$ rpki-client -vvf rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft File: 1mAaggCAx5DwpRpsN2X1tLDQGzc.mft (raw, json) Hash identifier: +oq+XhPNXGFiBbJb+rNtm1tqZs7/PKX2B4VqWoCegW0= Subject key identifier: B7:A9:D9:6B:90:A2:82:27:7A:00:2F:9D:D7:3B:3E:32:2C:FF:54:A1 Authority key identifier: D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37 Certificate issuer: /CN=A915343B/serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37 Certificate serial: 0B17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft Manifest number: 0B10 Signing time: Tue 04 Nov 2025 19:25:01 +0000 Manifest this update: Tue 04 Nov 2025 19:25:00 +0000 Manifest next update: Tue 11 Nov 2025 19:25:00 +0000 Files and hashes: 1: 1mAaggCAx5DwpRpsN2X1tLDQGzc.crl (hash: 0tLl7sLhTKzZkHT51s+zPU/2Jiuuww0MGlhexMUhtQY=) 2: 5EEC619850A611EA823DE980C4F9AE02.roa (hash: q02Hd4XFE+H9p8qEMOu2AbjA5nPs5WOETsJPUT9HbXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2839 (0xb17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915343B, serialNumber=D6601A820080C790F0A51A6C3765F5B4B0D01B37 Validity Not Before: Nov 4 19:25:00 2025 GMT Not After : Nov 11 19:25:00 2025 GMT Subject: CN=690a530d-0807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:87:18:11:4b:69:1e:19:e3:0c:66:b4:58:37: 21:79:a8:3c:a8:63:e3:c9:33:de:9f:e4:c6:7f:34: 51:10:4f:fe:2d:eb:47:58:ad:a4:32:fb:bd:01:96: 88:5f:ff:a6:b3:a4:1b:e5:59:f6:a6:84:26:e6:b4: f8:9e:6e:2d:6b:a2:b9:c3:fb:3d:c0:36:7c:6f:14: d9:f5:6b:81:f3:a1:04:f8:8d:a8:c3:ae:af:c2:21: 43:59:c3:0e:27:a0:8b:86:c3:86:5a:92:36:36:56: 93:52:8d:b4:1c:b3:3d:cb:60:82:3f:a5:09:a3:23: a8:4a:10:9a:22:80:e5:19:51:74:8f:3c:b7:e1:cf: c7:03:da:27:57:45:d1:c2:57:b5:6d:9a:f7:96:3a: de:7a:e7:03:b0:ec:7a:07:68:b8:dd:37:fb:27:86: 8a:40:54:e6:a7:7f:05:78:a5:0c:b5:5d:a3:81:ac: 94:e5:12:70:05:59:e6:b3:78:3e:41:1b:f3:d0:97: d2:a5:04:87:39:6e:6b:a7:73:56:ca:fa:72:a2:b8: 8f:7f:ba:fc:61:f1:90:20:80:24:c4:b1:94:c8:3f: c7:03:f6:97:09:68:e2:b6:c8:e1:0e:de:3d:64:7f: 95:6d:51:77:a8:ae:70:00:b7:7c:9a:af:e8:b4:e5: 6e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A9:D9:6B:90:A2:82:27:7A:00:2F:9D:D7:3B:3E:32:2C:FF:54:A1 X509v3 Authority Key Identifier: keyid:D6:60:1A:82:00:80:C7:90:F0:A5:1A:6C:37:65:F5:B4:B0:D0:1B:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1mAaggCAx5DwpRpsN2X1tLDQGzc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915343B/6A0383E650A511EA976CB77FC4F9AE02/1mAaggCAx5DwpRpsN2X1tLDQGzc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:48:15:24:28:88:85:69:66:aa:72:d1:43:0c:05:44:4d:5c: