$ rpki-client -vvf rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft File: Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft (raw, json) Hash identifier: tKtPo1nfdgBW98QggP0MXh4zt6HvPEN21fsR99NTg98= Subject key identifier: AD:61:A6:CF:47:60:62:A9:BF:69:A8:45:55:95:2A:EF:D4:B6:21:21 Authority key identifier: 4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD Certificate issuer: /CN=A915BDD9/serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft Manifest number: 0125 Signing time: Mon 03 Nov 2025 04:38:44 +0000 Manifest this update: Mon 03 Nov 2025 04:38:44 +0000 Manifest next update: Mon 10 Nov 2025 04:38:44 +0000 Files and hashes: 1: Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl (hash: +GESM2MnncRHXP00TYKM+XtWuXHD8sJoUgZF5tSGBLo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BDD9, serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD Validity Not Before: Nov 3 04:38:44 2025 GMT Not After : Nov 10 04:38:44 2025 GMT Subject: CN=690831d4-a594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:70:de:d4:4e:ab:60:9b:f0:49:60:5c:74:c1: 0a:dd:74:77:12:42:f5:c8:3a:46:30:09:d2:ac:af: 48:b2:e4:f1:84:76:e7:08:c0:ca:a5:b8:70:f5:fe: 94:81:47:15:49:1b:9f:82:31:55:d5:dc:0f:e7:db: 69:00:ce:83:0f:a8:3b:07:be:c2:68:b6:58:6d:48: 07:b6:0b:24:50:55:b6:6c:63:3e:03:e3:cf:62:8b: 20:d4:23:ed:c2:c0:4b:64:87:d5:38:d4:63:63:dc: b0:82:27:4b:1b:8e:c3:e2:73:fa:70:3b:8d:af:aa: d4:2a:c9:9e:9b:18:cb:da:0f:e5:5f:05:a1:37:0b: fd:87:74:93:71:2b:78:6e:4f:87:63:9f:cf:47:38: a5:a1:d3:b9:e9:46:aa:9f:78:fe:2a:85:ce:57:bf: 03:68:9a:81:91:72:7c:f9:62:af:87:d7:67:ac:6c: f7:64:59:ef:28:64:4c:68:e7:73:2d:58:44:98:c9: e5:65:9a:e4:f5:a8:83:1c:b2:98:36:5c:a4:93:46: 49:f3:03:50:ea:f8:ec:7d:8f:46:b8:27:66:49:b4: 7b:c9:ed:0e:73:22:43:df:a9:3a:77:74:bf:b8:22: 95:98:6c:50:d1:78:85:ce:0e:8f:7a:b6:44:78:40: 5a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:61:A6:CF:47:60:62:A9:BF:69:A8:45:55:95:2A:EF:D4:B6:21:21 X509v3 Authority Key Identifier: keyid:4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:8f:14:60:26:da:36:59:2d:eb:09:97:1f:40:90:cf:88:b1: 4f:7f:9a:1e:6a:17:f3:c0:47:0c:0e:a1:c4:99:fd:20:2a:07: 42:f0:77:e8:f9:9a:58:a7:1b:0d:8e:9f:6f:bf:66:07:16:2e: d6:92:fa:3c:5c:aa:95:a0:a8:dd:cc:8e:59:09:fc:3c:b2:af: e5:d7:1f:9e:2a:49:8f:f8:2a:38:dc:5c:99:18:93:17:16:04: fa:c1:43:36:80:1c:a1:99:2f:bb:8e:7e:b7:29:00:c9:7a:cf: c7:f2:2b:7e:83:8e:20:0a:26:be:ec:80:76:22:b7:dd:db:de: f8:c2:32:ca:95:14:7c:ab:3c:28:5d:b5:df:c5:7b:64:da:5f: 3a:6b:43:41:d1:0d:82:28:c2:6d:05:ea:8d:f3:a2:27:ce:9a: b3:27:96:3d:1b:76:78:46:30:c8:cf:20:dc:e7:8e:54:98:34: ae:2b:a6:f1:a8:1b:d9:26:35:a2:4c:d6:fb:7b:af:50:d0:ee: 06:d2:32:7a:5b:ac:4e:f1:bc:e9:f2:c8:1c:83:55:f0:ac:e1: ee:a2:45:58:5c:3d:9c:1e:2d:22:db:ca:f7:b3:50:a2:96:89: 59:58:b3:be:aa:dd:a5:97:a7:b8:b0:aa:04:e3:ae:ba:b0:7b: e7:4c:43:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJERDkxMTAvBgNVBAUTKDRBMTZFMUVCM0JERjhERDQ2MDczQzI1NTczNTNBNEZD RTg3MDg3Q0QwHhcNMjUxMTAzMDQzODQ0WhcNMjUxMTEwMDQzODQ0WjAYMRYwFAYD VQQDEw02OTA4MzFkNC1hNTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHDe1E6rYJvwSWBcdMEK3XR3EkL1yDpGMAnSrK9IsuTxhHbnCMDKpbhw9f6U gUcVSRufgjFV1dwP59tpAM6DD6g7B77CaLZYbUgHtgskUFW2bGM+A+PPYosg1CPt wsBLZIfVONRjY9ywgidLG47D4nP6cDuNr6rUKsmemxjL2g/lXwWhNwv9h3STcSt4 bk+HY5/PRzilodO56Uaqn3j+KoXOV78DaJqBkXJ8+WKvh9dnrGz3ZFnvKGRMaOdz LVhEmMnlZZrk9aiDHLKYNlykk0ZJ8wNQ6vjsfY9GuCdmSbR7ye0OcyJD36k6d3S/ uCKVmGxQ0XiFzg6PerZEeEBazQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1hps9H YGKpv2moRVWVKu/UtiEhMB8GA1UdIwQYMBaAFEoW4es7343UYHPCVXNTpPzocIfN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkREOS8yMjcyQzVGMEYx QjQxMUVFOUZERkI4NjdDNEY5QUUwMi9TaGJoNnp2ZmpkUmdjOEpWYzFPa19PaHdo ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoYmg2enZmamRSZ2M4SlZjMU9rX09od2g4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkREOS8yMjcyQzVGMEYxQjQxMUVFOUZERkI4NjdDNEY5QUUwMi9TaGJoNnp2Zmpk UmdjOEpWYzFPa19PaHdoODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUjxRgJto2WS3rCZcfQJDPiLFPf5oeahfzwEcMDqHEmf0gKgdC8Hfo +ZpYpxsNjp9vv2YHFi7Wkvo8XKqVoKjdzI5ZCfw8sq/l1x+eKkmP+Co43FyZGJMX FgT6wUM2gByhmS+7jn63KQDJes/H8it+g44gCia+7IB2Irfd2974wjLKlRR8qzwo XbXfxXtk2l86a0NB0Q2CKMJtBeqN86InzpqzJ5Y9G3Z4RjDIzyDc545UmDSuK6bx qBvZJjWiTNb7e69Q0O4G0jJ6W6xO8bzp8sgcg1XwrOHuokVYXD2cHi0i28r3s1Ci lolZWLO+qt2ll6e4sKoE4666sHvnTEMZ -----END CERTIFICATE-----Generated at Tue Nov 4 16:03:43 2025 by rpki-client