$ rpki-client -vvf rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft File: Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft (raw, json) Hash identifier: UPR0BXFqkLS7ugF/erRW703MHv3s8YZqcohQFLhnqZg= Subject key identifier: 16:E6:74:62:CC:09:76:3A:B8:D3:7E:39:D0:6C:0C:58:C6:D4:06:7F Authority key identifier: 4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD Certificate issuer: /CN=A915BDD9/serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft Manifest number: 0126 Signing time: Wed 05 Nov 2025 04:47:34 +0000 Manifest this update: Wed 05 Nov 2025 04:47:33 +0000 Manifest next update: Wed 12 Nov 2025 04:47:33 +0000 Files and hashes: 1: Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl (hash: Zihgklcg2Cov8W/lQvzHYQZOVQpARWR8WYNgSbt5/c8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BDD9, serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD Validity Not Before: Nov 5 04:47:33 2025 GMT Not After : Nov 12 04:47:33 2025 GMT Subject: CN=690ad6e6-ebf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:44:5e:8d:a7:0e:c0:9e:50:22:9d:43:54: ca:af:41:7b:e0:00:61:7f:a1:f1:1f:10:0e:13:15: 5b:8c:06:e6:4a:09:58:44:51:52:49:89:00:3b:ef: 61:6d:85:57:b5:ad:5d:46:cc:11:b9:15:37:20:3a: 38:b0:b9:b4:4e:24:77:8f:bd:df:68:0a:a0:60:6f: fb:fe:ed:c4:3a:45:5f:70:4e:43:30:ee:0b:71:5e: 77:99:42:a9:44:b5:71:bc:20:ad:b7:6f:46:3d:f0: a5:d0:c4:bc:41:5d:2e:2a:84:d9:67:29:a8:83:07: d5:e2:ba:29:a1:26:75:4a:aa:d2:b4:db:7c:81:55: 2a:bd:78:be:8e:f7:d9:e3:3c:e1:48:ec:77:6f:35: 97:5b:e0:80:ff:5a:21:f1:08:3d:ae:9d:7f:2b:3a: f0:ed:59:5a:bb:51:79:6d:1a:5e:56:4a:b1:24:fb: c0:a5:6b:e3:d1:d9:ae:5a:19:a8:85:f0:d4:84:e1: dd:59:ce:67:09:35:98:f6:9b:9b:14:45:8f:52:a1: b9:c7:70:a6:e6:82:b7:61:ea:bc:a1:f6:45:f4:96: 9b:3f:8c:eb:2f:b1:23:ca:ba:40:c2:dd:ed:a7:04: 90:89:14:c5:8e:fa:23:e9:6b:47:24:3c:62:c5:9b: 57:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E6:74:62:CC:09:76:3A:B8:D3:7E:39:D0:6C:0C:58:C6:D4:06:7F X509v3 Authority Key Identifier: keyid:4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:2d:78:16:1d:86:e7:09:f2:ec:b9:7b:12:1a:cc:fd:80:1d: 9f:e1:31:a7:95:46:5c:aa:84:b8:a6:a2:85:6a:3b:c0:87:4f: b3:d4:58:b6:41:99:ff:95:0c:d1:69:16:ac:66:6f:43:b2:1f: 8a:e5:65:ad:c0:4c:3b:52:e7:1a:c7:d3:ce:b8:00:05:25:ae: b4:6b:03:fa:68:42:40:90:90:9e:ef:7a:2f:37:31:3b:8b:2e: e9:fc:ab:e8:f2:67:20:ba:b3:28:9a:b7:57:e9:49:4e:aa:f8: 3b:4b:e0:a5:e5:d6:54:87:bb:34:18:84:7f:03:e6:f5:ab:b8: 43:84:71:e7:67:70:16:dc:9f:51:36:61:9b:e9:23:e3:04:c8: 2d:4b:ef:a2:b9:77:d4:a8:71:d1:af:e6:46:e6:27:85:2e:07: 39:b7:9f:b4:46:e1:1d:83:48:3c:70:9e:29:d7:00:a1:fb:1a: e7:cf:a6:e1:a6:50:33:25:6e:1e:35:9c:be:07:1d:ce:07:ae: eb:5b:86:33:75:8a:e8:9d:63:d2:a7:11:26:89:70:e2:3e:4e: b0:3d:95:ff:b7:51:ea:b0:2d:01:1b:99:6a:50:a2:08:a8:6e: 08:cf:6f:3c:9f:d2:cf:60:45:c7:02:82:f4:81:7f:f4:64:a1: 9c:59:3f:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJERDkxMTAvBgNVBAUTKDRBMTZFMUVCM0JERjhERDQ2MDczQzI1NTczNTNBNEZD RTg3MDg3Q0QwHhcNMjUxMTA1MDQ0NzMzWhcNMjUxMTEyMDQ0NzMzWjAYMRYwFAYD VQQDEw02OTBhZDZlNi1lYmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArClEXo2nDsCeUCKdQ1TKr0F74ABhf6HxHxAOExVbjAbmSglYRFFSSYkAO+9h bYVXta1dRswRuRU3IDo4sLm0TiR3j73faAqgYG/7/u3EOkVfcE5DMO4LcV53mUKp RLVxvCCtt29GPfCl0MS8QV0uKoTZZymogwfV4ropoSZ1SqrStNt8gVUqvXi+jvfZ 4zzhSOx3bzWXW+CA/1oh8Qg9rp1/Kzrw7Vlau1F5bRpeVkqxJPvApWvj0dmuWhmo hfDUhOHdWc5nCTWY9pubFEWPUqG5x3Cm5oK3Yeq8ofZF9JabP4zrL7EjyrpAwt3t pwSQiRTFjvoj6WtHJDxixZtXAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbmdGLM CXY6uNN+OdBsDFjG1AZ/MB8GA1UdIwQYMBaAFEoW4es7343UYHPCVXNTpPzocIfN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkREOS8yMjcyQzVGMEYx QjQxMUVFOUZERkI4NjdDNEY5QUUwMi9TaGJoNnp2ZmpkUmdjOEpWYzFPa19PaHdo ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoYmg2enZmamRSZ2M4SlZjMU9rX09od2g4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkREOS8yMjcyQzVGMEYxQjQxMUVFOUZERkI4NjdDNEY5QUUwMi9TaGJoNnp2Zmpk UmdjOEpWYzFPa19PaHdoODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkLXgWHYbnCfLsuXsSGsz9gB2f4TGnlUZcqoS4pqKFajvAh0+z1Fi2 QZn/lQzRaRasZm9Dsh+K5WWtwEw7Uucax9POuAAFJa60awP6aEJAkJCe73ovNzE7 iy7p/Kvo8mcgurMomrdX6UlOqvg7S+Cl5dZUh7s0GIR/A+b1q7hDhHHnZ3AW3J9R NmGb6SPjBMgtS++iuXfUqHHRr+ZG5ieFLgc5t5+0RuEdg0g8cJ4p1wCh+xrnz6bh plAzJW4eNZy+Bx3OB67rW4YzdYronWPSpxEmiXDiPk6wPZX/t1HqsC0BG5lqUKII qG4Iz288n9LPYEXHAoL0gX/0ZKGcWT+n -----END CERTIFICATE-----Generated at Wed Nov 5 16:43:17 2025 by rpki-client