$ rpki-client -vvf rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft File: -1rPvPn87wNLipO9MZ5iBELWZn8.mft (raw, json) Hash identifier: 2bJP9hozBt90m52BO+PkvFg/trYAn+3dcqf7VZYRJeE= Subject key identifier: 06:43:DB:82:4F:8A:F1:22:68:02:27:08:A4:12:F5:25:2B:BC:F6:26 Authority key identifier: FB:5A:CF:BC:F9:FC:EF:03:4B:8A:93:BD:31:9E:62:04:42:D6:66:7F Certificate issuer: /CN=A912F515/serialNumber=FB5ACFBCF9FCEF034B8A93BD319E620442D6667F Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft Manifest number: D9 Signing time: Wed 05 Nov 2025 05:48:01 +0000 Manifest this update: Wed 05 Nov 2025 05:48:01 +0000 Manifest next update: Wed 12 Nov 2025 05:48:00 +0000 Files and hashes: 1: -1rPvPn87wNLipO9MZ5iBELWZn8.crl (hash: GmEYDjpz0sIWlGR8RGnvHxDOBrK/IAQ6GWYJzPZDmAY=) 2: 6A8E3C9474A811EFA3123A41C4F9AE02.roa (hash: 3DRrxdG8LfKAYdtHGcco//4+Q6X+ndXhUkgJbiWj/MI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.crl rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F515, serialNumber=FB5ACFBCF9FCEF034B8A93BD319E620442D6667F Validity Not Before: Nov 5 05:48:01 2025 GMT Not After : Nov 12 05:48:00 2025 GMT Subject: CN=690ae511-9f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:98:89:4e:11:26:0d:d9:f5:64:ba:7c:ab:e5: d6:e9:5e:22:fc:f2:f1:d1:80:5e:f7:19:c1:36:67: f1:b9:5a:3b:4f:b7:f8:bf:48:3d:8f:d3:65:61:b2: 4f:a6:7b:48:63:cd:55:9a:15:12:0f:1d:ce:d1:e9: 56:93:e5:22:3b:fb:ec:8b:7e:8f:5c:b6:2c:e3:88: 92:2a:4c:d1:f8:a6:4c:c9:16:df:48:a0:df:72:54: af:36:ea:c7:ed:f2:51:77:03:b3:95:26:6d:89:04: 21:e4:1f:99:26:db:04:24:ad:80:86:47:02:c1:20: 77:ca:fb:1f:68:09:22:28:25:d6:c9:93:18:7f:6f: 5f:0b:dc:7e:fa:8b:3e:97:b6:b0:8b:90:fc:ae:cd: 8f:92:79:ce:a9:f2:29:20:be:2e:77:de:80:4b:dd: 30:5d:33:1d:41:de:97:57:d0:c4:e6:fe:c1:20:10: 79:cc:0b:15:b6:80:42:3d:7d:50:51:55:6d:53:c7: cb:c8:8d:56:89:d7:7b:16:eb:4c:eb:00:c0:ef:3b: ca:14:2f:45:42:39:56:6d:1a:f0:ac:c7:7e:cc:06: 3e:53:8b:68:bc:43:ad:8f:38:36:b2:3e:dc:f7:09: 06:5d:de:ad:92:7d:b6:2a:08:d6:dd:2d:fa:a3:b9: 3d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:43:DB:82:4F:8A:F1:22:68:02:27:08:A4:12:F5:25:2B:BC:F6:26 X509v3 Authority Key Identifier: keyid:FB:5A:CF:BC:F9:FC:EF:03:4B:8A:93:BD:31:9E:62:04:42:D6:66:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ef:76:d6:0e:8f:24:43:6b:b7:35:eb:dc:d9:43:b0:82:96: 