$ rpki-client -vvf rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft File: 31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft (raw, json) Hash identifier: oqJHLDCZfq/PJm7B31OEkxqPS8aS9k3As67gSXu8sHw= Subject key identifier: 49:E8:A3:F8:4A:48:D6:55:CD:6B:F9:37:83:BD:49:EA:15:8B:E7:40 Authority key identifier: DF:51:5B:59:15:E8:33:EE:DB:44:4D:19:C3:0A:00:F0:97:81:5A:35 Certificate issuer: /CN=A915FBEA/serialNumber=DF515B5915E833EEDB444D19C30A00F097815A35 Certificate serial: 06EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft Manifest number: 06E5 Signing time: Sat 18 Oct 2025 23:26:09 +0000 Manifest this update: Sat 18 Oct 2025 23:26:09 +0000 Manifest next update: Sat 25 Oct 2025 23:26:09 +0000 Files and hashes: 1: 31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl (hash: RsklR/InO2qMLPfhs1M+qBQq5M1D119juHBdUQXS23A=) 2: DD3109D66C6C11EB92CE744BC4F9AE02.roa (hash: Q6KB/kezFn+0maPMaSXmf71FjW9THCnG/ycviixRgRs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1772 (0x6ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FBEA, serialNumber=DF515B5915E833EEDB444D19C30A00F097815A35 Validity Not Before: Oct 18 23:26:09 2025 GMT Not After : Oct 25 23:26:09 2025 GMT Subject: CN=68f42211-7d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:20:79:9b:18:12:a1:e0:d0:38:ee:3a:2c:03: 04:25:34:51:3e:01:53:44:cb:43:79:ea:32:1d:75: 90:bf:1e:7b:9c:89:33:37:3c:23:33:fe:79:da:40: 69:2e:4d:b9:8c:98:de:c7:a0:ee:96:94:c9:38:7e: 53:15:10:0b:05:7e:23:c6:8c:ef:75:2b:b7:21:0c: 12:7d:c3:56:e4:bb:ef:e8:4a:b4:77:74:fe:df:1a: fd:41:26:4b:44:64:1a:a8:e1:21:e8:64:6b:08:5c: b8:1e:06:c5:20:d9:7b:1f:cb:f7:86:bc:e9:4c:b1: 40:21:d6:94:f8:b3:53:ba:4f:d2:38:2e:3d:8b:ec: 5e:3f:58:94:5e:e7:96:2b:80:6b:bc:81:44:d2:7d: b9:13:8c:48:e6:63:97:d1:c0:ef:05:ee:b0:35:c2: 0c:b5:31:dc:1a:74:2d:b1:97:a8:e4:85:96:63:fa: 23:78:e1:11:6c:74:88:b2:d2:7b:c0:33:b7:c0:1e: bb:65:88:65:bf:75:5b:15:28:34:20:37:4f:13:ae: 40:13:8a:12:d4:67:d3:f3:a3:d0:a8:ac:e4:69:41: b6:b1:86:b4:bd:74:13:11:21:88:92:e5:9e:bc:c3: ec:34:18:43:7e:3d:7f:60:88:7f:5a:64:8e:9f:55: 2e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E8:A3:F8:4A:48:D6:55:CD:6B:F9:37:83:BD:49:EA:15:8B:E7:40 X509v3 Authority Key Identifier: keyid:DF:51:5B:59:15:E8:33:EE:DB:44:4D:19:C3:0A:00:F0:97:81:5A:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:10:25:e3:9f:0d:81:da:65:82:b7:85:19:31:2c:23:ca:b8: 