$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft File: aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json) Hash identifier: Fu0EzOGUIjklfu4tucCH/oWqC+5EXbL5h4E1Pi3t834= Subject key identifier: 48:0E:D3:E4:68:69:72:BC:6F:77:14:18:95:C3:6E:20:4A:E6:12:AB Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D Certificate issuer: /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Certificate serial: 34EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft Manifest number: 34CC Signing time: Thu 18 Sep 2025 15:21:34 +0000 Manifest this update: Thu 18 Sep 2025 15:21:33 +0000 Manifest next update: Thu 25 Sep 2025 15:21:33 +0000 Files and hashes: 1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: XQ+PaBwbEasM/QNu6uVzyEAy4EIR5vOXzNOLFLbBChI=) 2: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: lhbAPGcQQjVfLeBPPvSfLGakAoAsie+moEAIzx57Z0Y=) 3: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: 1AXC4CdSqCeZreg7Kdx8zTNNLCij2RY2Acpk7gs3UmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13547 (0x34eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Validity Not Before: Sep 18 15:21:33 2025 GMT Not After : Sep 25 15:21:33 2025 GMT Subject: CN=68cc237d-71a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0b:d1:90:a5:e7:9e:a3:05:b4:8a:47:68:86: 39:f0:ac:ec:f4:fb:89:20:46:dd:ed:32:d4:c8:3e: dc:db:51:e2:3e:d8:38:64:e0:b5:d1:28:87:f8:43: 3e:2a:ef:6d:2b:54:8f:d5:99:a1:37:80:b2:d6:e0: d8:17:66:8a:56:99:2a:91:d4:43:7b:44:29:1a:ef: 92:4e:fa:94:13:69:6a:9c:9e:b7:ae:66:93:b4:6c: 41:46:4b:7d:e9:97:22:c5:04:6f:51:f0:ae:80:c1: c2:d1:54:cb:41:57:d9:cc:50:b9:55:bc:0b:b2:04: f0:ac:52:ea:35:2f:89:23:fa:05:57:b1:d7:62:75: 91:8e:3b:7d:02:06:4d:fb:d0:13:f1:8d:a3:f0:cc: 11:7a:4a:3d:33:6a:0d:41:ce:10:70:05:8d:2b:e4: a6:f3:ce:0d:20:b3:cf:7e:a3:67:40:8c:f8:d2:c1: 8f:9c:b7:19:b9:fb:d0:16:c5:bf:08:6e:8b:5e:4b: 8a:35:41:09:5f:13:5c:07:64:e2:b1:1a:1c:c0:97: 25:ea:e3:05:d4:49:81:f6:4b:0f:9e:d3:1e:d4:9b: 38:d7:a1:dd:52:ca:a7:61:0e:d5:dd:24:71:04:c5: 83:3d:5e:d0:d8:47:cc:34:3f:cc:2e:bc:57:88:f9: 96:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0E:D3:E4:68:69:72:BC:6F:77:14:18:95:C3:6E:20:4A:E6:12:AB X509v3 Authority Key Identifier: keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:1e:ff:6e:1b:e1:cd:67:36:2a:ed:bb:a3:f6:d5:b4:9c:b1: 8a:39:40:74:da:34:1b:7c:32:02:61:03:7f:11:40:3a:7e:61: 0d:ef:04:de:f5:2e:08:bc:0c:41:07:85:bf:c2:0d:f2:cb:ca: 13:f6:dc:78:c9:04:fe:02:8e:57:b8:8d:7b:92:3b:0b:36:14: 7d:7f:23:d9:53:0f:76:c6:f7:a4:ca:b1:74:0a:84:3a:2b:59: 53:1a:5c:e1:b3:61:17:ce:e2:3e:35:7d:ad:1d:08:6f:91:e8: 47:6a:6e:e1:d0:ef:b3:2e:cf:40:d0:61:4d:86:45:8b:ea:81: 7e:5d:35:86:56:a8:7f:86:f2:7f:d4:a0:2b:af:a6:82:46:22: 84:92:31:f3:28:9c:a9:1d:8f:8d:f4:ca:67:39:4a:a5:a9:47: af:34:9d:47:f9:70:34:46:71:79:aa:3a:96:e1:3b:89:3c:55: a2:14:aa:7d:3b:5f:f4:94:93:fc:f3:00:de:fd:e3:3c:01:83: 85:e9:a6:6c:24:54:6c:c5:82:c9:74:97:1b:3b:00:23:29:4e: 86:43:d0:27:d7:d6:19:e7:c2:bc:68:b8:48:7e:2e:31:4c:6c: d2:49:d1:7c:ba:bf:a6:b6:d8:8f:e5:e6:8f:fe:5d:77:6d:06: b7:35:cd:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxRkUxMTAvBgNVBAUTKDY5OUEwRjhEMTVBMzRGNTk5NTZDQjQ4MDBDNkM0NDA0 REMwRUJENUQwHhcNMjUwOTE4MTUyMTMzWhcNMjUwOTI1MTUyMTMzWjAYMRYwFAYD VQQDEw02OGNjMjM3ZC03MWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQvRkKXnnqMFtIpHaIY58Kzs9PuJIEbd7TLUyD7c21HiPtg4ZOC10SiH+EM+ Ku9tK1SP1ZmhN4Cy1uDYF2aKVpkqkdRDe0QpGu+STvqUE2lqnJ63rmaTtGxBRkt9 6ZcixQRvUfCugMHC0VTLQVfZzFC5VbwLsgTwrFLqNS+JI/oFV7HXYnWRjjt9AgZN +9AT8Y2j8MwReko9M2oNQc4QcAWNK+Sm884NILPPfqNnQIz40sGPnLcZufvQFsW/ CG6LXkuKNUEJXxNcB2TisRocwJcl6uMF1EmB9ksPntMe1Js416HdUsqnYQ7V3SRx BMWDPV7Q2EfMND/MLrxXiPmWIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgO0+Ro aXK8b3cUGJXDbiBK5hKrMB8GA1UdIwQYMBaAFGmaD40Vo09ZlWy0gAxsRATcDr1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzFGRS9EMTE4QUFCQTFE QUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQxbVZiTFNBREd4RUJOd092 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fab1BqUldqVDFtVmJMU0FER3hFQk53T3ZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzFGRS9EMTE4QUFCQTFEQUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQx bVZiTFNBREd4RUJOd092VjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrHv9uG+HNZzYq7buj9tW0nLGKOUB02jQbfDICYQN/EUA6fmEN7wTe 9S4IvAxBB4W/wg3yy8oT9tx4yQT+Ao5XuI17kjsLNhR9fyPZUw92xvekyrF0CoQ6 K1lTGlzhs2EXzuI+NX2tHQhvkehHam7h0O+zLs9A0GFNhkWL6oF+XTWGVqh/hvJ/ 1KArr6aCRiKEkjHzKJypHY+N9MpnOUqlqUevNJ1H+XA0RnF5qjqW4TuJPFWiFKp9 O1/0lJP88wDe/eM8AYOF6aZsJFRsxYLJdJcbOwAjKU6GQ9An19YZ58K8aLhIfi4x TGzSSdF8ur+mttiP5eaP/l13bQa3Nc0o -----END CERTIFICATE-----Generated at Fri Sep 19 10:38:03 2025 by rpki-client