$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft File: -KpwkWtspYPANj63qaX38mJ9c2A.mft (raw, json) Hash identifier: g+tqaPsP+v0HFstmG3YodvizEKrdmRkz08ZhIg8kbVQ= Subject key identifier: CE:D8:8E:B9:CD:B3:BC:4C:08:C4:3C:E7:BA:93:45:3F:21:71:D5:F6 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 268E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft Manifest number: 2589 Signing time: Wed 22 Oct 2025 15:57:29 +0000 Manifest this update: Wed 22 Oct 2025 15:57:28 +0000 Manifest next update: Wed 29 Oct 2025 15:57:28 +0000 Files and hashes: 1: -KpwkWtspYPANj63qaX38mJ9c2A.crl (hash: ybXeUsIsp1dRvjfrc7yeAuYrhcNVCT9kCUk++4bluVk=) 2: 9DBB8670790211EC9EE24885C4F9AE02.roa (hash: HAVp5cljtBnNfexhpbWp3fQD4oxFEGOqIu7ZTxc+Cn0=) 3: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (hash: RIyr8Ughbt9mob5hXoVNYqj5DjcM8cytuIahFNZG+OY=) 4: 86D13B7E571C11EC81276481C4F9AE02.roa (hash: MOs76+y2ZzpmyQheXk3mTC95IHPkn0FNf96cGXOiX14=) 5: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (hash: Z5qSs34sPKp/u0MZu0MdqYO0kmHEtkJPsT5iKOnHCCM=) 6: CFF5A20078E011EC8357FA15C4F9AE02.roa (hash: 0lnFnxu0rWa+p9n4oerH1rvUz5x82J6mnvG019TSBpo=) 7: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (hash: lPqoKt6e9WB68QkGqWF9uf0n021O/vJN6Ok+8vPm99E=) 8: 6E042EFCABF011EC92152E22C4F9AE02.roa (hash: nSFw75IcZdLxXGKGRDjDilcmAybSCgLtcoRvUszM+xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 15:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9870 (0x268e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Oct 22 15:57:28 2025 GMT Not After : Oct 29 15:57:28 2025 GMT Subject: CN=68f8fee8-7027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6c:96:50:0a:41:b6:09:7b:4f:bd:a9:f9:fa: d0:bc:b0:a1:ff:1d:13:ab:37:3c:83:26:89:c0:30: 02:db:da:4c:82:51:98:5f:eb:34:22:a8:4e:cc:d3: f0:77:d2:a7:fb:8a:86:18:11:a0:4e:c2:05:56:38: 82:ca:41:27:1b:1f:ff:43:aa:4e:45:0b:65:0c:e6: 09:26:7b:79:d6:9f:82:70:c4:fa:c0:29:c9:4b:9e: 33:86:19:85:93:73:b2:f8:7f:5e:02:03:05:f7:44: e6:ac:df:f4:4b:af:33:a8:29:47:b6:20:25:cb:6c: 7a:5f:15:d5:59:c3:34:3c:85:7b:a0:53:53:b6:39: 8e:c6:e1:1c:ba:fc:b7:eb:42:df:ae:fe:4b:b0:00: e7:3e:79:81:2c:d1:95:77:c6:2c:e1:81:4b:58:68: d6:f8:da:d4:fd:e1:ba:1d:0f:14:a7:32:56:71:9a: d5:63:f7:d5:ae:77:ec:da:cf:db:4d:42:f5:42:38: 83:7c:b6:97:8d:d8:43:2b:4c:1d:ab:b6:a3:4d:e1: 