$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft File: t88LJwp_2x1xeui5edHuD_iL1E8.mft (raw, json) Hash identifier: xf77YgCyC9TErFCAcaMJj5nMaCgULpUyCVZbC1BkSQk= Subject key identifier: 44:17:40:1B:98:DE:66:6F:C2:CA:83:90:8D:EE:21:41:DE:A1:28:B1 Authority key identifier: B7:CF:0B:27:0A:7F:DB:1D:71:7A:E8:B9:79:D1:EE:0F:F8:8B:D4:4F Certificate issuer: /CN=A915B50D/serialNumber=B7CF0B270A7FDB1D717AE8B979D1EE0FF88BD44F Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft Manifest number: D5 Signing time: Mon 03 Nov 2025 05:40:57 +0000 Manifest this update: Mon 03 Nov 2025 05:40:56 +0000 Manifest next update: Mon 10 Nov 2025 05:40:56 +0000 Files and hashes: 1: t88LJwp_2x1xeui5edHuD_iL1E8.crl (hash: YkhKAVf75ipjtnq2FuWntor4IlR20uNicJr+ZnZidrI=) 2: 85CDB6087C1211EF8E490677C4F9AE02.roa (hash: dg3/bJiVaiz5v44anOkDfbtlZGRX3EFlzFQApjSj5Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.crl rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B50D, serialNumber=B7CF0B270A7FDB1D717AE8B979D1EE0FF88BD44F Validity Not Before: Nov 3 05:40:56 2025 GMT Not After : Nov 10 05:40:56 2025 GMT Subject: CN=69084068-7adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cd:f0:d9:11:66:13:5d:f1:b0:bd:cb:6e:a4: b7:c6:31:30:25:6c:26:79:0e:d3:a1:1b:e5:1e:4e: 1c:9c:c6:a3:0b:b7:6a:d2:e9:62:9e:d1:7b:f2:91: 7c:d5:8b:de:01:a0:7f:45:86:72:0d:3f:2b:cb:68: d3:de:9e:d2:08:3f:30:28:c8:da:13:bb:be:02:f1: 48:10:8c:f5:76:a9:bb:a3:39:2f:b3:be:a8:ea:50: 87:a7:95:fd:ae:db:3c:25:14:f6:e7:5d:19:6f:fe: db:c8:65:ce:20:e7:55:3c:b1:cb:b2:8e:bf:1c:ad: c0:c5:a9:65:54:39:46:f6:a5:56:92:f2:2b:77:63: 50:70:47:33:f6:9f:e1:72:a1:e9:4e:3c:c6:22:9e: e6:90:5e:d4:20:21:52:ac:4b:09:c5:66:fc:a2:fd: a2:aa:a5:76:9e:30:36:6c:d0:ae:d4:e3:29:44:07: 5c:78:15:08:99:1f:e9:cd:4d:f8:b1:62:7f:16:46: 08:04:a2:c3:d8:04:d1:25:77:2f:e3:53:5b:03:88: 1f:62:cd:db:6d:58:7c:03:52:64:dd:7e:b6:54:d1: ec:89:c4:61:e0:06:fb:28:06:9e:9d:80:9e:28:10: e9:e0:d0:7f:74:01:7a:85:58:dc:2f:83:b1:64:5e: 96:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:17:40:1B:98:DE:66:6F:C2:CA:83:90:8D:EE:21:41:DE:A1:28:B1 X509v3 Authority Key Identifier: keyid:B7:CF:0B:27:0A:7F:DB:1D:71:7A:E8:B9:79:D1:EE:0F:F8:8B:D4:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t88LJwp_2x1xeui5edHuD_iL1E8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/E682683C7BBC11EF92EE1A66C4F9AE02/t88LJwp_2x1xeui5edHuD_iL1E8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:89:a8:90:68:c6:68:22:f1:ad:ca:a4:21:66:26:a5:76:8c: