$ rpki-client -vvf rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft File: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft (raw, json) Hash identifier: 18T4NxeHUMYR7laAYdBQkgl6t3yLP1A1tz8QYDeJhNQ= Subject key identifier: FE:DD:DD:EB:9B:38:80:5C:D5:BD:04:1E:A5:79:92:AC:A2:AA:DF:DB Authority key identifier: 07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D Certificate issuer: /CN=A915D1F2/serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Certificate serial: 11D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft Manifest number: 11CF Signing time: Thu 06 Nov 2025 16:39:36 +0000 Manifest this update: Thu 06 Nov 2025 16:39:35 +0000 Manifest next update: Thu 13 Nov 2025 16:39:35 +0000 Files and hashes: 1: B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl (hash: eZaeO0eUWGDpCqH3UK41svxOcbMwjTjIKdDe0r15TDE=) 2: 9467361CFEAA11E89E73E75BC4F9AE02.roa (hash: a/gC4lAR8I+9GlaLEIrNcMq2t/2/TV0+WCxlGU4GibY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 16:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4569 (0x11d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D1F2, serialNumber=07532CF6D2BC4CA9D927F307D0E6B82877D8EE4D Validity Not Before: Nov 6 16:39:35 2025 GMT Not After : Nov 13 16:39:35 2025 GMT Subject: CN=690ccf48-f187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:31:09:6f:e0:16:d9:a7:35:df:a8:bc:bb:63: 83:17:04:cf:ec:22:58:81:a5:ac:d7:6c:4d:6b:e8: af:b2:87:05:24:1d:61:2e:7d:a7:11:60:2c:07:71: 23:f1:cf:1b:d7:ee:14:b5:db:0c:3b:b1:88:d3:71: 19:9d:58:47:85:0e:02:cd:93:ca:f0:77:fe:dc:4a: 37:da:3a:ad:08:9c:d1:ce:e1:c7:9e:b6:20:81:2a: 96:79:4e:b1:ab:8f:4c:ca:26:db:f4:e7:b7:f4:b3: 5c:7e:84:36:55:7c:73:ee:ab:5d:b6:64:0e:89:0e: e0:cc:ee:8c:00:e7:02:54:f2:07:03:80:b4:61:d4: 40:08:df:e5:f8:b0:0e:e9:08:c7:0a:6b:c5:d5:f1: 74:4e:0a:46:a0:ac:3a:6e:8b:34:a5:d0:b2:67:d6: df:ea:3d:6c:b1:cc:11:d9:b0:55:e8:f1:ac:c2:ab: 46:56:ea:4f:f5:45:f7:a1:aa:c8:e6:1d:21:02:b6: 1f:4a:22:e6:99:19:f4:8d:bc:c2:72:ad:63:f1:c7: 55:e9:59:d0:b6:b4:26:e2:55:d3:45:73:00:a7:b7: 47:da:28:1d:6f:bd:f7:89:87:73:fe:5e:0e:19:15: a3:f2:87:fe:62:9e:fb:e8:01:fe:ed:cf:15:2d:a7: 75:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DD:DD:EB:9B:38:80:5C:D5:BD:04:1E:A5:79:92:AC:A2:AA:DF:DB X509v3 Authority Key Identifier: keyid:07:53:2C:F6:D2:BC:4C:A9:D9:27:F3:07:D0:E6:B8:28:77:D8:EE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D1F2/AF321D3CFE7C11E88689C655C4F9AE02/B1Ms9tK8TKnZJ_MH0Oa4KHfY7k0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:09:6f:c4:75:74:a2:9b:07:5e:47:ec:44:ad:5b:03:bb:92: