$ rpki-client -vvf rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft File: 9fHi3rMlVisihf-LXeJd8srfdwc.mft (raw, json) Hash identifier: tC2r7Xtzu3VzuRcMM0F83LBcdSwRy8sA8qN1CnXRVUE= Subject key identifier: F5:C7:B6:7E:7B:58:38:A8:56:D7:00:88:49:03:6D:AE:51:7C:D1:D2 Authority key identifier: F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07 Certificate issuer: /CN=A915B4B5/serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft Manifest number: 011F Signing time: Sun 19 Oct 2025 07:34:33 +0000 Manifest this update: Sun 19 Oct 2025 07:34:33 +0000 Manifest next update: Sun 26 Oct 2025 07:34:33 +0000 Files and hashes: 1: 9fHi3rMlVisihf-LXeJd8srfdwc.crl (hash: xUaO3jO73kkg/zlQkMHAr9bHovXL0huEmYAreAjIOSM=) 2: E0207030F13611EE869F9E34C4F9AE02.roa (hash: 1cTaBvBAhxFneEeGlAFuRr/tcaFQd3vN8aAkRfuybSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B4B5, serialNumber=F5F1E2DEB325562B2285FF8B5DE25DF2CADF7707 Validity Not Before: Oct 19 07:34:33 2025 GMT Not After : Oct 26 07:34:33 2025 GMT Subject: CN=68f49489-c1b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:41:86:bf:0b:39:b1:12:f9:82:22:9b:03:8d: ad:64:27:c7:6b:5d:fd:6b:df:98:bf:6c:fa:c9:61: 5c:c4:7c:af:85:47:ab:f1:0f:74:a5:cd:3f:29:7e: 62:e5:a5:5c:8c:d3:3b:a9:6e:8f:c8:2b:b1:88:84: 7e:5a:dc:47:1b:3d:92:1a:1f:72:93:b5:11:33:de: e6:20:c8:22:e2:a0:dd:52:4c:b0:4d:70:81:1e:76: ec:7a:26:12:ea:af:de:d8:ca:74:f6:ea:2c:e2:62: ea:de:92:88:40:7d:e6:bb:52:cc:1d:d1:89:ff:b2: 42:ac:59:30:ea:64:2c:b2:52:67:f2:1a:23:8b:f1: da:fe:d9:97:2e:08:2a:e1:c7:0e:83:d6:ad:de:e8: fb:51:91:a2:ca:cd:f0:9d:35:b8:0b:5c:28:0a:94: 04:1c:2a:2d:d3:3b:da:66:81:93:cb:87:2e:64:ea: 6c:b8:89:84:e4:a5:26:49:9c:04:5b:97:0c:9c:fc: 39:e1:ba:b6:f7:2a:72:d5:23:07:14:ee:e7:20:29: fe:8f:1b:06:27:5b:73:24:d8:12:bf:26:df:9a:bd: 6b:d6:b7:07:b2:e0:99:3c:20:de:9a:2f:a6:b4:ee: 7b:8f:1a:c6:97:e2:a2:d6:be:a8:73:5c:2a:df:f3: 5b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C7:B6:7E:7B:58:38:A8:56:D7:00:88:49:03:6D:AE:51:7C:D1:D2 X509v3 Authority Key Identifier: keyid:F5:F1:E2:DE:B3:25:56:2B:22:85:FF:8B:5D:E2:5D:F2:CA:DF:77:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fHi3rMlVisihf-LXeJd8srfdwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B4B5/40CE9F2AF13611EE908BF032C4F9AE02/9fHi3rMlVisihf-LXeJd8srfdwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:89:de:43:8e:ea:86:6c:40:14:fb:83:3b:eb:d3:4f:e8:68: 