$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft File: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft (raw, json) Hash identifier: IqigXslSMphQPNK0896krKYTjKw6ZipKAPZC5UZp0fU= Subject key identifier: 24:46:7E:C3:90:CA:70:58:57:78:2F:6B:C3:9F:07:75:48:EE:0F:11 Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft Manifest number: 01B4 Signing time: Mon 03 Nov 2025 03:12:26 +0000 Manifest this update: Mon 03 Nov 2025 03:12:26 +0000 Manifest next update: Mon 10 Nov 2025 03:12:26 +0000 Files and hashes: 1: 15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl (hash: aLGD3qH1eT0baOqR6HTKO77pS0JdaI2dHF4/ffYc70w=) 2: 9728C64EF10811EE8F128341C4F9AE02.roa (hash: Q0kMZvSMppTmP/L1MFuKtKcyvw4++N9BtkqfdKNNGdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4 Validity Not Before: Nov 3 03:12:26 2025 GMT Not After : Nov 10 03:12:26 2025 GMT Subject: CN=69081d9a-3919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ed:02:18:25:8e:7b:50:0b:fb:28:7e:05:14: f1:91:85:40:c3:ce:f4:22:8b:c8:c2:62:df:28:59: dc:34:29:55:ca:d2:29:69:74:dd:7d:91:96:3d:3d: 5a:0e:2d:03:d9:de:8c:b1:87:26:09:0d:bf:6f:1e: 08:c1:4f:7f:d9:3a:11:e1:72:3e:81:02:72:9d:65: 83:2f:f4:c4:a4:19:37:a2:08:7e:12:1d:c1:6c:ff: a9:15:6f:5d:1d:ed:fd:ab:1c:c2:99:e1:be:8c:67: 17:73:7d:6c:cb:71:d8:75:2d:49:fc:b3:e0:da:59: 3f:f6:bd:8c:84:fc:44:24:c0:27:40:85:40:3c:8c: 9d:91:77:c8:77:35:0b:cc:d4:d2:66:4f:b0:1f:7c: c8:22:ba:1d:62:f7:25:b1:9a:f7:59:71:02:7f:02: 3a:83:67:5e:64:9b:a1:2a:64:37:df:34:f9:c9:fd: 99:d3:26:7e:e3:7d:1b:9b:bd:97:e8:9e:52:d3:14: 6d:49:60:75:8f:2d:85:54:af:53:80:34:96:3f:10: 53:d9:f0:10:ae:b2:9b:41:55:af:f4:60:8c:fa:83: 56:d4:ab:16:e7:e8:9a:da:6a:bf:1b:c7:bf:9b:f5: e1:bf:1e:f6:82:0d:53:b3:ff:9f:ba:a5:bf:5d:ea: c1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:46:7E:C3:90:CA:70:58:57:78:2F:6B:C3:9F:07:75:48:EE:0F:11 X509v3 Authority Key Identifier: keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f2:e0:3b:3b:0f:a9:d8:01:b4:44:1c:72:cc:d2:40:29:95: 40:d6:1f:58:d4:03:86:53:5f:16:83:a2:b5:47:99:22:ea:53: f1:5d:8f:f7:f9:b9:92:97:1a:01:09:8d:23:2c:fa:f5:cc:e5: ed:74:55:30:79:49:42:a4:32:2a:c6:d8:c9:f0:25:9e:12:34: 52:3a:1e:b8:e4:89:a0:97:59:7a:66:b4:42:f6:72:6e:15:68: 69:97:3d:a0:eb:f5:ad:62:08:4a:85:ed:06:93:3a:54:eb:55: e6:ca:14:b2:61:84:72:fd:5c:67:7a:eb:63:e2:ce:e1:4f:4e: d2:d5:11:2d:f8:8c:10:58:0f:02:55:05:00:15:04:ab:32:12: 36:81:87:f5:b5:50:1b:36:18:18:2d:b0:46:bb:19:bf:09:c7: d6:7f:2a:b0:28:ed:f7:28:06:ec:90:9c:29:93:89:40:e9:5b: ad:f0:a9:fc:e5:29:41:6b:c1:f3:7e:1c:0b:a5:aa:9e:29:f9: 91:b8:6a:c2:4b:81:91:43:1e:0a:8e:cb:b5:1f:c3:bc:6b:dc: 59:fb:80:07:ea:7f:90:4c:a0:0f:65:51:95:97:76:c9:48:e1: 15:95:49:a5:0b:a5:07:b2:31:fc:5e:52:84:44:fd:8e:0c:e8: 76:96:6b:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNGMjYxMTAvBgNVBAUTKEQ3OTBDMkM0NjkzMkJFOUQyNTgyMkQ5OTEyOEVCQkNG MDMzRDQ1QzQwHhcNMjUxMTAzMDMxMjI2WhcNMjUxMTEwMDMxMjI2WjAYMRYwFAYD VQQDEw02OTA4MWQ5YS0zOTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzu0CGCWOe1AL+yh+BRTxkYVAw870IovIwmLfKFncNClVytIpaXTdfZGWPT1a Di0D2d6MsYcmCQ2/bx4IwU9/2ToR4XI+gQJynWWDL/TEpBk3ogh+Eh3BbP+pFW9d He39qxzCmeG+jGcXc31sy3HYdS1J/LPg2lk/9r2MhPxEJMAnQIVAPIydkXfIdzUL zNTSZk+wH3zIIrodYvclsZr3WXECfwI6g2deZJuhKmQ33zT5yf2Z0yZ+430bm72X 6J5S0xRtSWB1jy2FVK9TgDSWPxBT2fAQrrKbQVWv9GCM+oNW1KsW5+ia2mq/G8e/ m/Xhvx72gg1Ts/+fuqW/XerBewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRGfsOQ ynBYV3gva8OfB3VI7g8RMB8GA1UdIwQYMBaAFNeQwsRpMr6dJYItmRKOu88DPUXE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0YyNi83MDNBMDI1NDJE NTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZwMGxnaTJaRW82N3p3TTlS Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1REN4R2t5dnAwbGdpMlpFbzY3endNOVJjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0YyNi83MDNBMDI1NDJENTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZw MGxnaTJaRW82N3p3TTlSY1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO8uA7Ow+p2AG0RBxyzNJAKZVA1h9Y1AOGU18Wg6K1R5ki6lPxXY/3 +bmSlxoBCY0jLPr1zOXtdFUweUlCpDIqxtjJ8CWeEjRSOh645Imgl1l6ZrRC9nJu FWhplz2g6/WtYghKhe0GkzpU61XmyhSyYYRy/Vxneutj4s7hT07S1REt+IwQWA8C VQUAFQSrMhI2gYf1tVAbNhgYLbBGuxm/CcfWfyqwKO33KAbskJwpk4lA6Vut8Kn8 5SlBa8HzfhwLpaqeKfmRuGrCS4GRQx4Kjsu1H8O8a9xZ+4AH6n+QTKAPZVGVl3bJ SOEVlUmlC6UHsjH8XlKERP2ODOh2lmsG -----END CERTIFICATE-----Generated at Mon Nov 3 18:11:10 2025 by rpki-client