$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft File: rCjcKlVLTjOaOZyWQrTOAmio37A.mft (raw, json) Hash identifier: MhuDRY9+pQi0Ju45NNLtUQv5uuobxTNfAGFRYInMYmI= Subject key identifier: 56:14:07:93:58:99:B7:8D:AC:90:C6:C5:72:95:96:7E:C2:9D:32:0E Authority key identifier: AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 Certificate issuer: /CN=A915EA46/serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft Manifest number: B2 Signing time: Sun 19 Oct 2025 09:12:44 +0000 Manifest this update: Sun 19 Oct 2025 09:12:44 +0000 Manifest next update: Sun 26 Oct 2025 09:12:44 +0000 Files and hashes: 1: rCjcKlVLTjOaOZyWQrTOAmio37A.crl (hash: pBb9o1RmEEGq9Fyn74FAXhxjX8WlOnFDkUg9cekNYbQ=) 2: A1E99A4E9C1211EFB233147EC4F9AE02.roa (hash: 3ye2avJW3DGdXLpGllemApGuBs5Hg/Dy3+TFvLk8rE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA46, serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Validity Not Before: Oct 19 09:12:44 2025 GMT Not After : Oct 26 09:12:44 2025 GMT Subject: CN=68f4ab8c-c1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c0:9d:7c:07:80:bf:c8:d2:63:93:0c:7d:0f: d7:3b:c9:c8:a1:c4:e4:39:95:a3:c3:6e:69:e7:be: 34:0e:1e:48:65:d5:99:f3:ac:a9:59:6c:9f:81:ca: 93:ae:2d:bb:99:48:0c:0c:23:8b:fd:e3:d4:08:85: 38:64:69:fc:db:49:93:6f:19:7e:19:16:5c:0e:be: ff:73:a6:95:ae:8d:c7:66:74:a7:82:7d:93:0d:e5: ea:37:ae:ac:83:ff:18:e4:18:93:32:17:5a:4e:1c: 71:11:69:3a:15:46:55:79:b1:42:c7:33:51:3b:a7: 8f:ac:f9:a6:c0:eb:e7:72:39:6e:40:3f:b1:97:6d: e0:e1:ca:48:01:f0:65:a0:58:0e:cb:63:bb:4c:80: 33:fb:d1:45:27:6a:25:3d:15:96:f1:4c:ff:e6:d2: 26:0c:37:c9:57:94:3a:f5:71:f7:1e:72:53:48:d7: 70:82:e1:e8:26:0a:14:b7:8f:0d:a6:ac:fd:60:84: 44:b0:09:12:62:a0:6a:22:4e:a0:f0:03:9c:bd:67: 38:1b:78:68:c8:8c:b6:52:32:62:3d:01:43:26:80: 9c:1f:57:ae:9a:2b:bf:4a:37:f3:88:31:d1:38:51: d5:72:3f:2e:6f:14:56:1f:76:75:96:42:8c:50:7f: b4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:14:07:93:58:99:B7:8D:AC:90:C6:C5:72:95:96:7E:C2:9D:32:0E X509v3 Authority Key Identifier: keyid:AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:9e:49:8f:09:2d:38:61:78:89:ca:ae:ae:68:31:a5:e8:3b: 5e:33:43:fa:a1:b1:e7:ce:26:c1:e9:f1:ca:11:e1:f9:69:78: 48:58:29:7d:9b:c0:b9:94:5b:21:fb:f3:8b:78:aa:72:62:9c: 9c:98:c5:cf:6e:0a:18:2f:ab:c3:15:6d:79:51:5c:c7:80:d1: 64:46:cf:2c:f1:a7:20:49:c1:2c:4c:cf:e6:d4:25:24:29:9a: 7f:5e:63:b4:9d:dd:b8:5d:9e:66:ef:7b:22:4d:36:f1:70:5e: ff:6f:09:a8:02:a7:51:a5:53:33:9a:29:cb:74:b7:ca:b0:13: 1f:80:a2:ad:c8:1a:ce:a6:5d:14:b6:d8:41:26:ba:d6:66:0a: a4:ae:2a:e7:3a:c4:aa:ce:86:7f:e3:11:9b:4c:6a:d0:f3:ba: 06:d8:d0:76:ab:b7:28:59:86:6d:1d:1c:b5:06:10:e5:a7:5f: e6:5e:50:88:21:44:9a:f9:e5:c1:f7:19:ba:22:a7:d5:44:65: 69:a1:4a:47:5d:18:21:07:23:00:c8:5a:47:57:09:c3:ce:c6: d9:e8:28:09:e1:1f:c7:1a:fa:00:a2:4e:b2:2a:69:6e:b5:41: 5f:0f:39:72:57:a9:97:99:c3:73:18:33:37:77:d0:fe:98:b7: 96:01:69:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVBNDYxMTAvBgNVBAUTKEFDMjhEQzJBNTU0QjRFMzM5QTM5OUM5NjQyQjRDRTAy NjhBOERGQjAwHhcNMjUxMDE5MDkxMjQ0WhcNMjUxMDI2MDkxMjQ0WjAYMRYwFAYD VQQDEw02OGY0YWI4Yy1jMWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8CdfAeAv8jSY5MMfQ/XO8nIocTkOZWjw25p5740Dh5IZdWZ86ypWWyfgcqT ri27mUgMDCOL/ePUCIU4ZGn820mTbxl+GRZcDr7/c6aVro3HZnSngn2TDeXqN66s g/8Y5BiTMhdaThxxEWk6FUZVebFCxzNRO6ePrPmmwOvncjluQD+xl23g4cpIAfBl oFgOy2O7TIAz+9FFJ2olPRWW8Uz/5tImDDfJV5Q69XH3HnJTSNdwguHoJgoUt48N pqz9YIREsAkSYqBqIk6g8AOcvWc4G3hoyIy2UjJiPQFDJoCcH1eumiu/SjfziDHR OFHVcj8ubxRWH3Z1lkKMUH+01wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYUB5NY mbeNrJDGxXKVln7CnTIOMB8GA1UdIwQYMBaAFKwo3CpVS04zmjmclkK0zgJoqN+w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUE0Ni9EQkRBMkNDNDlD MTExMUVGOTJGQkE5N0NDNEY5QUUwMi9yQ2pjS2xWTFRqT2FPWnlXUXJUT0FtaW8z N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDamNLbFZMVGpPYU9aeVdRclRPQW1pbzM3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUE0Ni9EQkRBMkNDNDlDMTExMUVGOTJGQkE5N0NDNEY5QUUwMi9yQ2pjS2xWTFRq T2FPWnlXUXJUT0FtaW8zN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3nkmPCS04YXiJyq6uaDGl6DteM0P6obHnzibB6fHKEeH5aXhIWCl9 m8C5lFsh+/OLeKpyYpycmMXPbgoYL6vDFW15UVzHgNFkRs8s8acgScEsTM/m1CUk KZp/XmO0nd24XZ5m73siTTbxcF7/bwmoAqdRpVMzminLdLfKsBMfgKKtyBrOpl0U tthBJrrWZgqkrirnOsSqzoZ/4xGbTGrQ87oG2NB2q7coWYZtHRy1BhDlp1/mXlCI IUSa+eXB9xm6IqfVRGVpoUpHXRghByMAyFpHVwnDzsbZ6CgJ4R/HGvoAok6yKmlu tUFfDzlyV6mXmcNzGDM3d9D+mLeWAWm/ -----END CERTIFICATE-----Generated at Mon Oct 20 12:45:32 2025 by rpki-client