$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft File: aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json) Hash identifier: vyxUdCYD1ArbaCV5H6B8uwPqskR2JJJ+vB2qSpwQMM8= Subject key identifier: 16:28:B0:80:A4:2B:E4:35:03:F6:DC:36:C5:BB:64:B6:76:2A:AA:F0 Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D Certificate issuer: /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Certificate serial: 34FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft Manifest number: 34DB Signing time: Sat 18 Oct 2025 15:28:32 +0000 Manifest this update: Sat 18 Oct 2025 15:28:31 +0000 Manifest next update: Sat 25 Oct 2025 15:28:31 +0000 Files and hashes: 1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: 9tndfZNR139iC9jzQDK2UG42p1UjTCCzhZ0lqS7EI/0=) 2: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: lhbAPGcQQjVfLeBPPvSfLGakAoAsie+moEAIzx57Z0Y=) 3: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: 1AXC4CdSqCeZreg7Kdx8zTNNLCij2RY2Acpk7gs3UmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13562 (0x34fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D Validity Not Before: Oct 18 15:28:31 2025 GMT Not After : Oct 25 15:28:31 2025 GMT Subject: CN=68f3b220-990c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f6:fa:e7:15:73:26:c2:b6:30:f8:66:77:06: d9:20:80:09:19:9b:82:2d:7d:7e:47:52:ef:13:86: 56:66:4b:bb:d3:2d:e2:3d:21:6f:2a:0b:3a:2d:15: 35:3c:10:41:8b:15:bd:3c:ee:c0:11:2b:22:30:b6: d7:9a:7f:20:de:33:5d:f6:d7:7c:f7:d6:db:5d:54: 87:b1:56:f1:76:d1:e2:15:e5:e5:d0:8b:f5:58:37: 10:a8:c9:a1:64:65:cb:98:8c:06:5d:2d:b9:e2:04: 4e:41:f5:60:b6:bf:b0:27:b4:ec:36:71:25:f2:05: e5:02:f0:ba:95:6a:5d:3e:5b:70:c7:88:7b:ce:83: 8c:ec:5d:bd:1f:5d:f3:d4:2e:76:e7:23:74:c1:d5: 53:27:fe:aa:b7:e1:07:06:37:cc:8a:77:9b:cd:c2: 8e:13:45:d3:05:f7:45:64:69:83:2c:56:74:3e:cf: 85:4c:d0:f3:cb:f1:a7:45:d0:e9:4b:a7:a9:18:e4: 8d:6b:57:4f:3b:dc:bc:ad:95:98:1c:dc:7c:9d:90: d8:e6:c2:cf:79:db:11:a6:e0:19:fe:5a:14:02:e2: a2:ec:b2:26:63:f3:49:c4:bc:8c:11:9b:98:49:ea: f5:ee:7f:24:27:99:6b:02:73:d8:79:24:36:d6:c9: 58:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:28:B0:80:A4:2B:E4:35:03:F6:DC:36:C5:BB:64:B6:76:2A:AA:F0 X509v3 Authority Key Identifier: keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:b0:6f:0a:ef:11:f3:57:19:af:b8:e5:27:ab:27:f7:62:6c: 8e:c3:8d:6b:55:a7:ce:2f:ab:81:6d:61:7f:70:19:7c:19:42: fc:4b:fb:1c:39:25:ae:ba:97:98:64:e3:58:cb:3b:25:cd:08: d2:3a:76:86:fc:a9:4a:39:01:d6:7c:a9:80:c6:e2:32:69:20: 31:c1:fc:b0:a4:b8:c7:d1:3e:a1:87:68:ba:c7:95:ca:32:84: 84:74:41:4a:75:c9:51:aa:04:23:8c:52:74:7e:ec:8b:1a:f2: f3:04:ce:c5:ca:e7:15:0c:36:fd:59:d5:8e:d6:08:2f:f8:23: 77:ca:8f:2b:19:a3:e6:b4:67:33:f6:e8:b1:d0:46:a2:c2:ea: 8a:96:c8:a7:63:bd:d1:27:74:b2:8c:d7:52:49:cf:37:8f:a1: 5c:d4:19:79:68:59:24:eb:cf:88:e3:0d:0c:dd:29:52:fe:34: 5c:99:0e:03:f8:bf:34:d4:9e:b2:6b:42:ee:b4:05:db:0d:82: 57:a6:47:0c:6c:f8:54:59:22:13:64:7a:4f:95:b7:1b:8a:4f: 9f:be:88:6f:b8:39:4b:84:70:3c:c1:a3:98:76:91:96:13:ff: 20:97:17:68:41:e1:d4:0c:91:d6:0c:cd:5f:2f:ac:ce:c6:33: 0b:a0:6e:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMxRkUxMTAvBgNVBAUTKDY5OUEwRjhEMTVBMzRGNTk5NTZDQjQ4MDBDNkM0NDA0 REMwRUJENUQwHhcNMjUxMDE4MTUyODMxWhcNMjUxMDI1MTUyODMxWjAYMRYwFAYD VQQDEw02OGYzYjIyMC05OTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/b65xVzJsK2MPhmdwbZIIAJGZuCLX1+R1LvE4ZWZku70y3iPSFvKgs6LRU1 PBBBixW9PO7AESsiMLbXmn8g3jNd9td899bbXVSHsVbxdtHiFeXl0Iv1WDcQqMmh ZGXLmIwGXS254gROQfVgtr+wJ7TsNnEl8gXlAvC6lWpdPltwx4h7zoOM7F29H13z 1C525yN0wdVTJ/6qt+EHBjfMinebzcKOE0XTBfdFZGmDLFZ0Ps+FTNDzy/GnRdDp S6epGOSNa1dPO9y8rZWYHNx8nZDY5sLPedsRpuAZ/loUAuKi7LImY/NJxLyMEZuY Ser17n8kJ5lrAnPYeSQ21slYOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBYosICk K+Q1A/bcNsW7ZLZ2KqrwMB8GA1UdIwQYMBaAFGmaD40Vo09ZlWy0gAxsRATcDr1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzFGRS9EMTE4QUFCQTFE QUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQxbVZiTFNBREd4RUJOd092 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Fab1BqUldqVDFtVmJMU0FER3hFQk53T3ZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzFGRS9EMTE4QUFCQTFEQUExMUUyQTJFQ0NBQTYwOEIwMkNEMi9hWm9QalJXalQx bVZiTFNBREd4RUJOd092VjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQsG8K7xHzVxmvuOUnqyf3YmyOw41rVafOL6uBbWF/cBl8GUL8S/sc OSWuupeYZONYyzslzQjSOnaG/KlKOQHWfKmAxuIyaSAxwfywpLjH0T6hh2i6x5XK MoSEdEFKdclRqgQjjFJ0fuyLGvLzBM7FyucVDDb9WdWO1ggv+CN3yo8rGaPmtGcz 9uix0EaiwuqKlsinY73RJ3SyjNdSSc83j6Fc1Bl5aFkk68+I4w0M3SlS/jRcmQ4D +L801J6ya0LutAXbDYJXpkcMbPhUWSITZHpPlbcbik+fvohvuDlLhHA8waOYdpGW E/8glxdoQeHUDJHWDM1fL6zOxjMLoG64 -----END CERTIFICATE-----Generated at Mon Oct 20 13:09:22 2025 by rpki-client