$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft File: znNgvRqU6JF702ckM_gh7HgKjSg.mft (raw, json) Hash identifier: XCIJeh4PYSkKEinAxYYcTZJ/xfMCSYSB2i11yHR/N/0= Subject key identifier: A1:83:55:B4:B2:14:DF:29:D0:71:90:31:DC:F7:59:C6:E7:95:23:44 Authority key identifier: CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28 Certificate issuer: /CN=A915E1F9/serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft Manifest number: 15 Signing time: Sun 19 Oct 2025 11:26:55 +0000 Manifest this update: Sun 19 Oct 2025 11:26:54 +0000 Manifest next update: Sun 26 Oct 2025 11:26:54 +0000 Files and hashes: 1: znNgvRqU6JF702ckM_gh7HgKjSg.crl (hash: 2ycRMKKINUFdWpx+a35AbYWdUq5UdFuY1BBEr76cMgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E1F9, serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28 Validity Not Before: Oct 19 11:26:54 2025 GMT Not After : Oct 26 11:26:54 2025 GMT Subject: CN=68f4caff-b6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6d:07:4b:e7:0b:0c:5d:e1:a9:19:49:ad:97: c1:8f:09:f1:22:ce:b9:2f:e5:e2:f3:31:b0:90:33: cd:5d:d2:3b:90:53:c7:7c:5b:f4:74:d1:7e:9c:86: 27:fa:41:63:bf:54:07:54:a0:62:0e:d3:1e:8d:5a: 44:c8:76:43:65:01:4e:ff:62:b8:58:26:bd:1c:b0: ad:ac:b6:9b:f4:68:d6:78:b8:c0:82:1c:5f:39:8a: d5:7e:d5:0a:c0:2a:c2:04:49:fd:40:de:6b:fa:1c: d9:00:ca:34:2b:9a:5d:a3:0c:72:42:53:24:52:a0: 0f:ce:d2:a4:be:b4:6b:f3:b1:f3:79:4b:8e:67:8d: 6e:44:78:56:65:e4:70:2c:f4:f3:a0:ba:fb:52:2b: 2a:8e:57:65:eb:bb:82:e7:76:35:30:44:7d:a4:08: 3e:af:49:60:24:b9:b5:39:22:3e:aa:77:8a:24:ec: 71:24:59:91:78:5b:52:b9:70:d7:14:a7:9b:71:28: 59:45:d2:e0:57:f9:5b:50:88:82:86:90:4b:e5:28: 76:ab:9e:9e:ca:f8:4e:7f:20:5f:e4:62:43:0e:76: d8:5c:21:4c:40:e7:f7:c7:29:a5:e2:af:37:ba:34: 63:52:f6:aa:69:45:b4:a8:b0:2d:29:2a:79:56:6a: 54:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:83:55:B4:B2:14:DF:29:D0:71:90:31:DC:F7:59:C6:E7:95:23:44 X509v3 Authority Key Identifier: keyid:CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d5:ac:77:c4:a8:d9:4f:c2:20:ec:15:6a:16:4a:f3:1d:b2: 1b:91:82:a5:c3:7c:04:31:91:88:61:79:8b:b2:a7:d4:8b:81: c7:32:4c:2e:75:ad:5c:98:a9:2c:a2:f3:51:8a:e5:77:d7:70: 9d:26:32:b9:cd:97:d6:62:df:88:34:a5:7a:91:9a:c7:27:e3: f9:e7:ea:52:01:48:11:be:b1:7d:af:2e:0c:99:fe:67:d6:30: df:40:0c:81:39:be:a3:60:7d:6f:f7:63:fa:52:b5:ea:2f:97: 0a:a6:b0:b9:ed:71:9d:0e:f9:6f:ac:52:c2:78:00:e0:0f:83: cd:17:94:ab:02:87:5f:ab:ab:58:ce:f6:2f:5f:44:6d:e6:36: cc:06:d3:20:8f:6d:68:d2:6d:04:67:64:54:8f:b5:cb:c7:49: 3e:2a:63:6c:70:bb:7e:a5:e9:55:fb:34:6a:9f:07:83:1d:03: 27:b8:43:45:36:5e:7e:fa:52:ca:14:a3:96:d5:52:f3:26:4e: 0c:e7:03:5a:18:a6:78:cc:ca:42:2c:f0:51:b9:8e:8e:f1:10: d9:1e:d7:50:29:90:3e:f0:f1:87:71:5d:ef:1f:71:ce:5a:e2: c5:b8:91:bb:07:ce:71:fc:35:5f:92:88:4a:bf:ac:cd:d1:a3: 02:23:50:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTFGOTExMC8GA1UEBRMoQ0U3MzYwQkQxQTk0RTg5MTdCRDM2NzI0MzNGODIxRUM3 ODBBOEQyODAeFw0yNTEwMTkxMTI2NTRaFw0yNTEwMjYxMTI2NTRaMBgxFjAUBgNV BAMTDTY4ZjRjYWZmLWI2ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2bQdL5wsMXeGpGUmtl8GPCfEizrkv5eLzMbCQM81d0juQU8d8W/R00X6chif6 QWO/VAdUoGIO0x6NWkTIdkNlAU7/YrhYJr0csK2stpv0aNZ4uMCCHF85itV+1QrA KsIESf1A3mv6HNkAyjQrml2jDHJCUyRSoA/O0qS+tGvzsfN5S45njW5EeFZl5HAs 9POguvtSKyqOV2Xru4LndjUwRH2kCD6vSWAkubU5Ij6qd4ok7HEkWZF4W1K5cNcU p5txKFlF0uBX+VtQiIKGkEvlKHarnp7K+E5/IF/kYkMOdthcIUxA5/fHKaXirze6 NGNS9qppRbSosC0pKnlWalR5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoYNVtLIU 3ynQcZAx3PdZxueVI0QwHwYDVR0jBBgwFoAUznNgvRqU6JF702ckM/gh7HgKjSgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMUY5L0FGRTRBOTBBOERF MjExRjBBMzA4QUM3Q0M0RjlBRTAyL3puTmd2UnFVNkpGNzAyY2tNX2doN0hnS2pT Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvem5OZ3ZScVU2SkY3MDJja01fZ2g3SGdLalNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF MUY5L0FGRTRBOTBBOERFMjExRjBBMzA4QUM3Q0M0RjlBRTAyL3puTmd2UnFVNkpG NzAyY2tNX2doN0hnS2pTZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI/VrHfEqNlPwiDsFWoWSvMdshuRgqXDfAQxkYhheYuyp9SLgccyTC51 rVyYqSyi81GK5XfXcJ0mMrnNl9Zi34g0pXqRmscn4/nn6lIBSBG+sX2vLgyZ/mfW MN9ADIE5vqNgfW/3Y/pSteovlwqmsLntcZ0O+W+sUsJ4AOAPg80XlKsCh1+rq1jO 9i9fRG3mNswG0yCPbWjSbQRnZFSPtcvHST4qY2xwu36l6VX7NGqfB4MdAye4Q0U2 Xn76UsoUo5bVUvMmTgznA1oYpnjMykIs8FG5jo7xENke11ApkD7w8YdxXe8fcc5a 4sW4kbsHznH8NV+SiEq/rM3RowIjUCM= -----END CERTIFICATE-----Generated at Mon Oct 20 10:10:24 2025 by rpki-client