$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft File: aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json) Hash identifier: tAVxQPQXv0aaTe7c91LYzJGodqiqU7V6E5wIOJMRizQ= Subject key identifier: 13:2D:BB:0D:4B:4F:EE:5B:07:9D:27:EA:A2:D8:EB:96:FC:3E:3D:D4 Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D Certificate issuer: /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Certificate serial: 3502 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft Manifest number: 34E3 Signing time: Sun 02 Nov 2025 15:18:45 +0000 Manifest this update: Sun 02 Nov 2025 15:18:45 +0000 Manifest next update: Sun 09 Nov 2025 15:18:45 +0000 Files and hashes: 1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: RNTUFGyzEeAHcVMqwob2RQls0jA/4dJpZzlNmybg3Ns=) 2: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: lhbAPGcQQjVfLeBPPvSfLGakAoAsie+moEAIzx57Z0Y=) 3: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: 1AXC4CdSqCeZreg7Kdx8zTNNLCij2RY2Acpk7gs3UmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13570 (0x3502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Validity Not Before: Nov 2 15:18:45 2025 GMT Not After : Nov 9 15:18:45 2025 GMT Subject: CN=69077655-60a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:df:4b:32:3d:3b:2f:40:a3:02:63:4d:66:44: f8:4c:0b:04:ff:ef:2a:69:49:ec:a7:26:40:69:8b: 68:98:a5:d4:ed:34:1d:f7:09:8a:84:37:65:63:d1: 6e:53:c5:75:5b:35:c9:7e:e8:fb:d8:3c:85:d4:a9: 50:6b:bd:a3:9c:fd:ad:1a:f2:73:55:17:a0:7a:d9: 51:bb:97:b7:10:f6:de:40:88:ae:db:d2:8f:60:ea: ea:eb:71:00:14:f2:08:11:47:fe:fc:cd:aa:c3:42: 27:16:93:60:e0:cf:35:88:7b:b2:14:b3:0d:00:91: dd:fa:ab:50:f6:32:8d:9e:49:94:19:63:05:d0:b2: ee:1d:d3:9e:6c:91:91:64:a4:ec:99:39:14:dd:86: 1d:21:e8:46:b9:49:e8:95:36:51:57:79:e9:10:46: 47:fa:a3:75:33:77:fa:56:30:a1:eb:e2:73:a9:ed: d5:6f:02:c7:81:51:c5:4c:38:a3:41:d2:31:cf:ba: e9:45:72:fc:02:c6:94:f0:c4:e3:c3:84:83:bd:f8: 93:31:af:65:cc:48:6b:98:f3:e1:11:b6:10:79:13: cf:2d:77:49:b8:6a:80:7f:96:12:9f:8f:b8:b8:25: 98:44:f9:17:a6:7e:5c:31:f7:4a:95:e1:9f:64:c6: 40:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2D:BB:0D:4B:4F:EE:5B:07:9D:27:EA:A2:D8:EB:96:FC:3E:3D:D4 X509v3 Authority Key Identifier: keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:27:f8:c3:70:d5:1a:4f:44:95:54:98:c7:41:68:25:68:55: 14:88:43:a6:e7:1a:e6:38:58:fe:e9:af:a6:d1:83:c2:1f:1a: e0:45:f6:25:34:b9:5b:ef:f4:27:53:62:db:21:34:68:5a:65: b3:0f:96:7c:ff:bd:14:17:c0:25:73:85:90:57:78:41:95:a0: 5c:0f:2f:57:09:ca:82:4d:73:bd:bf:03:db:c2:21:4c:e3:77: 59:69:ab:56:27:b5:aa:de:76:51:b8:ff:ec:71:ed:a9:78:93: 44:0b:8c:75:4e:e0:3d:fa:e0:da:86:02:9a:e5:42:d5:99:07: 87:32:51:d1:52:a4:5e:51:9d:e4:31:cb:94:03:27:b0:04:a7: 5e:e8:9c:58:5b:48:e7:c6:a0:f2:02:ab:d5:93:a1:d8:f6:99: d8:5f:02:f3:16:a2:08:3e:a6:a0:7a:0a:7e:b6:36:52:0e:6c: f6:fe:e6:c9:fd:af:5d:ea:8c:4d:7c:4f:7f:04:6f:7d:a6:2b: 7e:26:6f:53:50:e6:af:74:4c:df:2a:cc:2e:5c:fa:b4:a0:6c: f7:21:04:94:f0:6a:92:6c:de:2b:74:fb:3e:05:73:2d:8f:59: d7:a8:e9:32:df:d3:14:60:8e:1e:fa:4a:9b:16:0d:33:66:b2: 9c:79:ac:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxRkUxMTAvBgNVBAUTKDY5OUEwRjhEMTVBMzRGNTk5NTZDQjQ4MDBDNkM0NDA0 REMwRUJENUQwHhcNMjUxMTAyMTUxODQ1WhcNMjUxMTA5MTUxODQ1WjAYMRYwFAYD VQQDEw02OTA3NzY1NS02MGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtd9LMj07L0CjAmNNZkT4TAsE/+8qaUnspyZAaYtomKXU7TQd9wmKhDdlY9Fu U8V1WzXJfuj72DyF1KlQa72jnP2tGvJzVRegetlRu5e3EPbeQIiu29KPYOrq63EA FPIIEUf+/M2qw0InFpNg4M81iHuyFLMNAJHd+qtQ9jKNnkmUGWMF0LLuHdOebJGR ZKTsmTkU3YYdIehGuUnolTZRV3npEEZH+qN1M3f6VjCh6+Jzqe3VbwLHgVHFTDij QdIxz7rpRXL8AsaU8MTjw4SDvfiTMa9lzEhrmPPhEbYQeRPPLXdJuGqAf5YSn4+4 uCWYRPkXpn5cMfdKleGfZMZArQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMtuw1L T+5bB50n6qLY65b8Pj3UMB8GA1UdIwQYMBaAFGmaD40Vo09ZlWy0gAxsRATcDr1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzFGRS9EMTE4QUFCQTFE QUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQxbVZiTFNBREd4RUJOd092 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fab1BqUldqVDFtVmJMU0FER3hFQk53T3ZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzFGRS9EMTE4QUFCQTFEQUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQx bVZiTFNBREd4RUJOd092VjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZJ/jDcNUaT0SVVJjHQWglaFUUiEOm5xrmOFj+6a+m0YPCHxrgRfYl NLlb7/QnU2LbITRoWmWzD5Z8/70UF8Alc4WQV3hBlaBcDy9XCcqCTXO9vwPbwiFM 43dZaatWJ7Wq3nZRuP/sce2peJNEC4x1TuA9+uDahgKa5ULVmQeHMlHRUqReUZ3k McuUAyewBKde6JxYW0jnxqDyAqvVk6HY9pnYXwLzFqIIPqagegp+tjZSDmz2/ubJ /a9d6oxNfE9/BG99pit+Jm9TUOavdEzfKswuXPq0oGz3IQSU8GqSbN4rdPs+BXMt j1nXqOky39MUYI4e+kqbFg0zZrKceawl -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:30 2025 by rpki-client