$ rpki-client -vvf rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft File: -1rPvPn87wNLipO9MZ5iBELWZn8.mft (raw, json) Hash identifier: i99BzG4Z5Vlo5+ixKCa7JCr6CbxZUXoQ/Fcl3hZfUPI= Subject key identifier: 98:CD:A0:16:0B:3B:89:40:25:23:02:77:28:EA:9B:8E:78:93:AF:B4 Authority key identifier: FB:5A:CF:BC:F9:FC:EF:03:4B:8A:93:BD:31:9E:62:04:42:D6:66:7F Certificate issuer: /CN=A912F515/serialNumber=FB5ACFBCF9FCEF034B8A93BD319E620442D6667F Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft Manifest number: D8 Signing time: Mon 03 Nov 2025 05:38:17 +0000 Manifest this update: Mon 03 Nov 2025 05:38:17 +0000 Manifest next update: Mon 10 Nov 2025 05:38:17 +0000 Files and hashes: 1: -1rPvPn87wNLipO9MZ5iBELWZn8.crl (hash: NN7nPtUu+LALIZYa2vM7e7/p40itkvNfUc/hTi9NO1M=) 2: 6A8E3C9474A811EFA3123A41C4F9AE02.roa (hash: 3DRrxdG8LfKAYdtHGcco//4+Q6X+ndXhUkgJbiWj/MI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.crl rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F515, serialNumber=FB5ACFBCF9FCEF034B8A93BD319E620442D6667F Validity Not Before: Nov 3 05:38:17 2025 GMT Not After : Nov 10 05:38:17 2025 GMT Subject: CN=69083fc9-764e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:23:93:fa:8b:14:7b:12:f7:15:c7:d3:e8:e5: 9d:96:1f:16:54:87:7d:e7:2d:f8:13:fa:24:ce:aa: 44:51:9c:16:cb:cd:2f:a0:03:11:27:d0:e2:5f:9f: 5c:0b:2f:a5:02:d6:ce:96:e4:ee:ff:d2:ee:bf:8f: 9c:93:19:63:84:66:29:6f:d1:3c:db:e6:32:25:39: 13:e7:b8:30:b7:59:35:27:4e:06:94:c3:eb:47:8b: ff:80:e8:95:bf:ce:3c:2a:88:c6:fc:77:73:4b:f5: b4:1d:a9:72:3c:07:94:fb:06:5c:a0:aa:f5:3f:ff: 67:34:9b:31:7b:2c:27:5e:b8:5a:9e:50:fc:e7:5f: c0:4e:65:6f:45:49:a7:09:91:cb:4a:44:c0:6a:69: 0f:9e:51:fd:c8:a7:a3:26:5a:8f:90:5b:6c:96:7d: 9d:2f:30:51:14:ac:dc:10:e4:a7:88:4a:8b:0c:c4: 78:dc:13:6d:0e:63:f1:8f:59:bc:f2:c7:77:7e:e5: ad:7e:94:c8:ee:1f:cd:73:52:24:cd:64:56:3c:15: 06:f4:40:0e:88:ff:60:5a:1f:ce:a5:89:94:9e:a2: 92:03:87:3f:60:1e:ca:1f:00:57:b2:9c:67:36:87: 68:47:44:c1:4b:b8:a3:0c:21:30:f6:b0:fc:9f:b6: 1c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CD:A0:16:0B:3B:89:40:25:23:02:77:28:EA:9B:8E:78:93:AF:B4 X509v3 Authority Key Identifier: keyid:FB:5A:CF:BC:F9:FC:EF:03:4B:8A:93:BD:31:9E:62:04:42:D6:66:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:c9:cb:7f:ab:3f:76:eb:84:e3:5f:ce:9a:ce:82:6f:dd:e7: 