$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft File: r48M-0f7_MfEkzxHPNs2RCtQUc4.mft (raw, json) Hash identifier: rP29M5u2i5yfPd1R0upbe0zLc4vRnFnJO3xVdevLlSI= Subject key identifier: A8:F6:A0:7D:A3:F1:2F:B2:28:88:0B:A7:CE:29:26:A5:09:39:BC:D6 Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE Certificate serial: 3865 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft Manifest number: 3692 Signing time: Sat 18 Oct 2025 14:24:09 +0000 Manifest this update: Sat 18 Oct 2025 14:24:09 +0000 Manifest next update: Sat 25 Oct 2025 14:24:09 +0000 Files and hashes: 1: r48M-0f7_MfEkzxHPNs2RCtQUc4.crl (hash: hOCHOiW4dRUJP7AoMeWbxW9zvkbB+xCdu2OdBfU8Gmk=) 2: 94AE247A879B11EF9B78224EC4F9AE02.roa (hash: beGHA0T1rToh9I4yqxtOrGtpbpK8Gm/NJNtPJMVcv0k=) 3: 7C5F5278589611F084D9AA7BC4F9AE02.roa (hash: FOolRrR20/q0F6XvV7yCzqolfjRuktnsRoMJ0vyCQC8=) 4: 1514A670A47B11E9867CBF58C4F9AE02.roa (hash: sYUwQlOLcFH2Qzgi6OqjZe1I3jOQTOg2npEZQTWLY/A=) 5: A62428E820B211F09941D114C4F9AE02.roa (hash: fcDJ/ZruqRqMthD4UyDytuO1DIXDnB08fy1+uiAiXPg=) 6: BD30E870F62711E9AC18E63BC4F9AE02.roa (hash: YX0PeVbwnE20xWaiX2nr0sozgOjfm9aCwEd0B6uYVnQ=) 7: BC187B74F62711E9AC18E63BC4F9AE02.roa (hash: sE7POF4sPAWNrqvKGR3XPjh3vRpnxWQR3GBk17yROvM=) 8: 24AC829C476311F0970DF567C4F9AE02.roa (hash: q7CS41rn7/JdKF4Im2iOHVnhzgphtbHSDDYb+9p08i8=) 9: BC94C436F62711E9AC18E63BC4F9AE02.roa (hash: QUNQFD6Fs6vQ/Xacn/YTyPddDyT2Zj7smjz5kkHqzck=) 10: 6B1F445C781F11F0B7BE0756C4F9AE02.roa (hash: 2VNweA5bL/qHuR9no6uM1dicICzNt/Lgvt99j53zBzQ=) 11: CF09016006A611EAA8819441C4F9AE02.roa (hash: Nbg8apOhpz/ZbutsuWKwBDZ0wlxzKN9/aIfKH1t9opI=) 12: DF6FAF5EAF0111EB96FC344BC4F9AE02.roa (hash: 5kXCjaK7+LQcCcI/C1WuTADPPcJscpEH0U09SHcv4eM=) 13: 387ABD22614211F0AED25E68C4F9AE02.roa (hash: OTFLC+xsLqw75trai6CwqErooVjsc/BgFHuDOUQCFzo=) 14: 8513C77AF62A11E9A6941C46C4F9AE02.roa (hash: rRCgJL8oGciUh8AlUq1plMpffnbAPeYlKijUPW7pzas=) 15: C2C631C8A47911E99DBEDD52C4F9AE02.roa (hash: Xmn9rKXqawcB/ajmntmSYWXo/n1a94MI1ePlNWCx+l8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14437 (0x3865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE Validity Not Before: Oct 18 14:24:09 2025 GMT Not After : Oct 25 14:24:09 2025 GMT Subject: CN=68f3a309-4dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:19:cf:81:cd:37:6c:ea:3e:32:f9:41:3c:ca: d0:5b:d2:29:9b:ad:8f:38:ad:d6:e0:a7:b1:67:fe: ae:f2:a0:24:9e:3d:69:2e:62:11:8e:e6:65:3a:d2: d6:ef:86:77:6a:24:60:5e:80:f0:a2:de:f3:72:b0: 46:ae:4f:4d:16:59:8e:26:8d:4f:e8:9d:fc:25:13: d9:d6:e1:50:07:7d:c0:06:e5:23:ae:cd:77:05:36: bd:1b:8a:e7:e8:d2:a8:de:29:4f:cb:11:72:00:90: 94:d2:2d:36:78:dd:ac:f0:66:bd:be:2d:55:6d:a2: 03:1a:d4:60:7e:5b:7c:73:d9:6b:85:d8:a2:56:f7: 07:bc:c4:79:78:b0:c9:89:3a:38:70:4b:6d:33:64: 27:b2:8b:48:06:bf:d8:36:eb:b3:4f:14:f6:72:4e: da:6b:98:18:0e:14:9b:50:b2:53:0a:46:c5:53:fd: 