$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft File: Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json) Hash identifier: P6wAURYFrVA/XSwzeYpVtKoUTIXK7zeoi2geXfad6Dg= Subject key identifier: E8:AE:1C:CC:21:86:F4:16:F1:DE:1D:E1:4E:C3:A3:92:FE:EB:66:6A Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E Certificate serial: 3543 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft Manifest number: 3508 Signing time: Sat 18 Oct 2025 15:29:42 +0000 Manifest this update: Sat 18 Oct 2025 15:29:41 +0000 Manifest next update: Sat 25 Oct 2025 15:29:41 +0000 Files and hashes: 1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: kL23kC3gVRY2QlwqHTncAY7OAJNPqrYTiGNKhLS+pEY=) 2: 137AB7E8556211F08830E141C4F9AE02.roa (hash: jRfrX2bb6VPd+Q5zIvZCFXG797yrGUBGm1ayKszRSOc=) 3: 1DECCD5252E911ED8BAAA80AC4F9AE02.roa (hash: IrJp7iMCwaqaCQTisyHX9ot6P3+bjwvrOPWL8AEixrI=) 4: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: hIudSvFY2AsPTk+bMlzkhMZSMDa/NBtr6ArnMu6ko7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13635 (0x3543) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E Validity Not Before: Oct 18 15:29:41 2025 GMT Not After : Oct 25 15:29:41 2025 GMT Subject: CN=68f3b265-f070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:65:44:a8:7c:cf:7d:47:d0:fa:3d:b1:02:32: d0:20:df:a7:a1:91:27:5e:42:e3:6e:19:77:fa:50: ec:50:f7:6a:36:c7:3f:b5:82:9b:8b:04:d6:6b:04: 3f:cd:2e:4f:b7:f2:24:b0:eb:fa:e6:8c:bb:6b:57: 53:43:bd:4e:e5:1f:94:c8:42:31:43:86:52:6a:50: ec:34:98:4b:89:0b:41:cf:63:99:72:2c:09:9c:e7: 99:1f:cf:2b:84:d9:99:04:c9:8f:c2:7a:6e:cc:50: d6:60:d4:9b:72:57:95:ec:16:a9:54:3c:99:ff:18: 8f:fe:24:44:f5:55:c5:f0:93:1a:39:af:50:fb:fe: aa:ad:26:cd:49:43:9f:a4:ab:52:ff:08:ac:e8:f5: f6:76:1c:a5:20:39:df:cc:db:35:f5:a9:54:e1:39: 41:5a:ca:4e:dd:5b:e6:a5:60:e7:2f:29:e8:72:a6: 8e:91:e3:49:f1:77:41:df:51:c4:8d:c2:45:a8:cf: 4b:a6:24:96:37:ef:13:f2:43:9e:38:a3:da:9c:d9: 76:6c:79:a7:b1:2b:72:0c:4c:10:20:ae:c1:20:55: 2d:e8:4d:b0:35:10:d5:29:b6:1c:da:57:79:8b:60: 8e:a0:df:0e:9e:59:04:9f:fa:1b:1a:9c:9d:0f:ef: 63:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AE:1C:CC:21:86:F4:16:F1:DE:1D:E1:4E:C3:A3:92:FE:EB:66:6A X509v3 Authority Key Identifier: keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:e0:54:cb:07:d5:fa:34:01:3f:81:59:97:82:25:74:d7:14: 5b:dd:c6:47:af:3b:55:98:81:6e:c6:19:8b:0a:69:62:35:6f: 97:c1:4d:69:46:97:b4:15:12:fd:e9:c8:e2:89:9e:cd:0f:35: 89:0f:24:67:bc:a4:3b:e9:a1:69:a2:c9:bc:85:4b:81:81:da: 99:99:bf:3f:07:48:59:da:f1:9d:04:4d:4a:eb:9c:26:1a:4a: 80:cc:db:e4:78:11:95:31:e2:87:37:b1:ab:8e:a8:11:b0:7c: b6:e5:d3:f9:4a:a5:1f:b5:62:7f:3c:3b:61:1c:8f:ba:2d:bf: a7:16:bd:15:08:40:95:2b:2f:a8:13:55:9b:b9:8b:57:fe:f8: 6e:47:dd:75:b5:ce:1b:42:8a:8b:fb:18:44:92:85:94:c7:a4: 3a:5a:e2:5c:12:7b:28:08:48:4a:f8:1b:5a:f2:88:f2:59:a7: 0b:71:73:3a:25:b1:ad:1c:e7:b0:d5:a9:b0:09:07:24:d2:ab: 7d:35:97:cf:25:0d:b7:fb:de:72:37:86:92:ba:34:64:8f:9d: c2:c1:c6:00:b3:4e:82:29:fd:14:fc:3e:71:65:c5:91:6c:52: 40:e7:8f:c1:a1:78:62:7b:7c:61:84:d8:85:53:6b:b9:14:41: d2:b6:56:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGNzYxMTAvBgNVBAUTKDYzRUM0RTYzODBGQUFFQTUxMTA3RTlDNDBDMkYxMDU4 RTA4Rjg1NkUwHhcNMjUxMDE4MTUyOTQxWhcNMjUxMDI1MTUyOTQxWjAYMRYwFAYD VQQDEw02OGYzYjI2NS1mMDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6WVEqHzPfUfQ+j2xAjLQIN+noZEnXkLjbhl3+lDsUPdqNsc/tYKbiwTWawQ/ zS5Pt/IksOv65oy7a1dTQ71O5R+UyEIxQ4ZSalDsNJhLiQtBz2OZciwJnOeZH88r hNmZBMmPwnpuzFDWYNSbcleV7BapVDyZ/xiP/iRE9VXF8JMaOa9Q+/6qrSbNSUOf pKtS/wis6PX2dhylIDnfzNs19alU4TlBWspO3VvmpWDnLynocqaOkeNJ8XdB31HE jcJFqM9LpiSWN+8T8kOeOKPanNl2bHmnsStyDEwQIK7BIFUt6E2wNRDVKbYc2ld5 i2COoN8OnlkEn/obGpydD+9jfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiuHMwh hvQW8d4d4U7Do5L+62ZqMB8GA1UdIwQYMBaAFGPsTmOA+q6lEQfpxAwvEFjgj4Vu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY3Ni85NDRFMzg5MjFE QUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJxVVJCLW5FREM4UVdPQ1Bo VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kteE9ZNEQ2cnFVUkItbkVEQzhRV09DUGhXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkY3Ni85NDRFMzg5MjFEQUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJx VVJCLW5FREM4UVdPQ1BoVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw4FTLB9X6NAE/gVmXgiV01xRb3cZHrztVmIFuxhmLCmliNW+XwU1p Rpe0FRL96cjiiZ7NDzWJDyRnvKQ76aFposm8hUuBgdqZmb8/B0hZ2vGdBE1K65wm GkqAzNvkeBGVMeKHN7GrjqgRsHy25dP5SqUftWJ/PDthHI+6Lb+nFr0VCECVKy+o E1WbuYtX/vhuR911tc4bQoqL+xhEkoWUx6Q6WuJcEnsoCEhK+Bta8ojyWacLcXM6 JbGtHOew1amwCQck0qt9NZfPJQ23+95yN4aSujRkj53CwcYAs06CKf0U/D5xZcWR bFJA54/BoXhie3xhhNiFU2u5FEHStlY0 -----END CERTIFICATE-----Generated at Sun Oct 19 17:31:16 2025 by rpki-client