$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft File: sdV2wMeOXPWNSDeibJJjxj8TFd0.mft (raw, json) Hash identifier: PIPHYI3hGmzVHS+sOrjp5caiZY+GrlVLcAxF/oBZ0Ro= Subject key identifier: 31:1B:3A:5A:BB:CB:93:56:0E:ED:56:80:07:8F:B6:20:13:84:EA:FA Authority key identifier: B1:D5:76:C0:C7:8E:5C:F5:8D:48:37:A2:6C:92:63:C6:3F:13:15:DD Certificate issuer: /CN=A914EB5A/serialNumber=B1D576C0C78E5CF58D4837A26C9263C63F1315DD Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft Manifest number: 015B Signing time: Mon 03 Nov 2025 04:04:54 +0000 Manifest this update: Mon 03 Nov 2025 04:04:54 +0000 Manifest next update: Mon 10 Nov 2025 04:04:54 +0000 Files and hashes: 1: sdV2wMeOXPWNSDeibJJjxj8TFd0.crl (hash: XND0NB806FdJ2eExHvDnCc8gA/iYXwHSAlN/H1jaFxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.crl rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB5A, serialNumber=B1D576C0C78E5CF58D4837A26C9263C63F1315DD Validity Not Before: Nov 3 04:04:54 2025 GMT Not After : Nov 10 04:04:54 2025 GMT Subject: CN=690829e6-3017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6b:96:83:03:ca:03:09:6f:ed:13:9e:98:3a: 97:06:ed:bd:5b:3b:a3:16:44:88:40:84:9d:43:45: bc:5c:b8:31:f8:75:14:9b:9c:5b:7d:d7:ae:ea:f1: 57:f9:98:d0:46:31:78:32:76:e2:fb:f9:13:94:a7: b4:e1:d3:96:d1:c1:78:2f:55:68:28:fe:9c:48:2b: 48:7a:d4:7a:e0:12:51:05:4e:18:e1:11:80:c4:dc: 93:db:98:d9:0d:18:df:1a:78:e8:9c:6c:df:db:84: 6c:3c:db:6a:f2:d1:56:07:b4:ab:98:a7:7a:76:a7: 26:69:cf:68:ea:79:5b:83:9b:5a:1e:52:28:20:2f: 12:2c:f6:8b:d1:af:9f:47:93:ae:09:10:ef:49:df: ae:37:fb:f3:5e:18:6a:11:40:fb:fd:c9:52:a9:0a: 16:c6:af:17:03:c7:d7:61:f8:a2:96:12:00:6b:bf: 83:c9:a3:8a:22:db:04:00:38:ed:a8:aa:1f:41:c0: 45:c1:77:a6:97:e6:5e:85:06:9d:a8:b4:4a:fe:96: fa:c3:38:1e:78:7b:76:37:39:3b:97:a4:a9:36:6a: 74:e4:0c:c6:03:b6:79:51:5c:0a:9c:77:5d:ce:b5: 7d:5f:82:83:a8:3d:e9:eb:c8:56:7d:a2:29:90:f3: 07:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1B:3A:5A:BB:CB:93:56:0E:ED:56:80:07:8F:B6:20:13:84:EA:FA X509v3 Authority Key Identifier: keyid:B1:D5:76:C0:C7:8E:5C:F5:8D:48:37:A2:6C:92:63:C6:3F:13:15:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sdV2wMeOXPWNSDeibJJjxj8TFd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB5A/7C075E18A3B311EEAD662919C4F9AE02/sdV2wMeOXPWNSDeibJJjxj8TFd0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:46:4d:47:22:4d:66:9e:35:f8:27:0f:a0:5d:56:01:95:c9: