$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft File: PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json) Hash identifier: QTgYfwCwZdfgPG1A2hwVqeYtZZfz0BCoyfs4vLZyAC0= Subject key identifier: 81:11:96:BE:BB:CF:DF:D5:3F:B5:2E:DB:66:C2:F6:BB:47:94:09:35 Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Certificate serial: 04D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft Manifest number: 04CD Signing time: Sun 02 Nov 2025 23:47:34 +0000 Manifest this update: Sun 02 Nov 2025 23:47:34 +0000 Manifest next update: Sun 09 Nov 2025 23:47:34 +0000 Files and hashes: 1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: j+NfgEgKjKzwmsYTb+ZiiTxpPTjYl7we2srilXe2YwI=) 2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: JRIJmi6CkdzwRl9tqXcDbUlpayemlqeCYja07bnQOys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1233 (0x4d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A39E, serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Validity Not Before: Nov 2 23:47:34 2025 GMT Not After : Nov 9 23:47:34 2025 GMT Subject: CN=6907ed96-1b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c9:a4:35:9f:41:23:9d:b2:4c:fb:5a:ed:e6: 11:b2:a1:2f:e7:0e:20:15:4f:e7:c2:20:e5:5f:90: cc:99:ca:6f:d8:b0:86:4b:c4:aa:a5:af:59:aa:3e: 31:13:64:3d:b9:92:32:58:03:0f:e8:73:7e:30:18: e7:66:3b:fe:a3:50:48:bf:d8:e1:b9:c8:43:88:bf: b5:e0:0d:a5:84:2a:fe:3a:1d:59:4a:f5:a7:aa:62: 84:72:dd:f3:b9:c5:60:93:55:eb:d0:db:b0:25:c9: a4:b5:fc:d8:06:3a:ad:dc:43:66:29:a3:32:86:b2: 7e:f1:a6:8a:f4:91:41:a4:78:db:65:ca:ec:19:33: b8:b5:3d:bb:b8:9d:15:a6:64:ce:e4:92:6d:5e:cf: 6d:22:ca:65:52:53:0e:73:27:a5:5f:8e:ce:8a:d4: 22:9a:65:43:e2:61:f3:cd:23:ec:22:78:b4:1a:3f: 3c:59:5f:36:29:d1:2a:a0:66:9d:6b:26:51:49:47: 45:09:40:80:ff:67:a8:8e:72:07:c8:9f:b9:c7:f3: 11:60:13:06:da:ce:a2:52:49:43:00:60:8e:ba:f4: 9b:5d:a7:e4:43:02:6e:17:f2:70:88:3b:39:32:c5: 97:80:e4:fc:b3:13:46:a1:90:f4:83:c1:fa:fb:b0: b2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:11:96:BE:BB:CF:DF:D5:3F:B5:2E:DB:66:C2:F6:BB:47:94:09:35 X509v3 Authority Key Identifier: keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:27:c2:8c:5a:49:d2:38:e8:42:b0:d8:45:d8:0f:ee:59:06: 38:d4:ef:7f:96:74:dd:df:f3:d9:d6:fb:a2:c5:99:00:de:f0: 9a:80:07:f2:c1:41:69:50:79:14:aa:63:35:29:12:68:0f:d6: 92:76:51:7a:67:4c:be:1f:d9:b8:cf:86:12:6b:ed:87:e9:52: ba:4e:a3:93:6c:56:24:56:f6:01:24:89:b4:50:15:97:66:86: b4:38:30:e6:0f:b6:3c:79:f5:68:0b:3c:b9:c1:08:b9:27:6f: e7:65:ed:d3:45:67:0d:bf:0d:6d:76:4a:6c:0f:69:72:11:d7: a5:1b:00:38:b3:cc:2d:96:ed:6d:c0:1f:16:f0:e2:86:c9:e6: 16:76:a2:19:16:d5:73:94:e1:a2:e7:3f:57:97:24:ba:ce:60: 51:1f:53:3b:18:21:f0:5e:44:74:30:a8:ca:13:04:f9:08:cf: 7f:9e:e0:ed:3a:d4:98:ae:a1:26:8e:ea:71:77:ed:13:30:35: 02:00:92:a8:9a:39:d6:2d:68:df:82:ce:86:70:72:9b:c1:9a: 32:b4:20:7f:a0:06:11:14:b0:d6:b7:77:3f:67:38:6b:10:e1: bd:80:e3:87:58:1f:56:5f:03:c4:4d:75:c9:aa:67:9e:a2:9c: 69:5b:30:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzOUUxMTAvBgNVBAUTKDNFNDJEMzMzNEExQ0UxODg5REZDNjdFNDJERjYyODU4 MjE4NTI1MTkwHhcNMjUxMTAyMjM0NzM0WhcNMjUxMTA5MjM0NzM0WjAYMRYwFAYD VQQDEw02OTA3ZWQ5Ni0xYjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8mkNZ9BI52yTPta7eYRsqEv5w4gFU/nwiDlX5DMmcpv2LCGS8Sqpa9Zqj4x E2Q9uZIyWAMP6HN+MBjnZjv+o1BIv9jhuchDiL+14A2lhCr+Oh1ZSvWnqmKEct3z ucVgk1Xr0NuwJcmktfzYBjqt3ENmKaMyhrJ+8aaK9JFBpHjbZcrsGTO4tT27uJ0V pmTO5JJtXs9tIsplUlMOcyelX47OitQimmVD4mHzzSPsIni0Gj88WV82KdEqoGad ayZRSUdFCUCA/2eojnIHyJ+5x/MRYBMG2s6iUklDAGCOuvSbXafkQwJuF/JwiDs5 MsWXgOT8sxNGoZD0g8H6+7Cy4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIERlr67 z9/VP7Uu22bC9rtHlAk1MB8GA1UdIwQYMBaAFD5C0zNKHOGInfxn5C32KFghhSUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTM5RS9DQTMxNjg5NjQx RTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZaWRfR2ZrTGZZb1dDR0ZK UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BrTFRNMG9jNFlpZF9HZmtMZllvV0NHRkpSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTM5RS9DQTMxNjg5NjQxRTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZ aWRfR2ZrTGZZb1dDR0ZKUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTJ8KMWknSOOhCsNhF2A/uWQY41O9/lnTd3/PZ1vuixZkA3vCagAfy wUFpUHkUqmM1KRJoD9aSdlF6Z0y+H9m4z4YSa+2H6VK6TqOTbFYkVvYBJIm0UBWX Zoa0ODDmD7Y8efVoCzy5wQi5J2/nZe3TRWcNvw1tdkpsD2lyEdelGwA4s8wtlu1t wB8W8OKGyeYWdqIZFtVzlOGi5z9XlyS6zmBRH1M7GCHwXkR0MKjKEwT5CM9/nuDt OtSYrqEmjupxd+0TMDUCAJKomjnWLWjfgs6GcHKbwZoytCB/oAYRFLDWt3c/Zzhr EOG9gOOHWB9WXwPETXXJqmeeopxpWzC+ -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:36 2025 by rpki-client