$ rpki-client -vvf rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft File: tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft (raw, json) Hash identifier: lOhpg1XBM86CXLgyG3F5lynJ9RNkV6fUFnGZHu6s//Q= Subject key identifier: 12:6F:1A:D4:67:A0:DC:6D:D5:2B:71:83:25:C2:2C:20:F7:4B:DA:C5 Authority key identifier: B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 Certificate issuer: /CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Certificate serial: 0B5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft Manifest number: 0B58 Signing time: Sun 02 Nov 2025 19:07:38 +0000 Manifest this update: Sun 02 Nov 2025 19:07:38 +0000 Manifest next update: Sun 09 Nov 2025 19:07:38 +0000 Files and hashes: 1: tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl (hash: JNV+OTSBDqXWPBiWuGYYHnJlGFPMv8wXADFtUEFPfvg=) 2: 741645EE422211EA937BB919C4F9AE02.roa (hash: 8W2HO3OpHaqoA5bNjLREDozTCax3HtEwt5AMKNO3YME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2911 (0xb5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915577F, serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155 Validity Not Before: Nov 2 19:07:38 2025 GMT Not After : Nov 9 19:07:38 2025 GMT Subject: CN=6907abfa-e8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4a:6c:9a:cb:6d:11:df:fc:8b:63:59:d8:01: 74:ec:dc:e3:41:ef:86:2a:2f:17:15:33:64:ae:66: a7:b4:d5:6d:23:c7:33:f1:4f:d1:3c:da:81:8d:00: 72:b7:8f:70:f7:cb:40:b2:ab:a4:5a:6c:c5:09:6f: ad:18:84:6f:78:4d:42:21:be:e9:a4:64:b9:fd:8a: 9f:d2:d7:64:8a:03:86:12:ee:28:63:b5:c3:a5:e1: d1:61:c7:d7:0c:be:a8:76:91:94:ea:63:3f:44:93: a3:17:8f:9e:af:c8:b0:75:71:55:b5:48:81:7f:2f: fa:d6:2f:fc:b1:ee:74:bd:e2:0e:28:74:ea:0c:f2: 93:61:80:84:2e:c4:05:d7:31:2e:66:7a:f4:ae:67: dc:56:2d:74:3d:51:70:a9:1f:fc:47:ae:51:8a:9f: 04:7e:ce:4f:0e:9b:cb:19:68:6c:a4:95:c6:eb:22: 71:7e:46:90:49:fa:f2:23:48:fe:aa:57:e4:bb:71: e4:27:c5:48:78:1f:92:94:1b:ca:10:29:89:ce:1d: 27:40:2f:ec:d3:2b:4b:fa:21:4e:89:c8:8d:9f:ba: 0a:55:4d:de:3c:d7:6f:db:bc:f7:ca:c4:26:77:5b: 9d:f7:e1:c1:b6:47:e8:6c:c4:1d:63:07:fa:06:e2: 9f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6F:1A:D4:67:A0:DC:6D:D5:2B:71:83:25:C2:2C:20:F7:4B:DA:C5 X509v3 Authority Key Identifier: keyid:B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:71:c9:ef:ec:28:60:68:56:9f:1f:a0:a3:d4:80:a4:82:4a: cd:5d:6c:8c:8d:f4:91:cf:79:ab:15:12:7b:ca:e3:6f:7e:6f: b8:25:4c:f1:8c:f0:e1:09:bf:9c:e3:62:61:33:da:17:dc:3a: 9c:3c:9e:18:bb:ea:c3:55:3a:43:6a:84:7a:0e:b2:38:0c:b0: f3:89:5b:61:b4:26:29:85:37:3c:3b:42:ec:80:a0:f7:d7:a4: 64:e3:bd:18:06:bf:42:a9:df:bc:a8:48:d8:62:e7:bd:db:8a: 95:bc:63:5d:20:93:b5:bc:75:c9:23:6e:98:77:df:9b:6c:e8: 2a:96:ee:fa:a1:7a:34:40:c3:0d:72:4b:82:c7:67:2d:df:02: a8:fd:15:f7:5c:eb:3e:22:5b:1c:4a:fd:18:13:70:5a:a9:1c: be:12:08:c6:0a:d6:f0:0b:36:62:b8:c0:f6:0d:55:1e:0b:7c: 50:4c:87:30:1b:af:a0:b6:e5:95:df:08:17:4f:df:b2:b0:34: 67:2f:eb:69:95:4c:70:81:83:03:fb:44:70:27:20:39:00:f0: 9c:f0:d6:ae:7e:38:af:48:67:41:65:1b:8a:74:ac:7e:61:30: b1:a8:fa:0c:ae:b6:31:33:11:18:86:fb:c8:41:f3:26:d6:88: d8:44:1c:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3N0YxMTAvBgNVBAUTKEI1NTlGQzQ0QUJGQzIyRDE0NjFGNzhFQTg2NzJGMjM3 Mzg1NzMxNTUwHhcNMjUxMTAyMTkwNzM4WhcNMjUxMTA5MTkwNzM4WjAYMRYwFAYD VQQDEw02OTA3YWJmYS1lOGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkpsmsttEd/8i2NZ2AF07NzjQe+GKi8XFTNkrmantNVtI8cz8U/RPNqBjQBy t49w98tAsqukWmzFCW+tGIRveE1CIb7ppGS5/Yqf0tdkigOGEu4oY7XDpeHRYcfX DL6odpGU6mM/RJOjF4+er8iwdXFVtUiBfy/61i/8se50veIOKHTqDPKTYYCELsQF 1zEuZnr0rmfcVi10PVFwqR/8R65Rip8Efs5PDpvLGWhspJXG6yJxfkaQSfryI0j+ qlfku3HkJ8VIeB+SlBvKECmJzh0nQC/s0ytL+iFOiciNn7oKVU3ePNdv27z3ysQm d1ud9+HBtkfobMQdYwf6BuKfowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBJvGtRn oNxt1StxgyXCLCD3S9rFMB8GA1UdIwQYMBaAFLVZ/ESr/CLRRh946oZy8jc4VzFV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTc3Ri8xQTRGRkI4ODQy MjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0RkdIM2pxaG5MeU56aFhN VlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RWbjhSS3Y4SXRGR0gzanFobkx5TnpoWE1WVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTc3Ri8xQTRGRkI4ODQyMjAxMUVBQTFDMDc3MTRDNEY5QUUwMi90Vm44Ukt2OEl0 RkdIM2pxaG5MeU56aFhNVlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcccnv7ChgaFafH6Cj1ICkgkrNXWyMjfSRz3mrFRJ7yuNvfm+4JUzx jPDhCb+c42JhM9oX3DqcPJ4Yu+rDVTpDaoR6DrI4DLDziVthtCYphTc8O0LsgKD3 16Rk470YBr9Cqd+8qEjYYue924qVvGNdIJO1vHXJI26Yd9+bbOgqlu76oXo0QMMN ckuCx2ct3wKo/RX3XOs+IlscSv0YE3BaqRy+EgjGCtbwCzZiuMD2DVUeC3xQTIcw G6+gtuWV3wgXT9+ysDRnL+tplUxwgYMD+0RwJyA5APCc8NaufjivSGdBZRuKdKx+ YTCxqPoMrrYxMxEYhvvIQfMm1ojYRBw1 -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:21 2025 by rpki-client