45:a5:b1:93:05:95:72:27:00:75:3e:f1:ad:66:15:d5:f5:3f: d6:ce:5d:5f:81:c5:52:fe:31:71:25:0e:6c:90:71:a9:98:c9: 63:02:1a:2e:03:71:4f:7f:5c:37:81:dd:db:80:a1:f8:c9:d0: 9a:58:57:73:53:b3:cf:0b:86:a4:8d:d6:92:14:84:1f:c9:32: 14:77:ec:6c:36:b3:44:b9:f9:81:91:13:42:da:8d:d7:7c:07: 75:c6:41:39:a8:a3:c4:44:f5:3d:a2:c0:d6:71:06:be:54:1d: 33:fb:c7:16:34:1a:51:b7:97:c3:88:87:1c:7f:8b:1a:d7:fe: 0a:c2:2f:d1:0d:6c:b5:25:85:b9:d4:85:92:da:66:db:6b:0f: 45:12:ac:b8:78:4a:9b:69:2e:4c:e7:a5:cf:ee:b4:83:35:eb: 58:10:18:06:e3:ad:a3:76:08:e8:43:51:8e:d2:ee:5d:5b:3e: fb:9d:e9:df:95:3e:f4:83:3a:a7:d4:03:2c:ae:63:2e:74:b7: 8f:74:d0:d0:35:a6:4f:e4:16:5e:16:40:a9:e1:d2:32:2d:ec: 7d:70:16:50:cf:1a:00:4e:d1:9d:7e:83:15:c4:3d:ae:a9:7a: 8c:a7:ec:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZCRUExMTAvBgNVBAUTKERGNTE1QjU5MTVFODMzRUVEQjQ0NEQxOUMzMEEwMEYw OTc4MTVBMzUwHhcNMjUxMDE4MjMyNjA5WhcNMjUxMDI1MjMyNjA5WjAYMRYwFAYD VQQDEw02OGY0MjIxMS03ZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSB5mxgSoeDQOO46LAMEJTRRPgFTRMtDeeoyHXWQvx57nIkzNzwjM/552kBp Lk25jJjex6DulpTJOH5TFRALBX4jxozvdSu3IQwSfcNW5Lvv6Eq0d3T+3xr9QSZL RGQaqOEh6GRrCFy4HgbFINl7H8v3hrzpTLFAIdaU+LNTuk/SOC49i+xeP1iUXueW K4BrvIFE0n25E4xI5mOX0cDvBe6wNcIMtTHcGnQtsZeo5IWWY/ojeOERbHSIstJ7 wDO3wB67ZYhlv3VbFSg0IDdPE65AE4oS1GfT86PQqKzkaUG2sYa0vXQTESGIkuWe vMPsNBhDfj1/YIh/WmSOn1UujwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnoo/hK SNZVzWv5N4O9SeoVi+dAMB8GA1UdIwQYMBaAFN9RW1kV6DPu20RNGcMKAPCXgVo1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkJFQS9BQTdFMzkxQTZD NkIxMUVCOEZFRjE5NEJDNEY5QUUwMi8zMUZiV1JYb00tN2JSRTBad3dvQThKZUJX alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMxRmJXUlhvTS03YlJFMFp3d29BOEplQldqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkJFQS9BQTdFMzkxQTZDNkIxMUVCOEZFRjE5NEJDNEY5QUUwMi8zMUZiV1JYb00t N2JSRTBad3dvQThKZUJXalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQECXjnw2B2mWCt4UZMSwjyrhFpbGTBZVyJwB1PvGtZhXV9T/Wzl1f gcVS/jFxJQ5skHGpmMljAhouA3FPf1w3gd3bgKH4ydCaWFdzU7PPC4akjdaSFIQf yTIUd+xsNrNEufmBkRNC2o3XfAd1xkE5qKPERPU9osDWcQa+VB0z+8cWNBpRt5fD iIccf4sa1/4Kwi/RDWy1JYW51IWS2mbbaw9FEqy4eEqbaS5M56XP7rSDNetYEBgG 462jdgjoQ1GO0u5dWz77nenflT70gzqn1AMsrmMudLePdNDQNaZP5BZeFkCp4dIy Lex9cBZQzxoATtGdfoMVxD2uqXqMp+wo -----END CERTIFICATE-----Generated at Sun Oct 19 23:23:45 2025 by rpki-client