$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft File: fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json) Hash identifier: IGTg6D0ev9DhFIDn3lMi2ep3h7iG0RNCaOoB8w9TcVA= Subject key identifier: AB:AA:A5:29:3F:79:65:75:D7:51:62:96:50:CD:1D:C1:33:77:35:19 Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Certificate serial: 03C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft Manifest number: 03B3 Signing time: Mon 03 Nov 2025 00:42:30 +0000 Manifest this update: Mon 03 Nov 2025 00:42:29 +0000 Manifest next update: Mon 10 Nov 2025 00:42:29 +0000 Files and hashes: 1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: eY5PEMyhL123BBjBSPrPSb8L60MpKzv6RqW7EYY2VQ4=) 2: A201A06CB42B11F0849A7A7AC4F9AE02.roa (hash: naDT4mj+S+S7gTqhgPY4e5xWl/al1LzU7j3FtO35LsA=) 3: 2E6B1980CA0211EF80E1DD42C4F9AE02.roa (hash: tjP7XKoMqNX1LQ2yQaonbdxhhj6KFZbH0sAXzwNewCI=) 4: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: jSZIZjYKkStn9QppODMFCLkxqd3q8dcDZLkti6SpjkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 965 (0x3c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5 Validity Not Before: Nov 3 00:42:29 2025 GMT Not After : Nov 10 00:42:29 2025 GMT Subject: CN=6907fa75-ddea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:49:ca:ff:6b:c7:05:aa:87:20:72:78:86: 9a:a3:e6:60:b6:a7:f2:60:ad:29:5a:3f:71:c7:79: 93:bc:20:f8:2a:90:de:c6:80:49:7e:14:23:cb:59: 2b:b7:7f:99:15:52:bf:a3:d5:a8:4a:d1:7a:1f:94: eb:bb:8c:2d:71:8e:6a:df:54:08:a8:fa:37:11:97: 0a:0e:42:92:49:20:c1:2a:40:62:d7:73:9a:9f:15: 53:12:d9:7e:a1:4d:ed:1e:a9:c9:c7:d0:09:00:69: 3c:af:7e:76:6a:db:0d:59:42:d6:69:08:87:d5:2b: 06:50:b1:79:c1:5b:2a:b4:c9:bc:26:e7:91:eb:e6: 43:61:17:a1:a9:95:71:b9:44:74:1d:34:59:34:cd: 5b:99:24:4c:bd:40:39:f5:2d:b2:34:03:f6:85:94: 10:51:48:2c:d8:e3:6a:65:78:48:f0:02:93:94:dd: 67:df:27:27:f8:0d:76:7f:e9:ee:42:44:56:f7:e0: 61:35:ae:ca:c0:61:d4:d9:60:15:e5:fe:74:42:6d: c4:37:ef:eb:45:50:69:5c:ff:fd:dc:08:48:9b:24: 4b:47:58:e2:d9:37:60:7d:6a:4e:c4:1d:81:e2:bf: 0f:ed:4c:7f:fd:1c:e5:df:2e:87:84:dd:64:d2:52: 24:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:AA:A5:29:3F:79:65:75:D7:51:62:96:50:CD:1D:C1:33:77:35:19 X509v3 Authority Key Identifier: keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:2a:27:e6:80:ca:88:d4:10:47:36:f7:47:fa:19:7f:11:d6: b4:39:62:99:e9:12:2d:83:e3:87:07:07:16:8d:fc:ca:4d:bb: e3:00:e5:a8:47:c4:b2:41:7e:31:66:49:08:75:56:00:cf:5d: bf:0f:6f:3e:c0:b4:b5:f3:66:d9:e8:fc:8a:40:b3:4c:f1:df: da:10:db:b6:4f:ae:3a:01:8e:05:ca:43:b3:24:c3:c5:44:47: 02:ab:44:9c:9f:d9:68:10:2d:28:11:76:1f:30:fe:94:dc:12: ce:c9:9f:bf:46:48:1e:db:0f:e6:14:38:4a:13:97:98:14:72: ad:95:d3:7f:3c:79:70:b9:24:df:7a:cc:65:fc:ef:1b:be:f1: c3:e5:54:53:ee:a1:73:ce:34:cb:f4:d7:cf:6a:ca:77:0d:ba: 6a:e5:14:0f:6a:c3:35:0f:76:99:f9:ed:9a:61:5a:64:d8:96: e5:e2:f9:2e:6a:77:67:9f:83:9d:bb:f9:0e:1f:50:19:2b:87: 0e:82:e6:96:22:12:c9:b1:4f:72:d9:c4:5f:33:28:04:d2:79: 35:ff:4b:2b:1b:e1:99:29:df:14:8a:99:2f:d1:f6:11:5a:5c: b7:42:9b:9a:cb:99:73:2b:85:86:6b:a0:3a:25:1c:f9:88:39: 5a:0a:cd:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ0RjIxMTAvBgNVBAUTKDdEMThEODc3NTAyMTA1RkExODcyQURFRTRDRjI2MjND NDE0RjE2QjUwHhcNMjUxMTAzMDA0MjI5WhcNMjUxMTEwMDA0MjI5WjAYMRYwFAYD VQQDEw02OTA3ZmE3NS1kZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsm1Jyv9rxwWqhyByeIaao+ZgtqfyYK0pWj9xx3mTvCD4KpDexoBJfhQjy1kr t3+ZFVK/o9WoStF6H5Tru4wtcY5q31QIqPo3EZcKDkKSSSDBKkBi13OanxVTEtl+ oU3tHqnJx9AJAGk8r352atsNWULWaQiH1SsGULF5wVsqtMm8JueR6+ZDYRehqZVx uUR0HTRZNM1bmSRMvUA59S2yNAP2hZQQUUgs2ONqZXhI8AKTlN1n3ycn+A12f+nu QkRW9+BhNa7KwGHU2WAV5f50Qm3EN+/rRVBpXP/93AhImyRLR1ji2TdgfWpOxB2B 4r8P7Ux//Rzl3y6HhN1k0lIkOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuqpSk/ eWV111FillDNHcEzdzUZMB8GA1UdIwQYMBaAFH0Y2HdQIQX6GHKt7kzyYjxBTxa1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRGMi9EMjk5RjhFQ0I5 QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJmb1ljcTN1VFBKaVBFRlBG clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSallkMUFoQmZvWWNxM3VUUEppUEVGUEZyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDRGMi9EMjk5RjhFQ0I5QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJm b1ljcTN1VFBKaVBFRlBGclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtKifmgMqI1BBHNvdH+hl/Eda0OWKZ6RItg+OHBwcWjfzKTbvjAOWo R8SyQX4xZkkIdVYAz12/D28+wLS182bZ6PyKQLNM8d/aENu2T646AY4FykOzJMPF REcCq0Scn9loEC0oEXYfMP6U3BLOyZ+/Rkge2w/mFDhKE5eYFHKtldN/PHlwuSTf esxl/O8bvvHD5VRT7qFzzjTL9NfPasp3Dbpq5RQPasM1D3aZ+e2aYVpk2Jbl4vku andnn4Odu/kOH1AZK4cOguaWIhLJsU9y2cRfMygE0nk1/0srG+GZKd8Uipkv0fYR Wly3Qpuay5lzK4WGa6A6JRz5iDlaCs39 -----END CERTIFICATE-----Generated at Tue Nov 4 20:22:45 2025 by rpki-client