$ rpki-client -vvf rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft File: f1QPcIZAQhpialmxa5Q_AzutP_Y.mft (raw, json) Hash identifier: /HdiCM8vCRsHDKm0T08h3bVRlbYg+goXL2WxMy2iGbU= Subject key identifier: D9:09:23:6C:DC:86:1B:40:24:43:8D:1A:2D:78:68:EC:95:D2:3A:95 Authority key identifier: 7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 Certificate issuer: /CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Certificate serial: 0CAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft Manifest number: 0CA3 Signing time: Tue 04 Nov 2025 18:21:06 +0000 Manifest this update: Tue 04 Nov 2025 18:21:06 +0000 Manifest next update: Tue 11 Nov 2025 18:21:06 +0000 Files and hashes: 1: f1QPcIZAQhpialmxa5Q_AzutP_Y.crl (hash: hhBbEdGCHWQoCYB0OHL8IwX3eqQpt7aOsIdkYgipd7k=) 2: AF905A0C021111EAA331B072C4F9AE02.roa (hash: dvnwAL3zCvdd5S3vny42r47yY+DgJ/q5xqobvjET5x0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3242 (0xcaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B53A, serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Validity Not Before: Nov 4 18:21:06 2025 GMT Not After : Nov 11 18:21:06 2025 GMT Subject: CN=690a4412-7a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:11:06:40:d6:c1:39:c7:6e:31:3b:ee:d8:c4: 8f:02:42:57:f4:85:9c:eb:38:ac:9c:bf:a8:4a:42: 2f:a4:5d:a3:67:2e:0b:90:e6:51:76:7e:f6:97:8d: 1f:e1:ab:35:02:2a:32:85:d6:fe:79:39:b1:ec:88: 06:b2:de:09:e8:fd:c9:e5:41:0c:f1:10:c7:cb:40: 41:92:48:51:4d:8f:d7:e3:90:14:eb:ff:52:e0:7e: 00:35:7e:74:77:0a:63:1e:b2:37:e5:e5:aa:1f:a1: d0:61:e6:8e:6b:31:d5:7f:10:a7:cd:df:1b:85:84: 9f:08:dc:11:8c:e5:d3:24:9d:30:cd:9f:25:a3:8c: c5:08:c0:8f:e8:2d:58:b3:b8:a3:d0:07:de:65:83: 3f:d8:49:41:62:6d:12:de:c7:3b:2e:43:47:d1:a6: f5:64:fb:7c:84:15:58:c8:d3:dd:37:ce:8e:c9:6a: 08:ba:bb:f1:56:5d:60:10:04:4a:a7:72:12:fb:ae: 38:4c:0f:cc:f8:1b:3b:0e:cf:00:27:ae:42:77:6d: 67:da:6a:8d:d3:7c:92:06:bb:3e:1f:8f:f4:c6:ac: 52:48:9e:cf:06:c2:17:41:44:4d:3d:7e:32:8f:cc: 7d:d5:26:3b:9a:91:65:29:81:03:68:a1:80:f2:4b: 5f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:09:23:6C:DC:86:1B:40:24:43:8D:1A:2D:78:68:EC:95:D2:3A:95 X509v3 Authority Key Identifier: keyid:7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:99:28:df:f4:6c:7f:e9:04:5f:a4:d0:b8:92:4a:7b:53:ac: 85:a0:bb:b4:7e:3c:eb:67:a5:7b:a7:27:14:9d:40:3c:d0:94: 2d:14:b3:bb:41:a5:4e:b5:27:76:48:da:44:fc:bc:66:65:c5: 02:36:a3:e2:2b:d4:45:a3:c1:3c:f2:f0:ed:7b:a0:c2:ee:d3: 0f:c4:42:78:80:55:9a:95:62:8b:c7:93:f8:f3:7a:ea:86:18: 8f:27:a0:20:ed:48:f4:ec:91:ee:79:ca:56:89:31:af:f1:d7: d9:2b:ce:5b:64:24:6a:f3:43:2b:65:5a:ea:6e:40:30:d2:2c: fc:94:ef:90:5a:93:03:f2:8d:a8:9a:cd:ed:e9:b9:ea:d7:5e: 08:1e:57:55:68:5c:48:27:59:e8:4f:8b:d3:c8:41:05:2d:ac: b9:17:b5:7f:5f:6d:cb:94:7e:5c:27:2e:20:a7:2b:83:57:f0: ee:e9:4f:fb:60:02:05:49:5c:fa:20:ab:e7:fc:83:f4:ee:ea: 17:7c:5f:9a:ec:ed:e7:66:ee:49:83:25:7e:92:75:66:57:f2: 20:62:ea:c9:ba:e3:07:63:f7:fc:a7:b5:a7:05:3b:8b:74:b9: 26:a1:1d:e5:df:fc:dc:53:7f:16:1c:bb:b4:83:21:15:99:12: f5:e4:be:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1M0ExMTAvBgNVBAUTKDdGNTQwRjcwODY0MDQyMUE2MjZBNTlCMTZCOTQzRjAz M0JBRDNGRjYwHhcNMjUxMTA0MTgyMTA2WhcNMjUxMTExMTgyMTA2WjAYMRYwFAYD VQQDEw02OTBhNDQxMi03YTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hEGQNbBOcduMTvu2MSPAkJX9IWc6zisnL+oSkIvpF2jZy4LkOZRdn72l40f 4as1Aioyhdb+eTmx7IgGst4J6P3J5UEM8RDHy0BBkkhRTY/X45AU6/9S4H4ANX50 dwpjHrI35eWqH6HQYeaOazHVfxCnzd8bhYSfCNwRjOXTJJ0wzZ8lo4zFCMCP6C1Y s7ij0AfeZYM/2ElBYm0S3sc7LkNH0ab1ZPt8hBVYyNPdN86OyWoIurvxVl1gEARK p3IS+644TA/M+Bs7Ds8AJ65Cd21n2mqN03ySBrs+H4/0xqxSSJ7PBsIXQURNPX4y j8x91SY7mpFlKYEDaKGA8ktfDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNkJI2zc hhtAJEONGi14aOyV0jqVMB8GA1UdIwQYMBaAFH9UD3CGQEIaYmpZsWuUPwM7rT/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzQS8yQ0Q2QjM4QzAy MTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFocGlhbG14YTVRX0F6dXRQ X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YxUVBjSVpBUWhwaWFsbXhhNVFfQXp1dFBfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzQS8yQ0Q2QjM4QzAyMTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFo cGlhbG14YTVRX0F6dXRQX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlmSjf9Gx/6QRfpNC4kkp7U6yFoLu0fjzrZ6V7pycUnUA80JQtFLO7 QaVOtSd2SNpE/LxmZcUCNqPiK9RFo8E88vDte6DC7tMPxEJ4gFWalWKLx5P483rq hhiPJ6Ag7Uj07JHuecpWiTGv8dfZK85bZCRq80MrZVrqbkAw0iz8lO+QWpMD8o2o ms3t6bnq114IHldVaFxIJ1noT4vTyEEFLay5F7V/X23LlH5cJy4gpyuDV/Du6U/7 YAIFSVz6IKvn/IP07uoXfF+a7O3nZu5JgyV+knVmV/IgYurJuuMHY/f8p7WnBTuL dLkmoR3l3/zcU38WHLu0gyEVmRL15L74 -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:08 2025 by rpki-client