$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft File: znNgvRqU6JF702ckM_gh7HgKjSg.mft (raw, json) Hash identifier: XFxoO+9OV65TkvR1v4/8XF7vpYzTqAEo7/U7tQHMhC8= Subject key identifier: 21:FB:6B:B7:9F:8E:6F:8B:0A:93:FE:D7:2F:46:0C:00:BC:58:6C:6B Authority key identifier: CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28 Certificate issuer: /CN=A915E1F9/serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft Manifest number: 1C Signing time: Mon 03 Nov 2025 07:47:25 +0000 Manifest this update: Mon 03 Nov 2025 07:47:25 +0000 Manifest next update: Mon 10 Nov 2025 07:47:25 +0000 Files and hashes: 1: znNgvRqU6JF702ckM_gh7HgKjSg.crl (hash: VC0pyADgyyRjsjsxf/N4TvbjtAAtvxP8AnYKbcnebKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E1F9, serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28 Validity Not Before: Nov 3 07:47:25 2025 GMT Not After : Nov 10 07:47:25 2025 GMT Subject: CN=69085e0d-7e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b0:e1:75:56:38:96:e1:a2:93:a0:34:75:46: 40:eb:1c:1c:fa:d0:93:83:af:00:b1:e0:bc:e9:d0: 4d:f6:5a:bd:b5:d4:77:a0:fe:1c:08:ee:b0:89:99: 99:4e:4a:d1:9a:a4:ed:a4:0e:c8:1b:bd:0d:4a:99: 22:94:b5:e5:9c:2e:15:ce:47:b1:6d:85:99:52:27: 52:f9:5a:74:85:3e:60:c9:56:c1:d2:34:a2:10:e6: 62:79:21:c6:33:83:19:2c:26:6f:54:ed:59:45:93: 4a:8d:c3:26:4a:66:6e:13:1a:48:18:e0:58:3b:f4: 36:88:62:40:52:df:07:8e:eb:e0:f4:4e:4a:0f:34: 3e:c4:89:2c:53:bd:8f:1b:a7:e9:3c:bd:40:4f:ef: 51:bf:2a:98:75:5c:ab:2b:49:33:28:7f:63:61:36: 45:9d:8b:70:11:25:e6:79:b9:3b:d5:7f:1d:2b:1a: 5b:b2:ea:46:76:7f:4c:bf:c2:b8:4a:93:7a:26:4e: 66:5c:42:17:dc:a8:84:8a:2a:9d:79:a5:b1:4a:49: 0a:11:0c:f0:2f:00:19:2f:54:5d:6c:28:21:be:5e: 88:14:6d:e8:ec:86:53:32:c2:f3:9e:bf:91:3b:f3: 33:c5:f7:e6:c3:df:48:d9:9b:82:42:3a:66:8f:3f: 48:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FB:6B:B7:9F:8E:6F:8B:0A:93:FE:D7:2F:46:0C:00:BC:58:6C:6B X509v3 Authority Key Identifier: keyid:CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5c:57:f0:7d:fe:ce:19:76:b3:f4:c8:93:ce:a3:ae:63:75: b1:5c:7b:34:19:3f:16:a9:3f:1a:5e:07:5f:5a:c2:86:d0:52: e0:9c:f2:79:5b:c2:88:ef:b1:44:79:4b:6b:6b:22:6d:f2:2d: 08:3b:90:27:3c:ae:e0:4e:21:cd:85:9a:90:ef:a1:9f:5c:c5: 8a:63:fb:0d:91:71:ea:25:87:06:3e:9e:28:f8:40:dc:c6:4c: 4e:4e:ac:0e:09:97:36:1c:df:de:ea:87:ad:75:ed:a5:79:29: ab:5c:88:68:8b:44:67:83:63:0c:b8:20:c9:a3:05:68:d9:f7: c9:71:31:81:4e:1a:77:b8:a1:bb:7b:ac:ca:23:ca:ce:42:d4: fd:44:10:83:d0:d8:34:aa:83:14:e7:b9:c9:74:ce:45:20:6f: 4f:1c:6c:46:ef:2c:db:8b:ec:7f:18:09:bf:20:a7:8a:b8:59: bb:63:23:0b:e7:b2:81:8c:31:9c:4b:2d:bf:bf:29:8f:6e:47: 62:13:f2:4b:e2:6d:54:9d:53:de:17:91:15:a8:a8:99:61:c7: ae:7d:99:e7:92:b1:21:21:03:8b:4d:ea:23:09:af:ac:11:0a: e8:b8:b1:ba:d7:d4:f7:36:35:50:5b:71:ea:c8:a1:58:10:6b: 1a:65:e0:ec -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTFGOTExMC8GA1UEBRMoQ0U3MzYwQkQxQTk0RTg5MTdCRDM2NzI0MzNGODIxRUM3 ODBBOEQyODAeFw0yNTExMDMwNzQ3MjVaFw0yNTExMTAwNzQ3MjVaMBgxFjAUBgNV BAMTDTY5MDg1ZTBkLTdlNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYsOF1VjiW4aKToDR1RkDrHBz60JODrwCx4Lzp0E32Wr211Heg/hwI7rCJmZlO StGapO2kDsgbvQ1KmSKUteWcLhXOR7FthZlSJ1L5WnSFPmDJVsHSNKIQ5mJ5IcYz gxksJm9U7VlFk0qNwyZKZm4TGkgY4Fg79DaIYkBS3weO6+D0TkoPND7EiSxTvY8b p+k8vUBP71G/Kph1XKsrSTMof2NhNkWdi3ARJeZ5uTvVfx0rGluy6kZ2f0y/wrhK k3omTmZcQhfcqISKKp15pbFKSQoRDPAvABkvVF1sKCG+XogUbejshlMywvOev5E7 8zPF9+bD30jZm4JCOmaPP0gJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIftrt5+O b4sKk/7XL0YMALxYbGswHwYDVR0jBBgwFoAUznNgvRqU6JF702ckM/gh7HgKjSgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMUY5L0FGRTRBOTBBOERF MjExRjBBMzA4QUM3Q0M0RjlBRTAyL3puTmd2UnFVNkpGNzAyY2tNX2doN0hnS2pT Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvem5OZ3ZScVU2SkY3MDJja01fZ2g3SGdLalNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF MUY5L0FGRTRBOTBBOERFMjExRjBBMzA4QUM3Q0M0RjlBRTAyL3puTmd2UnFVNkpG NzAyY2tNX2doN0hnS2pTZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB9cV/B9/s4ZdrP0yJPOo65jdbFcezQZPxapPxpeB19awobQUuCc8nlb wojvsUR5S2trIm3yLQg7kCc8ruBOIc2FmpDvoZ9cxYpj+w2RceolhwY+nij4QNzG TE5OrA4JlzYc397qh6117aV5KatciGiLRGeDYwy4IMmjBWjZ98lxMYFOGne4obt7 rMojys5C1P1EEIPQ2DSqgxTnucl0zkUgb08cbEbvLNuL7H8YCb8gp4q4WbtjIwvn soGMMZxLLb+/KY9uR2IT8kvibVSdU94XkRWoqJlhx659meeSsSEhA4tN6iMJr6wR Cui4sbrX1Pc2NVBbcerIoVgQaxpl4Ow= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:56 2025 by rpki-client