$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft File: PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft (raw, json) Hash identifier: +Okc9bzbaS+KNMEmwygb9YlKc/FZIWGLv+FieJsN1UA= Subject key identifier: 4A:73:77:86:48:AC:45:D1:0C:B5:7F:68:20:27:E0:AC:51:AB:58:01 Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 Certificate issuer: /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Certificate serial: 0E86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft Manifest number: 0E7D Signing time: Sat 18 Oct 2025 18:21:18 +0000 Manifest this update: Sat 18 Oct 2025 18:21:17 +0000 Manifest next update: Sat 25 Oct 2025 18:21:17 +0000 Files and hashes: 1: PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl (hash: iZd+Z4sdp1i9jedXScimpU/YLu0a9xaOgBWPTPsNy00=) 2: 0853C13CA2F011E9B721795CC4F9AE02.roa (hash: F23CXCLEdHEHx/0prljjzO2nfGEWKXpGSMmp6uriDiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3718 (0xe86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B880, serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Validity Not Before: Oct 18 18:21:17 2025 GMT Not After : Oct 25 18:21:17 2025 GMT Subject: CN=68f3da9e-7bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f4:ae:db:8e:23:e6:a3:ef:e2:4a:d2:77:94: 42:5a:dd:c7:21:0c:0d:a3:6a:0d:74:ee:6b:93:da: f2:98:46:45:4e:36:de:59:f8:99:67:76:33:d3:74: 0b:d6:d4:47:e0:fa:8c:5d:b5:fb:c1:47:fd:92:4f: 1a:59:a3:b0:6b:fd:40:79:fe:de:c2:5f:b2:cc:e8: 19:ba:73:e4:c6:bc:6b:4e:25:51:fb:a1:1c:bb:58: e1:f5:cb:ec:de:60:80:07:67:8b:86:54:dd:47:38: 26:e1:34:c2:36:42:4c:03:d2:de:8e:32:b5:ca:a9: 95:31:5e:89:3e:80:d6:69:b8:42:93:11:11:cf:3d: 75:33:83:a7:27:b0:c1:83:b8:08:00:f8:3d:65:7c: 5b:92:6c:e3:d0:5d:65:69:14:7c:20:ce:c0:f5:b8: 17:4e:5c:21:4d:bc:e0:26:9c:a6:39:79:6a:38:6d: 5f:13:2e:2e:5e:78:f1:31:0e:93:6e:9e:4a:35:5f: 84:3c:9d:96:04:56:73:e6:0f:84:b8:68:37:50:0b: 52:4c:82:c6:0b:43:3e:bf:66:4e:cb:67:06:c0:8d: 9e:2c:01:c9:b6:9e:47:cd:b8:35:b7:1e:36:b0:38: 49:23:a2:a1:63:9f:0e:7e:f3:8b:79:6d:33:c8:e9: 73:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:73:77:86:48:AC:45:D1:0C:B5:7F:68:20:27:E0:AC:51:AB:58:01 X509v3 Authority Key Identifier: keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:92:c1:ed:e2:e3:01:97:67:55:0a:ba:e7:c7:ef:2c:bf:5a: 96:fd:7f:7b:5a:3a:4a:fd:99:9e:8c:78:f8:d4:52:6b:f9:c8: ae:ab:53:2e:3b:39:0e:f0:5b:f6:60:7c:ff:06:1f:c7:b2:e2: 58:b0:cd:15:a3:b2:80:6b:4f:f1:55:73:88:08:79:97:c1:96: 4b:a4:88:6f:db:69:39:4b:ab:6b:6b:32:c2:c3:1c:ab:0e:a6: 18:09:5f:63:a9:7c:24:1b:c4:39:3e:73:27:19:a9:2f:1c:c3: 51:b7:c3:ad:62:e1:d1:81:ff:2b:96:7c:73:fa:02:f4:1f:b3: 9b:ce:ae:54:df:59:a7:ac:8e:c8:53:74:94:35:d0:0a:7d:95: 9c:02:8c:aa:f7:d5:e5:6c:58:72:34:53:6a:09:e1:a1:f9:b3: 89:90:17:e1:3c:7d:71:4c:c1:b4:cd:f3:b5:a3:f4:26:94:20: c8:79:b6:c4:c2:e3:cd:db:9f:b5:0e:d6:f7:31:15:55:d7:ba: 64:88:04:8f:9b:94:54:c5:dd:fd:e9:26:7f:81:79:15:06:ca: 75:ab:dc:87:c4:f4:73:29:21:86:98:19:5d:49:b0:3d:29:98: d9:92:e4:75:34:13:da:8b:91:f7:73:99:e1:ce:f3:8c:d0:41: ef:6b:fd:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4ODAxMTAvBgNVBAUTKDNEN0E0RTBBOTlBRjE1RUYwQjM3OTBEMEU3OTYxRTg4 NzUyODE5ODMwHhcNMjUxMDE4MTgyMTE3WhcNMjUxMDI1MTgyMTE3WjAYMRYwFAYD VQQDEw02OGYzZGE5ZS03YmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/Su244j5qPv4krSd5RCWt3HIQwNo2oNdO5rk9rymEZFTjbeWfiZZ3Yz03QL 1tRH4PqMXbX7wUf9kk8aWaOwa/1Aef7ewl+yzOgZunPkxrxrTiVR+6Ecu1jh9cvs 3mCAB2eLhlTdRzgm4TTCNkJMA9LejjK1yqmVMV6JPoDWabhCkxERzz11M4OnJ7DB g7gIAPg9ZXxbkmzj0F1laRR8IM7A9bgXTlwhTbzgJpymOXlqOG1fEy4uXnjxMQ6T bp5KNV+EPJ2WBFZz5g+EuGg3UAtSTILGC0M+v2ZOy2cGwI2eLAHJtp5Hzbg1tx42 sDhJI6KhY58OfvOLeW0zyOlzuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpzd4ZI rEXRDLV/aCAn4KxRq1gBMB8GA1UdIwQYMBaAFD16TgqZrxXvCzeQ0OeWHoh1KBmD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg4MC8xRjUxMThBNEEy RUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZlOExONURRNTVZZWlIVW9H WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYcE9DcG12RmU4TE41RFE1NVllaUhVb0dZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjg4MC8xRjUxMThBNEEyRUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZl OExONURRNTVZZWlIVW9HWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7ksHt4uMBl2dVCrrnx+8sv1qW/X97WjpK/ZmejHj41FJr+ciuq1Mu OzkO8Fv2YHz/Bh/HsuJYsM0Vo7KAa0/xVXOICHmXwZZLpIhv22k5S6trazLCwxyr DqYYCV9jqXwkG8Q5PnMnGakvHMNRt8OtYuHRgf8rlnxz+gL0H7Obzq5U31mnrI7I U3SUNdAKfZWcAoyq99XlbFhyNFNqCeGh+bOJkBfhPH1xTMG0zfO1o/QmlCDIebbE wuPN25+1Dtb3MRVV17pkiASPm5RUxd396SZ/gXkVBsp1q9yHxPRzKSGGmBldSbA9 KZjZkuR1NBPai5H3c5nhzvOM0EHva/0m -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:33 2025 by rpki-client