$ rpki-client -vvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft File: Iek1nelgenjM01kOC0SctSsXtrs.mft (raw, json) Hash identifier: bjYWoY2IoFCqs58uskXfS2cxM74XRSKRmZT8ZibTlDQ= Subject key identifier: 12:A8:0F:39:53:E2:7E:68:AE:23:9E:40:AC:67:3E:64:BB:1E:0E:AE Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB Certificate issuer: /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB Certificate serial: 076D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft Manifest number: 0765 Signing time: Sun 02 Nov 2025 21:38:01 +0000 Manifest this update: Sun 02 Nov 2025 21:38:00 +0000 Manifest next update: Sun 09 Nov 2025 21:38:00 +0000 Files and hashes: 1: Iek1nelgenjM01kOC0SctSsXtrs.crl (hash: mdVQz1l80pgnvl6xipnAJJ7trPgJTlBCMeSrGhdKk5g=) 2: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (hash: +6eYgOq04WhTg3h8FMeOxvxeZ5FD+RCHy2rKYTsWlYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1901 (0x76d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C83A, serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB Validity Not Before: Nov 2 21:38:00 2025 GMT Not After : Nov 9 21:38:00 2025 GMT Subject: CN=6907cf38-d3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d8:e5:01:ba:92:87:89:02:c2:62:3c:43:2d: 0d:c8:6e:bf:04:70:6f:66:3d:39:e5:b9:e1:80:8a: 77:26:1f:d5:01:ad:1a:fa:b8:d5:80:b3:06:be:9a: f7:a6:f3:8b:9a:32:73:cb:93:8e:de:08:ce:93:76: d4:66:fc:c2:56:5e:35:4f:2e:97:01:d2:8c:c7:3e: 09:37:6a:97:51:9d:0e:db:da:7d:6f:e2:0b:f7:f5: 4f:75:87:15:79:3f:3a:f0:b2:a8:7d:3f:ac:fc:bd: cb:47:97:a0:f1:71:45:b1:5b:cc:2f:04:24:f3:69: bb:12:b7:bf:35:39:29:01:31:f9:19:e4:dd:12:31: 29:e5:64:4d:8f:bd:82:1a:20:a0:97:6d:9b:be:57: 38:c1:a7:81:fd:8a:d9:62:dd:3d:95:be:2d:11:30: 14:f9:47:79:42:29:6e:22:c6:4a:40:59:60:cd:a9: 3b:42:ae:de:3b:5d:fd:49:a8:e5:79:ee:c4:1b:3c: 0a:a5:ca:4e:7a:75:29:4b:2e:70:fc:0b:af:88:2e: 1d:9a:14:fa:e8:f3:bf:ec:88:e4:cc:76:d7:7a:ea: 4d:69:4b:cd:ed:cb:95:32:c0:25:a8:9e:23:ad:5d: 6a:f9:2d:ae:e3:07:51:1a:97:c8:71:54:75:38:4f: ff:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A8:0F:39:53:E2:7E:68:AE:23:9E:40:AC:67:3E:64:BB:1E:0E:AE X509v3 Authority Key Identifier: keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:5a:1e:eb:eb:1a:8d:49:e3:45:82:32:6d:9a:1e:de:f4:89: dd:45:af:d0:7e:a3:7d:a4:22:d4:e6:e7:4e:30:31:42:e3:17: 18:1b:de:19:c9:45:99:c3:96:37:af:97:d1:9b:e1:79:4b:5f: 3d:6f:a6:db:f5:f7:68:cd:bf:d3:5d:3a:e6:ec:d9:ad:96:dd: 25:ca:9b:df:aa:6f:8f:df:30:f5:e0:b6:09:f5:ad:37:f1:f8: a2:81:f3:42:80:d4:96:26:2f:77:3a:13:99:04:d5:1a:81:ff: 2e:19:fa:3e:c8:f0:22:94:e7:52:de:28:13:7e:68:b4:6c:59: f1:85:46:7d:54:19:a3:61:a0:7b:9a:df:b3:ab:ad:59:4a:9e: bb:1f:f7:0d:17:9e:be:8a:3b:85:07:e2:5b:2a:7d:97:2d:33: e0:74:fb:88:06:dc:c7:ea:ec:fe:a0:d3:8b:68:02:53:04:83: 68:70:ee:af:35:56:85:c8:64:34:49:ac:cb:e6:7c:e5:27:92: 7b:15:49:86:6a:ec:cc:ff:b9:f7:0f:42:2c:77:5e:00:61:ff: 2d:9f:f0:28:cb:69:73:5b:70:34:4c:6c:ef:30:34:44:3b:96: b4:fe:40:8d:60:2d:80:b6:98:4b:49:dc:e6:1a:26:82:c1:a1: 88:73:96:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM4M0ExMTAvBgNVBAUTKDIxRTkzNTlERTk2MDdBNzhDQ0QzNTkwRTBCNDQ5Q0I1 MkIxN0I2QkIwHhcNMjUxMTAyMjEzODAwWhcNMjUxMTA5MjEzODAwWjAYMRYwFAYD VQQDEw02OTA3Y2YzOC1kM2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9jlAbqSh4kCwmI8Qy0NyG6/BHBvZj055bnhgIp3Jh/VAa0a+rjVgLMGvpr3 pvOLmjJzy5OO3gjOk3bUZvzCVl41Ty6XAdKMxz4JN2qXUZ0O29p9b+IL9/VPdYcV eT868LKofT+s/L3LR5eg8XFFsVvMLwQk82m7Ere/NTkpATH5GeTdEjEp5WRNj72C GiCgl22bvlc4waeB/YrZYt09lb4tETAU+Ud5QiluIsZKQFlgzak7Qq7eO139Sajl ee7EGzwKpcpOenUpSy5w/AuviC4dmhT66PO/7IjkzHbXeupNaUvN7cuVMsAlqJ4j rV1q+S2u4wdRGpfIcVR1OE//ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKoDzlT 4n5oriOeQKxnPmS7Hg6uMB8GA1UdIwQYMBaAFCHpNZ3pYHp4zNNZDgtEnLUrF7a7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzgzQS80NzE3MENEODNE RUMxMUVCOTA0QTBDNjVDNEY5QUUwMi9JZWsxbmVsZ2Vuak0wMWtPQzBTY3RTc1h0 cnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0llazFuZWxnZW5qTTAxa09DMFNjdFNzWHRycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzgzQS80NzE3MENEODNERUMxMUVCOTA0QTBDNjVDNEY5QUUwMi9JZWsxbmVsZ2Vu ak0wMWtPQzBTY3RTc1h0cnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChWh7r6xqNSeNFgjJtmh7e9IndRa/QfqN9pCLU5udOMDFC4xcYG94Z yUWZw5Y3r5fRm+F5S189b6bb9fdozb/TXTrm7Nmtlt0lypvfqm+P3zD14LYJ9a03 8fiigfNCgNSWJi93OhOZBNUagf8uGfo+yPAilOdS3igTfmi0bFnxhUZ9VBmjYaB7 mt+zq61ZSp67H/cNF56+ijuFB+JbKn2XLTPgdPuIBtzH6uz+oNOLaAJTBINocO6v NVaFyGQ0SazL5nzlJ5J7FUmGauzM/7n3D0Isd14AYf8tn/Aoy2lzW3A0TGzvMDRE O5a0/kCNYC2AtphLSdzmGiaCwaGIc5ah -----END CERTIFICATE-----Generated at Tue Nov 4 16:06:13 2025 by rpki-client