$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft File: ll15uIln4ofmpRU6EE_BTsEYWxE.mft (raw, json) Hash identifier: m0WvhA3Drsi4lactn5C4Ayh1pIdI8bUxJUx/eU3ahHg= Subject key identifier: 63:AA:D4:FB:11:1C:71:E1:E5:C8:DE:FE:B3:C2:BD:2E:C8:BE:22:41 Authority key identifier: 96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11 Certificate issuer: /CN=A91DF859/serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11 Certificate serial: 03C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft Manifest number: 03BB Signing time: Mon 03 Nov 2025 00:37:30 +0000 Manifest this update: Mon 03 Nov 2025 00:37:30 +0000 Manifest next update: Mon 10 Nov 2025 00:37:30 +0000 Files and hashes: 1: ll15uIln4ofmpRU6EE_BTsEYWxE.crl (hash: eg/xfRJWPXXfyy+q9MvVyrtsAbZeV5UvLu4MfHwx+ck=) 2: 1CDBD11CAE3711ECB61BED46C4F9AE02.roa (hash: 2gg461BffUf/xT7BkrRnrVM5ZugLJyBnhbCMdi11J1w=) 3: 1C43D57EAE3711ECB61BED46C4F9AE02.roa (hash: ZnO5JlWoEl5dNZhohsJyvbgouMlAXBiHwRW5x4khv3w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 965 (0x3c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF859, serialNumber=965D79B88967E287E6A5153A104FC14EC1185B11 Validity Not Before: Nov 3 00:37:30 2025 GMT Not After : Nov 10 00:37:30 2025 GMT Subject: CN=6907f94a-b1de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3b:11:6e:23:bf:97:a3:1c:d8:f2:05:ca:2b: e3:4d:aa:7e:c6:1f:87:e7:47:4e:da:02:bc:ea:37: 2a:c8:ce:94:76:3c:78:c5:50:50:9f:61:a4:93:20: 89:f3:3f:0d:aa:3d:dd:7c:17:f6:03:df:4f:ff:1e: f4:cf:68:46:a3:72:45:61:f0:4b:ac:68:f4:d6:b7: 33:a5:ab:8e:e7:3a:ab:ae:bf:3f:06:fd:8c:69:cb: c4:9d:4e:13:58:94:43:fe:bd:bf:3b:30:aa:69:e9: a3:c3:fe:90:82:a4:f4:4d:9d:65:10:24:8a:3e:74: 5d:6b:8b:47:b6:d3:5c:66:75:1d:d0:f2:7f:12:ed: a4:bb:6b:98:61:af:a5:5f:57:76:73:53:dc:1b:ac: a9:e5:4a:b8:b4:db:91:a2:93:50:3f:34:fe:34:f3: 37:f0:1a:45:a3:a6:01:68:8c:e0:61:8e:da:2d:76: 34:72:5f:b4:1b:4d:bd:b0:ff:91:b4:bd:a6:bb:22: 7d:ec:dc:68:61:a4:76:6b:34:6e:17:56:0a:19:70: 70:20:d4:4d:56:e7:fc:32:ff:b3:af:16:89:46:b7: 97:95:f2:98:3e:6f:58:f0:da:5c:a5:69:08:8c:4d: 99:54:80:3e:89:a5:c4:68:d6:b3:cb:fa:a4:21:2a: 41:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AA:D4:FB:11:1C:71:E1:E5:C8:DE:FE:B3:C2:BD:2E:C8:BE:22:41 X509v3 Authority Key Identifier: keyid:96:5D:79:B8:89:67:E2:87:E6:A5:15:3A:10:4F:C1:4E:C1:18:5B:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ll15uIln4ofmpRU6EE_BTsEYWxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/C14F55CEAE3311EC9FA60F43C4F9AE02/ll15uIln4ofmpRU6EE_BTsEYWxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:a6:06:15:a8:73:5e:13:f6:7e:cd:88:f1:d1:31:de:b5:99: