$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json) Hash identifier: 6jjf2rgi1I+ZzhqJ825fjZN42jaA5gGQNB87RYhUFBs= Subject key identifier: 0E:C0:13:8D:DC:B8:CE:94:ED:A5:60:EE:03:D0:F8:1D:0F:D9:5F:EF Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft Manifest number: 01F5 Signing time: Mon 03 Nov 2025 02:36:48 +0000 Manifest this update: Mon 03 Nov 2025 02:36:47 +0000 Manifest next update: Mon 10 Nov 2025 02:36:47 +0000 Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: pioFt3bXZ985tFk4/eX0BynAyD3w8Q5FiYZ767ID/Gc=) 2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: DR6m9dTiQf0MQdfmKjC6TTSnRd3qda76E3er8flKLDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Validity Not Before: Nov 3 02:36:47 2025 GMT Not After : Nov 10 02:36:47 2025 GMT Subject: CN=6908153f-a46a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e3:b1:73:69:95:ad:ed:be:13:b6:d6:2f:10: 20:27:1f:c4:e3:3e:8a:39:54:c0:8f:4c:91:c9:53: 8e:5d:1f:6f:aa:6a:d4:8e:5d:da:32:76:85:da:53: ac:7e:6e:b1:f1:4e:a7:e8:6f:21:0c:dd:ca:be:ec: e6:5e:a2:41:da:21:f3:27:d7:76:b3:48:86:86:39: bc:60:4e:35:72:46:50:49:b9:51:98:c6:8c:bf:94: 35:25:47:56:91:6c:b5:cf:9f:7e:81:14:8f:5c:2b: d9:f4:54:91:05:f8:0a:6f:14:48:58:0d:02:85:d6: 51:c0:85:39:08:d8:c0:bb:ab:23:c5:04:9b:ed:9f: 31:11:12:6b:85:dc:3c:e8:0e:48:24:ec:f1:5a:87: ee:07:d7:be:41:b1:dd:ec:d5:12:15:ed:a9:ad:db: 69:af:28:21:dd:5d:cd:ba:bc:cf:ad:87:21:76:c7: 45:5f:25:a8:d7:01:4f:2d:7f:f3:d2:57:0a:45:18: 9c:27:2e:df:71:f0:38:40:b1:8f:25:53:69:cd:d3: f3:32:7c:42:07:0a:0c:f0:25:94:5c:8a:48:de:52: 09:85:1b:36:97:a0:29:03:27:5d:b2:40:95:aa:0c: 93:5e:59:48:80:7e:ad:6c:5a:b6:13:81:1a:c3:17: 27:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C0:13:8D:DC:B8:CE:94:ED:A5:60:EE:03:D0:F8:1D:0F:D9:5F:EF X509v3 Authority Key Identifier: keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:05:72:5d:33:b6:93:61:06:8d:e1:0c:29:3e:95:05:71:2f: 2b:92:de:55:c1:7b:69:83:e6:e3:14:d4:1f:57:25:e7:cd:e5: b7:fc:e0:c7:46:6f:e6:0f:9b:f0:3f:5e:21:42:29:09:fa:56: 5d:df:72:97:fa:9a:13:5b:df:e4:b0:37:d5:27:2c:c0:b1:c5: 3f:f4:92:76:29:6b:7a:98:1f:80:e3:d9:b7:ea:b4:0b:2f:be: ba:af:26:13:94:6f:2e:35:53:0b:31:84:1d:b7:a6:6b:cc:0f: 05:32:62:8e:be:90:23:1a:e2:b9:3f:41:ae:6f:14:de:30:4d: e7:25:1e:92:08:29:fe:45:32:63:96:32:c3:78:8e:1d:b7:85: dd:c7:08:2e:9b:d2:2d:f0:0a:cc:76:ac:94:fe:d0:74:5f:e5: 29:5b:f0:04:6e:ca:cc:09:23:97:c2:07:8d:0b:5b:9e:f4:40: 62:11:c5:a4:6c:04:f3:c2:82:ba:e2:ae:53:a3:7c:2c:0f:5d: 03:f1:46:7d:f2:c5:81:94:66:73:9a:71:d1:8b:e0:5c:7a:6c: f3:9b:95:d9:ec:86:13:4c:15:7a:8f:a7:b9:61:dd:fb:ac:eb: b6:3c:20:e8:55:df:0e:a5:f4:71:30:16:35:a9:ac:9e:42:ca: 62:0e:3c:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxMEQxMTAvBgNVBAUTKDcwQzhCREEyREU3ODk1OTUwNTM2NTk0QkFFQkYyNjI5 MEQ5QkEwNjUwHhcNMjUxMTAzMDIzNjQ3WhcNMjUxMTEwMDIzNjQ3WjAYMRYwFAYD VQQDEw02OTA4MTUzZi1hNDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+Oxc2mVre2+E7bWLxAgJx/E4z6KOVTAj0yRyVOOXR9vqmrUjl3aMnaF2lOs fm6x8U6n6G8hDN3KvuzmXqJB2iHzJ9d2s0iGhjm8YE41ckZQSblRmMaMv5Q1JUdW kWy1z59+gRSPXCvZ9FSRBfgKbxRIWA0ChdZRwIU5CNjAu6sjxQSb7Z8xERJrhdw8 6A5IJOzxWofuB9e+QbHd7NUSFe2prdtprygh3V3NurzPrYchdsdFXyWo1wFPLX/z 0lcKRRicJy7fcfA4QLGPJVNpzdPzMnxCBwoM8CWUXIpI3lIJhRs2l6ApAyddskCV qgyTXllIgH6tbFq2E4EawxcnCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7AE43c uM6U7aVg7gPQ+B0P2V/vMB8GA1UdIwQYMBaAFHDIvaLeeJWVBTZZS66/JikNm6Bl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDEwRC85RjcxMjYxNENE QjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxaVUZObGxMcnI4bUtRMmJv R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNaTlvdDU0bFpVRk5sbExycjhtS1EyYm9HVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDEwRC85RjcxMjYxNENEQjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxa VUZObGxMcnI4bUtRMmJvR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCBXJdM7aTYQaN4QwpPpUFcS8rkt5VwXtpg+bjFNQfVyXnzeW3/ODH Rm/mD5vwP14hQikJ+lZd33KX+poTW9/ksDfVJyzAscU/9JJ2KWt6mB+A49m36rQL L766ryYTlG8uNVMLMYQdt6ZrzA8FMmKOvpAjGuK5P0GubxTeME3nJR6SCCn+RTJj ljLDeI4dt4Xdxwgum9It8ArMdqyU/tB0X+UpW/AEbsrMCSOXwgeNC1ue9EBiEcWk bATzwoK64q5To3wsD10D8UZ98sWBlGZzmnHRi+Bcemzzm5XZ7IYTTBV6j6e5Yd37 rOu2PCDoVd8OpfRxMBY1qayeQspiDjxO -----END CERTIFICATE-----Generated at Tue Nov 4 02:16:54 2025 by rpki-client