7a:f7:6b:83:29:5a:55:f9:65:c0:7c:2e:c4:42:f7:69:0f:58: e6:1d:64:15:c4:8f:f0:cf:7e:01:a1:1c:a9:86:c0:67:f2:53: 75:7e:96:c5:b6:8c:72:16:e4:68:a2:e9:29:c8:a0:5e:19:3b: b2:b5:cc:52:07:f5:b7:fb:0d:41:e3:6b:cc:b4:4f:85:7b:3f: c8:27:b4:cf:9d:60:4b:6e:73:cd:b0:54:4b:24:b4:c8:54:b1: 77:d1:6d:53:3f:35:bd:90:99:99:44:64:3f:f0:b6:99:b4:33: 37:a7:b0:06:5d:39:af:fc:be:2a:9f:15:2d:0a:35:6c:b1:8e: ea:2a:23:d8:84:99:17:83:b4:99:07:a6:67:67:fd:20:7a:47: 45:59:9b:80:a9:c8:28:0d:f5:ad:1a:b1:60:b3:b8:9f:25:a7: 55:14:9f:87:85:04:e9:09:d9:56:05:33:8e:3e:fd:70:0f:80: 22:31:91:3a:51:68:4a:ba:f0:22:16:d5:8d:d6:02:66:ba:90: 95:17:8f:83:dc:e5:d2:47:24:c0:c3:6e:4e:85:ce:b7:89:cc: 19:59:3c:d1:b0:22:0b:5c:b8:1d:56:2a:88:86:85:c1:99:f0: 43:f6:fe:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkY1MTUxMTAvBgNVBAUTKEZCNUFDRkJDRjlGQ0VGMDM0QjhBOTNCRDMxOUU2MjA0 NDJENjY2N0YwHhcNMjUxMTAzMDUzODE3WhcNMjUxMTEwMDUzODE3WjAYMRYwFAYD VQQDEw02OTA4M2ZjOS03NjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmSOT+osUexL3FcfT6OWdlh8WVId95y34E/okzqpEUZwWy80voAMRJ9DiX59c Cy+lAtbOluTu/9Luv4+ckxljhGYpb9E82+YyJTkT57gwt1k1J04GlMPrR4v/gOiV v848KojG/HdzS/W0HalyPAeU+wZcoKr1P/9nNJsxeywnXrhanlD851/ATmVvRUmn CZHLSkTAamkPnlH9yKejJlqPkFtsln2dLzBRFKzcEOSniEqLDMR43BNtDmPxj1m8 8sd3fuWtfpTI7h/Nc1IkzWRWPBUG9EAOiP9gWh/OpYmUnqKSA4c/YB7KHwBXspxn NodoR0TBS7ijDCEw9rD8n7YcFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjNoBYL O4lAJSMCdyjqm454k6+0MB8GA1UdIwQYMBaAFPtaz7z5/O8DS4qTvTGeYgRC1mZ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUxNS8zRDNDQTMwODc0 QTcxMUVGOEVBMkM1M0RDNEY5QUUwMi8tMXJQdlBuODd3TkxpcE85TVo1aUJFTFda bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0xclB2UG44N3dOTGlwTzlNWjVpQkVMV1puOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUxNS8zRDNDQTMwODc0QTcxMUVGOEVBMkM1M0RDNEY5QUUwMi8tMXJQdlBuODd3 TkxpcE85TVo1aUJFTFdabjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAyct/qz9264TjX86azoJv3ed692uDKVpV+WXAfC7EQvdpD1jmHWQV xI/wz34BoRyphsBn8lN1fpbFtoxyFuRooukpyKBeGTuytcxSB/W3+w1B42vMtE+F ez/IJ7TPnWBLbnPNsFRLJLTIVLF30W1TPzW9kJmZRGQ/8LaZtDM3p7AGXTmv/L4q nxUtCjVssY7qKiPYhJkXg7SZB6ZnZ/0gekdFWZuAqcgoDfWtGrFgs7ifJadVFJ+H hQTpCdlWBTOOPv1wD4AiMZE6UWhKuvAiFtWN1gJmupCVF4+D3OXSRyTAw25Ohc63 icwZWTzRsCILXLgdViqIhoXBmfBD9v6/ -----END CERTIFICATE-----Generated at Wed Nov 5 05:24:58 2025 by rpki-client