$ rpki-client -vvf rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft File: 5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft (raw, json) Hash identifier: ahWhBooVnqBH99wVKcDmuLdMHAuqRhUsU70GFx4qLbw= Subject key identifier: 30:4E:8C:88:B0:AC:28:86:AA:C8:42:CB:80:2C:B6:0C:FE:8A:65:F1 Authority key identifier: E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4 Certificate issuer: /CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4 Certificate serial: 06D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft Manifest number: 06BE Signing time: Tue 04 Nov 2025 22:25:07 +0000 Manifest this update: Tue 04 Nov 2025 22:25:07 +0000 Manifest next update: Tue 11 Nov 2025 22:25:07 +0000 Files and hashes: 1: 5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl (hash: j0aKhFdRf1WiNv/Ha9cMDJOzsQLFjpChgZtE8S5HEg0=) 2: 2540A3D24C9F11F0B3E79877C4F9AE02.roa (hash: 6T54i51OGw9J/SGlpB680rrKuAdgx9J1NeMWxwYBKWc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1747 (0x6d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C15F, serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4 Validity Not Before: Nov 4 22:25:07 2025 GMT Not After : Nov 11 22:25:07 2025 GMT Subject: CN=690a7d43-de2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:06:ac:3e:92:94:95:27:d7:b4:cf:c2:b9:92: b5:49:25:2f:d9:24:f3:15:71:94:12:a9:f6:59:60: 4f:ae:9f:20:4f:c2:9d:e8:cf:ba:2d:48:05:8d:38: ed:97:57:db:98:ac:fa:99:6b:d9:70:db:7f:a1:d8: 4e:ef:b4:85:ec:c6:0f:40:5e:95:30:a9:8b:81:82: 25:f4:31:08:ba:ca:fa:1d:64:db:fc:ed:ec:19:71: b3:e1:8f:52:f2:5e:71:f9:82:7c:e8:21:2f:e3:fc: 90:72:52:42:34:bd:b8:ed:b1:e6:78:85:a3:f8:38: 5f:c9:e6:ce:9b:be:6b:c6:4c:7c:fc:0c:58:7c:70: 98:5c:4b:88:3d:e9:2a:08:6b:11:2d:1c:a8:4f:ee: 71:ec:bb:b2:5b:52:fd:50:74:ba:55:c9:f9:af:b3: cb:31:d6:3c:ca:0b:90:ca:eb:d5:a0:f9:75:e8:b7: 98:88:20:13:97:d1:2b:9b:df:6a:bb:5b:92:bf:43: 41:fb:22:52:56:c1:e0:ad:3d:aa:f3:14:a5:15:81: cf:91:f8:70:ff:5e:d2:be:96:5f:74:f0:a3:1c:16: 00:8a:00:a4:58:2b:1d:eb:4e:88:96:10:43:89:f9: 3a:76:97:f8:ab:d9:79:0b:e4:9c:62:cb:52:23:73: ec:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:4E:8C:88:B0:AC:28:86:AA:C8:42:CB:80:2C:B6:0C:FE:8A:65:F1 X509v3 Authority Key Identifier: keyid:E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:42:37:e7:ee:62:b3:89:19:f1:75:38:35:fe:23:ce:39:0f: ac:fb:c0:43:b5:0b:d4:bf:b6:19:a0:ce:1e:f7:b1:5c:58:e3: 13:69:2f:52:b0:11:12:99:ad:94:6a:04:ea:1c:0e:96:9a:a7: 63:95:8d:66:4a:74:65:70:c7:45:ce:07:14:e1:a3:ba:75:e8: a6:3d:00:c0:3d:ab:d9:dc:cf:53:6e:79:9d:35:14:96:d9:40: 94:30:8b:39:34:12:90:7c:23:30:c8:a5:07:35:b6:fe:2a:e5: 25:bc:13:f6:c6:90:6f:0a:9c:e4:df:b6:cb:6b:dd:ab:61:1f: 57:56:fa:29:e8:e7:60:d3:9e:38:f5:f1:03:dc:8b:78:12:f0: 50:7b:b3:e4:11:2a:20:39:3f:6c:b1:c1:09:fc:d9:d3:f8:4e: b5:1b:97:cb:dc:d6:25:00:6f:32:90:8c:2b:1e:ef:c9:bc:60: 6d:0d:d4:28:45:56:fe:47:e9:51:b8:c0:7a:d5:7a:83:26:05: 5d:cd:be:f2:e9:cc:b8:48:36:4e:fd:05:ce:22:19:ad:ed:ca: 40:6d:96:8d:e9:a1:4e:c9:02:7b:8f:02:70:b8:f8:5d:0e:bb: 41:6f:61:26:0b:8b:ec:8f:e7:44:bf:3f:6f:64:ad:08:c6:3b: fa:20:b1:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxNUYxMTAvBgNVBAUTKEU2OTlEQkNERTA5QzBBQTVGOEU2NkFFMEE3MzI1NERD QTA1RDg1RDQwHhcNMjUxMTA0MjIyNTA3WhcNMjUxMTExMjIyNTA3WjAYMRYwFAYD VQQDEw02OTBhN2Q0My1kZTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7AasPpKUlSfXtM/CuZK1SSUv2STzFXGUEqn2WWBPrp8gT8Kd6M+6LUgFjTjt l1fbmKz6mWvZcNt/odhO77SF7MYPQF6VMKmLgYIl9DEIusr6HWTb/O3sGXGz4Y9S 8l5x+YJ86CEv4/yQclJCNL247bHmeIWj+DhfyebOm75rxkx8/AxYfHCYXEuIPekq CGsRLRyoT+5x7LuyW1L9UHS6Vcn5r7PLMdY8yguQyuvVoPl16LeYiCATl9Erm99q u1uSv0NB+yJSVsHgrT2q8xSlFYHPkfhw/17SvpZfdPCjHBYAigCkWCsd606IlhBD ifk6dpf4q9l5C+ScYstSI3PsaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBOjIiw rCiGqshCy4Astgz+imXxMB8GA1UdIwQYMBaAFOaZ283gnAql+OZq4KcyVNygXYXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzE1Ri85MzI5QjBCNjhD NjcxMUVCQjdFRTg2M0VDNEY5QUUwMi81cG5iemVDY0NxWDQ1bXJncHpKVTNLQmRo ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwbmJ6ZUNjQ3FYNDVtcmdwekpVM0tCZGhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzE1Ri85MzI5QjBCNjhDNjcxMUVCQjdFRTg2M0VDNEY5QUUwMi81cG5iemVDY0Nx WDQ1bXJncHpKVTNLQmRoZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXQjfn7mKziRnxdTg1/iPOOQ+s+8BDtQvUv7YZoM4e97FcWOMTaS9S sBESma2UagTqHA6WmqdjlY1mSnRlcMdFzgcU4aO6deimPQDAPavZ3M9TbnmdNRSW 2UCUMIs5NBKQfCMwyKUHNbb+KuUlvBP2xpBvCpzk37bLa92rYR9XVvop6Odg0544 9fED3It4EvBQe7PkESogOT9sscEJ/NnT+E61G5fL3NYlAG8ykIwrHu/JvGBtDdQo RVb+R+lRuMB61XqDJgVdzb7y6cy4SDZO/QXOIhmt7cpAbZaN6aFOyQJ7jwJwuPhd DrtBb2EmC4vsj+dEvz9vZK0Ixjv6ILGF -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:34 2025 by rpki-client