8a:10:a0:5c:82:f2:c1:d9:7b:99:af:0c:ca:a1:e0:76:bf:dc: b2:3f:35:15:0d:23:b4:93:da:94:98:5a:5a:54:ff:09:ec:41: df:d6:16:88:dc:da:c3:f5:09:e9:c0:49:e1:2d:14:7a:89:82: 7e:98:e7:ee:13:30:16:e6:b8:d3:d4:1c:f7:c0:10:cf:17:32: d2:19:9c:87:16:de:08:a8:b1:41:e9:f9:84:a0:ec:26:de:2d: cd:18:d3:db:a8:a3:a3:a3:39:de:90:e9:7a:36:f1:c0:8d:e2: 4f:89:45:0c:1c:ac:3c:fd:c2:ba:8d:df:b2:96:db:68:5b:bb: 2a:1e:f1:46:71:fc:bf:65:85:e5:1c:a5:2b:57:38:31:b6:7f: 8f:0d:8d:c9:a8:75:f1:9c:14:9c:d5:17:75:56:34:94:94:2b: 7f:02:0d:9f:cc:69:7f:25:c1:be:ee:cc:33:47:44:e4:a2:2c: 73:81:5b:f9:79:a8:2e:0c:57:43:ac:0a:3a:67:f3:e1:2a:2b: 86:6a:b0:1c:99:46:19:50:8d:36:e5:a8:64:e2:6b:8e:53:6e: 29:da:de:5b:cb:45:db:d1:1f:7c:4b:8c:0b:bd:e7:87:74:01: 6e:62:51:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MTUxMTAvBgNVBAUTKEZCNUFDRkJDRjlGQ0VGMDM0QjhBOTNCRDMxOUU2MjA0 NDJENjY2N0YwHhcNMjUxMTA1MDU0ODAxWhcNMjUxMTEyMDU0ODAwWjAYMRYwFAYD VQQDEw02OTBhZTUxMS05ZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3piJThEmDdn1ZLp8q+XW6V4i/PLx0YBe9xnBNmfxuVo7T7f4v0g9j9NlYbJP pntIY81VmhUSDx3O0elWk+UiO/vsi36PXLYs44iSKkzR+KZMyRbfSKDfclSvNurH 7fJRdwOzlSZtiQQh5B+ZJtsEJK2AhkcCwSB3yvsfaAkiKCXWyZMYf29fC9x++os+ l7awi5D8rs2PknnOqfIpIL4ud96AS90wXTMdQd6XV9DE5v7BIBB5zAsVtoBCPX1Q UVVtU8fLyI1Widd7FutM6wDA7zvKFC9FQjlWbRrwrMd+zAY+U4tovEOtjzg2sj7c 9wkGXd6tkn22KgjW3S36o7k91QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZD24JP ivEiaAInCKQS9SUrvPYmMB8GA1UdIwQYMBaAFPtaz7z5/O8DS4qTvTGeYgRC1mZ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUxNS8zRDNDQTMwODc0 QTcxMUVGOEVBMkM1M0RDNEY5QUUwMi8tMXJQdlBuODd3TkxpcE85TVo1aUJFTFda bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0xclB2UG44N3dOTGlwTzlNWjVpQkVMV1puOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUxNS8zRDNDQTMwODc0QTcxMUVGOEVBMkM1M0RDNEY5QUUwMi8tMXJQdlBuODd3 TkxpcE85TVo1aUJFTFdabjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa73bWDo8kQ2u3Nevc2UOwgpaKEKBcgvLB2XuZrwzKoeB2v9yyPzUV DSO0k9qUmFpaVP8J7EHf1haI3NrD9QnpwEnhLRR6iYJ+mOfuEzAW5rjT1Bz3wBDP FzLSGZyHFt4IqLFB6fmEoOwm3i3NGNPbqKOjoznekOl6NvHAjeJPiUUMHKw8/cK6 jd+ylttoW7sqHvFGcfy/ZYXlHKUrVzgxtn+PDY3JqHXxnBSc1Rd1VjSUlCt/Ag2f zGl/JcG+7swzR0TkoixzgVv5eaguDFdDrAo6Z/PhKiuGarAcmUYZUI025ahk4muO U24p2t5by0Xb0R98S4wLveeHdAFuYlGz -----END CERTIFICATE-----Generated at Wed Nov 5 12:04:29 2025 by rpki-client