fc:23:01:4e:3f:c7:a4:f0:0e:a1:7d:86:85:fe:ac:3a:8f:c8: 34:2d:86:5d:ed:7d:fe:c6:f7:1c:8b:b6:45:4b:d0:94:45:04: 6b:96:10:ec:b8:00:ef:ab:8c:c4:76:68:a2:c7:4f:94:bd:6e: a3:f4:09:0e:87:1e:df:95:2f:f0:b8:68:c6:4d:cc:5f:9d:6d: 1e:0d:25:0f:c3:f3:ad:15:c0:da:be:7b:51:d2:02:9d:cb:b6: f5:ed:83:66:61:b6:1d:64:59:e2:88:1d:c9:e6:84:0a:0e:10: bf:7f:db:6f:31:9f:64:9b:a1:5a:91:dd:09:86:67:da:b9:43: 01:2a:fc:54:fe:e0:47:e4:1e:ad:02:12:8c:b0:0d:30:7e:ef: b8:49:82:7e:f2:50:ea:f2:7b:fa:d1:64:e1:40:4f:22:82:b7: 0f:32:c5:7a:2b:29:f5:f3:67:f7:32:ec:fd:87:46:62:7e:d4: 9d:85:c9:af:93:a4:8f:1e:f4:26:60:04:59:87:1f:e5:8a:95: b9:28:92:c3:99:7f:6c:88:41:47:66:8f:41:aa:6b:9e:64:94: 41:03:c7:c3:52:ed:07:96:1e:6a:0d:52:89:26:6c:ac:cf:0b: 51:c6:b1:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4NTkxMTAvBgNVBAUTKDk2NUQ3OUI4ODk2N0UyODdFNkE1MTUzQTEwNEZDMTRF QzExODVCMTEwHhcNMjUxMTAzMDAzNzMwWhcNMjUxMTEwMDAzNzMwWjAYMRYwFAYD VQQDEw02OTA3Zjk0YS1iMWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zsRbiO/l6Mc2PIFyivjTap+xh+H50dO2gK86jcqyM6Udjx4xVBQn2GkkyCJ 8z8Nqj3dfBf2A99P/x70z2hGo3JFYfBLrGj01rczpauO5zqrrr8/Bv2MacvEnU4T WJRD/r2/OzCqaemjw/6QgqT0TZ1lECSKPnRda4tHttNcZnUd0PJ/Eu2ku2uYYa+l X1d2c1PcG6yp5Uq4tNuRopNQPzT+NPM38BpFo6YBaIzgYY7aLXY0cl+0G029sP+R tL2muyJ97NxoYaR2azRuF1YKGXBwINRNVuf8Mv+zrxaJRreXlfKYPm9Y8NpcpWkI jE2ZVIA+iaXEaNazy/qkISpB9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOq1PsR HHHh5cje/rPCvS7IviJBMB8GA1UdIwQYMBaAFJZdebiJZ+KH5qUVOhBPwU7BGFsR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjg1OS9DMTRGNTVDRUFF MzMxMUVDOUZBNjBGNDNDNEY5QUUwMi9sbDE1dUlsbjRvZm1wUlU2RUVfQlRzRVlX eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xsMTV1SWxuNG9mbXBSVTZFRV9CVHNFWVd4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1OS9DMTRGNTVDRUFFMzMxMUVDOUZBNjBGNDNDNEY5QUUwMi9sbDE1dUlsbjRv Zm1wUlU2RUVfQlRzRVlXeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5pgYVqHNeE/Z+zYjx0THetZn8IwFOP8ek8A6hfYaF/qw6j8g0LYZd 7X3+xvcci7ZFS9CURQRrlhDsuADvq4zEdmiix0+UvW6j9AkOhx7flS/wuGjGTcxf nW0eDSUPw/OtFcDavntR0gKdy7b17YNmYbYdZFniiB3J5oQKDhC/f9tvMZ9km6Fa kd0JhmfauUMBKvxU/uBH5B6tAhKMsA0wfu+4SYJ+8lDq8nv60WThQE8igrcPMsV6 Kyn182f3Muz9h0ZiftSdhcmvk6SPHvQmYARZhx/lipW5KJLDmX9siEFHZo9Bqmue ZJRBA8fDUu0Hlh5qDVKJJmyszwtRxrH+ -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:16 2025 by rpki-client