0c:36:d9:00:fb:31:d4:06:16:e6:f0:2b:63:6a:67: 9c:53:50:d1:81:cc:81:e7:af:f0:fb:c9:28:fa:50: 88:c1:a8:a5:ed:ef:12:e5:14:72:0d:56:1c:4e:3e: 7d:45:49:f5:4e:ea:00:e5:ca:18:26:96:99:9e:4c: f4:23:b3:6b:67:49:b7:90:5a:c2:c7:74:ad:66:27: 73:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F6:A0:7D:A3:F1:2F:B2:28:88:0B:A7:CE:29:26:A5:09:39:BC:D6 X509v3 Authority Key Identifier: keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:20:b8:53:a3:ad:6d:6a:4c:e9:f7:cd:f6:60:36:17:92:3b: b5:52:6e:f2:5b:21:1f:6e:8b:a2:cf:b9:da:7b:9f:3b:9c:83: 63:1c:91:58:4c:1f:8e:42:c4:fe:23:7c:da:90:c2:60:47:99: 48:79:ff:14:50:02:e9:1c:23:46:00:1e:43:ae:a6:39:38:7a: cb:33:3a:0e:38:3e:69:72:1f:d0:d8:e6:32:3a:7c:8a:1d:27: a7:cd:10:aa:26:0f:b4:2f:35:06:05:05:19:21:24:47:e2:78: 70:0e:b0:4c:09:60:75:d6:d1:f1:03:d1:60:68:39:6d:c5:f1: d0:4b:46:54:ee:fa:f9:46:09:a1:7d:00:2f:0e:03:d6:c2:2d: c5:5f:9f:d7:e3:34:58:42:2d:be:7a:ea:7d:c9:0b:95:3f:5f: aa:a8:86:be:49:cc:f9:03:de:9d:0d:45:20:21:25:47:11:b9: f1:a4:04:1e:be:59:f7:4d:e9:50:2d:4f:46:6e:0f:c8:4d:19: 2c:f3:6b:f7:ca:12:40:4f:da:b5:b7:1d:e9:31:d0:65:fc:3c: 96:0c:1e:02:a8:1c:d5:38:45:b0:ec:e3:6d:2f:9e:7a:f1:96: c6:ea:3d:9c:40:f0:2f:4b:68:3f:6c:5e:a3:5c:2e:de:7b:da: 7e:b0:df:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICOGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEFGOEYwQ0ZCNDdGQkZDQzdDNDkzM0M0NzNDREIzNjQ0 MkI1MDUxQ0UwHhcNMjUxMDE4MTQyNDA5WhcNMjUxMDI1MTQyNDA5WjAYMRYwFAYD VQQDEw02OGYzYTMwOS00ZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRnPgc03bOo+MvlBPMrQW9Ipm62POK3W4KexZ/6u8qAknj1pLmIRjuZlOtLW 74Z3aiRgXoDwot7zcrBGrk9NFlmOJo1P6J38JRPZ1uFQB33ABuUjrs13BTa9G4rn 6NKo3ilPyxFyAJCU0i02eN2s8Ga9vi1VbaIDGtRgflt8c9lrhdiiVvcHvMR5eLDJ iTo4cEttM2QnsotIBr/YNuuzTxT2ck7aa5gYDhSbULJTCkbFU/0MNtkA+zHUBhbm 8CtjamecU1DRgcyB56/w+8ko+lCIwail7e8S5RRyDVYcTj59RUn1TuoA5coYJpaZ nkz0I7NrZ0m3kFrCx3StZidzAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKj2oH2j 8S+yKIgLp84pJqUJObzWMB8GA1UdIwQYMBaAFK+PDPtH+/zHxJM8RzzbNkQrUFHO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy82OTA3QzNFMjFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi9yNDhNLTBmN19NZkVrenhIUE5zMlJDdFFV YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0OE0tMGY3X01mRWt6eEhQTnMyUkN0UVVjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Rjg5Qy82OTA3QzNFMjFEODMxMUUyOUIzNUE1RDgwOEIwMkNEMi9yNDhNLTBmN19N ZkVrenhIUE5zMlJDdFFVYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEILhTo61takzp9832YDYXkju1Um7yWyEfbouiz7nae587nINjHJFY TB+OQsT+I3zakMJgR5lIef8UUALpHCNGAB5DrqY5OHrLMzoOOD5pch/Q2OYyOnyK HSenzRCqJg+0LzUGBQUZISRH4nhwDrBMCWB11tHxA9FgaDltxfHQS0ZU7vr5Rgmh fQAvDgPWwi3FX5/X4zRYQi2+eup9yQuVP1+qqIa+Scz5A96dDUUgISVHEbnxpAQe vln3TelQLU9Gbg/ITRks82v3yhJAT9q1tx3pMdBl/DyWDB4CqBzVOEWw7ONtL556 8ZbG6j2cQPAvS2g/bF6jXC7ee9p+sN+0 -----END CERTIFICATE-----Generated at Sun Oct 19 22:08:42 2025 by rpki-client