$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft File: r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json) Hash identifier: bu1ZswStSswM+mCEgsyUQJGH1qXKY5gbEICuWhNekg0= Subject key identifier: FA:B6:C3:04:0E:84:8E:76:76:AA:45:2E:9D:2C:03:B9:25:19:42:11 Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1EDA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft Manifest number: 1E79 Signing time: Thu 04 Sep 2025 16:10:26 +0000 Manifest this update: Thu 04 Sep 2025 16:10:26 +0000 Manifest next update: Thu 11 Sep 2025 16:10:26 +0000 Files and hashes: 1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: c8fb4zjmPjzg9oQSAoOnk706CKp2Nwbm06ryfgvseaI=) 2: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: WKYh+NxnsT3X7rLjv5qUGFM6/m1tIHkeIZefmgprnPs=) 3: D80B013A172011EEB3A9C124C4F9AE02.roa (hash: i+bH68t7yKzy0Rw6D9wkVEOs5mv50GBBoWxW4vThyQY=) 4: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: Hy5wV1LNqpxbM5ijt7NUzM7tVBcEJ4OJJPk557Hpy8c=) 5: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: 7XnoI3SWGKSLq9zz7HLNS32aw+KK++smhLaAOQ+1lDo=) 6: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: T6jmHSx80+1QapW6ywMYadpctCcOQDce4QIxekTXdlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 16:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7898 (0x1eda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Validity Not Before: Sep 4 16:10:26 2025 GMT Not After : Sep 11 16:10:26 2025 GMT Subject: CN=68b9b9f2-4160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:90:3d:ac:95:4a:2b:a8:11:d7:14:ff:c4:f9: b1:80:ea:03:af:93:50:40:7a:7c:71:de:15:5a:d4: 57:05:17:57:27:29:5f:14:3c:6f:e5:e7:13:64:e5: 3b:2a:b6:49:5f:f4:91:c4:33:e5:34:f6:87:3c:04: 38:96:51:cc:6c:cb:b0:b4:b0:b1:2a:6c:07:6a:2d: 7a:6a:ef:cb:f4:e8:ff:d5:fb:30:18:1c:a7:b0:cd: 9d:d3:09:75:6d:9f:e1:70:de:e3:07:80:85:c4:91: f3:ae:13:64:41:f1:62:e1:18:b8:4e:55:90:92:b7: a6:3e:c4:0f:d2:74:5f:df:aa:03:26:2b:18:64:89: 46:86:33:9e:16:94:33:ae:9a:5b:49:a9:4c:7b:66: 09:a9:df:0a:26:6e:25:e2:2c:57:e3:70:ca:93:3e: 0b:e0:0f:b1:75:79:f4:99:45:ae:7f:45:f2:83:d5: 0e:47:19:30:2e:63:26:58:8f:54:af:a5:3b:5c:17: da:81:fc:30:4a:5a:f1:00:37:46:3f:46:a6:be:c7: 2e:f7:b5:07:bb:be:0f:31:26:10:e9:a2:56:2f:52: e8:64:51:06:46:da:19:d0:bb:d1:89:ad:75:e5:cc: fa:d4:2f:85:e0:a8:bb:29:8e:f6:7d:92:6e:e3:ad: 56:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B6:C3:04:0E:84:8E:76:76:AA:45:2E:9D:2C:03:B9:25:19:42:11 X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:c0:41:19:41:83:b9:8c:f3:bc:52:7a:46:58:74:03:ba:be: d6:eb:5e:e3:bd:91:2b:b7:db:33:83:6b:85:d0:17:4f:a0:9c: d5:82:65:a3:cb:bb:e8:4e:37:3d:a4:01:db:5e:ac:5d:30:fb: 75:a4:2f:e0:55:e6:bd:18:ae:85:93:e9:4a:b1:4a:25:88:05: 9c:21:cd:cf:02:e6:2d:1d:c2:e5:66:1c:bf:bd:6b:7d:c9:7c: 45:ce:aa:98:d0:63:bc:2c:26:ae:77:5d:30:66:ad:7a:1d:51: 86:ad:2f:2c:1a:9d:7d:4b:7b:0b:4b:c1:c5:ae:0e:34:a2:e2: c5:75:f1:6f:72:02:09:2c:33:78:86:46:77:11:e0:0a:b4:ae: 58:c6:bc:25:47:86:ea:d4:a1:9e:72:34:d5:7c:38:08:96:01: 53:cb:13:de:2d:01:67:d0:86:7e:a1:ca:ae:9c:7c:52:32:6d: 94:4a:3a:dd:92:8f:29:99:9d:75:c1:02:59:9e:20:5b:68:08: 0e:82:dc:9e:de:53:e7:71:07:b0:41:e1:2f:47:e1:46:60:c9: 72:85:e9:11:03:ab:d2:36:c8:af:42:65:9c:65:aa:42:80:16: 88:38:77:ef:83:ef:3f:c2:c4:39:da:71:60:e3:a4:00:39:54: 86:9e:2b:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjUwOTA0MTYxMDI2WhcNMjUwOTExMTYxMDI2WjAYMRYwFAYD VQQDEw02OGI5YjlmMi00MTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupA9rJVKK6gR1xT/xPmxgOoDr5NQQHp8cd4VWtRXBRdXJylfFDxv5ecTZOU7 KrZJX/SRxDPlNPaHPAQ4llHMbMuwtLCxKmwHai16au/L9Oj/1fswGBynsM2d0wl1 bZ/hcN7jB4CFxJHzrhNkQfFi4Ri4TlWQkremPsQP0nRf36oDJisYZIlGhjOeFpQz rppbSalMe2YJqd8KJm4l4ixX43DKkz4L4A+xdXn0mUWuf0Xyg9UORxkwLmMmWI9U r6U7XBfagfwwSlrxADdGP0amvscu97UHu74PMSYQ6aJWL1LoZFEGRtoZ0LvRia11 5cz61C+F4Ki7KY72fZJu461WnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPq2wwQO hI52dqpFLp0sA7klGUIRMB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUU1Ri84Qjc5QjY3ODg4NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpm Z25ZbGRMWGpQSUNEZUhvWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApwEEZQYO5jPO8UnpGWHQDur7W617jvZErt9szg2uF0BdPoJzVgmWj y7voTjc9pAHbXqxdMPt1pC/gVea9GK6Fk+lKsUoliAWcIc3PAuYtHcLlZhy/vWt9 yXxFzqqY0GO8LCaud10wZq16HVGGrS8sGp19S3sLS8HFrg40ouLFdfFvcgIJLDN4 hkZ3EeAKtK5YxrwlR4bq1KGecjTVfDgIlgFTyxPeLQFn0IZ+ocqunHxSMm2USjrd ko8pmZ11wQJZniBbaAgOgtye3lPncQewQeEvR+FGYMlyhekRA6vSNsivQmWcZapC gBaIOHfvg+8/wsQ52nFg46QAOVSGnivK -----END CERTIFICATE-----Generated at Sat Sep 6 16:31:44 2025 by rpki-client