$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft File: -KpwkWtspYPANj63qaX38mJ9c2A.mft (raw, json) Hash identifier: Q3iWdXwh41JzmLzQdSWzE5OfIYfUqLYfMJioA9dFQX4= Subject key identifier: 4A:81:0C:BD:66:F3:69:55:12:41:F2:4B:03:C7:EC:51:27:F9:77:47 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 2695 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft Manifest number: 2590 Signing time: Tue 04 Nov 2025 15:50:46 +0000 Manifest this update: Tue 04 Nov 2025 15:50:46 +0000 Manifest next update: Tue 11 Nov 2025 15:50:46 +0000 Files and hashes: 1: -KpwkWtspYPANj63qaX38mJ9c2A.crl (hash: hqRPULrkVk1aICDEm4zRb7nNocUtGGrAmPHh9lroWiQ=) 2: 9DBB8670790211EC9EE24885C4F9AE02.roa (hash: HAVp5cljtBnNfexhpbWp3fQD4oxFEGOqIu7ZTxc+Cn0=) 3: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (hash: RIyr8Ughbt9mob5hXoVNYqj5DjcM8cytuIahFNZG+OY=) 4: 86D13B7E571C11EC81276481C4F9AE02.roa (hash: MOs76+y2ZzpmyQheXk3mTC95IHPkn0FNf96cGXOiX14=) 5: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (hash: Z5qSs34sPKp/u0MZu0MdqYO0kmHEtkJPsT5iKOnHCCM=) 6: CFF5A20078E011EC8357FA15C4F9AE02.roa (hash: 0lnFnxu0rWa+p9n4oerH1rvUz5x82J6mnvG019TSBpo=) 7: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (hash: lPqoKt6e9WB68QkGqWF9uf0n021O/vJN6Ok+8vPm99E=) 8: 6E042EFCABF011EC92152E22C4F9AE02.roa (hash: nSFw75IcZdLxXGKGRDjDilcmAybSCgLtcoRvUszM+xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9877 (0x2695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Nov 4 15:50:46 2025 GMT Not After : Nov 11 15:50:46 2025 GMT Subject: CN=690a20d6-d424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:8c:14:bc:9a:54:1d:8c:f2:2e:24:0d:27: 57:5c:22:f0:9e:85:1c:bd:f9:e8:9e:c1:f5:0a:01: 22:97:9e:3f:3b:13:88:f9:08:44:ae:38:50:04:ed: 9c:ca:22:05:6c:2c:d6:6b:be:b6:f4:09:8c:88:f9: 83:25:90:60:94:e0:72:e4:5c:25:86:72:6d:c8:b3: ab:9d:8e:b7:74:ff:b1:88:4b:60:9b:dc:21:8f:8a: fc:d0:d6:c8:cf:4c:46:8c:c8:0e:74:bb:2e:00:83: b2:c6:50:69:c2:f2:45:0d:6f:26:d8:61:a7:72:0b: a6:6e:b4:f6:d7:61:c1:6d:a2:53:29:c5:80:5c:4f: f6:81:f4:e8:de:87:a1:b0:0a:54:4c:4b:9c:ef:90: c9:b0:a0:62:b8:7e:58:f0:b2:db:47:79:7d:c6:dd: 75:0c:07:9e:c1:14:11:ed:32:26:3f:f1:f1:b2:43: d0:b8:e8:6b:a0:47:41:84:47:f5:75:81:b8:b6:81: 31:b0:42:b6:38:b5:e3:e1:b6:1e:45:20:87:89:43: 8d:13:71:6f:6e:20:8c:32:ea:9e:dc:eb:eb:2d:d0: 02:2b:49:0e:96:fb:c3:92:0d:77:b0:b8:eb:2e:45: d8:27:45:86:d4:f9:4c:05:dc:b9:ef:3f:43:87:fb: 23:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:81:0C:BD:66:F3:69:55:12:41:F2:4B:03:C7:EC:51:27:F9:77:47 X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:55:07:c1:8b:45:6e:c7:00:af:1f:ef:de:c4:a9:56:88:ec: a0:6d:bb:f7:60:ac:ad:78:60:74:74:f6:28:91:9e:c9:be:18: 53:df:39:c1:5e:7a:e5:52:52:3d:60:8e:d4:4c:a2:db:2e:49: ec:97:31:f6:56:8a:b0:be:f9:e3:cb:e3:aa:f2:66:af:11:fe: b9:3a:d7:f4:03:04:a5:71:33:7a:0a:d6:79:e5:da:f3:26:c5: c2:0b:78:4e:45:32:c1:33:67:bf:5a:78:23:10:08:73:02:c2: 02:4e:31:16:d1:95:da:cc:9c:d9:34:ff:74:4d:2b:24:be:8f: 91:59:94:03:6f:2e:5c:58:4c:e4:14:90:0f:8f:1a:b4:d8:45: d5:ee:ce:22:f3:8b:38:5a:38:67:18:fa:2d:1d:51:d0:97:8f: d0:d2:fa:1e:45:95:c3:44:b6:e6:a2:e2:d8:47:fa:35:64:fb: 84:1e:32:cf:88:c5:ac:6f:59:e8:11:d4:f5:90:96:ab:31:6f: 1e:a1:08:18:56:89:7a:1e:33:62:84:79:83:ce:98:84:7e:57: 82:82:e2:35:39:ed:bf:e0:b5:3d:2b:4c:2d:51:c4:a6:57:9f: 31:22:aa:34:85:de:22:ed:b6:2a:15:31:72:57:ea:7e:aa:9c: ca:42:25:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjUxMTA0MTU1MDQ2WhcNMjUxMTExMTU1MDQ2WjAYMRYwFAYD VQQDEw02OTBhMjBkNi1kNDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqGMFLyaVB2M8i4kDSdXXCLwnoUcvfnonsH1CgEil54/OxOI+QhErjhQBO2c yiIFbCzWa7629AmMiPmDJZBglOBy5FwlhnJtyLOrnY63dP+xiEtgm9whj4r80NbI z0xGjMgOdLsuAIOyxlBpwvJFDW8m2GGncgumbrT212HBbaJTKcWAXE/2gfTo3oeh sApUTEuc75DJsKBiuH5Y8LLbR3l9xt11DAeewRQR7TImP/HxskPQuOhroEdBhEf1 dYG4toExsEK2OLXj4bYeRSCHiUONE3FvbiCMMuqe3OvrLdACK0kOlvvDkg13sLjr LkXYJ0WG1PlMBdy57z9Dh/sj8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqBDL1m 82lVEkHySwPH7FEn+XdHMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUU1My8zODUxMTg0MDQ1ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZ UEFOajYzcWFYMzhtSjljMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8VQfBi0VuxwCvH+/exKlWiOygbbv3YKyteGB0dPYokZ7JvhhT3znB XnrlUlI9YI7UTKLbLknslzH2Voqwvvnjy+Oq8mavEf65Otf0AwSlcTN6CtZ55drz JsXCC3hORTLBM2e/WngjEAhzAsICTjEW0ZXazJzZNP90TSskvo+RWZQDby5cWEzk FJAPjxq02EXV7s4i84s4WjhnGPotHVHQl4/Q0voeRZXDRLbmouLYR/o1ZPuEHjLP iMWsb1noEdT1kJarMW8eoQgYVol6HjNihHmDzpiEfleCguI1Oe2/4LU9K0wtUcSm V58xIqo0hd4i7bYqFTFyV+p+qpzKQiUZ -----END CERTIFICATE-----Generated at Tue Nov 4 20:23:29 2025 by rpki-client