c4:d7:6a:5f:65:06:85:a7:23:1e:87:ba:a5:59:16:b9:e6:e7: 54:86:cd:a0:6a:c7:d2:44:42:ae:d7:22:af:c9:4a:26:b0:13: 3a:9b:df:3c:b3:9c:61:e6:5a:e4:0c:3c:ae:7f:b1:2e:09:9a: 9b:6f:7d:37:72:3b:d0:f1:ce:55:02:ce:e7:64:f7:00:57:e4: 39:1d:0e:1f:71:c2:85:d9:35:1b:70:a7:b7:a2:90:0d:b3:f0: 41:ac:a8:26:0b:40:f8:5f:d1:6a:5e:68:e5:0d:bb:44:eb:d1: ad:0e:04:74:f1:0a:b0:3d:9a:68:2c:83:fe:73:7e:e3:42:ae: 93:86:18:bf:21:79:3b:62:97:84:68:b8:85:d5:9c:69:30:8f: 8b:b0:8c:ed:91:b8:48:34:1a:c1:6c:1e:30:38:df:50:ba:0b: 6a:0f:21:b7:78:41:9d:36:4d:a8:75:de:dc:dd:c4:e9:75:f2: 32:de:d9:17:6e:22:4c:38:34:ae:47:6e:94:d9:c7:09:00:b0: b0:c3:a6:b9:d7:9a:3e:41:73:c9:b5:87:56:16:db:24:05:3a: 44:e3:dd:1f:c8:68:2f:da:b9:35:dd:7a:97:5b:4b:72:42:75: 51:84:f0:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MEQxMTAvBgNVBAUTKEI3Q0YwQjI3MEE3RkRCMUQ3MTdBRThCOTc5RDFFRTBG Rjg4QkQ0NEYwHhcNMjUxMTAzMDU0MDU2WhcNMjUxMTEwMDU0MDU2WjAYMRYwFAYD VQQDEw02OTA4NDA2OC03YWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx83w2RFmE13xsL3LbqS3xjEwJWwmeQ7ToRvlHk4cnMajC7dq0ulintF78pF8 1YveAaB/RYZyDT8ry2jT3p7SCD8wKMjaE7u+AvFIEIz1dqm7ozkvs76o6lCHp5X9 rts8JRT2510Zb/7byGXOIOdVPLHLso6/HK3AxallVDlG9qVWkvIrd2NQcEcz9p/h cqHpTjzGIp7mkF7UICFSrEsJxWb8ov2iqqV2njA2bNCu1OMpRAdceBUImR/pzU34 sWJ/FkYIBKLD2ATRJXcv41NbA4gfYs3bbVh8A1Jk3X62VNHsicRh4Ab7KAaenYCe KBDp4NB/dAF6hVjcL4OxZF6WhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQXQBuY 3mZvwsqDkI3uIUHeoSixMB8GA1UdIwQYMBaAFLfPCycKf9sdcXrouXnR7g/4i9RP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUwRC9FNjgyNjgzQzdC QkMxMUVGOTJFRTFBNjZDNEY5QUUwMi90ODhMSndwXzJ4MXhldWk1ZWRIdURfaUwx RTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Q4OExKd3BfMngxeGV1aTVlZEh1RF9pTDFFOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUwRC9FNjgyNjgzQzdCQkMxMUVGOTJFRTFBNjZDNEY5QUUwMi90ODhMSndwXzJ4 MXhldWk1ZWRIdURfaUwxRTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDiaiQaMZoIvGtyqQhZialdozE12pfZQaFpyMeh7qlWRa55udUhs2g asfSREKu1yKvyUomsBM6m988s5xh5lrkDDyuf7EuCZqbb303cjvQ8c5VAs7nZPcA V+Q5HQ4fccKF2TUbcKe3opANs/BBrKgmC0D4X9FqXmjlDbtE69GtDgR08QqwPZpo LIP+c37jQq6Thhi/IXk7YpeEaLiF1ZxpMI+LsIztkbhINBrBbB4wON9QugtqDyG3 eEGdNk2odd7c3cTpdfIy3tkXbiJMODSuR26U2ccJALCww6a515o+QXPJtYdWFtsk BTpE490fyGgv2rk13XqXW0tyQnVRhPDO -----END CERTIFICATE-----Generated at Tue Nov 4 23:32:27 2025 by rpki-client