$ rpki-client -vvf rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft File: cHDFVlzC_kVsMWBAi25_toDAjBk.mft (raw, json) Hash identifier: 4R0KvjIBnFruTK1Ymw4jJCXRxrp3rxIR1zYmSA/WQ84= Subject key identifier: F9:7C:C8:10:C0:66:65:20:35:C7:97:D8:81:16:A2:77:1E:B9:7C:B2 Authority key identifier: 70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19 Certificate issuer: /CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19 Certificate serial: 0AB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft Manifest number: 0A9E Signing time: Tue 04 Nov 2025 19:39:50 +0000 Manifest this update: Tue 04 Nov 2025 19:39:49 +0000 Manifest next update: Tue 11 Nov 2025 19:39:49 +0000 Files and hashes: 1: cHDFVlzC_kVsMWBAi25_toDAjBk.crl (hash: XeulGALYkCHdv76B/hZu+4djoU36mzHVBToArwKC6Lw=) 2: 96ACE9CE8E8F11EE8915FE78C4F9AE02.roa (hash: R4xHtrMxN1c5iDWMnVRL8nAiEpy4Y4o7VWQJMa2QgSY=) 3: 6EA165728E8F11EEA8A9EE68C4F9AE02.roa (hash: lqCVN/RdBlCCTJpxacPdT4SGQm9YuvVTkcWZpCdTrhc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2736 (0xab0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B77C, serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19 Validity Not Before: Nov 4 19:39:49 2025 GMT Not After : Nov 11 19:39:49 2025 GMT Subject: CN=690a5685-9c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b8:c2:57:74:e6:06:70:d9:94:e9:b7:c2:bf: 58:d2:dc:9c:7e:b1:ba:32:38:cb:92:bd:90:84:10: 41:17:f2:69:f0:d0:6b:14:1f:16:f9:94:99:9d:91: fa:b0:77:d3:95:de:40:de:14:18:89:1b:10:06:d0: 4e:96:fb:c9:5b:08:76:c2:bf:cc:2a:9a:7d:a5:b4: ee:97:34:f7:b7:61:da:75:5f:10:0a:dd:48:d2:0f: 4a:cd:9e:a2:64:67:80:f2:ce:d0:dd:7e:dc:ed:69: 67:0e:c5:a2:da:dd:4e:93:0d:dc:84:18:44:6a:22: 2b:df:14:1d:c3:c8:33:73:b0:3b:88:1b:be:01:bc: b4:ec:00:eb:c4:6c:de:ce:04:17:17:bf:f4:41:32: a8:29:b1:92:32:42:e6:9c:01:3f:a4:9f:ae:73:6d: f8:8b:d9:33:9f:dd:9d:aa:f7:21:73:69:08:b9:b5: ab:cf:ee:1d:a7:09:99:53:df:87:0d:44:be:29:9e: 98:9e:30:2c:76:a2:8d:2a:e6:dc:12:35:17:69:c6: ca:cd:2d:1a:07:1d:03:c9:97:41:81:88:e6:76:9f: 4c:02:6b:16:f5:5d:9c:e7:5a:83:a6:b7:f9:fa:57: c3:e7:4f:b4:9a:96:ef:df:11:a0:f6:ae:9a:22:17: 4b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7C:C8:10:C0:66:65:20:35:C7:97:D8:81:16:A2:77:1E:B9:7C:B2 X509v3 Authority Key Identifier: keyid:70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:0d:a3:4a:23:ac:dc:ad:8a:18:43:e3:9f:3e:bf:63:76:90: 