$ rpki-client -vvf rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft File: Exdoo2swNG49vr6_h7hIG6q-Pus.mft (raw, json) Hash identifier: 41huSyyo3X5E9Pj5HUsU6JqEHHz/BX8bW9OOvmxONo8= Subject key identifier: 31:F9:F7:2C:55:94:DB:FA:D1:87:8E:6B:6F:15:11:D5:0A:8C:88:80 Authority key identifier: 13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB Certificate issuer: /CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB Certificate serial: 3564 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft Manifest number: 352D Signing time: Tue 04 Nov 2025 14:57:15 +0000 Manifest this update: Tue 04 Nov 2025 14:57:15 +0000 Manifest next update: Tue 11 Nov 2025 14:57:15 +0000 Files and hashes: 1: Exdoo2swNG49vr6_h7hIG6q-Pus.crl (hash: VSxUAW9diFyt7kFlG3UDw6XYQDi691wkyt0fwL+zKJ8=) 2: 92078AAE0B5411EF957DA628C4F9AE02.roa (hash: MDqcYhBOLAd7Ve6t+D2323MIjWFyCpfTNAq4hOx2Ghw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13668 (0x3564) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C281, serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB Validity Not Before: Nov 4 14:57:15 2025 GMT Not After : Nov 11 14:57:15 2025 GMT Subject: CN=690a144b-c5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:f1:a9:c8:0b:d6:21:4c:de:78:96:83:a7: f6:f2:87:f6:8e:69:a3:4c:57:e8:08:e0:f6:1b:be: 6e:3e:7b:f2:25:51:b7:8f:93:66:13:aa:f8:52:df: 56:53:44:2a:da:7b:f3:94:7d:21:cd:3f:10:fd:dd: 8a:0e:11:0a:96:33:a4:7f:4a:f8:ca:3a:7e:f0:22: 08:6e:2c:b9:df:f5:42:fb:07:15:0b:3d:8e:d9:9b: af:4f:ca:c9:42:9c:f0:81:ef:da:ec:31:e1:90:d6: f8:9f:d3:7d:5d:0c:47:e0:ff:07:4e:76:01:2c:e1: dd:f0:96:07:5a:df:73:d9:d0:3e:19:b5:f9:9e:13: 72:4a:78:ab:e1:5a:ce:93:27:fc:71:8d:95:57:a7: 9f:3b:40:92:bc:8b:a0:51:4d:6c:2c:be:51:e0:11: 44:3b:e9:05:52:a7:72:a7:4a:eb:43:37:26:d0:e8: 81:f9:05:85:99:32:4a:dd:5c:d3:f5:96:d0:c2:74: 5a:41:ae:d4:86:38:3e:cf:0b:4b:62:24:34:61:89: f3:6c:55:a7:3a:99:63:57:a2:ff:e6:43:b5:e8:ca: fa:44:d2:e4:3a:d1:18:8f:85:fb:0d:00:78:65:46: 50:0c:ea:70:ca:78:30:75:be:30:81:ee:88:5d:07: 4c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F9:F7:2C:55:94:DB:FA:D1:87:8E:6B:6F:15:11:D5:0A:8C:88:80 X509v3 Authority Key Identifier: keyid:13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:38:f6:02:02:22:64:f2:a3:f9:56:a4:09:d6:24:e2:60:34: 7e:87:45:9f:d1:99:a4:e5:93:1e:38:df:c9:41:b6:58:e8:31: 6d:cc:49:91:fa:87:fb:cc:51:01:a7:53:f7:91:79:22:9c:51: e0:c1:16:e5:03:22:d3:76:33:63:b9:e3:4c:9c:28:82:86:2e: 8c:00:fe:aa:7b:91:cf:74:49:3e:32:39:e0:a7:d0:f2:56:f5: ce:81:16:da:71:62:c6:a6:87:9d:75:9f:5a:f2:d1:8d:c0:72: 6a:5a:22:c3:46:61:ec:f9:c2:28:6b:8e:53:cf:a4:77:1e:9f: 03:ce:f5:5e:40:9e:7b:ac:8b:a9:45:2e:f3:51:d7:0b:15:ec: 11:1c:22:fc:01:8d:d1:7a:78:06:46:86:eb:07:93:4f:b6:a7: fe:21:54:d9:8c:77:45:55:14:0d:b5:ca:17:ca:ba:87:be:86: dd:29:9b:08:3e:90:8b:b0:9b:35:b3:0d:d2:24:28:b4:a7:d6: 1f:de:ae:30:96:59:01:45:45:3e:f7:15:eb:6e:66:ea:1c:13: c3:ee:de:8f:1b:05:75:02:ce:af:10:0a:a8:9f:3e:8f:b5:49: ff:ea:d4:04:57:0a:3c:85:c0:79:9c:4c:80:b3:eb:7e:e6:4f: b9:f2:47:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMyODExMTAvBgNVBAUTKDEzMTc2OEEzNkIzMDM0NkUzREJFQkVCRjg3Qjg0ODFC QUFCRTNFRUIwHhcNMjUxMTA0MTQ1NzE1WhcNMjUxMTExMTQ1NzE1WjAYMRYwFAYD VQQDEw02OTBhMTQ0Yi1jNWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtg/xqcgL1iFM3niWg6f28of2jmmjTFfoCOD2G75uPnvyJVG3j5NmE6r4Ut9W U0Qq2nvzlH0hzT8Q/d2KDhEKljOkf0r4yjp+8CIIbiy53/VC+wcVCz2O2ZuvT8rJ Qpzwge/a7DHhkNb4n9N9XQxH4P8HTnYBLOHd8JYHWt9z2dA+GbX5nhNySnir4VrO kyf8cY2VV6efO0CSvIugUU1sLL5R4BFEO+kFUqdyp0rrQzcm0OiB+QWFmTJK3VzT 9ZbQwnRaQa7Uhjg+zwtLYiQ0YYnzbFWnOpljV6L/5kO16Mr6RNLkOtEYj4X7DQB4 ZUZQDOpwyngwdb4wge6IXQdM5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDH59yxV lNv60YeOa28VEdUKjIiAMB8GA1UdIwQYMBaAFBMXaKNrMDRuPb6+v4e4SBuqvj7r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzI4MS8wMDIwMTM0NjFE OTkxMUUyQkMxMDY2ODMwOEIwMkNEMi9FeGRvbzJzd05HNDl2cjZfaDdoSUc2cS1Q dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0V4ZG9vMnN3Tkc0OXZyNl9oN2hJRzZxLVB1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzI4MS8wMDIwMTM0NjFEOTkxMUUyQkMxMDY2ODMwOEIwMkNEMi9FeGRvbzJzd05H NDl2cjZfaDdoSUc2cS1QdXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlOPYCAiJk8qP5VqQJ1iTiYDR+h0Wf0Zmk5ZMeON/JQbZY6DFtzEmR +of7zFEBp1P3kXkinFHgwRblAyLTdjNjueNMnCiChi6MAP6qe5HPdEk+Mjngp9Dy VvXOgRbacWLGpoeddZ9a8tGNwHJqWiLDRmHs+cIoa45Tz6R3Hp8DzvVeQJ57rIup RS7zUdcLFewRHCL8AY3RengGRobrB5NPtqf+IVTZjHdFVRQNtcoXyrqHvobdKZsI PpCLsJs1sw3SJCi0p9Yf3q4wllkBRUU+9xXrbmbqHBPD7t6PGwV1As6vEAqonz6P tUn/6tQEVwo8hcB5nEyAs+t+5k+58kdC -----END CERTIFICATE-----Generated at Wed Nov 5 11:44:36 2025 by rpki-client