$ rpki-client -vvf rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.mft File: nA6EGePLBsHaXiDY90VQWCUP1-0.mft (raw, json) Hash identifier: dg2SgZB077XPV5yhDMR92wHAXLDs1XKmT20iX8oE53g= Subject key identifier: E6:64:0E:B2:7B:B2:0D:7C:93:4E:A4:7D:E1:D8:C7:83:50:F2:23:B1 Authority key identifier: 9C:0E:84:19:E3:CB:06:C1:DA:5E:20:D8:F7:45:50:58:25:0F:D7:ED Certificate issuer: /CN=A915B3AE/serialNumber=9C0E8419E3CB06C1DA5E20D8F7455058250FD7ED Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA6EGePLBsHaXiDY90VQWCUP1-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.mft Manifest number: 0139 Signing time: Sun 19 Oct 2025 07:14:38 +0000 Manifest this update: Sun 19 Oct 2025 07:14:37 +0000 Manifest next update: Sun 26 Oct 2025 07:14:37 +0000 Files and hashes: 1: nA6EGePLBsHaXiDY90VQWCUP1-0.crl (hash: Iy+hitBseS28ro78ckPLrl+OVNcNQTnEhKGixJJEBsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.crl rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA6EGePLBsHaXiDY90VQWCUP1-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B3AE, serialNumber=9C0E8419E3CB06C1DA5E20D8F7455058250FD7ED Validity Not Before: Oct 19 07:14:37 2025 GMT Not After : Oct 26 07:14:37 2025 GMT Subject: CN=68f48fdd-36f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:55:5a:53:56:97:c4:8d:2b:7c:bb:4c:4b:a9: 42:3e:35:d2:fa:5a:5e:ae:f6:15:74:b1:75:cb:9d: 54:d4:1a:c0:1f:dd:ed:cf:99:31:d1:36:1c:7d:73: 96:f8:fe:2d:c8:08:9a:4c:b5:23:05:b5:7f:d2:85: 4f:0a:26:fe:b8:0e:a7:cd:84:31:9b:03:c7:6f:12: d6:d2:b2:c3:44:08:c7:39:9c:52:43:98:6b:e0:8e: 93:0e:52:32:ab:1b:cc:bb:7c:d5:e7:18:5d:28:1c: 26:6d:49:d2:46:ab:02:d6:61:98:25:7e:45:5e:6a: b3:94:31:2a:38:22:ee:30:04:8a:1c:eb:2c:5b:67: 13:4e:ce:c8:d2:12:18:61:94:32:d9:aa:8f:82:99: 90:81:68:ca:da:f3:26:bb:05:b5:ba:5d:09:b6:12: ac:af:70:a8:2c:a3:0b:bf:f5:52:a7:ea:a9:81:c5: e1:b9:49:0b:61:1a:ff:41:8e:9c:01:2e:bf:e7:af: 5a:95:bf:4a:db:51:37:ce:58:09:9d:49:93:d6:61: c8:e3:48:d8:74:65:91:bf:44:05:c2:52:f4:df:87: b1:0c:b5:3d:b6:0b:40:a6:87:a5:41:63:20:a8:8a: 90:3d:72:f8:60:08:98:3f:be:3b:3a:99:1c:de:9d: c4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:64:0E:B2:7B:B2:0D:7C:93:4E:A4:7D:E1:D8:C7:83:50:F2:23:B1 X509v3 Authority Key Identifier: keyid:9C:0E:84:19:E3:CB:06:C1:DA:5E:20:D8:F7:45:50:58:25:0F:D7:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA6EGePLBsHaXiDY90VQWCUP1-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:f4:11:65:df:6e:8a:0b:72:87:af:fb:8d:85:fc:d6:cb:89: 