$ rpki-client -vvf rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft File: 15_gsJykSoRmkoOPxCvPQ9KjKtI.mft (raw, json) Hash identifier: ONMb1PAAVerMXT714vow3cU9VqPgadhvaGoxJAClo80= Subject key identifier: 97:96:26:3B:CF:78:A7:34:2A:D8:39:DC:62:A6:56:D6:3D:73:1D:B9 Authority key identifier: D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 Certificate issuer: /CN=A9127DE3/serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft Manifest number: 76 Signing time: Thu 23 Oct 2025 08:58:28 +0000 Manifest this update: Thu 23 Oct 2025 08:58:28 +0000 Manifest next update: Thu 30 Oct 2025 08:58:28 +0000 Files and hashes: 1: 15_gsJykSoRmkoOPxCvPQ9KjKtI.crl (hash: I3MDE1cc/bWuIelKDAjqpQCerOBFgLp9XMbS6cC4auY=) 2: AA99F49CFC3711EFA9688687C4F9AE02.roa (hash: 970zffhkVpQStk3jgKgrN42mDxhaIFK4aP3YfXR8LM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 08:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127DE3, serialNumber=D79FE0B09CA44A846692838FC42BCF43D2A32AD2 Validity Not Before: Oct 23 08:58:28 2025 GMT Not After : Oct 30 08:58:28 2025 GMT Subject: CN=68f9ee34-743f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ae:90:18:67:2f:bf:b2:4e:ab:65:34:22:f6: c9:7f:35:21:f6:22:f8:e5:07:4e:8f:33:7c:de:50: e8:61:52:89:b3:45:94:d6:ea:8b:f3:83:b8:84:3e: 11:4d:92:f0:94:5b:78:0a:0b:f6:ed:bb:0a:e5:6f: 62:7c:93:b0:09:04:8e:6c:3b:c7:f6:49:8f:8f:bd: 35:a0:97:54:bc:07:63:b5:14:b6:ed:79:01:01:96: dd:5c:6c:cb:d8:a7:17:6f:58:a7:78:0a:65:4a:45: 67:4a:ee:eb:13:a7:10:96:5c:56:a7:74:3a:8b:ae: 31:02:ab:d0:70:bb:aa:a5:fc:8c:9a:61:c5:8c:4f: 36:c6:60:b2:f5:d4:70:56:b7:18:8c:b0:74:c0:db: a3:2b:75:dc:6e:a3:0d:91:59:bb:a3:a6:e1:a7:ee: 71:66:e5:48:5d:80:68:13:48:5f:26:ca:b8:62:f6: 72:e2:40:31:6d:e0:24:73:27:6b:77:29:e9:57:e5: a3:2e:51:5f:91:47:4b:2c:ec:81:ba:c0:a3:bf:f3: b7:86:0f:61:bf:f5:3b:4b:49:03:c6:34:17:b1:e2: 61:5d:87:dc:d9:35:3f:41:19:75:eb:26:69:1c:7e: f4:55:53:fd:5b:e7:7e:ca:6c:2e:2a:bc:cf:a7:b7: c2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:96:26:3B:CF:78:A7:34:2A:D8:39:DC:62:A6:56:D6:3D:73:1D:B9 X509v3 Authority Key Identifier: keyid:D7:9F:E0:B0:9C:A4:4A:84:66:92:83:8F:C4:2B:CF:43:D2:A3:2A:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_gsJykSoRmkoOPxCvPQ9KjKtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127DE3/4E1EEABAFC3711EFB1C07286C4F9AE02/15_gsJykSoRmkoOPxCvPQ9KjKtI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:90:c5:2c:56:fd:ba:91:f6:13:16:53:1d:9d:df:4c:2a:53: e8:11:84:ef:d7:6b:9e:5e:bd:0c:d1:3b:59:df:23:bd:93:d8: 01:30:7b:d4:3b:87:c7:fe:61:8e:70:82:2c:d8:0a:32:7b:79: 30:56:16:c4:0a:1d:c6:50:2b:f7:24:25:94:c2:08:c7:5f:ce: 73:67:8a:f7:d0:2e:42:18:b7:33:17:9b:f3:aa:cf:30:ff:2b: 2d:1e:06:e7:86:87:6e:8a:b1:4b:55:13:d5:ad:4c:41:28:9f: b7:82:43:9e:7b:c7:1c:77:a6:48:e0:15:bc:d2:54:7b:a5:28: 3e:2d:30:28:2a:0d:97:07:d9:ac:24:f8:bd:ca:41:26:14:ff: 5a:e3:ff:18:04:a8:5b:11:c9:1c:1b:ba:7d:e2:ea:61:2d:a4: 03:a6:93:fc:10:74:73:c9:31:59:06:4c:6a:65:3f:91:6d:93: c8:04:88:b0:cf:f1:7e:2c:36:02:d7:a4:a5:e5:02:6d:04:5d: 31:40:e9:fc:96:58:a4:ff:92:da:87:e2:7c:35:40:c0:ac:2d: 38:5b:7e:9c:a6:1f:a4:cb:63:11:03:16:77:1e:09:2e:b4:41: 13:93:8a:9b:da:ad:7a:32:ae:ab:61:32:86:7a:97:84:70:98: 91:f3:f9:ad -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0RFMzExMC8GA1UEBRMoRDc5RkUwQjA5Q0E0NEE4NDY2OTI4MzhGQzQyQkNGNDNE MkEzMkFEMjAeFw0yNTEwMjMwODU4MjhaFw0yNTEwMzAwODU4MjhaMBgxFjAUBgNV BAMTDTY4ZjllZTM0LTc0M2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYrpAYZy+/sk6rZTQi9sl/NSH2IvjlB06PM3zeUOhhUomzRZTW6ovzg7iEPhFN kvCUW3gKC/btuwrlb2J8k7AJBI5sO8f2SY+PvTWgl1S8B2O1FLbteQEBlt1cbMvY pxdvWKd4CmVKRWdK7usTpxCWXFandDqLrjECq9Bwu6ql/IyaYcWMTzbGYLL11HBW txiMsHTA26Mrddxuow2RWbujpuGn7nFm5UhdgGgTSF8myrhi9nLiQDFt4CRzJ2t3 KelX5aMuUV+RR0ss7IG6wKO/87eGD2G/9TtLSQPGNBex4mFdh9zZNT9BGXXrJmkc fvRVU/1b537KbC4qvM+nt8LBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl5YmO894 pzQq2DncYqZW1j1zHbkwHwYDVR0jBBgwFoAU15/gsJykSoRmkoOPxCvPQ9KjKtIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3REUzLzRFMUVFQUJBRkMz NzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29SbWtvT1B4Q3ZQUTlLakt0 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMTVfZ3NKeWtTb1Jta29PUHhDdlBROUtqS3RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 REUzLzRFMUVFQUJBRkMzNzExRUZCMUMwNzI4NkM0RjlBRTAyLzE1X2dzSnlrU29S bWtvT1B4Q3ZQUTlLakt0SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABWQxSxW/bqR9hMWUx2d30wqU+gRhO/Xa55evQzRO1nfI72T2AEwe9Q7 h8f+YY5wgizYCjJ7eTBWFsQKHcZQK/ckJZTCCMdfznNnivfQLkIYtzMXm/OqzzD/ Ky0eBueGh26KsUtVE9WtTEEon7eCQ557xxx3pkjgFbzSVHulKD4tMCgqDZcH2awk +L3KQSYU/1rj/xgEqFsRyRwbun3i6mEtpAOmk/wQdHPJMVkGTGplP5Ftk8gEiLDP 8X4sNgLXpKXlAm0EXTFA6fyWWKT/ktqH4nw1QMCsLThbfpymH6TLYxEDFnceCS60 QROTipvarXoyrqthMoZ6l4RwmJHz+a0= -----END CERTIFICATE-----Generated at Fri Oct 24 08:07:02 2025 by rpki-client