$ rpki-client -vvf rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft File: 5MpluNDHsWXZwip6vfgapm-q1NE.mft (raw, json) Hash identifier: fKBMFazjxb/yI4rVXptkg9slaoMRzxr1arqjNkHF+tg= Subject key identifier: 28:3D:EA:37:26:39:FA:E4:8A:CA:BB:D5:96:78:2D:62:07:36:EB:34 Authority key identifier: E4:CA:65:B8:D0:C7:B1:65:D9:C2:2A:7A:BD:F8:1A:A6:6F:AA:D4:D1 Certificate issuer: /CN=A915EAAF/serialNumber=E4CA65B8D0C7B165D9C22A7ABDF81AA66FAAD4D1 Certificate serial: 34D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft Manifest number: 34D5 Signing time: Tue 04 Nov 2025 14:43:33 +0000 Manifest this update: Tue 04 Nov 2025 14:43:33 +0000 Manifest next update: Tue 11 Nov 2025 14:43:33 +0000 Files and hashes: 1: 5MpluNDHsWXZwip6vfgapm-q1NE.crl (hash: bEWBXiTMt4VU2g4rDiBjcLycb3GKuV11FvM+AX5+5LE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.crl rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13525 (0x34d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EAAF, serialNumber=E4CA65B8D0C7B165D9C22A7ABDF81AA66FAAD4D1 Validity Not Before: Nov 4 14:43:33 2025 GMT Not After : Nov 11 14:43:33 2025 GMT Subject: CN=690a1115-5fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a7:cc:e8:75:c1:3f:5f:eb:87:88:53:cc:8a: 50:5f:33:77:3d:91:62:76:4b:2f:9e:b5:a4:16:25: aa:16:20:2b:eb:fc:b9:36:a7:4c:a6:de:f9:2f:49: 27:ab:a7:8b:42:10:98:d7:59:74:d6:2e:e4:75:f8: 73:60:62:d4:3c:4c:1f:03:27:09:d1:08:1f:e5:70: e2:6a:5f:da:d3:9a:e6:b3:9a:55:a7:16:87:47:b3: a6:3d:1f:f2:0f:53:74:6d:a3:ec:84:0a:7a:fa:b9: a1:4c:1e:1b:6a:35:fd:de:42:49:5f:4f:ff:01:4b: 8c:f2:a6:31:71:3f:da:2e:83:88:a6:b2:43:e1:e7: c9:60:57:ab:7f:00:a1:da:68:6d:24:2f:46:77:d4: 35:56:5f:73:6d:86:ab:99:cc:de:95:d1:08:09:d6: bb:57:fd:2e:1d:1c:e0:3e:c1:58:62:17:fd:38:46: 1f:cd:6e:2a:61:f8:6f:79:5c:5b:09:63:48:a3:ac: 45:e9:f9:c5:42:c2:0a:df:c8:9e:f7:db:d1:40:43: 27:a5:44:51:e9:ec:9d:c9:e4:63:70:f6:34:df:2d: 0c:ea:ab:75:f8:8f:d0:f5:dd:be:e0:d0:7d:f3:9d: 77:e4:30:c6:bc:5d:d6:1b:35:f5:71:02:52:74:76: d1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3D:EA:37:26:39:FA:E4:8A:CA:BB:D5:96:78:2D:62:07:36:EB:34 X509v3 Authority Key Identifier: keyid:E4:CA:65:B8:D0:C7:B1:65:D9:C2:2A:7A:BD:F8:1A:A6:6F:AA:D4:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1f:37:8e:e1:c6:46:df:33:a8:4d:e7:7f:61:e9:ae:bb:be: a0:c4:48:01:8a:d9:3d:d2:5d:97:9a:47:2c:13:0b:82:64:d0: 79:4d:8e:9b:49:f2:83:b7:84:be:1d:17:04:c3:7c:be:87:f3: 9a:1a:39:af:62:86:83:f0:4c:d3:39:af:fe:50:70:fb:ab:27: d4:38:7a:12:05:84:70:3b:54:eb:a1:6d:91:96:a0:c3:ba:cc: cf:4e:18:42:f7:b0:a7:8b:cc:68:e1:24:7a:09:97:f2:13:d5: 06:f6:cd:3d:20:6a:b1:2f:9f:c4:a6:c5:fc:4d:15:e0:c8:5f: 2b:e1:d6:d3:d8:f1:0d:a2:ac:66:f3:de:7a:c3:8c:76:ce:3a: a1:e2:dc:f7:c9:02:e1:38:e0:9f:81:7c:11:b6:6b:6b:b9:d5: 7c:4b:80:51:26:ab:62:47:38:06:2f:33:d1:57:e1:85:7b:3b: 58:04:cc:36:04:47:27:c7:7e:81:76:34:cf:17:54:50:1b:28: fa:4a:c5:3c:cd:9f:1d:f8:8c:80:c4:52:c4:d3:c2:dd:ba:3b: cb:27:b2:7d:c9:40:0c:9d:02:71:be:76:3c:b2:cc:32:9b:28: 6d:85:c6:9a:46:86:84:ea:30:84:ba:1e:96:72:13:4e:ab:f6: 14:a8:d4:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBQUYxMTAvBgNVBAUTKEU0Q0E2NUI4RDBDN0IxNjVEOUMyMkE3QUJERjgxQUE2 NkZBQUQ0RDEwHhcNMjUxMTA0MTQ0MzMzWhcNMjUxMTExMTQ0MzMzWjAYMRYwFAYD VQQDEw02OTBhMTExNS01ZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArafM6HXBP1/rh4hTzIpQXzN3PZFidksvnrWkFiWqFiAr6/y5NqdMpt75L0kn q6eLQhCY11l01i7kdfhzYGLUPEwfAycJ0Qgf5XDial/a05rms5pVpxaHR7OmPR/y D1N0baPshAp6+rmhTB4bajX93kJJX0//AUuM8qYxcT/aLoOIprJD4efJYFerfwCh 2mhtJC9Gd9Q1Vl9zbYarmczeldEICda7V/0uHRzgPsFYYhf9OEYfzW4qYfhveVxb CWNIo6xF6fnFQsIK38ie99vRQEMnpURR6eydyeRjcPY03y0M6qt1+I/Q9d2+4NB9 85135DDGvF3WGzX1cQJSdHbR1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCg96jcm Ofrkisq71ZZ4LWIHNus0MB8GA1UdIwQYMBaAFOTKZbjQx7Fl2cIqer34GqZvqtTR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUFBRi9GM0YxOEIyQzFE OEUxMUUyQTMxNEEyRUQwOEIwMkNEMi81TXBsdU5ESHNXWFp3aXA2dmZnYXBtLXEx TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVNcGx1TkRIc1dYWndpcDZ2ZmdhcG0tcTFORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUFBRi9GM0YxOEIyQzFEOEUxMUUyQTMxNEEyRUQwOEIwMkNEMi81TXBsdU5ESHNX WFp3aXA2dmZnYXBtLXExTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9HzeO4cZG3zOoTed/Yemuu76gxEgBitk90l2XmkcsEwuCZNB5TY6b SfKDt4S+HRcEw3y+h/OaGjmvYoaD8EzTOa/+UHD7qyfUOHoSBYRwO1TroW2RlqDD uszPThhC97Cni8xo4SR6CZfyE9UG9s09IGqxL5/EpsX8TRXgyF8r4dbT2PENoqxm 8956w4x2zjqh4tz3yQLhOOCfgXwRtmtrudV8S4BRJqtiRzgGLzPRV+GFeztYBMw2 BEcnx36BdjTPF1RQGyj6SsU8zZ8d+IyAxFLE08LdujvLJ7J9yUAMnQJxvnY8sswy myhthcaaRoaE6jCEuh6WchNOq/YUqNQK -----END CERTIFICATE-----Generated at Wed Nov 5 19:34:35 2025 by rpki-client