$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft File: r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json) Hash identifier: TaMkpUI4Zo8C0jb6tgi8PZsS0e/UCKtRUcTAqAnWfwE= Subject key identifier: EF:44:2B:A4:5D:37:DF:4E:25:FB:0E:87:82:C9:57:54:05:CF:B7:A0 Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1EF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft Manifest number: 1E91 Signing time: Sun 19 Oct 2025 08:30:32 +0000 Manifest this update: Sun 19 Oct 2025 08:30:32 +0000 Manifest next update: Sun 26 Oct 2025 08:30:32 +0000 Files and hashes: 1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: QCjKawLMGFqKs6DrhHzefV2qOr9HJksNj76qSD6igyM=) 2: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: WKYh+NxnsT3X7rLjv5qUGFM6/m1tIHkeIZefmgprnPs=) 3: D80B013A172011EEB3A9C124C4F9AE02.roa (hash: i+bH68t7yKzy0Rw6D9wkVEOs5mv50GBBoWxW4vThyQY=) 4: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: Hy5wV1LNqpxbM5ijt7NUzM7tVBcEJ4OJJPk557Hpy8c=) 5: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: 7XnoI3SWGKSLq9zz7HLNS32aw+KK++smhLaAOQ+1lDo=) 6: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: T6jmHSx80+1QapW6ywMYadpctCcOQDce4QIxekTXdlo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7923 (0x1ef3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Validity Not Before: Oct 19 08:30:32 2025 GMT Not After : Oct 26 08:30:32 2025 GMT Subject: CN=68f4a1a8-41f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ff:a6:88:21:c9:c8:e2:ea:ad:27:4f:50:4b: 4c:52:84:0d:7b:ab:c9:83:f6:e3:61:26:b2:2f:4d: 94:60:b7:ea:bf:5e:ae:65:56:2a:85:e8:d2:7a:09: 5f:1d:4a:9c:e8:fc:48:13:26:44:4d:b7:4c:87:7e: 71:ef:a7:7b:fe:21:9e:d2:ef:38:73:fb:5b:eb:0d: 6a:8e:9d:2a:9f:34:c6:02:7c:b9:59:cf:d3:e9:8e: 49:80:46:11:ac:22:fc:01:37:ac:a2:9c:cb:9d:d3: b8:61:2b:9b:43:ca:c0:46:0c:e8:f0:34:9b:84:ea: a7:3f:7c:63:e4:03:35:e9:bd:63:f7:80:cb:11:8f: d8:95:b3:05:18:68:9b:04:4e:05:d0:48:f9:e1:a2: ae:33:a6:ce:b2:2a:e1:42:eb:38:fa:2f:d7:da:1f: 79:f0:c8:89:34:34:45:b5:fa:6f:dd:fc:31:d5:68: d8:75:cc:e5:fd:e7:e2:ee:1e:5f:0b:bb:4d:e5:7a: 3e:3f:9e:ea:52:92:60:b8:12:da:b2:46:6e:63:9c: 9c:ee:dd:b0:85:62:a1:ac:1a:36:18:8d:1f:65:0a: 27:05:35:fd:0c:07:eb:dd:90:26:d0:80:3c:26:8b: fd:99:ac:c3:4b:7f:df:ff:cf:4d:28:4e:69:5f:e1: a9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:44:2B:A4:5D:37:DF:4E:25:FB:0E:87:82:C9:57:54:05:CF:B7:A0 X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:b0:4a:2e:9c:27:fa:ce:6f:01:ae:00:d1:c2:dc:fb:c4:95: e0:49:f7:a1:b6:ec:94:69:2c:07:00:7a:ee:de:12:54:3d:a8: 0b:0e:07:12:fb:19:0a:40:22:d0:bd:b2:02:a3:c6:f4:db:32: ae:f0:7f:2d:3b:43:ce:93:2a:df:5c:e0:84:15:2c:94:bc:99: 6c:4a:47:a0:70:b4:63:08:51:2f:75:1c:33:51:3e:22:cd:34: ae:72:9b:ee:bc:ba:11:a8:d7:d9:67:8e:5e:44:a1:53:9a:5c: 7c:fa:37:3f:8a:f0:ea:87:6b:4a:78:95:e2:7d:5a:fc:99:6d: 15:3d:5f:7e:1e:44:b8:d5:91:d3:06:6d:e8:16:5b:d0:fc:de: d4:20:67:44:41:bb:00:e3:6f:27:d9:d3:82:00:65:17:1b:8d: d1:43:46:39:f9:97:14:e9:97:00:fc:64:56:5d:70:b3:e1:b7: 49:75:84:92:2c:c0:9f:d2:01:0f:31:55:ea:7a:e6:2f:a9:27: 83:c9:6f:c0:30:1c:1a:c7:d8:6b:76:5a:e6:2e:a7:2a:14:47: 8a:96:79:dd:cf:7b:06:7c:f4:27:bc:1d:ae:d2:c5:c1:c1:b0: d0:25:4e:b2:55:93:36:02:87:69:cb:98:d1:e1:2a:6f:f3:54: 79:80:e9:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjUxMDE5MDgzMDMyWhcNMjUxMDI2MDgzMDMyWjAYMRYwFAYD VQQDEw02OGY0YTFhOC00MWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2P+miCHJyOLqrSdPUEtMUoQNe6vJg/bjYSayL02UYLfqv16uZVYqhejSeglf HUqc6PxIEyZETbdMh35x76d7/iGe0u84c/tb6w1qjp0qnzTGAny5Wc/T6Y5JgEYR rCL8ATesopzLndO4YSubQ8rARgzo8DSbhOqnP3xj5AM16b1j94DLEY/YlbMFGGib BE4F0Ej54aKuM6bOsirhQus4+i/X2h958MiJNDRFtfpv3fwx1WjYdczl/efi7h5f C7tN5Xo+P57qUpJguBLaskZuY5yc7t2whWKhrBo2GI0fZQonBTX9DAfr3ZAm0IA8 Jov9mazDS3/f/89NKE5pX+GpFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9EK6Rd N99OJfsOh4LJV1QFz7egMB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUU1Ri84Qjc5QjY3ODg4NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpm Z25ZbGRMWGpQSUNEZUhvWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDsEounCf6zm8BrgDRwtz7xJXgSfehtuyUaSwHAHru3hJUPagLDgcS +xkKQCLQvbICo8b02zKu8H8tO0POkyrfXOCEFSyUvJlsSkegcLRjCFEvdRwzUT4i zTSucpvuvLoRqNfZZ45eRKFTmlx8+jc/ivDqh2tKeJXifVr8mW0VPV9+HkS41ZHT Bm3oFlvQ/N7UIGdEQbsA428n2dOCAGUXG43RQ0Y5+ZcU6ZcA/GRWXXCz4bdJdYSS LMCf0gEPMVXqeuYvqSeDyW/AMBwax9hrdlrmLqcqFEeKlnndz3sGfPQnvB2u0sXB wbDQJU6yVZM2Aodpy5jR4Spv81R5gOlN -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:41 2025 by rpki-client