$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft File: sRd7K0wt-LMG0UpkMAcob4nWnMA.mft (raw, json) Hash identifier: CO+K56wHrTDk+rcoQ5rGKsvOsaOaIq+izn4g6g5efZY= Subject key identifier: 10:B1:75:C2:06:5B:5A:36:6D:C8:68:62:55:77:54:EA:DB:0E:3E:E8 Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 Certificate issuer: /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Certificate serial: 0CBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft Manifest number: 0CAE Signing time: Tue 04 Nov 2025 18:22:13 +0000 Manifest this update: Tue 04 Nov 2025 18:22:12 +0000 Manifest next update: Tue 11 Nov 2025 18:22:12 +0000 Files and hashes: 1: sRd7K0wt-LMG0UpkMAcob4nWnMA.crl (hash: qdHOfXONVsClqHSSAg9MF0UaoC8BfoZVbJzWSegABNg=) 2: BD34B926367911F083BF6873C4F9AE02.roa (hash: m+EkNRFDxHj1FPyZ5U1ENnB32M/tNvWOK6leRT4D3kc=) 3: A869B800367611F088B7726AC4F9AE02.roa (hash: LsbbSClw7moIgeVgU48ZXAlLRVTQAq+PWzm9OXhRWr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3263 (0xcbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DA5A, serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Validity Not Before: Nov 4 18:22:12 2025 GMT Not After : Nov 11 18:22:12 2025 GMT Subject: CN=690a4455-fc4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dd:1b:a7:7b:88:65:b7:78:f3:cc:73:79:3e: 0d:5b:9e:e5:c9:b8:02:09:1b:cc:ee:7b:64:db:9c: 31:9c:45:38:94:d3:6a:b5:67:0a:ad:90:e7:47:b5: f8:60:97:b9:8f:48:2e:45:07:f6:29:76:f0:d4:a9: fd:40:9e:5b:a8:9d:4a:9a:fb:71:36:05:04:a1:fc: c3:bb:1b:55:64:27:97:c7:41:e1:44:b3:1a:0d:c0: 86:fa:e3:92:7f:a4:1a:3b:fb:63:ca:ae:c4:3f:8f: c3:7f:ef:65:f7:aa:7f:7a:34:ee:54:a3:f8:de:a9: d6:d2:d7:e6:0c:6c:9d:28:be:2c:24:16:38:a3:df: 44:8a:f5:3e:84:08:11:d7:28:b0:ec:87:dd:86:96: 01:7e:93:bd:77:b9:aa:5b:9c:71:8b:fb:84:e2:b5: 03:2c:78:1a:18:88:62:42:e5:bd:1e:4f:64:c2:f9: 44:8d:ae:04:63:8a:42:99:0e:c8:67:14:b9:02:e8: 18:2b:03:84:d8:62:0a:f7:6f:30:bf:75:e6:dc:e3: 82:e4:ee:85:0a:e2:d6:21:fe:1a:8a:78:7f:cf:78: 03:c7:ad:52:19:04:59:b8:fc:fb:bd:d5:18:a1:a4: 3f:59:9d:76:02:be:31:0f:bd:78:06:3d:db:c7:85: 29:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B1:75:C2:06:5B:5A:36:6D:C8:68:62:55:77:54:EA:DB:0E:3E:E8 X509v3 Authority Key Identifier: keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:9d:a7:ea:73:f7:e5:f8:bc:c2:d5:9a:72:84:6a:24:9f:12: de:25:4d:89:33:71:a1:f7:b7:c8:2c:31:92:10:f4:06:a4:31: a1:e3:44:85:b0:eb:d0:42:f7:b3:c8:58:71:99:58:43:f6:a2: 2e:d2:38:d5:b0:85:ec:a7:d4:b1:b8:30:7a:07:a0:66:8b:c3: f0:76:34:b3:09:1c:37:27:2b:20:15:20:1b:c6:89:5d:c4:7b: c3:28:af:d4:86:38:aa:51:1f:1d:46:d2:7d:3b:c1:d4:42:44: 2e:df:e9:ad:6e:42:e7:ce:b2:6c:7c:78:76:49:99:58:e1:f7: 81:c4:80:fa:af:7a:bc:71:e6:c8:f4:de:a9:31:54:33:f0:42: 27:cf:40:6f:57:45:1a:7d:df:cd:ea:88:46:35:00:80:b2:cb: 46:cd:39:b2:cf:b6:76:44:e4:33:8a:b1:04:07:45:b7:5a:ef: 9f:d1:d4:ee:3c:a2:d5:04:8f:2a:9a:a6:55:75:1f:ee:d9:04: a8:2e:07:85:0d:a5:d1:4c:79:e2:33:75:3f:39:6a:b4:68:c9: 7e:b3:14:bd:55:8c:af:39:b4:e1:31:28:a7:c7:7a:a3:f5:f4: bf:5d:c8:05:e9:7e:67:8d:22:0c:86:3e:6f:a9:8d:be:9f:d9: cc:fd:65:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURBNUExMTAvBgNVBAUTKEIxMTc3QjJCNEMyREY4QjMwNkQxNEE2NDMwMDcyODZG ODlENjlDQzAwHhcNMjUxMTA0MTgyMjEyWhcNMjUxMTExMTgyMjEyWjAYMRYwFAYD VQQDEw02OTBhNDQ1NS1mYzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm90bp3uIZbd488xzeT4NW57lybgCCRvM7ntk25wxnEU4lNNqtWcKrZDnR7X4 YJe5j0guRQf2KXbw1Kn9QJ5bqJ1KmvtxNgUEofzDuxtVZCeXx0HhRLMaDcCG+uOS f6QaO/tjyq7EP4/Df+9l96p/ejTuVKP43qnW0tfmDGydKL4sJBY4o99EivU+hAgR 1yiw7IfdhpYBfpO9d7mqW5xxi/uE4rUDLHgaGIhiQuW9Hk9kwvlEja4EY4pCmQ7I ZxS5AugYKwOE2GIK928wv3Xm3OOC5O6FCuLWIf4ainh/z3gDx61SGQRZuPz7vdUY oaQ/WZ12Ar4xD714Bj3bx4UpLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCxdcIG W1o2bchoYlV3VOrbDj7oMB8GA1UdIwQYMBaAFLEXeytMLfizBtFKZDAHKG+J1pzA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REE1QS80NEU3NzBCMjAz RUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1MTUcwVXBrTUFjb2I0bldu TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NSZDdLMHd0LUxNRzBVcGtNQWNvYjRuV25NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REE1QS80NEU3NzBCMjAzRUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1M TUcwVXBrTUFjb2I0blduTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAunafqc/fl+LzC1ZpyhGoknxLeJU2JM3Gh97fILDGSEPQGpDGh40SF sOvQQvezyFhxmVhD9qIu0jjVsIXsp9SxuDB6B6Bmi8PwdjSzCRw3JysgFSAbxold xHvDKK/UhjiqUR8dRtJ9O8HUQkQu3+mtbkLnzrJsfHh2SZlY4feBxID6r3q8cebI 9N6pMVQz8EInz0BvV0Uafd/N6ohGNQCAsstGzTmyz7Z2ROQzirEEB0W3Wu+f0dTu PKLVBI8qmqZVdR/u2QSoLgeFDaXRTHniM3U/OWq0aMl+sxS9VYyvObThMSinx3qj 9fS/XcgF6X5njSIMhj5vqY2+n9nM/WWo -----END CERTIFICATE-----Generated at Wed Nov 5 11:50:09 2025 by rpki-client