$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft File: M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json) Hash identifier: EcZ2kXorkKzbHgEjO2GXpxswPl+dWNWa/g0HLqUOje0= Subject key identifier: 22:0A:8E:00:52:69:BF:4F:FB:AD:A8:92:F5:7B:15:4C:BF:67:42:27 Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Certificate serial: 045F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft Manifest number: 0447 Signing time: Mon 27 Oct 2025 01:22:03 +0000 Manifest this update: Mon 27 Oct 2025 01:22:02 +0000 Manifest next update: Mon 03 Nov 2025 01:22:02 +0000 Files and hashes: 1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: 4S3LCwQ3dJgXTcPBnN5UEzoTuEpBp1num0gvlv5H2pU=) 2: BC58A5C66DD311F09E550D38C4F9AE02.roa (hash: M67wvRNu5yJc0PmvdrXe9QBiktT/1OOEAW8u7AyC62Q=) 3: BBA03BF86DD311F09E550D38C4F9AE02.roa (hash: zLlFP29fbev002DflF+TA3Qjdh6cZ72DZUDF3K/hrT8=) 4: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: YqwmzbTbjnpJlQJ9+wOnubrOXT3PgUZiurP57f5+HVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 01:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1119 (0x45f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Validity Not Before: Oct 27 01:22:02 2025 GMT Not After : Nov 3 01:22:02 2025 GMT Subject: CN=68fec93b-9c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e8:71:64:1b:67:a8:68:3c:54:25:4b:bb:66: 2e:72:c7:ea:e2:aa:57:5b:35:e8:43:12:55:eb:4d: b1:c7:aa:fc:49:55:8f:84:25:cc:4e:9b:99:df:64: b6:86:1c:0f:4e:31:6f:5e:ba:e2:c4:ee:a3:50:a1: aa:90:99:e5:57:74:1c:4a:09:3a:64:ab:63:92:df: 46:8d:1b:8a:c8:d3:43:9a:1b:02:93:ab:1b:8e:87: 42:5c:8f:46:cb:3f:dd:32:4d:1e:54:e9:d9:04:a0: 74:1c:c0:b7:91:e8:79:4b:e3:0f:f8:6d:b1:85:91: f9:92:15:f8:f6:77:4d:c4:cc:c6:64:1e:5e:6c:b9: da:0b:cc:ff:1a:a0:92:16:81:85:0e:29:d0:7d:11: 06:bc:60:ee:50:3e:c4:64:e6:c4:8a:b6:d1:b9:28: b7:d0:27:a3:56:c8:0e:dd:4e:b4:a1:b0:e0:4e:22: a7:ef:e4:b4:aa:a8:7d:a1:08:20:84:78:65:76:21: 6e:65:7f:ae:fb:e4:56:20:98:0b:20:bb:df:53:04: 41:11:d3:34:6b:fd:90:23:62:b1:6b:e7:82:da:e8: 10:14:52:30:b6:11:f9:11:cf:8a:b1:94:a8:c4:b2: 42:96:25:15:2a:69:ad:d7:f0:ce:96:68:fc:a7:1f: 45:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0A:8E:00:52:69:BF:4F:FB:AD:A8:92:F5:7B:15:4C:BF:67:42:27 X509v3 Authority Key Identifier: keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:9a:91:ed:89:30:99:f6:64:6a:a3:2e:50:ba:4a:d2:14:af: ec:96:b5:c6:b9:b2:05:4f:89:8d:53:12:3b:06:43:9b:17:95: c5:3f:50:c9:62:6c:82:4d:c1:fd:97:1a:dc:3c:91:5d:f6:87: 32:f0:16:a2:60:74:73:7c:f0:fd:55:24:d0:d3:6a:84:65:fb: f0:25:33:b3:af:2c:47:b5:59:6b:ad:66:b3:16:81:38:3f:49: 54:e4:ae:be:fa:1d:7e:ae:73:c5:53:f6:69:c9:ec:5b:de:1f: 12:01:99:56:12:0d:1e:39:c5:db:3a:e8:12:3f:8f:ca:a2:8b: 4e:60:07:f5:f7:71:24:e1:1a:7f:20:e1:7c:ba:b7:5c:1c:ab: cc:54:ff:7d:98:fe:cc:b5:1b:54:3b:d5:ff:3e:4d:7e:16:46: 0c:9b:8a:0f:f3:e4:16:db:93:a4:60:b2:e2:d4:32:4e:c0:68: db:8e:3c:ca:1d:e2:1c:4e:20:1a:bd:7f:21:a4:52:8d:76:87: 49:1a:23:79:0c:91:c8:80:de:5f:5b:4f:1e:81:19:ee:68:d3: b5:57:6e:f8:93:36:6a:e1:be:65:c7:ab:d2:78:f8:20:78:fb: be:af:00:9b:2b:98:05:20:84:55:ba:41:6f:52:6f:a1:a3:b8: 1a:e5:83:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1NTYxMTAvBgNVBAUTKDMzNzhERUUyQjNBMUE4RDNFRDFBRjRFNDVFMjI1RDAw OTlDRjcwMTEwHhcNMjUxMDI3MDEyMjAyWhcNMjUxMTAzMDEyMjAyWjAYMRYwFAYD VQQDEw02OGZlYzkzYi05YzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+hxZBtnqGg8VCVLu2Yucsfq4qpXWzXoQxJV602xx6r8SVWPhCXMTpuZ32S2 hhwPTjFvXrrixO6jUKGqkJnlV3QcSgk6ZKtjkt9GjRuKyNNDmhsCk6sbjodCXI9G yz/dMk0eVOnZBKB0HMC3keh5S+MP+G2xhZH5khX49ndNxMzGZB5ebLnaC8z/GqCS FoGFDinQfREGvGDuUD7EZObEirbRuSi30CejVsgO3U60obDgTiKn7+S0qqh9oQgg hHhldiFuZX+u++RWIJgLILvfUwRBEdM0a/2QI2Kxa+eC2ugQFFIwthH5Ec+KsZSo xLJCliUVKmmt1/DOlmj8px9FiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIKjgBS ab9P+62okvV7FUy/Z0InMB8GA1UdIwQYMBaAFDN43uKzoajT7Rr05F4iXQCZz3AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU1Ni8xMDQ1MkFGQTdE QzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFOUHRHdlRrWGlKZEFKblBj QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zamU0ck9ocU5QdEd2VGtYaUpkQUpuUGNCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU1Ni8xMDQ1MkFGQTdEQzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFO UHRHdlRrWGlKZEFKblBjQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnmpHtiTCZ9mRqoy5QukrSFK/slrXGubIFT4mNUxI7BkObF5XFP1DJ YmyCTcH9lxrcPJFd9ocy8BaiYHRzfPD9VSTQ02qEZfvwJTOzryxHtVlrrWazFoE4 P0lU5K6++h1+rnPFU/Zpyexb3h8SAZlWEg0eOcXbOugSP4/KootOYAf193Ek4Rp/ IOF8urdcHKvMVP99mP7MtRtUO9X/Pk1+FkYMm4oP8+QW25OkYLLi1DJOwGjbjjzK HeIcTiAavX8hpFKNdodJGiN5DJHIgN5fW08egRnuaNO1V274kzZq4b5lx6vSePgg ePu+rwCbK5gFIIRVukFvUm+ho7ga5YMX -----END CERTIFICATE-----Generated at Mon Oct 27 15:00:49 2025 by rpki-client