$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft File: C9usFSJfG_m2FLKjR6G5bEoPlpw.mft (raw, json) Hash identifier: F27s+4tu1Xdcf6VwyvmlnpDkGwbyuMtTV9gnFC59dkY= Subject key identifier: 1C:4B:23:85:C8:23:64:18:F7:F9:0D:BA:53:56:C7:50:C6:27:AB:7D Authority key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C Certificate issuer: /CN=A915FDA7/serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Certificate serial: 0125 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft Manifest number: 0122 Signing time: Mon 03 Nov 2025 04:43:32 +0000 Manifest this update: Mon 03 Nov 2025 04:43:32 +0000 Manifest next update: Mon 10 Nov 2025 04:43:32 +0000 Files and hashes: 1: C9usFSJfG_m2FLKjR6G5bEoPlpw.crl (hash: i6PTfLMbIHVDR9bhsqr8tD+wMQbxBQeQrbfukhVYX2Y=) 2: 7C3A615CFD2A11EE9030911CC4F9AE02.roa (hash: /piRZvXAAsh1mpg66Okc/aC7aZTe1kUD5ojc4AIc6UQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDA7, serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Validity Not Before: Nov 3 04:43:32 2025 GMT Not After : Nov 10 04:43:32 2025 GMT Subject: CN=690832f4-cf6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:00:50:34:78:96:64:38:77:f1:1a:f2:c7:d0: 5c:6e:19:df:b4:15:95:11:7a:72:49:1a:e8:da:0c: b7:ce:0a:49:2b:40:a9:4f:7b:f2:6a:e3:a5:5d:87: 2f:1f:6c:8c:13:1e:56:87:23:dd:73:1a:fd:b7:ef: d0:aa:01:38:47:8e:ad:9f:f5:93:68:30:1e:d8:b7: 77:3f:de:14:0e:05:d6:b3:4d:53:9a:98:e2:06:04: 92:e4:b0:bb:c2:fb:c5:f4:d1:44:92:83:46:8e:6a: b8:fe:69:48:c2:fe:b2:b6:fb:a0:71:d1:72:94:ac: 6c:d1:97:ba:91:87:f4:54:31:c0:6d:2a:86:ee:bb: a9:2d:6d:f3:b8:8c:77:4f:ff:6d:97:bd:27:74:e5: 62:74:9d:0e:16:3d:7b:63:92:44:df:a5:df:c7:df: a5:41:48:df:90:0a:30:38:9d:0f:15:46:c7:35:b1: 03:4d:f2:80:34:4f:7e:dd:6a:7b:9e:5c:be:14:b8: a8:4a:50:c3:28:f1:f5:91:ee:5d:ba:02:ad:48:8b: d2:d2:86:25:3d:30:ac:60:66:76:55:22:0a:02:f4: c3:10:49:cb:23:35:06:58:14:d8:d9:dd:7c:a6:34: a2:50:93:c2:d1:7c:fa:60:e2:ca:b9:c2:e7:79:2c: 41:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4B:23:85:C8:23:64:18:F7:F9:0D:BA:53:56:C7:50:C6:27:AB:7D X509v3 Authority Key Identifier: keyid:0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:86:9f:9f:18:a1:1a:f7:6f:16:a7:ad:ee:f7:28:fd:4b:d0: fa:37:47:f4:8a:91:24:69:f5:a2:fa:6a:d0:5b:29:45:b9:e0: a8:5b:99:c7:fd:48:09:fe:21:fd:66:8e:07:02:41:b5:64:90: df:05:22:5b:e6:ea:08:a5:86:d1:16:9c:e0:89:cb:c8:2a:76: 16:72:26:8c:8b:a6:d3:e8:5b:42:9e:3c:1d:2e:f4:19:e8:42: e3:78:51:f8:d8:1b:bf:f1:aa:e9:59:23:64:f2:cb:6b:88:b2: 71:3f:af:b4:78:bc:3e:f7:92:fb:0d:f7:88:62:cf:1b:a1:78: 5f:e2:f5:b1:8e:79:86:31:24:d9:7b:d4:3c:6a:ff:83:91:58: 75:d4:ee:37:61:c8:69:46:cc:a9:55:81:78:02:9c:30:15:dd: 2f:6e:1d:f7:a3:af:89:fa:3b:a3:d0:0f:0b:81:75:ec:3e:c1: 12:dc:b6:e0:d5:79:e9:3f:af:2f:f0:bb:81:e3:56:c1:f1:d8: 85:25:d8:fb:5c:07:08:d9:90:0c:69:b3:7f:42:f7:83:09:65: 8e:f0:2f:e9:f0:e9:a3:09:02:cc:3f:52:92:f9:32:82:e2:90: c9:b0:36:f0:a9:20:88:b3:c2:51:d8:f7:a0:ee:31:9a:2e:56: 0b:ea:fe:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQTcxMTAvBgNVBAUTKDBCREJBQzE1MjI1RjFCRjlCNjE0QjJBMzQ3QTFCOTZD NEEwRjk2OUMwHhcNMjUxMTAzMDQ0MzMyWhcNMjUxMTEwMDQ0MzMyWjAYMRYwFAYD VQQDEw02OTA4MzJmNC1jZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywBQNHiWZDh38Rryx9BcbhnftBWVEXpySRro2gy3zgpJK0CpT3vyauOlXYcv H2yMEx5WhyPdcxr9t+/QqgE4R46tn/WTaDAe2Ld3P94UDgXWs01TmpjiBgSS5LC7 wvvF9NFEkoNGjmq4/mlIwv6ytvugcdFylKxs0Ze6kYf0VDHAbSqG7rupLW3zuIx3 T/9tl70ndOVidJ0OFj17Y5JE36Xfx9+lQUjfkAowOJ0PFUbHNbEDTfKANE9+3Wp7 nly+FLioSlDDKPH1ke5dugKtSIvS0oYlPTCsYGZ2VSIKAvTDEEnLIzUGWBTY2d18 pjSiUJPC0Xz6YOLKucLneSxBwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxLI4XI I2QY9/kNulNWx1DGJ6t9MB8GA1UdIwQYMBaAFAvbrBUiXxv5thSyo0ehuWxKD5ac MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRBNy80RjQ4MUFDOEZE MjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdfbTJGTEtqUjZHNWJFb1Bs cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M5dXNGU0pmR19tMkZMS2pSNkc1YkVvUGxwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRBNy80RjQ4MUFDOEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdf bTJGTEtqUjZHNWJFb1BscHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBThp+fGKEa928Wp63u9yj9S9D6N0f0ipEkafWi+mrQWylFueCoW5nH /UgJ/iH9Zo4HAkG1ZJDfBSJb5uoIpYbRFpzgicvIKnYWciaMi6bT6FtCnjwdLvQZ 6ELjeFH42Bu/8arpWSNk8striLJxP6+0eLw+95L7DfeIYs8boXhf4vWxjnmGMSTZ e9Q8av+DkVh11O43YchpRsypVYF4ApwwFd0vbh33o6+J+juj0A8LgXXsPsES3Lbg 1XnpP68v8LuB41bB8diFJdj7XAcI2ZAMabN/QveDCWWO8C/p8OmjCQLMP1KS+TKC 4pDJsDbwqSCIs8JR2Peg7jGaLlYL6v5k -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:10 2025 by rpki-client