$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft File: SC1I47aWHxIIwGcVJOCOkDOV9lk.mft (raw, json) Hash identifier: +Ozm1kDd7+oyGFy7HiO9XUFaJbjdZAKd3f3/gckux+4= Subject key identifier: BD:1B:31:64:1E:DD:8A:08:60:65:79:7D:5D:79:9A:A8:74:21:48:68 Authority key identifier: 48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59 Certificate issuer: /CN=A915BCE2/serialNumber=482D48E3B6961F1208C0671524E08E903395F659 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft Manifest number: 0162 Signing time: Wed 05 Nov 2025 04:09:05 +0000 Manifest this update: Wed 05 Nov 2025 04:09:04 +0000 Manifest next update: Wed 12 Nov 2025 04:09:04 +0000 Files and hashes: 1: SC1I47aWHxIIwGcVJOCOkDOV9lk.crl (hash: JQOr/BulSlEhgqTS0mVJw7h9zjHGf6fy6kTRnO0QiRk=) 2: EDE9D100B03B11F09472550DC4F9AE02.roa (hash: qZL6z+n651V16Hf3fg2r71nlxb58xv089NXSyA/q/PE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BCE2, serialNumber=482D48E3B6961F1208C0671524E08E903395F659 Validity Not Before: Nov 5 04:09:04 2025 GMT Not After : Nov 12 04:09:04 2025 GMT Subject: CN=690acde0-8c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f9:da:f9:bf:15:f4:7a:53:36:33:44:6a:9b: c4:c5:47:9d:93:23:c5:83:4e:89:a5:43:a7:78:fe: ff:b9:17:53:64:67:b5:f7:fd:24:43:ba:cc:0d:71: 96:07:72:3b:25:eb:91:1b:4f:14:6c:ee:19:c5:c7: 4e:6e:ab:3f:08:22:34:66:46:ff:ac:fe:db:d5:f1: fd:9b:c9:8b:9d:8e:89:4a:43:1f:67:a8:79:7b:31: 17:52:6c:3d:a0:5c:1e:3c:44:f0:9c:74:d1:18:30: cf:fe:f3:7e:c9:cf:2e:52:3f:51:f2:e7:c3:eb:9a: e4:d1:3e:e1:95:a2:55:13:4b:15:2f:7a:73:2d:b0: a5:b9:7b:d1:49:43:4e:ce:89:cb:ee:6e:95:f3:8c: 5b:85:5c:25:c1:50:3a:f9:14:d8:64:51:e1:15:bc: 6e:12:df:0a:a2:b1:cc:88:0e:2d:57:a5:f1:5d:19: 4a:ff:3e:39:42:14:a5:62:78:30:9c:e8:96:83:d2: 2e:60:5d:8a:b9:ec:15:b4:f4:ef:07:b7:18:b7:bc: c4:2a:71:18:69:15:a7:f7:3a:9b:bf:c4:f5:e0:70: c6:4d:19:de:2e:51:3c:76:13:e0:38:2f:0c:12:16: 3a:a7:2e:16:7a:29:30:61:1f:d3:45:e1:6e:6a:7b: 7b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1B:31:64:1E:DD:8A:08:60:65:79:7D:5D:79:9A:A8:74:21:48:68 X509v3 Authority Key Identifier: keyid:48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:a5:6c:12:84:e9:fb:4b:67:42:a3:67:72:be:d0:60:72:31: 69:2d:21:9c:7e:84:97:44:b5:1c:93:14:5d:46:ef:ed:17:0e: 