d8:32:a3:ec:13:a3:d0:9c:5e:88:bb:e3:72:0c:88:c2:0a:15: 9c:ed:92:84:fa:f3:2c:e3:c7:7e:fc:76:48:b1:6b:12:35:bf: 57:c1:33:86:96:37:60:27:e8:35:87:46:53:1b:24:0d:72:04: 36:b7:5b:9d:4d:f2:da:52:af:fa:82:27:9c:fb:ee:ea:85:2d: 6c:b4:ce:c9:6d:49:0e:7e:7b:08:e7:07:98:74:52:da:85:b2: 1b:58:bd:29:7b:30:2f:be:25:a5:f7:ec:fa:12:b5:81:d2:b1: af:76:b7:9f:ef:af:82:d6:3a:6b:10:bd:6e:98:9f:a4:8f:87: 90:d6:cc:2c:23:a5:1f:f4:91:69:b8:55:47:a3:42:bc:34:d4: 16:2c:63:cf:2e:1f:39:36:78:bf:ff:41:eb:c7:63:22:33:1e: a6:aa:a9:ed:4c:3c:17:1b:e3:f3:a7:9b:e0:cc:32:c2:3e:c6: 71:71:37:c4:1d:5e:7c:4b:f3:44:10:c3:2f:21:bd:5b:7f:b9: cd:ee:a2:36:96:c2:30:38:d3:20:c6:49:c2:53:a8:da:cc:8e: 56:b1:bf:60:47:26:8e:ab:dd:3a:e4:b3:ec:e1:67:1c:e9:b5: 58:90:66:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM0M0IxMTAvBgNVBAUTKEQ2NjAxQTgyMDA4MEM3OTBGMEE1MUE2QzM3NjVGNUI0 QjBEMDFCMzcwHhcNMjUxMTA0MTkyNTAwWhcNMjUxMTExMTkyNTAwWjAYMRYwFAYD VQQDEw02OTBhNTMwZC0wODA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IcYEUtpHhnjDGa0WDcheag8qGPjyTPen+TGfzRREE/+LetHWK2kMvu9AZaI X/+ms6Qb5Vn2poQm5rT4nm4ta6K5w/s9wDZ8bxTZ9WuB86EE+I2ow66vwiFDWcMO J6CLhsOGWpI2NlaTUo20HLM9y2CCP6UJoyOoShCaIoDlGVF0jzy34c/HA9onV0XR wle1bZr3ljreeucDsOx6B2i43Tf7J4aKQFTmp38FeKUMtV2jgayU5RJwBVnms3g+ QRvz0JfSpQSHOW5rp3NWyvpyoriPf7r8YfGQIIAkxLGUyD/HA/aXCWjitsjhDt49 ZH+VbVF3qK5wALd8mq/otOVukwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLep2WuQ ooInegAvndc7PjIs/1ShMB8GA1UdIwQYMBaAFNZgGoIAgMeQ8KUabDdl9bSw0Bs3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzQzQi82QTAzODNFNjUw QTUxMUVBOTc2Q0I3N0ZDNEY5QUUwMi8xbUFhZ2dDQXg1RHdwUnBzTjJYMXRMRFFH emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFtQWFnZ0NBeDVEd3BScHNOMlgxdExEUUd6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzQzQi82QTAzODNFNjUwQTUxMUVBOTc2Q0I3N0ZDNEY5QUUwMi8xbUFhZ2dDQXg1 RHdwUnBzTjJYMXRMRFFHemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAESBUkKIiFaWaqctFDDAVETVzYMqPsE6PQnF6Iu+NyDIjCChWc7ZKE +vMs48d+/HZIsWsSNb9XwTOGljdgJ+g1h0ZTGyQNcgQ2t1udTfLaUq/6giec++7q hS1stM7JbUkOfnsI5weYdFLahbIbWL0pezAvviWl9+z6ErWB0rGvdref76+C1jpr EL1umJ+kj4eQ1swsI6Uf9JFpuFVHo0K8NNQWLGPPLh85Nni//0Hrx2MiMx6mqqnt TDwXG+Pzp5vgzDLCPsZxcTfEHV58S/NEEMMvIb1bf7nN7qI2lsIwONMgxknCU6ja zI5Wsb9gRyaOq9065LPs4Wcc6bVYkGY2 -----END CERTIFICATE-----Generated at Wed Nov 5 05:50:12 2025 by rpki-client