$ rpki-client -vvf rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft File: k-dhjM_iZIDXknoYcbrYP--d9IQ.mft (raw, json) Hash identifier: Kh9K73DU22tBbqBA5Qd5PdGeOMr5zjfULBAXyFqNCag= Subject key identifier: EE:2E:D4:9E:AE:1C:21:F2:7B:FD:52:A9:45:14:80:30:CA:CA:AD:03 Authority key identifier: 93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 Certificate issuer: /CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Certificate serial: 2579 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft Manifest number: 2564 Signing time: Sun 02 Nov 2025 15:45:41 +0000 Manifest this update: Sun 02 Nov 2025 15:45:41 +0000 Manifest next update: Sun 09 Nov 2025 15:45:41 +0000 Files and hashes: 1: k-dhjM_iZIDXknoYcbrYP--d9IQ.crl (hash: 2/dh7RwB36kxggVYkEqCOIxXuQMfSPEE6ZeN71g3BYQ=) 2: 657B47B61C2F11E880C4ED7BC4F9AE02.roa (hash: SqubnCOkk8RsrmFBLZGk+dGzptnKgDT9xCotCHCxhuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9593 (0x2579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F438, serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484 Validity Not Before: Nov 2 15:45:41 2025 GMT Not After : Nov 9 15:45:41 2025 GMT Subject: CN=69077ca5-ca36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f1:04:98:5a:06:0f:46:bb:d5:7d:31:8f:fe: de:f6:aa:84:ba:ed:26:61:d8:ee:97:4d:61:a1:79: ee:41:b5:68:1d:19:01:bc:7d:f6:e7:df:ef:72:70: e0:f9:bc:89:74:46:26:ad:36:7e:58:c1:61:96:e5: ed:86:af:5c:7d:90:3e:57:47:7f:1d:0e:90:01:76: ba:32:42:63:e6:d5:4c:20:cb:de:c3:f9:32:57:a8: ad:4b:54:33:35:3f:46:9a:ca:e8:42:de:a7:93:75: eb:ef:10:79:1a:7b:67:44:d4:b6:98:92:d8:82:88: 46:4c:15:eb:bd:a0:d4:a1:25:c0:d7:ee:ad:9b:f4: 4c:ef:b3:e9:ec:40:d8:ff:6a:90:01:ff:04:36:29: f7:d6:cc:69:1e:82:31:f9:7d:42:fd:59:71:32:6a: 1c:46:e2:31:74:71:2e:cb:fa:7b:30:8e:a1:8e:50: 54:b7:1d:b9:e1:d1:de:f9:12:0a:af:7d:12:03:47: ca:89:fe:86:70:1b:3f:48:c4:ef:53:11:e2:8c:2f: f7:2b:af:26:b9:7d:94:e1:0c:67:31:91:bb:cd:f9: 56:a5:d6:fa:8b:94:e3:3f:3d:e2:26:2b:eb:5f:b8: 12:78:4c:48:3c:b8:33:8b:e2:8d:1a:7a:e1:c2:9f: 29:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2E:D4:9E:AE:1C:21:F2:7B:FD:52:A9:45:14:80:30:CA:CA:AD:03 X509v3 Authority Key Identifier: keyid:93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:35:8e:f2:ca:83:b2:7e:a3:cc:24:a0:30:9e:aa:ee:cc:92: cf:b9:90:0d:81:d8:73:2f:15:b7:a2:2f:17:d2:1d:a7:bf:4c: 16:d5:aa:1a:0b:2d:f1:25:21:39:1b:0a:42:c1:48:d8:4d:37: 7f:02:84:cc:f8:60:07:b6:ad:ba:34:b4:c8:74:70:60:59:21: ea:3c:83:6b:9c:e8:21:3b:22:33:03:ce:f1:92:df:20:cc:b9: 46:8e:d3:c6:f3:2b:e0:8e:a6:87:77:22:6e:8b:4b:6c:5e:c5: 05:21:bb:92:29:2c:8b:ae:23:39:6b:84:c4:bf:00:d8:5d:3b: b2:dc:ee:65:6d:47:83:d1:a2:ec:16:f6:9d:77:ae:d1:97:f6: b3:5b:d0:8d:fd:26:6b:4d:71:db:34:66:1c:59:64:c2:a7:e6: 40:c2:0b:61:83:12:5d:f8:80:01:1a:a2:48:97:c9:fa:14:52: 85:d2:a3:73:13:96:80:49:99:65:d5:f3:a3:fb:c5:68:a1:9b: 72:df:db:0c:41:f9:e6:52:96:9a:e6:29:95:34:18:0e:95:f9: 9f:eb:33:05:f7:e9:fc:91:ec:66:40:e7:5e:ba:70:d4:1a:ff: ee:c2:aa:25:0d:86:76:b7:fa:c4:44:76:7d:51:fb:55:23:e9: fe:29:86:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY0MzgxMTAvBgNVBAUTKDkzRTc2MThDQ0ZFMjY0ODBENzkyN0ExODcxQkFEODNG RUY5REY0ODQwHhcNMjUxMTAyMTU0NTQxWhcNMjUxMTA5MTU0NTQxWjAYMRYwFAYD VQQDEw02OTA3N2NhNS1jYTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/EEmFoGD0a71X0xj/7e9qqEuu0mYdjul01hoXnuQbVoHRkBvH3259/vcnDg +byJdEYmrTZ+WMFhluXthq9cfZA+V0d/HQ6QAXa6MkJj5tVMIMvew/kyV6itS1Qz NT9GmsroQt6nk3Xr7xB5GntnRNS2mJLYgohGTBXrvaDUoSXA1+6tm/RM77Pp7EDY /2qQAf8ENin31sxpHoIx+X1C/VlxMmocRuIxdHEuy/p7MI6hjlBUtx254dHe+RIK r30SA0fKif6GcBs/SMTvUxHijC/3K68muX2U4QxnMZG7zflWpdb6i5TjPz3iJivr X7gSeExIPLgzi+KNGnrhwp8pDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4u1J6u HCHye/1SqUUUgDDKyq0DMB8GA1UdIwQYMBaAFJPnYYzP4mSA15J6GHG62D/vnfSE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjQzOC9CN0VGNTNGRTJC NEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJRFhrbm9ZY2JyWVAtLWQ5 SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2stZGhqTV9pWklEWGtub1ljYnJZUC0tZDlJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjQzOC9CN0VGNTNGRTJCNEUxMUU1QUNCQkRGM0FDNEY5QUUwMi9rLWRoak1faVpJ RFhrbm9ZY2JyWVAtLWQ5SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlNY7yyoOyfqPMJKAwnqruzJLPuZANgdhzLxW3oi8X0h2nv0wW1aoa Cy3xJSE5GwpCwUjYTTd/AoTM+GAHtq26NLTIdHBgWSHqPINrnOghOyIzA87xkt8g zLlGjtPG8yvgjqaHdyJui0tsXsUFIbuSKSyLriM5a4TEvwDYXTuy3O5lbUeD0aLs Fvadd67Rl/azW9CN/SZrTXHbNGYcWWTCp+ZAwgthgxJd+IABGqJIl8n6FFKF0qNz E5aASZll1fOj+8VooZty39sMQfnmUpaa5imVNBgOlfmf6zMF9+n8kexmQOdeunDU Gv/uwqolDYZ2t/rERHZ9UftVI+n+KYZH -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:41 2025 by rpki-client