$ rpki-client -vvf rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft File: 5c15IB7rS9nw73ZW5zJfVxZffqA.mft (raw, json) Hash identifier: NqATcnQj4PG0+sKJ6NQxeMgo+q0QRrwUG4UK5FgXScs= Subject key identifier: 1F:97:4D:F9:A2:B9:6B:50:9D:97:B3:D7:F1:F4:CB:0A:DD:A2:8C:11 Authority key identifier: E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0 Certificate issuer: /CN=A911218D/serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0 Certificate serial: 07FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft Manifest number: 07F0 Signing time: Thu 18 Sep 2025 21:18:51 +0000 Manifest this update: Thu 18 Sep 2025 21:18:50 +0000 Manifest next update: Thu 25 Sep 2025 21:18:50 +0000 Files and hashes: 1: 5c15IB7rS9nw73ZW5zJfVxZffqA.crl (hash: epa1gzElCCcof4fneI8TQBS0LCpsO37JJ7SWSlyOfi0=) 2: C14B7B728D0611EDB02E7331C4F9AE02.roa (hash: cW5d9zgypzyK0jiQh7AOhsQ2I4bzZRwKwFE4H9ImC3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2047 (0x7ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911218D, serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0 Validity Not Before: Sep 18 21:18:50 2025 GMT Not After : Sep 25 21:18:50 2025 GMT Subject: CN=68cc773a-8696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:37:a6:b8:2f:ab:bb:d4:3c:2c:8b:80:44:65: ce:21:b4:76:07:0e:8c:ea:78:63:57:ed:1c:f5:d9: 3a:0a:90:81:55:df:d7:38:ba:f0:6d:c6:02:e3:4f: 4c:8f:d4:ac:5c:a1:1b:9a:e0:04:80:41:7d:aa:f4: 06:3c:f6:f2:5c:8a:67:92:80:63:78:0c:bd:3b:0b: 37:34:32:1a:a8:4e:12:0a:62:75:e8:f3:8d:9a:d0: c2:06:5d:be:39:8a:00:37:7c:2f:57:62:88:a7:d3: d5:07:22:74:6f:f8:61:36:2c:21:6b:a8:9e:e9:bc: 3b:5c:9b:3c:cb:6e:11:e0:6c:ab:21:b4:42:ea:63: 05:fd:44:0e:0d:a6:f1:24:e8:14:46:9c:d4:c9:40: c9:81:d2:41:98:01:c6:cb:b0:e2:d8:88:e4:61:c4: d7:90:65:87:14:e0:20:9e:c5:94:d2:14:75:a5:76: 1c:c9:f5:99:b3:2d:ec:68:35:cb:92:08:ba:7b:53: 48:0b:96:40:38:6b:c9:58:aa:67:41:5c:eb:d6:4d: 7e:6a:c8:d4:74:79:28:da:bb:2d:da:63:ac:60:ab: 47:36:df:3d:ea:a5:f5:38:b8:65:eb:33:ae:60:e9: 77:3f:d4:88:d9:e0:6e:32:d3:d6:0d:eb:ff:f2:d3: 5e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:97:4D:F9:A2:B9:6B:50:9D:97:B3:D7:F1:F4:CB:0A:DD:A2:8C:11 X509v3 Authority Key Identifier: keyid:E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:d5:d3:bc:d9:a9:c3:48:c0:62:c8:be:2a:1d:e1:ba:c5:37: ba:ba:52:09:b6:fc:65:f0:4e:21:80:f3:c6:c0:0a:49:8f:09: cd:01:b5:f0:8a:e8:29:d0:02:82:c6:c3:20:5f:1b:56:64:86: 30:0a:6a:da:8f:11:14:b2:4e:37:94:87:8d:fe:5f:33:9d:e5: 57:8f:76:07:6a:e9:bd:dc:55:4d:ce:bd:ae:67:d0:3e:7e:ea: ea:d4:8e:f5:77:d0:42:68:58:50:a3:40:3f:66:fe:27:9f:93: 9b:58:f9:bc:5d:ca:46:83:16:1b:e8:9d:7c:f4:6f:86:b7:fa: 58:b1:c1:3e:d6:98:91:7f:b1:26:d0:57:83:db:c3:5d:1b:5a: 68:b0:f1:f6:a7:7f:cd:fe:b1:e9:74:1a:b3:e0:b5:27:d3:09: ba:c7:3c:7d:a1:c6:57:53:09:e9:f6:cc:f6:50:0f:32:a4:37: 0d:71:80:a4:6c:b8:37:73:71:ab:21:21:67:1f:9f:5f:7b:54: bc:57:97:0a:5e:ed:0c:14:50:c8:6f:2f:93:a3:17:13:f5:e3: a9:b2:e7:69:d7:b6:89:aa:e1:84:d7:b3:fe:0e:21:13:b5:04: 26:14:82:26:7e:3d:d7:4c:cd:29:f1:02:06:da:65:d9:5d:d4: c4:12:19:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIxOEQxMTAvBgNVBAUTKEU1Q0Q3OTIwMUVFQjRCRDlGMEVGNzY1NkU3MzI1RjU3 MTY1RjdFQTAwHhcNMjUwOTE4MjExODUwWhcNMjUwOTI1MjExODUwWjAYMRYwFAYD VQQDEw02OGNjNzczYS04Njk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DemuC+ru9Q8LIuARGXOIbR2Bw6M6nhjV+0c9dk6CpCBVd/XOLrwbcYC409M j9SsXKEbmuAEgEF9qvQGPPbyXIpnkoBjeAy9Ows3NDIaqE4SCmJ16PONmtDCBl2+ OYoAN3wvV2KIp9PVByJ0b/hhNiwha6ie6bw7XJs8y24R4GyrIbRC6mMF/UQODabx JOgURpzUyUDJgdJBmAHGy7Di2IjkYcTXkGWHFOAgnsWU0hR1pXYcyfWZsy3saDXL kgi6e1NIC5ZAOGvJWKpnQVzr1k1+asjUdHko2rst2mOsYKtHNt896qX1OLhl6zOu YOl3P9SI2eBuMtPWDev/8tNeuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+XTfmi uWtQnZez1/H0ywrdoowRMB8GA1UdIwQYMBaAFOXNeSAe60vZ8O92VucyX1cWX36g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjE4RC8wRUI2NzQ4QUZG QzgxMUVBODRBMzY2N0NDNEY5QUUwMi81YzE1SUI3clM5bnc3M1pXNXpKZlZ4WmZm cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVjMTVJQjdyUzludzczWlc1ekpmVnhaZmZxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjE4RC8wRUI2NzQ4QUZGQzgxMUVBODRBMzY2N0NDNEY5QUUwMi81YzE1SUI3clM5 bnc3M1pXNXpKZlZ4WmZmcUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBD1dO82anDSMBiyL4qHeG6xTe6ulIJtvxl8E4hgPPGwApJjwnNAbXw iugp0AKCxsMgXxtWZIYwCmrajxEUsk43lIeN/l8zneVXj3YHaum93FVNzr2uZ9A+ furq1I71d9BCaFhQo0A/Zv4nn5ObWPm8XcpGgxYb6J189G+Gt/pYscE+1piRf7Em 0FeD28NdG1posPH2p3/N/rHpdBqz4LUn0wm6xzx9ocZXUwnp9sz2UA8ypDcNcYCk bLg3c3GrISFnH59fe1S8V5cKXu0MFFDIby+ToxcT9eOpsudp17aJquGE17P+DiET tQQmFIImfj3XTM0p8QIG2mXZXdTEEhlZ -----END CERTIFICATE-----Generated at Fri Sep 19 05:30:11 2025 by rpki-client