$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json) Hash identifier: iWsroWuALMHIEpCECEP+nlSeOWuR2Xkye9tDGHfjTuc= Subject key identifier: 98:AC:7E:FE:44:7B:12:1C:CF:A0:86:27:81:C7:A2:00:4C:BC:2E:24 Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft Manifest number: 01EE Signing time: Sun 19 Oct 2025 05:07:25 +0000 Manifest this update: Sun 19 Oct 2025 05:07:24 +0000 Manifest next update: Sun 26 Oct 2025 05:07:24 +0000 Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: yUDDHQoKCnseHOBqvcoYev7ZjfGAQUDrmA4QCcU2ffc=) 2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: DR6m9dTiQf0MQdfmKjC6TTSnRd3qda76E3er8flKLDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:07:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Validity Not Before: Oct 19 05:07:24 2025 GMT Not After : Oct 26 05:07:24 2025 GMT Subject: CN=68f4720c-a70d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:8a:6c:59:c0:21:7b:16:5f:72:94:5d:a0: 18:ae:79:44:30:11:df:b8:32:5e:81:4b:4b:98:43: 09:1d:44:c9:26:cd:ae:d2:db:43:56:c2:71:79:1f: 18:82:65:cf:cb:ab:7f:d7:d9:5f:b5:8b:e9:c4:40: df:49:e5:65:46:a3:3f:b0:ac:eb:cc:e3:0a:27:0a: 27:45:62:9a:ba:5f:49:e6:64:52:89:66:f8:00:77: b4:64:bb:1e:33:40:88:43:d2:f8:8e:27:cf:67:ce: 19:ad:57:67:b3:3c:23:31:e4:51:90:a9:c4:71:e2: f1:5d:69:34:e2:b6:aa:50:5e:d8:91:e4:c3:fe:4d: e6:bc:87:b0:75:34:a3:22:42:53:7e:0e:81:ad:f0: 70:93:11:04:cd:f5:37:7b:3a:2c:57:4e:64:bd:92: 51:c1:ef:85:dd:f1:09:25:90:97:e1:89:31:25:d5: 8a:30:36:0e:46:f5:3f:e3:d3:24:f3:46:f1:99:f9: dc:73:3a:b7:88:db:8a:76:93:cb:1a:cf:1d:26:d3: b9:b8:98:da:18:50:c7:db:5b:ed:33:e5:12:b0:b8: ca:c3:f2:67:d3:c3:aa:7f:df:03:55:29:76:6a:f4: a9:40:c1:42:5c:26:0a:53:f0:bc:1c:05:0a:7c:11: d5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AC:7E:FE:44:7B:12:1C:CF:A0:86:27:81:C7:A2:00:4C:BC:2E:24 X509v3 Authority Key Identifier: keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:1e:15:90:d8:ae:c0:a4:7b:ba:3c:69:e0:99:f1:0b:5c:17: 40:f5:f1:97:ab:e8:eb:3e:d9:d0:f9:62:a3:02:84:37:3a:11: e4:57:9c:e6:ca:32:fb:53:d4:cb:49:d0:57:2d:02:dc:19:e2: f6:3c:76:93:6e:cc:1e:6a:ca:64:4e:3e:16:65:05:26:c0:1b: 28:a0:59:dd:92:09:2c:f7:2a:9a:e6:09:17:2a:97:7b:77:1d: 63:9c:39:e6:4f:54:a3:38:d7:0d:13:82:53:33:f1:a2:eb:4f: 64:eb:a8:d4:97:a2:b4:f4:ca:70:c6:6a:f5:3e:77:d8:f5:a3: cd:fa:a1:a6:9f:38:29:42:3c:76:6a:9d:d9:f3:1d:b7:0f:66: d0:4d:fc:ab:16:ce:a3:f6:ab:04:fd:06:cc:21:b2:b8:46:93: 1e:03:e5:3d:55:c1:28:c5:37:92:a7:44:0c:a8:ff:4a:ca:e2: ae:99:23:73:89:cd:50:e1:86:34:f1:0a:9a:c6:eb:86:ef:f4: e6:be:1b:8c:cc:cf:2c:19:3f:62:bf:e9:f6:10:49:25:e7:b8: 6e:69:de:41:35:ca:3a:bf:66:3b:f8:fd:83:15:2c:7b:90:85: 56:a6:29:82:17:1e:5d:18:3f:1a:52:00:f7:a6:76:f8:50:ad: 3e:89:db:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxMEQxMTAvBgNVBAUTKDcwQzhCREEyREU3ODk1OTUwNTM2NTk0QkFFQkYyNjI5 MEQ5QkEwNjUwHhcNMjUxMDE5MDUwNzI0WhcNMjUxMDI2MDUwNzI0WjAYMRYwFAYD VQQDEw02OGY0NzIwYy1hNzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5uKbFnAIXsWX3KUXaAYrnlEMBHfuDJegUtLmEMJHUTJJs2u0ttDVsJxeR8Y gmXPy6t/19lftYvpxEDfSeVlRqM/sKzrzOMKJwonRWKaul9J5mRSiWb4AHe0ZLse M0CIQ9L4jifPZ84ZrVdnszwjMeRRkKnEceLxXWk04raqUF7YkeTD/k3mvIewdTSj IkJTfg6BrfBwkxEEzfU3ezosV05kvZJRwe+F3fEJJZCX4YkxJdWKMDYORvU/49Mk 80bxmfncczq3iNuKdpPLGs8dJtO5uJjaGFDH21vtM+USsLjKw/Jn08Oqf98DVSl2 avSpQMFCXCYKU/C8HAUKfBHVbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJisfv5E exIcz6CGJ4HHogBMvC4kMB8GA1UdIwQYMBaAFHDIvaLeeJWVBTZZS66/JikNm6Bl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDEwRC85RjcxMjYxNENE QjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxaVUZObGxMcnI4bUtRMmJv R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNaTlvdDU0bFpVRk5sbExycjhtS1EyYm9HVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDEwRC85RjcxMjYxNENEQjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxa VUZObGxMcnI4bUtRMmJvR1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWHhWQ2K7ApHu6PGngmfELXBdA9fGXq+jrPtnQ+WKjAoQ3OhHkV5zm yjL7U9TLSdBXLQLcGeL2PHaTbsweaspkTj4WZQUmwBsooFndkgks9yqa5gkXKpd7 dx1jnDnmT1SjONcNE4JTM/Gi609k66jUl6K09Mpwxmr1PnfY9aPN+qGmnzgpQjx2 ap3Z8x23D2bQTfyrFs6j9qsE/QbMIbK4RpMeA+U9VcEoxTeSp0QMqP9KyuKumSNz ic1Q4YY08QqaxuuG7/TmvhuMzM8sGT9iv+n2EEkl57huad5BNco6v2Y7+P2DFSx7 kIVWpimCFx5dGD8aUgD3pnb4UK0+idtc -----END CERTIFICATE-----Generated at Mon Oct 20 23:12:19 2025 by rpki-client