$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft File: 15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json) Hash identifier: CXSFfNL40pCcq6lfznetjUiMl2hNwOLKHrUEwlbxPU0= Subject key identifier: 73:CB:71:1A:E7:A9:BA:FF:02:5E:14:FE:0B:D0:5F:F8:8E:47:B3:68 Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 Certificate issuer: /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft Manifest number: 7C Signing time: Mon 03 Nov 2025 06:46:44 +0000 Manifest this update: Mon 03 Nov 2025 06:46:43 +0000 Manifest next update: Mon 10 Nov 2025 06:46:43 +0000 Files and hashes: 1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: W50lSA0WGmSqChLS9cImn2lOSJPyl0QiD0qd8Nhtfjw=) 2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: 970zffhkVpQStk3jgKgrN42mDxhaIFK4aP3YfXR8LM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:46:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Validity Not Before: Nov 3 06:46:43 2025 GMT Not After : Nov 10 06:46:43 2025 GMT Subject: CN=69084fd3-dc86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b6:ab:01:e0:71:cf:66:f3:8c:b0:48:0c:65: 4c:b4:b1:15:56:07:ea:ca:78:41:e4:99:f0:e8:fe: ad:a5:c5:3a:59:25:81:58:f5:ba:2c:28:6e:6e:73: d4:f5:5d:bb:3d:1b:6e:6b:db:f1:f3:75:fc:21:6a: 41:31:87:d6:15:2d:a6:b0:fc:d4:2a:62:1d:20:c2: 2d:10:a7:c5:95:a9:c2:6d:47:d5:76:ff:c5:e5:b4: 13:19:70:41:5c:40:ad:79:a2:6a:9f:8b:f7:69:f2: 29:61:65:1e:33:d8:a7:4e:0f:af:2b:21:33:46:e6: 23:b2:36:83:6e:43:6e:b2:7c:25:f9:07:b7:ec:82: c2:b1:ba:92:91:0e:e3:cc:e5:c9:40:1a:8d:63:92: 4b:ff:9e:4d:79:79:5d:e4:92:b0:c0:0a:15:40:80: 96:13:9f:79:7a:89:40:98:e3:d5:be:cf:29:de:f3: 26:cf:e7:3f:1b:4e:53:49:d5:40:34:b5:42:61:20: 27:2e:6f:a0:bf:4d:1c:fc:82:36:9a:77:af:50:68: 33:13:48:d9:22:d3:69:7c:ff:56:17:c4:4e:a9:f3: 65:be:68:5f:7d:d3:a2:3a:57:95:6e:e3:13:42:ec: 48:4d:bd:54:8c:8a:dd:2b:6c:2b:58:cf:d5:9c:3f: 65:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CB:71:1A:E7:A9:BA:FF:02:5E:14:FE:0B:D0:5F:F8:8E:47:B3:68 X509v3 Authority Key Identifier: keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:8b:c7:ac:66:51:2d:84:1e:32:1d:0d:ed:50:f9:6d:6e:48: b6:ea:ed:9b:16:42:7d:de:70:a4:81:e7:2f:2f:7e:24:b7:93: 39:25:06:5b:3a:56:22:36:86:eb:3e:0b:2d:72:73:65:75:ad: ab:3d:7a:b0:45:f6:ce:c3:db:49:da:84:fc:ff:2d:4d:df:96: 08:7f:3f:18:5d:f4:8b:71:92:2b:34:4a:9b:15:84:7a:2b:f1: 21:83:3b:a4:61:b0:84:66:9b:d1:1e:f1:34:c7:a8:26:84:a2: b1:dd:03:9f:ca:c2:8a:ff:05:0f:cc:f0:b3:4d:dd:04:03:6a: 71:66:a7:0d:bc:5e:08:fb:1c:57:bc:cc:0f:7b:5a:f6:0f:62: 7b:ab:f2:ca:f3:99:41:b1:6f:dc:5e:99:11:c0:6d:bb:4f:46: 24:72:86:50:2d:11:35:ca:5e:17:6d:cd:67:8c:ec:f7:26:2b: 1d:4e:3f:d0:bd:01:dc:cf:8b:a1:e3:84:80:62:c6:ff:d5:12: 49:0e:65:50:80:b5:2c:db:1e:25:87:1b:4b:5b:c2:62:8b:84: 5c:7b:2b:a9:0b:e4:22:83:31:19:a9:00:59:cf:cd:6d:5c:e5: e8:19:95:59:0d:74:b8:fd:9a:85:0f:03:10:b7:9d:c3:2b:c4: 43:f7:b9:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0RFMzExMC8GA1UEBRMoRDc5RkUwQjA5Q0E0NEE4NDY2OTI4MzhGQzQyQkNGNDNE MkEzMkFEMjAeFw0yNTExMDMwNjQ2NDNaFw0yNTExMTAwNjQ2NDNaMBgxFjAUBgNV BAMTDTY5MDg0ZmQzLWRjODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWtqsB4HHPZvOMsEgMZUy0sRVWB+rKeEHkmfDo/q2lxTpZJYFY9bosKG5uc9T1 Xbs9G25r2/HzdfwhakExh9YVLaaw/NQqYh0gwi0Qp8WVqcJtR9V2/8XltBMZcEFc QK15omqfi/dp8ilhZR4z2KdOD68rITNG5iOyNoNuQ26yfCX5B7fsgsKxupKRDuPM 5clAGo1jkkv/nk15eV3kkrDAChVAgJYTn3l6iUCY49W+zyne8ybP5z8bTlNJ1UA0 tUJhICcub6C/TRz8gjaad69QaDMTSNki02l8/1YXxE6p82W+aF9906I6V5Vu4xNC 7EhNvVSMit0rbCtYz9WcP2XRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUc8txGuep uv8CXhT+C9Bf+I5Hs2gwHwYDVR0jBBgwFoAU15/gsJykSoRmkoOPxCvPQ9KjKtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3REUzLzRFMUVFQUJBRkMz NzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29SbWtvT1B4Q3ZQUTlLakt0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTVfZ3NKeWtTb1Jta29PUHhDdlBROUtqS3RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 REUzLzRFMUVFQUJBRkMzNzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29S bWtvT1B4Q3ZQUTlLakt0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADuLx6xmUS2EHjIdDe1Q+W1uSLbq7ZsWQn3ecKSB5y8vfiS3kzklBls6 ViI2hus+Cy1yc2V1ras9erBF9s7D20nahPz/LU3flgh/Pxhd9Itxkis0SpsVhHor 8SGDO6RhsIRmm9Ee8TTHqCaEorHdA5/Kwor/BQ/M8LNN3QQDanFmpw28Xgj7HFe8 zA97WvYPYnur8srzmUGxb9xemRHAbbtPRiRyhlAtETXKXhdtzWeM7PcmKx1OP9C9 AdzPi6HjhIBixv/VEkkOZVCAtSzbHiWHG0tbwmKLhFx7K6kL5CKDMRmpAFnPzW1c 5egZlVkNdLj9moUPAxC3ncMrxEP3ufQ= -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:51 2025 by rpki-client