$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft File: M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json) Hash identifier: TRlP7Wu96KJL05T8OqtUaMsv8KgORy3Z5usJLI4G6Vc= Subject key identifier: 1D:52:82:35:A9:D3:31:9C:70:7B:A2:1F:BC:CC:65:83:87:D0:6E:1C Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Certificate serial: 045C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft Manifest number: 0444 Signing time: Sun 19 Oct 2025 02:11:23 +0000 Manifest this update: Sun 19 Oct 2025 02:11:22 +0000 Manifest next update: Sun 26 Oct 2025 02:11:22 +0000 Files and hashes: 1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: HrD+i+CWXoXYbwhkJ7KFMxPLc+mlHRfRSL8UOjY1Coc=) 2: BC58A5C66DD311F09E550D38C4F9AE02.roa (hash: M67wvRNu5yJc0PmvdrXe9QBiktT/1OOEAW8u7AyC62Q=) 3: BBA03BF86DD311F09E550D38C4F9AE02.roa (hash: zLlFP29fbev002DflF+TA3Qjdh6cZ72DZUDF3K/hrT8=) 4: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: YqwmzbTbjnpJlQJ9+wOnubrOXT3PgUZiurP57f5+HVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1116 (0x45c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Validity Not Before: Oct 19 02:11:22 2025 GMT Not After : Oct 26 02:11:22 2025 GMT Subject: CN=68f448ca-baca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:31:4c:ec:fc:58:39:7f:9c:84:08:ff:4d:e7: ab:27:0e:66:e5:5d:d9:6f:e4:c5:1b:16:0b:70:dc: 31:1e:13:1d:02:10:39:cb:5d:c3:aa:7b:27:70:af: 1f:b0:98:94:60:25:6d:dd:a4:5c:4b:b7:e5:0b:ae: 4f:39:cf:29:6d:6e:ed:8d:2c:e2:d6:09:69:8b:c5: 42:63:94:99:c6:3f:a8:b5:69:ee:27:f0:f0:cf:cc: 00:3f:ab:c1:14:e7:13:c1:2e:41:d4:2b:65:98:d1: c8:00:e0:ee:6a:58:bf:24:d0:af:de:96:ae:84:24: 51:c0:56:2d:c4:63:83:16:82:f3:72:d2:41:73:6c: 64:3a:2a:77:e6:c5:19:52:ac:0b:a8:f9:a1:8e:bf: b1:65:14:f1:61:59:c1:d5:88:c3:b8:8b:d8:28:81: cf:66:d8:32:78:8f:cb:17:9d:13:88:91:96:94:17: 7c:79:0e:6e:68:f7:9a:67:82:b8:bb:ee:f5:39:57: be:70:69:01:72:44:5d:53:78:60:2d:6f:22:3b:7c: c5:ef:78:17:7c:47:22:13:40:d1:a2:0d:8a:58:ea: b9:fd:1a:e6:79:07:ee:ad:ba:71:36:c4:47:01:9b: 68:28:7c:59:6f:af:bb:ba:28:84:4e:29:c3:20:68: 6c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:52:82:35:A9:D3:31:9C:70:7B:A2:1F:BC:CC:65:83:87:D0:6E:1C X509v3 Authority Key Identifier: keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:83:04:60:55:bf:0b:07:c6:2c:06:e8:77:7e:ec:af:fd:84: f4:c7:b3:2b:16:08:e6:94:e4:d1:87:c9:28:cd:b3:a1:5e:04: cc:1f:ea:d3:7b:a6:c9:64:3e:40:9a:45:78:05:85:dc:b0:97: 5f:38:b4:8c:ee:bd:7c:1e:bf:5e:09:9c:ab:86:14:3c:9a:7c: fe:10:cf:4d:bb:34:ad:61:c4:8a:95:52:3b:89:43:3f:20:7a: a2:96:08:23:2e:4b:63:5d:ca:a1:4d:cb:20:3f:8f:d9:b8:8c: b1:02:52:54:3c:95:81:e4:54:78:37:df:8a:9c:2a:6f:f3:c7: e1:51:6b:be:27:81:c7:1e:bc:29:9f:eb:79:5e:5b:61:7f:b9: 66:ad:5e:82:92:a0:b3:e8:d0:a1:4d:88:b1:21:ff:cc:a8:f5: 4f:63:38:9c:81:0e:4b:4e:dc:c8:3a:a3:76:3d:6e:a5:41:47: a8:f4:96:ea:73:55:11:82:bc:59:a7:98:34:86:c9:8a:1f:8e: 17:7c:64:93:48:52:e1:55:36:cd:42:d7:d5:e2:3d:1b:8a:51: 5a:70:df:e8:df:cf:7f:a8:f6:37:7f:a3:5f:9c:94:a9:cb:4e: 1c:4a:34:3a:f1:06:0f:11:32:b2:6b:89:49:ae:ca:99:6a:ce: ab:66:9b:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1NTYxMTAvBgNVBAUTKDMzNzhERUUyQjNBMUE4RDNFRDFBRjRFNDVFMjI1RDAw OTlDRjcwMTEwHhcNMjUxMDE5MDIxMTIyWhcNMjUxMDI2MDIxMTIyWjAYMRYwFAYD VQQDEw02OGY0NDhjYS1iYWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TFM7PxYOX+chAj/TeerJw5m5V3Zb+TFGxYLcNwxHhMdAhA5y13DqnsncK8f sJiUYCVt3aRcS7flC65POc8pbW7tjSzi1glpi8VCY5SZxj+otWnuJ/Dwz8wAP6vB FOcTwS5B1CtlmNHIAODuali/JNCv3pauhCRRwFYtxGODFoLzctJBc2xkOip35sUZ UqwLqPmhjr+xZRTxYVnB1YjDuIvYKIHPZtgyeI/LF50TiJGWlBd8eQ5uaPeaZ4K4 u+71OVe+cGkBckRdU3hgLW8iO3zF73gXfEciE0DRog2KWOq5/RrmeQfurbpxNsRH AZtoKHxZb6+7uiiETinDIGhs0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1SgjWp 0zGccHuiH7zMZYOH0G4cMB8GA1UdIwQYMBaAFDN43uKzoajT7Rr05F4iXQCZz3AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU1Ni8xMDQ1MkFGQTdE QzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFOUHRHdlRrWGlKZEFKblBj QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zamU0ck9ocU5QdEd2VGtYaUpkQUpuUGNCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU1Ni8xMDQ1MkFGQTdEQzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFO UHRHdlRrWGlKZEFKblBjQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCygwRgVb8LB8YsBuh3fuyv/YT0x7MrFgjmlOTRh8kozbOhXgTMH+rT e6bJZD5AmkV4BYXcsJdfOLSM7r18Hr9eCZyrhhQ8mnz+EM9NuzStYcSKlVI7iUM/ IHqilggjLktjXcqhTcsgP4/ZuIyxAlJUPJWB5FR4N9+KnCpv88fhUWu+J4HHHrwp n+t5Xlthf7lmrV6CkqCz6NChTYixIf/MqPVPYzicgQ5LTtzIOqN2PW6lQUeo9Jbq c1URgrxZp5g0hsmKH44XfGSTSFLhVTbNQtfV4j0bilFacN/o389/qPY3f6NfnJSp y04cSjQ68QYPETKya4lJrsqZas6rZpsr -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:41 2025 by rpki-client