fa:04:cf:11:17:ca:ac:8b:98:bf:1e:0e:5d:e5:b8:16:de:0e: b9:b5:11:b1:84:5e:3a:ac:30:31:ce:7a:19:b4:97:6d:4e:ac: 0b:12:1a:b9:f8:98:d5:b7:14:38:b2:f5:e5:11:09:8e:1e:e3: c1:18:49:58:e9:55:d1:36:54:15:1e:d9:9b:22:0d:ac:52:e3: 98:60:43:4c:34:4b:92:84:f8:37:b3:f2:c7:9b:40:06:70:b0: e7:2f:da:47:d7:40:56:53:86:da:28:90:04:f5:70:96:e9:41: c5:f1:a5:bb:ba:a7:22:77:8e:95:53:18:90:da:59:2a:86:17: 67:de:26:25:59:d9:79:c9:d3:63:c4:48:90:7e:34:b1:1c:70: 91:46:ca:d1:b1:4d:38:5e:68:1b:de:33:8d:6a:72:83:3a:ee: 83:51:18:1f:24:8f:fd:01:d0:f1:e3:9c:1f:04:c8:86:c2:72: 3c:e9:43:9b:ae:82:50:0c:2f:c9:45:c1:cd:d4:62:f7:92:0a: a5:68:96:8b:3c:57:fa:87:6e:78:21:14:b9:44:de:a0:95:f7: b2:72:72:30:75:76:e0:b3:e3:cb:69:3d:ca:31:a0:89:9d:61: a7:6d:5e:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCNUExMTAvBgNVBAUTKEIxRDU3NkMwQzc4RTVDRjU4RDQ4MzdBMjZDOTI2M0M2 M0YxMzE1REQwHhcNMjUxMTAzMDQwNDU0WhcNMjUxMTEwMDQwNDU0WjAYMRYwFAYD VQQDEw02OTA4MjllNi0zMDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1muWgwPKAwlv7ROemDqXBu29WzujFkSIQISdQ0W8XLgx+HUUm5xbfdeu6vFX +ZjQRjF4Mnbi+/kTlKe04dOW0cF4L1VoKP6cSCtIetR64BJRBU4Y4RGAxNyT25jZ DRjfGnjonGzf24RsPNtq8tFWB7SrmKd6dqcmac9o6nlbg5taHlIoIC8SLPaL0a+f R5OuCRDvSd+uN/vzXhhqEUD7/clSqQoWxq8XA8fXYfiilhIAa7+DyaOKItsEADjt qKofQcBFwXeml+ZehQadqLRK/pb6wzgeeHt2Nzk7l6SpNmp05AzGA7Z5UVwKnHdd zrV9X4KDqD3p68hWfaIpkPMHSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEbOlq7 y5NWDu1WgAePtiAThOr6MB8GA1UdIwQYMBaAFLHVdsDHjlz1jUg3omySY8Y/ExXd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI1QS83QzA3NUUxOEEz QjMxMUVFQUQ2NjI5MTlDNEY5QUUwMi9zZFYyd01lT1hQV05TRGVpYkpKanhqOFRG ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NkVjJ3TWVPWFBXTlNEZWliSkpqeGo4VEZkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI1QS83QzA3NUUxOEEzQjMxMUVFQUQ2NjI5MTlDNEY5QUUwMi9zZFYyd01lT1hQ V05TRGVpYkpKanhqOFRGZDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyRk1HIk1mnjX4Jw+gXVYBlcn6BM8RF8qsi5i/Hg5d5bgW3g65tRGx hF46rDAxznoZtJdtTqwLEhq5+JjVtxQ4svXlEQmOHuPBGElY6VXRNlQVHtmbIg2s UuOYYENMNEuShPg3s/LHm0AGcLDnL9pH10BWU4baKJAE9XCW6UHF8aW7uqcid46V UxiQ2lkqhhdn3iYlWdl5ydNjxEiQfjSxHHCRRsrRsU04Xmgb3jONanKDOu6DURgf JI/9AdDx45wfBMiGwnI86UObroJQDC/JRcHN1GL3kgqlaJaLPFf6h254IRS5RN6g lfeycnIwdXbgs+PLaT3KMaCJnWGnbV4+ -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:32 2025 by rpki-client