a8:24:da:ae:77:04:80:32:c8:94:ae:64:b4:0e:85:78:02:03: 33:b9:b1:a2:aa:07:0a:e8:81:55:dc:1d:be:36:8a:fc:a7:a0: dc:99:10:ed:70:a7:a9:8b:9e:d3:b0:94:ba:78:6c:ba:09:4e: d1:1d:90:7f:7f:70:f8:7e:c5:1b:b4:6e:86:62:9b:16:9b:af: 93:80:59:3a:54:47:dd:d3:19:ec:24:01:7c:02:d2:44:be:5d: de:fd:3c:ca:18:ac:a2:d8:28:72:08:d2:12:fe:84:34:67:19: 3b:a9:89:74:38:bf:a9:54:7b:8f:64:f0:2b:18:97:69:22:97: 09:85:83:5a:99:0c:3a:dd:7b:3c:7f:4a:e2:2d:8c:cf:94:e5: a9:38:6d:71:f4:a1:3c:cc:df:b5:5d:62:c9:e8:1b:76:1c:18: 0f:c4:a8:6e:a0:21:52:86:7d:bb:dd:d7:dd:20:54:05:dd:86: 1d:df:ff:1e:52:08:60:dc:6f:7c:63:95:3c:1c:5f:f5:fb:0b: ef:49:e4:4c:b0:a3:5d:ee:18:2d:ac:ed:22:4b:79:9d:5f:ee: c5:88:97:67:49:18:52:5f:48:79:be:73:33:df:e3:3e:4d:12: 8b:0b:d6:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxRjIxMTAvBgNVBAUTKDA3NTMyQ0Y2RDJCQzRDQTlEOTI3RjMwN0QwRTZCODI4 NzdEOEVFNEQwHhcNMjUxMTA2MTYzOTM1WhcNMjUxMTEzMTYzOTM1WjAYMRYwFAYD VQQDEw02OTBjY2Y0OC1mMTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jEJb+AW2ac136i8u2ODFwTP7CJYgaWs12xNa+ivsocFJB1hLn2nEWAsB3Ej 8c8b1+4UtdsMO7GI03EZnVhHhQ4CzZPK8Hf+3Eo32jqtCJzRzuHHnrYggSqWeU6x q49Myibb9Oe39LNcfoQ2VXxz7qtdtmQOiQ7gzO6MAOcCVPIHA4C0YdRACN/l+LAO 6QjHCmvF1fF0TgpGoKw6bos0pdCyZ9bf6j1sscwR2bBV6PGswqtGVupP9UX3oarI 5h0hArYfSiLmmRn0jbzCcq1j8cdV6VnQtrQm4lXTRXMAp7dH2igdb733iYdz/l4O GRWj8of+Yp776AH+7c8VLad1mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7d3eub OIBc1b0EHqV5kqyiqt/bMB8GA1UdIwQYMBaAFAdTLPbSvEyp2SfzB9DmuCh32O5N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDFGMi9BRjMyMUQzQ0ZF N0MxMUU4ODY4OUM2NTVDNEY5QUUwMi9CMU1zOXRLOFRLblpKX01IME9hNEtIZlk3 azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IxTXM5dEs4VEtuWkpfTUgwT2E0S0hmWTdrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDFGMi9BRjMyMUQzQ0ZFN0MxMUU4ODY4OUM2NTVDNEY5QUUwMi9CMU1zOXRLOFRL blpKX01IME9hNEtIZlk3azAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsCW/EdXSimwdeR+xErVsDu5KoJNqudwSAMsiUrmS0DoV4AgMzubGi qgcK6IFV3B2+Nor8p6DcmRDtcKepi57TsJS6eGy6CU7RHZB/f3D4fsUbtG6GYpsW m6+TgFk6VEfd0xnsJAF8AtJEvl3e/TzKGKyi2ChyCNIS/oQ0Zxk7qYl0OL+pVHuP ZPArGJdpIpcJhYNamQw63Xs8f0riLYzPlOWpOG1x9KE8zN+1XWLJ6Bt2HBgPxKhu oCFShn273dfdIFQF3YYd3/8eUghg3G98Y5U8HF/1+wvvSeRMsKNd7hgtrO0iS3md X+7FiJdnSRhSX0h5vnMz3+M+TRKLC9Zc -----END CERTIFICATE-----Generated at Fri Nov 7 15:55:47 2025 by rpki-client