19:20:78:d4:0b:39:70:74:44:c3:3b:bf:1c:c9:f6: d5:10:86:6a:aa:72:41:40:0c:dc:51:f8:13:79:b9: d5:f4:6e:ae:be:1d:72:c3:bd:30:fa:bb:cc:1f:1e: fb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D8:8E:B9:CD:B3:BC:4C:08:C4:3C:E7:BA:93:45:3F:21:71:D5:F6 X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:90:99:55:75:fc:ff:e1:02:f9:df:b3:88:b6:40:93:31:d3: 23:cd:2e:5d:92:ad:9a:92:63:6e:64:46:a9:2c:41:3e:16:ea: 9d:05:18:47:82:b6:1a:7d:fe:f1:62:e3:7a:10:8b:09:ef:f6: 1c:96:7b:59:06:90:41:52:12:de:23:70:ed:b3:d4:f2:c7:a7: 3c:2c:26:e5:f5:0a:2a:19:d2:87:15:61:4f:e9:74:d7:b8:e4: 29:0d:73:06:07:de:2c:c1:c0:4a:2c:fd:7c:86:32:2c:e9:e4: 11:46:78:0b:31:5e:ce:c2:2e:99:a3:43:19:86:5d:d6:df:be: 36:f8:ba:3e:2b:1f:75:8e:48:fd:d9:d0:15:9b:0d:04:43:2f: 87:2a:b0:fa:88:7c:de:64:43:04:b3:76:9f:08:18:3a:9e:07: 69:43:7e:47:1d:22:94:d2:26:5f:25:f5:74:3d:23:7e:88:40: 48:c1:9b:cf:7f:4a:c2:53:c7:68:60:20:2e:03:22:0a:f1:f3: af:fa:d9:1b:c4:7d:a3:1b:33:ca:05:4b:0b:86:d4:74:a3:8e: 44:e1:cf:7d:c8:9b:cc:20:be:5d:f0:54:0c:39:97:2d:be:4c: f9:cc:16:9d:b1:16:1f:40:98:69:84:89:89:b9:a1:3b:19:86: 42:b3:b9:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjUxMDIyMTU1NzI4WhcNMjUxMDI5MTU1NzI4WjAYMRYwFAYD VQQDEw02OGY4ZmVlOC03MDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5WyWUApBtgl7T72p+frQvLCh/x0Tqzc8gyaJwDAC29pMglGYX+s0IqhOzNPw d9Kn+4qGGBGgTsIFVjiCykEnGx//Q6pORQtlDOYJJnt51p+CcMT6wCnJS54zhhmF k3Oy+H9eAgMF90TmrN/0S68zqClHtiAly2x6XxXVWcM0PIV7oFNTtjmOxuEcuvy3 60Lfrv5LsADnPnmBLNGVd8Ys4YFLWGjW+NrU/eG6HQ8UpzJWcZrVY/fVrnfs2s/b TUL1QjiDfLaXjdhDK0wdq7ajTeEZIHjUCzlwdETDO78cyfbVEIZqqnJBQAzcUfgT ebnV9G6uvh1yw70w+rvMHx779QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7YjrnN s7xMCMQ857qTRT8hcdX2MB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUU1My8zODUxMTg0MDQ1ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZ UEFOajYzcWFYMzhtSjljMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtkJlVdfz/4QL537OItkCTMdMjzS5dkq2akmNuZEapLEE+FuqdBRhH grYaff7xYuN6EIsJ7/YclntZBpBBUhLeI3Dts9Tyx6c8LCbl9QoqGdKHFWFP6XTX uOQpDXMGB94swcBKLP18hjIs6eQRRngLMV7Owi6Zo0MZhl3W3742+Lo+Kx91jkj9 2dAVmw0EQy+HKrD6iHzeZEMEs3afCBg6ngdpQ35HHSKU0iZfJfV0PSN+iEBIwZvP f0rCU8doYCAuAyIK8fOv+tkbxH2jGzPKBUsLhtR0o45E4c99yJvMIL5d8FQMOZct vkz5zBadsRYfQJhphImJuaE7GYZCs7lT -----END CERTIFICATE-----Generated at Wed Oct 22 18:19:19 2025 by rpki-client