7b:f7:ff:9d:28:b1:44:d3:db:ca:34:99:1b:49:26:e5:f6:4f: a8:1c:ab:49:c6:2b:bb:af:ff:b0:59:fc:29:55:e6:82:64:08: 26:99:78:b0:64:b9:e3:52:7b:fc:a9:a8:02:9a:df:8b:4b:02: f3:22:d9:c1:f8:2c:17:6d:c1:1c:58:a8:32:0e:a1:76:d6:14: 34:16:cb:36:56:28:47:71:fa:2b:1b:e9:19:c4:e9:4b:d9:d7: 0c:6f:40:1b:f5:2b:45:06:b2:be:fd:ae:85:fc:42:7e:57:fc: f4:87:4d:92:40:a6:61:ef:23:2f:f7:22:d6:6b:cb:b9:9d:d4: 72:bf:db:42:59:46:0c:d9:5d:b6:6c:46:52:e5:45:62:b3:7a: 50:e3:c7:cf:78:1e:11:3f:62:b2:c2:aa:a5:a4:7f:5e:02:1b: 43:62:c3:54:c5:77:7c:52:d8:87:20:eb:04:d0:fe:50:7d:2a: 81:80:f2:88:e3:2c:e5:30:18:ae:47:2d:2f:53:0e:c7:7a:70: 54:3f:af:ee:aa:d4:76:5f:81:ed:90:8f:5f:d3:a1:2e:a3:28: 31:1b:ea:0f:20:02:bf:4a:43:1a:7e:0a:d9:5f:25:85:de:10: 76:9b:55:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIzQUUxMTAvBgNVBAUTKDlDMEU4NDE5RTNDQjA2QzFEQTVFMjBEOEY3NDU1MDU4 MjUwRkQ3RUQwHhcNMjUxMDE5MDcxNDM3WhcNMjUxMDI2MDcxNDM3WjAYMRYwFAYD VQQDEw02OGY0OGZkZC0zNmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFVaU1aXxI0rfLtMS6lCPjXS+lpervYVdLF1y51U1BrAH93tz5kx0TYcfXOW +P4tyAiaTLUjBbV/0oVPCib+uA6nzYQxmwPHbxLW0rLDRAjHOZxSQ5hr4I6TDlIy qxvMu3zV5xhdKBwmbUnSRqsC1mGYJX5FXmqzlDEqOCLuMASKHOssW2cTTs7I0hIY YZQy2aqPgpmQgWjK2vMmuwW1ul0JthKsr3CoLKMLv/VSp+qpgcXhuUkLYRr/QY6c AS6/569alb9K21E3zlgJnUmT1mHI40jYdGWRv0QFwlL034exDLU9tgtApoelQWMg qIqQPXL4YAiYP747Opkc3p3ESQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZkDrJ7 sg18k06kfeHYx4NQ8iOxMB8GA1UdIwQYMBaAFJwOhBnjywbB2l4g2PdFUFglD9ft MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjNBRS9DQzAyQTc1NENB OTMxMUVFQTcyNkNDMDlDNEY5QUUwMi9uQTZFR2VQTEJzSGFYaURZOTBWUVdDVVAx LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BNkVHZVBMQnNIYVhpRFk5MFZRV0NVUDEtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjNBRS9DQzAyQTc1NENBOTMxMUVFQTcyNkNDMDlDNEY5QUUwMi9uQTZFR2VQTEJz SGFYaURZOTBWUVdDVVAxLTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR9BFl326KC3KHr/uNhfzWy4l79/+dKLFE09vKNJkbSSbl9k+oHKtJ xiu7r/+wWfwpVeaCZAgmmXiwZLnjUnv8qagCmt+LSwLzItnB+CwXbcEcWKgyDqF2 1hQ0Fss2VihHcforG+kZxOlL2dcMb0Ab9StFBrK+/a6F/EJ+V/z0h02SQKZh7yMv 9yLWa8u5ndRyv9tCWUYM2V22bEZS5UVis3pQ48fPeB4RP2KywqqlpH9eAhtDYsNU xXd8UtiHIOsE0P5QfSqBgPKI4yzlMBiuRy0vUw7HenBUP6/uqtR2X4HtkI9f06Eu oygxG+oPIAK/SkMafgrZXyWF3hB2m1XR -----END CERTIFICATE-----Generated at Mon Oct 20 16:15:27 2025 by rpki-client