$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft File: sRd7K0wt-LMG0UpkMAcob4nWnMA.mft (raw, json) Hash identifier: bk5LyUWvmsGlF+LwBrrErZsal7oq0cCZb0irdgdl//0= Subject key identifier: 44:C4:BA:7D:A9:43:4A:98:B3:42:A8:0F:74:58:EC:94:CD:0C:CE:2C Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 Certificate issuer: /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Certificate serial: 0CBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft Manifest number: 0CAD Signing time: Sun 02 Nov 2025 18:16:33 +0000 Manifest this update: Sun 02 Nov 2025 18:16:32 +0000 Manifest next update: Sun 09 Nov 2025 18:16:32 +0000 Files and hashes: 1: sRd7K0wt-LMG0UpkMAcob4nWnMA.crl (hash: Y1VRkQEqKk0HKd3befPHQ4UGS3y4+qdueKLwekZmoHY=) 2: BD34B926367911F083BF6873C4F9AE02.roa (hash: m+EkNRFDxHj1FPyZ5U1ENnB32M/tNvWOK6leRT4D3kc=) 3: A869B800367611F088B7726AC4F9AE02.roa (hash: LsbbSClw7moIgeVgU48ZXAlLRVTQAq+PWzm9OXhRWr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3262 (0xcbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DA5A, serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Validity Not Before: Nov 2 18:16:32 2025 GMT Not After : Nov 9 18:16:32 2025 GMT Subject: CN=6907a001-c23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:42:69:82:06:23:36:09:0b:d6:04:11:64:00: 3c:72:29:17:d2:ba:00:20:94:c7:0c:9d:b6:ba:09: 9e:88:8e:12:28:dc:b5:40:cc:52:04:5a:8a:b8:d9: 01:c9:99:7f:c6:5b:fd:b9:70:4f:38:52:5a:b9:b2: 64:4f:67:1d:2e:f4:48:0b:d6:30:c7:6b:c9:df:3f: 00:52:1d:8c:04:4a:5a:0d:d4:47:64:46:8d:cd:63: 2a:8e:8a:3e:23:c8:f2:63:38:36:72:c3:0d:a8:15: 13:33:ce:5e:4f:98:5f:28:74:11:ee:70:85:7b:dc: b8:31:ec:03:4b:3c:97:ad:40:37:02:4d:e3:b6:99: 21:65:f3:81:96:46:2a:85:af:28:28:aa:d0:74:d6: 86:f5:e5:22:4b:3e:53:62:d5:cd:af:15:85:5d:17: 7f:ab:d9:f8:cc:30:3b:ff:37:dd:7d:c4:bf:0a:8c: 77:4b:42:e3:56:f3:e2:ca:4e:35:0e:8f:86:62:36: 38:c1:5c:a7:38:55:6c:65:4d:60:16:00:ed:94:0a: 81:e6:fc:99:c1:79:71:86:06:21:80:8d:30:cf:1a: d3:7c:3a:f5:22:a8:d1:5a:b8:97:c8:cb:46:7e:92: 2a:bd:8e:23:22:45:78:49:e1:20:47:e8:8b:21:fa: be:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C4:BA:7D:A9:43:4A:98:B3:42:A8:0F:74:58:EC:94:CD:0C:CE:2C X509v3 Authority Key Identifier: keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:da:25:79:05:dd:70:f9:b4:1e:be:91:ba:b4:22:a8:c7:2e: 2b:6f:4a:d6:23:1b:61:e4:22:6f:42:6b:2e:63:c6:5b:97:57: 93:34:77:76:f5:b6:2a:64:c8:d9:95:c5:a0:cd:88:40:6f:82: 3d:68:4a:6c:80:0d:52:89:6d:8b:5d:ee:fa:88:39:6b:8c:53: 05:48:92:ad:4e:0a:30:0f:60:10:c0:ea:a9:94:45:2a:50:fe: d9:fc:ad:91:27:3d:c3:8e:bd:5b:a5:1c:dd:72:ae:b5:e6:13: a9:c5:e8:cc:65:24:96:62:6b:b5:47:72:f1:d1:ff:a0:a2:3f: a6:7f:02:78:49:43:d6:46:fd:ac:60:3c:76:5e:ec:f9:37:ca: 79:3d:36:9c:35:0c:f8:f2:fe:76:0d:86:49:f9:04:61:1a:97: 2f:91:37:a4:f8:da:d7:9c:33:56:3a:9a:74:d1:26:89:cd:1b: c9:22:a3:44:1c:f3:76:c2:87:c4:2c:83:95:36:e3:17:58:2a: 41:ae:53:bf:57:f5:3d:b0:e5:0a:78:88:8d:11:1c:c5:c9:82: 86:b9:1d:07:17:aa:c0:94:e8:e7:a9:85:1c:f2:4d:2f:6f:2a: 57:75:bf:34:ba:53:75:bb:6f:ad:8f:2b:80:43:1d:4c:d6:c3: 55:ea:be:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURBNUExMTAvBgNVBAUTKEIxMTc3QjJCNEMyREY4QjMwNkQxNEE2NDMwMDcyODZG ODlENjlDQzAwHhcNMjUxMTAyMTgxNjMyWhcNMjUxMTA5MTgxNjMyWjAYMRYwFAYD VQQDEw02OTA3YTAwMS1jMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkJpggYjNgkL1gQRZAA8cikX0roAIJTHDJ22ugmeiI4SKNy1QMxSBFqKuNkB yZl/xlv9uXBPOFJaubJkT2cdLvRIC9Ywx2vJ3z8AUh2MBEpaDdRHZEaNzWMqjoo+ I8jyYzg2csMNqBUTM85eT5hfKHQR7nCFe9y4MewDSzyXrUA3Ak3jtpkhZfOBlkYq ha8oKKrQdNaG9eUiSz5TYtXNrxWFXRd/q9n4zDA7/zfdfcS/Cox3S0LjVvPiyk41 Do+GYjY4wVynOFVsZU1gFgDtlAqB5vyZwXlxhgYhgI0wzxrTfDr1IqjRWriXyMtG fpIqvY4jIkV4SeEgR+iLIfq+7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETEun2p Q0qYs0KoD3RY7JTNDM4sMB8GA1UdIwQYMBaAFLEXeytMLfizBtFKZDAHKG+J1pzA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REE1QS80NEU3NzBCMjAz RUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1MTUcwVXBrTUFjb2I0bldu TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NSZDdLMHd0LUxNRzBVcGtNQWNvYjRuV25NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REE1QS80NEU3NzBCMjAzRUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1M TUcwVXBrTUFjb2I0blduTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM2iV5Bd1w+bQevpG6tCKoxy4rb0rWIxth5CJvQmsuY8Zbl1eTNHd2 9bYqZMjZlcWgzYhAb4I9aEpsgA1SiW2LXe76iDlrjFMFSJKtTgowD2AQwOqplEUq UP7Z/K2RJz3Djr1bpRzdcq615hOpxejMZSSWYmu1R3Lx0f+goj+mfwJ4SUPWRv2s YDx2Xuz5N8p5PTacNQz48v52DYZJ+QRhGpcvkTek+NrXnDNWOpp00SaJzRvJIqNE HPN2wofELIOVNuMXWCpBrlO/V/U9sOUKeIiNERzFyYKGuR0HF6rAlOjnqYUc8k0v bypXdb80ulN1u2+tjyuAQx1M1sNV6r48 -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:31 2025 by rpki-client