:ff:4c:94:0f:b8:13: ea:bc:4c:13:c4:d7:6f:31:fe:83:2c:4d:83:ca:3b:ee:94:17: 5b:fc:5e:82:84:aa:22:60:d7:8c:df:61:31:dd:cc:c6:af:56: 87:59:0e:8d:30:cd:ee:43:04:db:61:cd:85:0e:10:08:60:68: 76:6d:01:06:4b:ea:c0:ab:59:c0:a3:32:8a:25:40:06:47:e3: bd:98:8c:94:b9:35:73:80:7e:9e:00:73:88:13:97:73:bd:7a: e1:08:d3:c9:25:f2:bb:e5:ab:96:de:8e:ad:cd:8f:38:3d:b6: f4:c5:de:a0:06:7d:8c:58:86:27:c8:1e:7b:20:a1:5c:a8:51: 37:ae:b3:85:0b:7d:91:e7:04:d5:f5:d8:82:e7:89:db:62:95: f0:af:ad:a7:0a:a7:a7:84:82:7c:10:3f:60:a0:cc:f1:06:f4: 3d:9c:8e:d0:5a:6e:75:b2:8c:49:4c:74:4e:6b:86:ab:4b:3a: a2:d5:86:6d:d7:28:57:4f:dd:16:9f:cf:e9:63:c4:6b:05:1d: 89:2d:28:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURBOTMxMTAvBgNVBAUTKDQ4RUY2OEFENTFCQkQ3MTg3RTI0QTBBMzhCQUJCQUE1 RkMxMTEzRUUwHhcNMjUxMDE4MjEyNjM2WhcNMjUxMDI1MjEyNjM2WjAYMRYwFAYD VQQDEw02OGY0MDYwZC03NWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlJ+/C3HSbmA6qvy1WwrF4Z8sQgI3ZTLvdQHdj3l6M5SJjF/j3sn2xhEiD132 VYqsWc/EuHS7USRjtMWs2q+vrUZg/nJQSyp55B1mRIfVWh3ap1SIvYzVPvIRRaGP HWoHv/+841YImAnB1VnlNqBW75iUq2N4PsvEp54X95iMjVq1N9wL2SwkZxYBcvnE xSEL+ATN5gLIQArcU5u7C9tnSFbITQLBL/URGcCUSMpX21I+nIYfOURLmn8+NS7O +dT1IaA0UCsSnBsYYSAcE6MqcYaLMBqyhZ7AErEpKe+Ty3HFoHcOUApZSpPjAHl1 6fHMMTWbxS4khhcWC+hnR9uqqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDWOlWO QEBzWPA25BZ471Uo201DMB8GA1UdIwQYMBaAFEjvaK1Ru9cYfiSgo4uruqX8ERPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREE5My81Q0NCRDRFMEI2 QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4aC1KS0NqaTZ1NnBmd1JF LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPOW9yVkc3MXhoLUpLQ2ppNnU2cGZ3UkUtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REE5My81Q0NCRDRFMEI2QUMxMUVBQkE4M0NCODZDNEY5QUUwMi9TTzlvclZHNzF4 aC1KS0NqaTZ1NnBmd1JFLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4pOaa0VK8zGZGQkq1QtWtK2lE0lTq5/rHRhSWoL5zHkfSNEXf7dw1 4KOjm5QlOBn/TJQPuBPqvEwTxNdvMf6DLE2DyjvulBdb/F6ChKoiYNeM32Ex3czG r1aHWQ6NMM3uQwTbYc2FDhAIYGh2bQEGS+rAq1nAozKKJUAGR+O9mIyUuTVzgH6e AHOIE5dzvXrhCNPJJfK75auW3o6tzY84Pbb0xd6gBn2MWIYnyB57IKFcqFE3rrOF C32R5wTV9diC54nbYpXwr62nCqenhIJ8ED9goMzxBvQ9nI7QWm51soxJTHROa4ar Szqi1YZt1yhXT90Wn8/pY8RrBR2JLSiH -----END CERTIFICATE-----Generated at Mon Oct 20 05:42:10 2025 by rpki-client