$ rpki-client -vvf rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft File: f1QPcIZAQhpialmxa5Q_AzutP_Y.mft (raw, json) Hash identifier: 1EpIX0LHE6/O5a6PFTJrvkQwpE8rcUPVYq/ORfbpDpo= Subject key identifier: 08:AB:0A:98:77:63:9E:EB:52:E7:6D:21:28:AF:C0:0D:D1:B2:CB:03 Authority key identifier: 7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 Certificate issuer: /CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Certificate serial: 0CA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft Manifest number: 0C9A Signing time: Sat 18 Oct 2025 18:59:56 +0000 Manifest this update: Sat 18 Oct 2025 18:59:55 +0000 Manifest next update: Sat 25 Oct 2025 18:59:55 +0000 Files and hashes: 1: f1QPcIZAQhpialmxa5Q_AzutP_Y.crl (hash: skdC4VSQ3Gw+a+A/fO/0Ic2s5nbgBLDr5fQyFoJ7CmU=) 2: AF905A0C021111EAA331B072C4F9AE02.roa (hash: dvnwAL3zCvdd5S3vny42r47yY+DgJ/q5xqobvjET5x0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3233 (0xca1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B53A, serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Validity Not Before: Oct 18 18:59:55 2025 GMT Not After : Oct 25 18:59:55 2025 GMT Subject: CN=68f3e3ac-9baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bc:d6:56:a4:67:2e:73:02:c5:e5:1f:0f:c5: 36:ee:fd:da:70:08:15:9a:1d:28:09:16:73:7f:af: 88:fa:15:f6:c7:82:87:5e:8d:25:38:91:85:7e:25: 49:f5:75:db:13:8b:ae:bc:f3:a1:9b:86:91:bc:a1: 21:d0:99:f5:7f:8e:8f:f7:19:3a:bc:81:21:bc:98: 93:3b:15:f0:50:19:ce:78:b9:1c:00:17:59:89:ba: 52:05:87:f0:51:59:d2:a3:31:06:c0:e4:9d:ca:9c: 0b:34:94:14:59:4e:cb:28:83:6a:4f:92:77:cf:7b: 8b:10:7a:da:b4:1c:58:fb:6e:10:69:e7:e8:d6:5d: 8d:6b:01:70:cf:8b:f5:26:c3:5f:d7:bd:78:d8:34: 76:31:ad:bf:f3:1f:11:a8:d0:cd:5c:0b:63:94:cc: 27:1c:94:34:d5:52:52:95:ac:bd:bb:a6:49:48:73: e3:03:39:b8:73:fd:a5:84:41:84:a3:fe:62:cc:f1: eb:87:26:b7:99:4d:89:31:e3:ea:89:ab:95:fc:67: 50:42:3f:43:6d:a9:c5:24:9a:37:b7:77:79:c5:91: e4:87:3d:b5:16:f5:e9:9e:36:6c:42:7f:18:3a:fc: 80:a3:22:20:e0:8e:94:1f:41:d6:03:e1:6e:a9:2e: ff:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AB:0A:98:77:63:9E:EB:52:E7:6D:21:28:AF:C0:0D:D1:B2:CB:03 X509v3 Authority Key Identifier: keyid:7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:59:3a:3a:c0:ef:ba:bb:62:ce:5b:2c:a4:79:fd:f2:1e:ee: a1:23:d5:82:69:5e:47:02:11:fa:63:01:43:69:a4:95:a8:23: 0d:ea:eb:79:60:96:13:81:38:00:70:ba:91:4b:c9:b2:98:be: 56:82:c0:a2:2d:a4:3d:aa:88:82:48:97:da:8f:9b:f0:b7:1d: 83:95:fd:2c:bc:9d:9e:2b:84:3e:c6:92:ce:7f:fd:7d:c6:30: 51:97:01:af:eb:90:1d:34:24:67:e4:0b:91:4d:2f:e3:9c:4c: ae:2f:dc:69:b5:39:55:b9:4d:48:bf:02:48:07:2b:fe:d6:b5: 5d:34:60:71:21:78:17:ed:7b:3a:da:f7:ed:d8:75:af:f4:49: 42:eb:f4:7b:79:61:40:6d:56:1b:3d:c3:0d:a7:e5:dd:09:bf: cb:42:04:79:05:3c:36:06:b9:0d:12:f2:b2:ee:fe:57:39:d5: cf:54:bc:43:98:cd:ec:32:ca:2d:71:db:d8:ab:f7:13:63:77: ba:0e:c2:3b:02:bd:cd:8b:c1:14:68:1e:c9:e7:88:10:96:b8: 1d:6c:8f:c4:fa:04:cf:1a:54:17:fa:6d:52:95:c3:3c:eb:ca: 12:f2:ba:47:1a:35:eb:28:43:d5:9b:6f:ea:07:d0:4f:37:71: 8c:2f:29:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1M0ExMTAvBgNVBAUTKDdGNTQwRjcwODY0MDQyMUE2MjZBNTlCMTZCOTQzRjAz M0JBRDNGRjYwHhcNMjUxMDE4MTg1OTU1WhcNMjUxMDI1MTg1OTU1WjAYMRYwFAYD VQQDEw02OGYzZTNhYy05YmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27zWVqRnLnMCxeUfD8U27v3acAgVmh0oCRZzf6+I+hX2x4KHXo0lOJGFfiVJ 9XXbE4uuvPOhm4aRvKEh0Jn1f46P9xk6vIEhvJiTOxXwUBnOeLkcABdZibpSBYfw UVnSozEGwOSdypwLNJQUWU7LKINqT5J3z3uLEHratBxY+24Qaefo1l2NawFwz4v1 JsNf17142DR2Ma2/8x8RqNDNXAtjlMwnHJQ01VJSlay9u6ZJSHPjAzm4c/2lhEGE o/5izPHrhya3mU2JMePqiauV/GdQQj9DbanFJJo3t3d5xZHkhz21FvXpnjZsQn8Y OvyAoyIg4I6UH0HWA+FuqS7/1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAirCph3 Y57rUudtISivwA3RsssDMB8GA1UdIwQYMBaAFH9UD3CGQEIaYmpZsWuUPwM7rT/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzQS8yQ0Q2QjM4QzAy MTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFocGlhbG14YTVRX0F6dXRQ X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YxUVBjSVpBUWhwaWFsbXhhNVFfQXp1dFBfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzQS8yQ0Q2QjM4QzAyMTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFo cGlhbG14YTVRX0F6dXRQX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqWTo6wO+6u2LOWyykef3yHu6hI9WCaV5HAhH6YwFDaaSVqCMN6ut5 YJYTgTgAcLqRS8mymL5WgsCiLaQ9qoiCSJfaj5vwtx2Dlf0svJ2eK4Q+xpLOf/19 xjBRlwGv65AdNCRn5AuRTS/jnEyuL9xptTlVuU1IvwJIByv+1rVdNGBxIXgX7Xs6 2vft2HWv9ElC6/R7eWFAbVYbPcMNp+XdCb/LQgR5BTw2BrkNEvKy7v5XOdXPVLxD mM3sMsotcdvYq/cTY3e6DsI7Ar3Ni8EUaB7J54gQlrgdbI/E+gTPGlQX+m1SlcM8 68oS8rpHGjXrKEPVm2/qB9BPN3GMLymN -----END CERTIFICATE-----Generated at Mon Oct 20 09:35:06 2025 by rpki-client