$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft File: rCjcKlVLTjOaOZyWQrTOAmio37A.mft (raw, json) Hash identifier: 1PuoXlQNqVK2Nx4k/HvbvNYRpXDr1f7Qh4j3GszGeXg= Subject key identifier: ED:47:AE:0D:28:58:13:A9:25:7F:B6:E7:45:5F:F2:02:AA:3B:90:CE Authority key identifier: AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 Certificate issuer: /CN=A915EA46/serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft Manifest number: B9 Signing time: Mon 03 Nov 2025 05:58:04 +0000 Manifest this update: Mon 03 Nov 2025 05:58:03 +0000 Manifest next update: Mon 10 Nov 2025 05:58:03 +0000 Files and hashes: 1: rCjcKlVLTjOaOZyWQrTOAmio37A.crl (hash: HFMGtvCsR1x8nE+5HwaFnUMZJhaV4h9rzLPGz3L1IJc=) 2: A1E99A4E9C1211EFB233147EC4F9AE02.roa (hash: 3ye2avJW3DGdXLpGllemApGuBs5Hg/Dy3+TFvLk8rE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA46, serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Validity Not Before: Nov 3 05:58:03 2025 GMT Not After : Nov 10 05:58:03 2025 GMT Subject: CN=6908446c-820a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8e:68:fb:41:4f:49:d8:5e:08:3c:ee:15:f2: b2:49:34:da:4d:51:69:d7:9c:04:87:cc:31:99:bf: fd:db:20:80:e4:70:d0:8b:20:c4:c5:a7:94:19:91: 29:e2:7a:80:d1:13:62:9d:e3:13:41:32:b1:47:2b: 3a:19:7e:d4:fd:10:c2:b3:c6:5f:17:f8:91:9f:fd: 22:f4:bb:fd:c7:15:a9:bb:5a:43:31:84:d0:84:b6: 3c:d8:c9:96:55:8a:49:35:37:34:90:e8:6d:f7:28: bb:d6:af:6b:a1:5b:c4:9b:c5:53:25:cf:7c:79:73: 19:7e:16:05:9d:fe:b5:a5:c7:c3:11:55:ff:87:8c: db:5c:07:84:ec:a8:75:8b:e4:62:b4:9c:27:fd:a8: c3:21:3e:af:46:ca:44:51:e4:26:74:41:b7:c9:6d: 3a:a8:1d:3e:b5:fb:37:3e:79:70:8d:3d:dd:5e:e2: c8:04:08:2d:4b:c0:68:3d:cc:3c:e8:64:9e:f1:e7: af:3d:38:11:66:8a:78:22:45:22:ab:95:c5:17:83: 13:d8:93:91:9b:5e:b8:c5:75:9a:d7:63:ee:c5:05: c0:67:12:47:1d:ce:14:a3:c2:fe:87:6b:3e:b4:d9: da:89:14:64:a1:a1:fd:71:8c:fb:10:1d:fe:63:6f: af:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:47:AE:0D:28:58:13:A9:25:7F:B6:E7:45:5F:F2:02:AA:3B:90:CE X509v3 Authority Key Identifier: keyid:AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:c4:c3:1a:a4:6a:72:2e:81:cd:16:f7:83:0b:f2:65:17:f4: d2:29:ea:f1:59:d8:3f:dd:2a:1a:ea:0b:a4:18:2d:35:af:f6: 18:5c:71:02:80:9f:ed:e7:68:d4:4a:7d:c3:9d:41:00:02:4e: 60:b1:7a:bd:95:83:24:6f:f3:7c:82:4a:84:e0:b9:7a:1c:08: bd:76:90:47:52:af:d1:68:d1:de:bc:cf:69:42:12:97:cd:81: 4e:c8:18:13:80:3c:fa:90:88:2c:fc:63:30:39:6a:53:e1:40: 82:78:5e:55:92:17:94:43:d9:6e:1e:9f:76:ad:48:23:1d:f9: cd:32:4d:ff:7e:53:0b:67:59:d4:8f:f7:02:34:cf:df:73:b4: c1:36:33:7d:b5:37:2b:f2:3d:d9:71:e7:9e:86:95:0a:12:ff: e1:24:e1:49:51:c4:b2:ee:c3:dd:17:8a:c9:1b:1d:17:54:11: 97:58:b5:e2:b1:e9:e1:ae:a7:e6:81:72:b9:e1:68:4f:ca:08: b7:57:59:57:a0:f9:b8:c2:a2:f2:9a:27:cc:ae:3e:bc:25:82: 01:5c:34:e9:56:3a:a6:d7:02:01:78:3d:ff:60:99:e2:d3:08: 3d:74:15:65:a3:6f:91:a8:b9:4f:46:5f:92:63:ea:dd:9c:f4: 79:f5:ca:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBNDYxMTAvBgNVBAUTKEFDMjhEQzJBNTU0QjRFMzM5QTM5OUM5NjQyQjRDRTAy NjhBOERGQjAwHhcNMjUxMTAzMDU1ODAzWhcNMjUxMTEwMDU1ODAzWjAYMRYwFAYD VQQDEw02OTA4NDQ2Yy04MjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0o5o+0FPSdheCDzuFfKySTTaTVFp15wEh8wxmb/92yCA5HDQiyDExaeUGZEp 4nqA0RNineMTQTKxRys6GX7U/RDCs8ZfF/iRn/0i9Lv9xxWpu1pDMYTQhLY82MmW VYpJNTc0kOht9yi71q9roVvEm8VTJc98eXMZfhYFnf61pcfDEVX/h4zbXAeE7Kh1 i+RitJwn/ajDIT6vRspEUeQmdEG3yW06qB0+tfs3PnlwjT3dXuLIBAgtS8BoPcw8 6GSe8eevPTgRZop4IkUiq5XFF4MT2JORm164xXWa12PuxQXAZxJHHc4Uo8L+h2s+ tNnaiRRkoaH9cYz7EB3+Y2+vVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1Hrg0o WBOpJX+250Vf8gKqO5DOMB8GA1UdIwQYMBaAFKwo3CpVS04zmjmclkK0zgJoqN+w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE0Ni9EQkRBMkNDNDlD MTExMUVGOTJGQkE5N0NDNEY5QUUwMi9yQ2pjS2xWTFRqT2FPWnlXUXJUT0FtaW8z N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDamNLbFZMVGpPYU9aeVdRclRPQW1pbzM3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUE0Ni9EQkRBMkNDNDlDMTExMUVGOTJGQkE5N0NDNEY5QUUwMi9yQ2pjS2xWTFRq T2FPWnlXUXJUT0FtaW8zN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrxMMapGpyLoHNFveDC/JlF/TSKerxWdg/3Soa6gukGC01r/YYXHEC gJ/t52jUSn3DnUEAAk5gsXq9lYMkb/N8gkqE4Ll6HAi9dpBHUq/RaNHevM9pQhKX zYFOyBgTgDz6kIgs/GMwOWpT4UCCeF5VkheUQ9luHp92rUgjHfnNMk3/flMLZ1nU j/cCNM/fc7TBNjN9tTcr8j3ZceeehpUKEv/hJOFJUcSy7sPdF4rJGx0XVBGXWLXi senhrqfmgXK54WhPygi3V1lXoPm4wqLymifMrj68JYIBXDTpVjqm1wIBeD3/YJni 0wg9dBVlo2+RqLlPRl+SY+rdnPR59cpy -----END CERTIFICATE-----Generated at Tue Nov 4 02:19:18 2025 by rpki-client