$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft File: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft (raw, json) Hash identifier: NaKC6gqDtADv1Lzul6Cy9NXR+56A6zvDwM0zA5OTglQ= Subject key identifier: A8:28:F1:A8:62:28:08:A8:68:69:A8:AE:DE:70:28:D4:8B:E3:FA:D1 Authority key identifier: F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65 Certificate issuer: /CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865 Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft Manifest number: 01B7 Signing time: Sun 19 Oct 2025 05:38:22 +0000 Manifest this update: Sun 19 Oct 2025 05:38:21 +0000 Manifest next update: Sun 26 Oct 2025 05:38:21 +0000 Files and hashes: 1: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl (hash: Zwoy6hnzlmJTxmXTRt/gpl70xG+kQuTJJDDnCMXCdR8=) 2: 5F52F24EBD2811EE9459FF47C4F9AE02.roa (hash: 9NHfjKZ92JKgdcrA4N9M5ns+wKMTAc0NwSsWt7LXuOk=) 3: DD2A5994182F11EE82A0FC48C4F9AE02.roa (hash: Nc2DNs1eibu6K2aHjIt+L2SkvNewi7SdNMt96VyUl+w=) 4: B9CCF2D4BD2711EE9958E946C4F9AE02.roa (hash: Tr1GoB0OJ0WV/koJHwH589Dyk++1e8UfDHIpzpMoMFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865 Validity Not Before: Oct 19 05:38:21 2025 GMT Not After : Oct 26 05:38:21 2025 GMT Subject: CN=68f4794e-5db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dd:d9:da:ff:14:6d:6b:34:eb:b5:99:2a:19: f4:61:fb:52:9c:c9:10:8f:c5:9d:ee:d9:98:41:c7: 0a:3e:81:29:d2:44:b2:5a:68:47:f5:87:fb:09:99: c1:de:7d:e3:1d:af:ef:30:d7:0d:2d:af:be:a1:bd: 26:68:23:3c:d1:e4:1e:c4:41:76:7a:6e:9b:d1:9c: 05:80:ad:b2:50:d8:b7:e2:5d:ed:b6:82:60:26:f7: d3:aa:c0:7e:55:63:79:c9:0f:5d:e0:99:eb:c5:52: 54:1d:32:3f:2c:90:82:2c:d4:88:bc:25:cd:0e:fe: 13:1f:3e:27:3b:a2:2f:1d:60:13:d7:a2:16:81:46: c3:b7:9a:ca:aa:af:cd:04:ee:79:d9:e3:b3:5c:73: 78:00:fb:41:60:f3:06:03:ee:d1:33:f3:0b:5b:b7: 5a:d0:4c:53:46:44:7c:6f:20:60:3e:b6:40:6b:8e: 58:61:03:76:34:b6:e0:7e:50:a5:95:1e:6d:c6:31: df:ac:ed:6c:e9:d7:50:6b:48:88:c7:28:e3:bf:12: e5:86:39:2d:c2:77:23:f3:4a:a8:f4:35:c0:b5:92: b7:39:f9:be:b5:a4:6b:37:e0:4c:db:5a:5d:78:ec: 7f:1d:b6:66:6e:8c:36:dc:ea:1a:2b:ae:23:99:08: d2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:28:F1:A8:62:28:08:A8:68:69:A8:AE:DE:70:28:D4:8B:E3:FA:D1 X509v3 Authority Key Identifier: keyid:F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ef:5a:a1:b6:2c:0b:d0:2d:25:8b:60:e3:fa:cd:e1:21:30:9e: 5b:f8:9d:f5:8f:61:60:b3:3d:be:08:6e:19:68:98:9b:79:32: d8:e6:60:5a:f4:d7:24:c7:af:6f:bf:14:47:ef:b6:98:41:88: 44:33:6f:d2:6b:8d:45:67:21:75:6e:80:15:02:3c:73:1e:b9: 4e:7b:b2:d9:5a:7f:e8:e6:1e:07:b8:1a:64:bb:35:ff:46:8f: 57:33:5b:bc:65:91:89:ab:81:a7:d5:8d:3c:a5:42:65:bc:9b: 62:66:b0:71:aa:3b:49:b3:d0:48:d0:c4:de:88:31:5a:76:37: ba:a4:0b:c6:b5:95:07:be:1c:67:da:02:17:30:eb:5b:8b:87: 13:da:4d:35:aa:af:17:ca:94:d5:3b:ce:41:7b:d9:fc:74:80: e8:72:3d:dc:60:b8:0a:ac:c6:c1:bc:fd:a4:42:01:ad:12:e5: ce:db:da:09:fd:5f:ed:7a:f0:6d:b6:47:93:9d:db:4f:cf:14: e9:00:da:3a:c4:29:34:60:28:66:90:fa:a7:f3:4e:83:db:62: 4e:ea:10:f7:16:87:e7:6d:97:a7:ba:8d:e2:85:4e:fa:2d:7a: 81:11:93:a0:91:b7:42:be:70:94:ca:85:f1:95:be:36:75:c3: c3:5f:92:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKEY3QUVENTg3NTExMkNDRkIyMDhFNzE4MjQ3QjFFNDlC QUFGRkI4NjUwHhcNMjUxMDE5MDUzODIxWhcNMjUxMDI2MDUzODIxWjAYMRYwFAYD VQQDEw02OGY0Nzk0ZS01ZGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvd3Z2v8UbWs067WZKhn0YftSnMkQj8Wd7tmYQccKPoEp0kSyWmhH9Yf7CZnB 3n3jHa/vMNcNLa++ob0maCM80eQexEF2em6b0ZwFgK2yUNi34l3ttoJgJvfTqsB+ VWN5yQ9d4JnrxVJUHTI/LJCCLNSIvCXNDv4THz4nO6IvHWAT16IWgUbDt5rKqq/N BO552eOzXHN4APtBYPMGA+7RM/MLW7da0ExTRkR8byBgPrZAa45YYQN2NLbgflCl lR5txjHfrO1s6ddQa0iIxyjjvxLlhjktwncj80qo9DXAtZK3Ofm+taRrN+BM21pd eOx/HbZmbow23OoaK64jmQjSlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgo8ahi KAioaGmort5wKNSL4/rRMB8GA1UdIwQYMBaAFPeu1YdREsz7II5xgkex5Juq/7hl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy9BMjlBQTJEODE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQc2dqbkdDUjdIa202cl91 R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk2N1ZoMUVTelBzZ2puR0NSN0hrbTZyX3VHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy9BMjlBQTJEODE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQ c2dqbkdDUjdIa202cl91R1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDvWqG2LAvQLSWLYOP6zeEhMJ5b+J31j2Fgsz2+CG4ZaJibeTLY5mBa 9Nckx69vvxRH77aYQYhEM2/Sa41FZyF1boAVAjxzHrlOe7LZWn/o5h4HuBpkuzX/ Ro9XM1u8ZZGJq4Gn1Y08pUJlvJtiZrBxqjtJs9BI0MTeiDFadje6pAvGtZUHvhxn 2gIXMOtbi4cT2k01qq8XypTVO85Be9n8dIDocj3cYLgKrMbBvP2kQgGtEuXO29oJ /V/tevBttkeTndtPzxTpANo6xCk0YChmkPqn806D22JO6hD3FofnbZenuo3ihU76 LXqBEZOgkbdCvnCUyoXxlb42dcPDX5LY -----END CERTIFICATE-----Generated at Tue Oct 21 02:11:24 2025 by rpki-client