16:df:50:45:3c:ea:9a:01:50:89:97:05:00:6a:75:29:31:b0: d0:1f:61:c0:3d:49:67:95:3b:6a:85:1b:c9:2b:a9:08:15:c0: cc:de:b7:13:c0:49:61:8c:e8:97:28:06:41:0a:b3:1b:ad:c1: 4c:c5:bd:ff:cb:d9:d7:3d:a1:30:51:ae:64:2b:30:5b:6a:63: bf:f9:86:25:41:96:7e:ef:18:c0:f8:39:a3:d9:36:74:3b:96: 8d:1b:ab:38:a6:14:2f:0c:fc:dc:84:9c:8d:48:29:f2:53:d6: 01:41:ca:0f:e5:b3:0e:90:9e:e0:46:ae:fe:0c:ce:c0:71:55: 77:3d:f0:3a:79:83:6c:ee:7c:9f:3b:a1:75:39:7b:fc:22:33: 31:9f:8b:96:74:22:90:44:fb:12:47:f7:b6:de:d6:77:78:51: 51:37:fe:78:05:e4:a6:dd:e9:8b:f2:61:77:52:62:83:12:6d: 23:c6:ea:d1:38:5f:a1:83:7e:7b:9c:7a:82:4f:7f:9a:df:a3: 38:29:ef:e6:f5:e8:2b:54:00:d1:2c:56:30:ce:b8:e5:48:4e: ca:51:0b:3c:20:93:bc:5f:4c:3f:c1:3f:13:49:39:47:51:12: 7a:fa:e4:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI3N0MxMTAvBgNVBAUTKDcwNzBDNTU2NUNDMkZFNDU2QzMxNjA0MDhCNkU3RkI2 ODBDMDhDMTkwHhcNMjUxMTA0MTkzOTQ5WhcNMjUxMTExMTkzOTQ5WjAYMRYwFAYD VQQDEw02OTBhNTY4NS05YzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rjCV3TmBnDZlOm3wr9Y0tycfrG6MjjLkr2QhBBBF/Jp8NBrFB8W+ZSZnZH6 sHfTld5A3hQYiRsQBtBOlvvJWwh2wr/MKpp9pbTulzT3t2HadV8QCt1I0g9KzZ6i ZGeA8s7Q3X7c7WlnDsWi2t1Okw3chBhEaiIr3xQdw8gzc7A7iBu+Aby07ADrxGze zgQXF7/0QTKoKbGSMkLmnAE/pJ+uc234i9kzn92dqvchc2kIubWrz+4dpwmZU9+H DUS+KZ6YnjAsdqKNKubcEjUXacbKzS0aBx0DyZdBgYjmdp9MAmsW9V2c51qDprf5 +lfD50+0mpbv3xGg9q6aIhdLTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPl8yBDA ZmUgNceX2IEWonceuXyyMB8GA1UdIwQYMBaAFHBwxVZcwv5FbDFgQItuf7aAwIwZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjc3Qy8yODE0Rjc3QTY5 QjUxMUVBQkE2MDE3NTJDNEY5QUUwMi9jSERGVmx6Q19rVnNNV0JBaTI1X3RvREFq QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NIREZWbHpDX2tWc01XQkFpMjVfdG9EQWpCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjc3Qy8yODE0Rjc3QTY5QjUxMUVBQkE2MDE3NTJDNEY5QUUwMi9jSERGVmx6Q19r VnNNV0JBaTI1X3RvREFqQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCADaNKI6zcrYoYQ+OfPr9jdpAW31BFPOqaAVCJlwUAanUpMbDQH2HA PUlnlTtqhRvJK6kIFcDM3rcTwElhjOiXKAZBCrMbrcFMxb3/y9nXPaEwUa5kKzBb amO/+YYlQZZ+7xjA+Dmj2TZ0O5aNG6s4phQvDPzchJyNSCnyU9YBQcoP5bMOkJ7g Rq7+DM7AcVV3PfA6eYNs7nyfO6F1OXv8IjMxn4uWdCKQRPsSR/e23tZ3eFFRN/54 BeSm3emL8mF3UmKDEm0jxurROF+hg357nHqCT3+a36M4Ke/m9egrVADRLFYwzrjl SE7KUQs8IJO8X0w/wT8TSTlHURJ6+uSJ -----END CERTIFICATE-----Generated at Wed Nov 5 00:22:08 2025 by rpki-client