$ rpki-client -vvf rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft File: f1QPcIZAQhpialmxa5Q_AzutP_Y.mft (raw, json) Hash identifier: 7117TUdazDOAzQBhIv/otAKFxCeJXI6ekpV7IhnO2ic= Subject key identifier: 5C:A6:B9:F1:E0:89:F7:92:2B:03:24:D9:B7:B1:EE:F6:1E:8F:AB:01 Authority key identifier: 7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 Certificate issuer: /CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Certificate serial: 0CA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft Manifest number: 0CA2 Signing time: Sun 02 Nov 2025 18:15:28 +0000 Manifest this update: Sun 02 Nov 2025 18:15:28 +0000 Manifest next update: Sun 09 Nov 2025 18:15:28 +0000 Files and hashes: 1: f1QPcIZAQhpialmxa5Q_AzutP_Y.crl (hash: 7tlt9z4J7YNqFRNhncJJUXVFNCo6A2QR3wE9SCmfS9I=) 2: AF905A0C021111EAA331B072C4F9AE02.roa (hash: dvnwAL3zCvdd5S3vny42r47yY+DgJ/q5xqobvjET5x0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3241 (0xca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B53A, serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Validity Not Before: Nov 2 18:15:28 2025 GMT Not After : Nov 9 18:15:28 2025 GMT Subject: CN=69079fc0-0d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d6:db:c3:5a:3a:84:a0:e6:86:cd:60:6a:59: 10:ce:50:3a:ec:8f:a6:52:c2:d8:3c:87:aa:3f:ba: 06:87:86:3a:f0:df:6c:7f:6d:a5:bf:62:4c:7b:11: 64:b6:50:c4:67:e9:96:69:b8:0b:4b:94:b7:8e:49: ed:d0:79:8d:f7:82:80:e6:f3:7f:fc:12:14:6a:b2: 03:59:c0:10:2d:ca:7e:93:aa:83:27:e2:ee:82:7a: ea:43:cd:43:a5:f4:47:8e:0b:a6:a8:68:7f:f3:f1: 2b:87:ba:6d:c7:fe:1d:cc:f2:e9:5c:7e:6b:eb:25: f8:c0:64:f1:cc:8e:b8:bf:ee:93:6c:29:57:da:6c: ad:80:73:38:e8:4a:4e:da:49:55:de:32:e8:6e:2a: 98:05:fa:56:b6:30:08:9c:89:4f:d9:cc:b5:b3:3d: 7b:fa:80:a5:aa:b0:31:5d:83:02:91:9e:0b:e3:bc: 5b:49:fe:71:88:6f:de:f2:5d:38:43:e7:a5:62:82: 98:48:93:8e:79:7a:22:33:e4:aa:5b:0e:74:00:99: 19:95:cb:82:e6:a2:50:f2:ae:3e:4c:c6:49:43:ef: c8:77:34:1e:11:cf:39:c2:57:52:f2:c1:dc:c7:9f: e9:ee:b7:41:43:ea:ff:60:b4:0f:ea:16:30:21:16: f8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A6:B9:F1:E0:89:F7:92:2B:03:24:D9:B7:B1:EE:F6:1E:8F:AB:01 X509v3 Authority Key Identifier: keyid:7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:62:9a:fa:69:d8:23:4a:e0:45:97:d7:11:e0:92:ae:93:e1: 95:4f:51:63:06:c7:ee:af:fc:be:e8:83:c0:30:64:89:55:b0: 0f:1c:12:1e:7b:01:62:1b:2c:02:84:a0:70:8a:67:89:73:c6: 1d:63:54:b9:c5:e1:76:3a:b9:85:83:65:4f:86:42:28:ee:e7: e7:e1:14:39:13:9b:ee:03:ee:20:d3:e6:57:ae:56:da:7b:89: 46:e7:31:7c:cb:25:c5:4a:0a:d6:2e:48:55:47:27:b2:7d:1e: e5:c8:3d:2d:cf:3f:0e:4c:2f:dc:58:65:fc:43:1e:f4:4e:2e: bf:c8:1f:32:aa:a9:a9:96:75:c6:73:86:95:25:40:f0:18:da: a5:a9:21:c2:b7:77:db:17:ad:b9:e2:66:da:65:9f:4d:e6:a0: 68:98:86:2c:03:26:f4:c2:e3:6d:85:1f:a8:61:82:87:5b:ff: a8:ae:5d:90:c2:ce:5f:4f:d0:79:f6:ee:b5:bf:35:5f:e3:9f: f4:0e:12:7d:1d:e7:87:9a:dd:ae:ad:42:f2:d7:23:35:b1:67: 7b:05:39:7d:55:34:7c:7d:de:24:5c:3b:30:dc:95:0b:47:13: e2:28:eb:c4:10:7c:74:ba:e7:4e:0c:c5:f6:9a:7d:7c:9b:51: 3e:d8:b0:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1M0ExMTAvBgNVBAUTKDdGNTQwRjcwODY0MDQyMUE2MjZBNTlCMTZCOTQzRjAz M0JBRDNGRjYwHhcNMjUxMTAyMTgxNTI4WhcNMjUxMTA5MTgxNTI4WjAYMRYwFAYD VQQDEw02OTA3OWZjMC0wZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtbbw1o6hKDmhs1galkQzlA67I+mUsLYPIeqP7oGh4Y68N9sf22lv2JMexFk tlDEZ+mWabgLS5S3jknt0HmN94KA5vN//BIUarIDWcAQLcp+k6qDJ+LugnrqQ81D pfRHjgumqGh/8/Erh7ptx/4dzPLpXH5r6yX4wGTxzI64v+6TbClX2mytgHM46EpO 2klV3jLobiqYBfpWtjAInIlP2cy1sz17+oClqrAxXYMCkZ4L47xbSf5xiG/e8l04 Q+elYoKYSJOOeXoiM+SqWw50AJkZlcuC5qJQ8q4+TMZJQ+/IdzQeEc85wldS8sHc x5/p7rdBQ+r/YLQP6hYwIRb4HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFymufHg ifeSKwMk2bex7vYej6sBMB8GA1UdIwQYMBaAFH9UD3CGQEIaYmpZsWuUPwM7rT/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzQS8yQ0Q2QjM4QzAy MTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFocGlhbG14YTVRX0F6dXRQ X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YxUVBjSVpBUWhwaWFsbXhhNVFfQXp1dFBfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzQS8yQ0Q2QjM4QzAyMTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFo cGlhbG14YTVRX0F6dXRQX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFYpr6adgjSuBFl9cR4JKuk+GVT1FjBsfur/y+6IPAMGSJVbAPHBIe ewFiGywChKBwimeJc8YdY1S5xeF2OrmFg2VPhkIo7ufn4RQ5E5vuA+4g0+ZXrlba e4lG5zF8yyXFSgrWLkhVRyeyfR7lyD0tzz8OTC/cWGX8Qx70Ti6/yB8yqqmplnXG c4aVJUDwGNqlqSHCt3fbF6254mbaZZ9N5qBomIYsAyb0wuNthR+oYYKHW/+orl2Q ws5fT9B59u61vzVf45/0DhJ9HeeHmt2urULy1yM1sWd7BTl9VTR8fd4kXDsw3JUL RxPiKOvEEHx0uudODMX2mn18m1E+2LC+ -----END CERTIFICATE-----Generated at Tue Nov 4 07:21:35 2025 by rpki-client