$ rpki-client -vvf rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft File: S5R0cysQASlff10ywBNpOhk3aBM.mft (raw, json) Hash identifier: Ozo6tVL3AIrc7gn5tTL0+w4ciIZVRWsOUZaFo777gFU= Subject key identifier: 7F:D0:9F:FB:9B:F8:4D:49:1D:78:85:79:8A:0E:96:BA:9E:EF:B7:9D Authority key identifier: 4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13 Certificate issuer: /CN=A915393C/serialNumber=4B9474732B1001295F7F5D32C013693A19376813 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft Manifest number: D8 Signing time: Sun 19 Oct 2025 08:38:18 +0000 Manifest this update: Sun 19 Oct 2025 08:38:17 +0000 Manifest next update: Sun 26 Oct 2025 08:38:17 +0000 Files and hashes: 1: S5R0cysQASlff10ywBNpOhk3aBM.crl (hash: E9mKdCd/36XpgZyLmJwEgjs+u9VoXS64eamPEhj897g=) 2: D970354A640E11EF93D18659C4F9AE02.roa (hash: etNLN0xdcIQbsfAOgbyJVGgcDaVOQsDMFkI6IBI01Ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915393C, serialNumber=4B9474732B1001295F7F5D32C013693A19376813 Validity Not Before: Oct 19 08:38:17 2025 GMT Not After : Oct 26 08:38:17 2025 GMT Subject: CN=68f4a379-7581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:50:31:36:86:19:79:01:19:99:fb:ac:39:de: 39:e6:f7:fa:49:20:3d:13:3c:0e:46:42:96:ea:7a: f5:23:2f:6f:4d:78:fa:72:89:d8:4b:da:bb:65:7b: 2e:b6:f4:fd:3e:73:2f:9d:eb:86:54:97:03:0f:9c: f4:ed:6c:96:6b:91:16:80:55:65:38:94:92:77:72: 74:f8:19:e2:c3:1e:53:fe:dd:36:2c:af:10:7d:24: eb:2f:ce:5e:a8:5b:16:45:f4:2e:e3:0f:69:c6:ac: 3b:24:7d:e0:68:8f:d6:a5:e8:4f:9a:9e:61:6e:a7: da:61:67:61:b0:c0:36:50:23:85:47:81:b8:a6:6f: 77:4b:5e:99:a4:99:f7:14:94:5e:39:0e:bf:77:92: 75:72:34:42:83:de:13:c6:0c:fd:1d:ba:bb:6f:6d: 3c:0c:36:6c:11:f7:7e:b1:80:0b:46:5d:8f:10:c0: 64:53:64:53:a8:33:19:81:0b:28:44:5e:0b:19:b9: e8:93:c3:2f:a4:d4:42:18:9d:63:dc:54:dc:f7:05: ca:c3:74:e6:7d:9e:c9:f3:9d:e7:29:d6:4c:43:31: 26:d1:41:25:e1:06:06:e5:ec:0d:05:ae:43:61:d5: ed:6c:65:55:be:ce:0f:86:52:7e:df:45:5e:ad:58: d2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D0:9F:FB:9B:F8:4D:49:1D:78:85:79:8A:0E:96:BA:9E:EF:B7:9D X509v3 Authority Key Identifier: keyid:4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:c1:f1:95:71:33:22:07:7d:94:53:69:19:0b:ba:42:b7:72: 38:34:ac:f0:a8:7e:82:93:5e:aa:65:53:06:6d:a2:a4:8e:23: 88:03:82:9a:a0:ca:15:e6:c6:95:b8:fe:c1:cc:c4:cb:5b:31: 15:50:5d:0f:9f:78:82:14:1a:46:ee:fb:e6:26:7a:db:fd:12: f2:45:93:1e:38:91:0e:f2:6a:65:36:61:26:c6:f5:25:60:26: 54:62:40:7d:8c:96:d0:00:5e:f9:ba:04:56:11:f0:41:f9:37: 7d:ad:bc:f9:49:62:fb:f9:f8:c5:b2:ae:a5:ee:d8:82:3d:d0: f8:63:2a:0b:1c:c0:b2:36:9a:d6:c5:7d:d3:64:7b:e2:54:06: 30:d3:30:a8:ac:fb:f6:49:87:6c:3b:56:95:99:b5:dd:12:5a: 04:79:76:0e:c1:af:f0:73:92:13:15:de:ad:65:e2:06:67:6d: 1c:db:e2:82:5e:a0:33:79:58:06:bb:8e:39:dd:ee:e6:4f:fa: a7:54:5f:55:8d:1a:aa:fa:5d:dd:ab:3e:0c:e1:cd:90:e5:56: 27:2d:5c:db:5b:32:9a:e0:21:cd:77:44:b9:2c:72:52:07:3e: 11:57:01:0c:21:af:4f:78:66:be:bb:6c:20:ed:36:8e:33:bf: c4:aa:fd:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM5M0MxMTAvBgNVBAUTKDRCOTQ3NDczMkIxMDAxMjk1RjdGNUQzMkMwMTM2OTNB MTkzNzY4MTMwHhcNMjUxMDE5MDgzODE3WhcNMjUxMDI2MDgzODE3WjAYMRYwFAYD VQQDEw02OGY0YTM3OS03NTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1AxNoYZeQEZmfusOd455vf6SSA9EzwORkKW6nr1Iy9vTXj6conYS9q7ZXsu tvT9PnMvneuGVJcDD5z07WyWa5EWgFVlOJSSd3J0+Bniwx5T/t02LK8QfSTrL85e qFsWRfQu4w9pxqw7JH3gaI/WpehPmp5hbqfaYWdhsMA2UCOFR4G4pm93S16ZpJn3 FJReOQ6/d5J1cjRCg94Txgz9Hbq7b208DDZsEfd+sYALRl2PEMBkU2RTqDMZgQso RF4LGbnok8MvpNRCGJ1j3FTc9wXKw3TmfZ7J853nKdZMQzEm0UEl4QYG5ewNBa5D YdXtbGVVvs4PhlJ+30VerVjSwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/Qn/ub +E1JHXiFeYoOlrqe77edMB8GA1UdIwQYMBaAFEuUdHMrEAEpX39dMsATaToZN2gT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzkzQy82RDA0MzE1RTY0 MEUxMUVGQjU0NDY0NThDNEY5QUUwMi9TNVIwY3lzUUFTbGZmMTB5d0JOcE9oazNh Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M1UjBjeXNRQVNsZmYxMHl3Qk5wT2hrM2FCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzkzQy82RDA0MzE1RTY0MEUxMUVGQjU0NDY0NThDNEY5QUUwMi9TNVIwY3lzUUFT bGZmMTB5d0JOcE9oazNhQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxwfGVcTMiB32UU2kZC7pCt3I4NKzwqH6Ck16qZVMGbaKkjiOIA4Ka oMoV5saVuP7BzMTLWzEVUF0Pn3iCFBpG7vvmJnrb/RLyRZMeOJEO8mplNmEmxvUl YCZUYkB9jJbQAF75ugRWEfBB+Td9rbz5SWL7+fjFsq6l7tiCPdD4YyoLHMCyNprW xX3TZHviVAYw0zCorPv2SYdsO1aVmbXdEloEeXYOwa/wc5ITFd6tZeIGZ20c2+KC XqAzeVgGu4453e7mT/qnVF9VjRqq+l3dqz4M4c2Q5VYnLVzbWzKa4CHNd0S5LHJS Bz4RVwEMIa9PeGa+u2wg7TaOM7/Eqv2u -----END CERTIFICATE-----Generated at Mon Oct 20 23:35:58 2025 by rpki-client