1b:44:cd:bf:b3:45:c9:49:73:e6:3c:30:37:09:16:e5:ab:fe: 6c:72:a5:f8:bb:ca:5b:34:5d:90:e3:bd:22:13:29:48:6b:83: 70:ef:89:7c:30:dd:c1:a1:01:5c:6e:e7:76:53:ef:69:c0:69: 28:37:a1:7e:87:fd:51:e7:be:e3:a5:c6:6b:eb:93:24:7b:fe: bb:b9:26:6b:22:bb:0a:2b:00:ff:1b:f7:16:50:8d:3c:82:ce: 2b:f8:83:b8:0b:4b:26:f7:14:2b:94:3b:c2:1b:f4:6c:39:84: a8:a9:dd:c5:d5:5b:6c:73:05:0b:c2:cb:8c:9c:f5:7b:26:7d: 33:3e:e2:b3:52:a8:75:bd:e9:7d:99:ed:1f:7a:25:bb:33:64: 94:6c:35:bc:76:12:33:76:b8:71:4a:fb:7e:82:01:76:53:dc: e2:fc:6d:d9:11:98:fd:5b:68:45:3b:1c:ca:be:24:33:d3:3a: c9:5c:08:ee:ea:11:d9:68:7c:1c:cb:8a:af:c7:35:ee:d5:a1: 15:45:d2:61:dc:3c:6d:8b:ab:cd:74:b0:4b:3c:8d:42:2d:73: 5b:5b:11:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDRTIxMTAvBgNVBAUTKDQ4MkQ0OEUzQjY5NjFGMTIwOEMwNjcxNTI0RTA4RTkw MzM5NUY2NTkwHhcNMjUxMTA1MDQwOTA0WhcNMjUxMTEyMDQwOTA0WjAYMRYwFAYD VQQDEw02OTBhY2RlMC04YzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufna+b8V9HpTNjNEapvExUedkyPFg06JpUOneP7/uRdTZGe19/0kQ7rMDXGW B3I7JeuRG08UbO4ZxcdObqs/CCI0Zkb/rP7b1fH9m8mLnY6JSkMfZ6h5ezEXUmw9 oFwePETwnHTRGDDP/vN+yc8uUj9R8ufD65rk0T7hlaJVE0sVL3pzLbCluXvRSUNO zonL7m6V84xbhVwlwVA6+RTYZFHhFbxuEt8KorHMiA4tV6XxXRlK/z45QhSlYngw nOiWg9IuYF2KuewVtPTvB7cYt7zEKnEYaRWn9zqbv8T14HDGTRneLlE8dhPgOC8M EhY6py4WeikwYR/TReFuant7+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0bMWQe 3YoIYGV5fV15mqh0IUhoMB8GA1UdIwQYMBaAFEgtSOO2lh8SCMBnFSTgjpAzlfZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNFMi8yNEY3RTI3RTk3 QzgxMUVFOTEwMjg4MEFDNEY5QUUwMi9TQzFJNDdhV0h4SUl3R2NWSk9DT2tET1Y5 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDMUk0N2FXSHhJSXdHY1ZKT0NPa0RPVjlsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkNFMi8yNEY3RTI3RTk3QzgxMUVFOTEwMjg4MEFDNEY5QUUwMi9TQzFJNDdhV0h4 SUl3R2NWSk9DT2tET1Y5bGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnpWwShOn7S2dCo2dyvtBgcjFpLSGcfoSXRLUckxRdRu/tFw4bRM2/ s0XJSXPmPDA3CRblq/5scqX4u8pbNF2Q470iEylIa4Nw74l8MN3BoQFcbud2U+9p wGkoN6F+h/1R577jpcZr65Mke/67uSZrIrsKKwD/G/cWUI08gs4r+IO4C0sm9xQr lDvCG/RsOYSoqd3F1VtscwULwsuMnPV7Jn0zPuKzUqh1vel9me0feiW7M2SUbDW8 dhIzdrhxSvt+ggF2U9zi/G3ZEZj9W2hFOxzKviQz0zrJXAju6hHZaHwcy4qvxzXu 1aEVRdJh3Dxti6vNdLBLPI1CLXNbWxGt -----END CERTIFICATE-----Generated at Wed Nov 5 07:12:22 2025 by rpki-client