27:62:5c:fe:a1:58:a3:ff:05:18:78:85:4f:cb:80:f0:8a:b1: 39:ed:ca:d2:eb:c2:15:d1:6e:f2:36:13:cc:76:50:1a:86:72: 5f:05:5f:7d:c2:97:f9:17:7c:24:fe:5d:db:02:83:ff:13:bf: 40:50:da:bf:e6:c9:71:2b:6f:25:f7:88:9a:5b:91:54:27:ad: dc:40:c7:c7:d3:f6:57:93:7d:57:94:9c:4b:b7:59:1b:81:d2: 39:cc:66:b3:04:88:72:a0:20:81:28:a3:0b:8f:84:6f:b6:b2: 0f:48:cd:ee:97:61:37:df:1e:02:87:78:05:f3:6f:27:eb:3a: fb:e2:47:ed:bb:7a:7c:b8:c6:1e:3f:1c:61:54:cd:fb:79:ad: 44:4b:eb:09:cd:25:a6:5b:cb:00:3a:06:82:39:6b:5b:5b:d3: 13:fa:e7:d0:19:04:64:89:81:47:d4:ea:26:1d:81:a1:12:eb: 8a:a0:98:48:53:b1:0b:4e:f7:7f:f3:af:bb:cf:bc:0b:61:1d: b1:a1:eb:16:55:cc:f9:a2:1d:ab:a6:0c:1e:ce:4c:45:8a:e6: ce:79:72:27:92:8c:83:be:9b:be:eb:b1:2b:cf:06:3a:27:55: 4a:26:b1:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI0QjUxMTAvBgNVBAUTKEY1RjFFMkRFQjMyNTU2MkIyMjg1RkY4QjVERTI1REYy Q0FERjc3MDcwHhcNMjUxMDE5MDczNDMzWhcNMjUxMDI2MDczNDMzWjAYMRYwFAYD VQQDEw02OGY0OTQ4OS1jMWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkGGvws5sRL5giKbA42tZCfHa139a9+Yv2z6yWFcxHyvhUer8Q90pc0/KX5i 5aVcjNM7qW6PyCuxiIR+WtxHGz2SGh9yk7URM97mIMgi4qDdUkywTXCBHnbseiYS 6q/e2Mp09uos4mLq3pKIQH3mu1LMHdGJ/7JCrFkw6mQsslJn8hoji/Ha/tmXLggq 4ccOg9at3uj7UZGiys3wnTW4C1woCpQEHCot0zvaZoGTy4cuZOpsuImE5KUmSZwE W5cMnPw54bq29ypy1SMHFO7nICn+jxsGJ1tzJNgSvybfmr1r1rcHsuCZPCDemi+m tO57jxrGl+Ki1r6oc1wq3/Nb5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPXHtn57 WDioVtcAiEkDba5RfNHSMB8GA1UdIwQYMBaAFPXx4t6zJVYrIoX/i13iXfLK33cH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjRCNS80MENFOUYyQUYx MzYxMUVFOTA4QkYwMzJDNEY5QUUwMi85ZkhpM3JNbFZpc2loZi1MWGVKZDhzcmZk d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlmSGkzck1sVmlzaWhmLUxYZUpkOHNyZmR3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjRCNS80MENFOUYyQUYxMzYxMUVFOTA4QkYwMzJDNEY5QUUwMi85ZkhpM3JNbFZp c2loZi1MWGVKZDhzcmZkd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxid5DjuqGbEAU+4M769NP6GgnYlz+oVij/wUYeIVPy4DwirE57crS 68IV0W7yNhPMdlAahnJfBV99wpf5F3wk/l3bAoP/E79AUNq/5slxK28l94iaW5FU J63cQMfH0/ZXk31XlJxLt1kbgdI5zGazBIhyoCCBKKMLj4RvtrIPSM3ul2E33x4C h3gF828n6zr74kftu3p8uMYePxxhVM37ea1ES+sJzSWmW8sAOgaCOWtbW9MT+ufQ GQRkiYFH1OomHYGhEuuKoJhIU7ELTvd/86+7z7wLYR2xoesWVcz5oh2rpgwezkxF iubOeXInkoyDvpu+67ErzwY6J1VKJrGV -----END CERTIFICATE-----Generated at Mon Oct 20 02:07:29 2025 by rpki-client