$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft File: C9usFSJfG_m2FLKjR6G5bEoPlpw.mft (raw, json) Hash identifier: 7cENRt40QHWzIjDLJJlEY7FEfx3iFZDr6ScEZp8EzaI= Subject key identifier: D5:22:98:CB:A7:94:97:BC:63:82:E3:34:2C:BA:02:BB:8F:2C:A2:86 Authority key identifier: 0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C Certificate issuer: /CN=A915FDA7/serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft Manifest number: 011B Signing time: Sun 19 Oct 2025 07:40:45 +0000 Manifest this update: Sun 19 Oct 2025 07:40:44 +0000 Manifest next update: Sun 26 Oct 2025 07:40:44 +0000 Files and hashes: 1: C9usFSJfG_m2FLKjR6G5bEoPlpw.crl (hash: sf3KERRw86I74AgmqqYsGRrkd9oTTLZdLWOuoeztr/c=) 2: 7C3A615CFD2A11EE9030911CC4F9AE02.roa (hash: /piRZvXAAsh1mpg66Okc/aC7aZTe1kUD5ojc4AIc6UQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FDA7, serialNumber=0BDBAC15225F1BF9B614B2A347A1B96C4A0F969C Validity Not Before: Oct 19 07:40:44 2025 GMT Not After : Oct 26 07:40:44 2025 GMT Subject: CN=68f495fd-4e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:c2:7f:be:ae:ba:86:84:40:29:ea:ac:b2: 9d:7c:2a:c2:04:98:f9:0e:41:45:22:02:62:fb:66: 1b:59:20:7d:6f:a0:12:c2:d8:0c:05:78:0f:00:ea: d1:b8:9a:98:9c:25:4e:d5:3c:7c:2a:07:71:1b:2b: 23:d7:85:26:99:bd:f0:0e:f7:5a:32:f6:92:49:fe: 40:82:d5:02:53:5e:fc:ea:91:61:93:2d:b0:82:1d: a1:93:a3:f9:8a:db:8d:e7:0c:90:a8:39:18:fb:5e: 37:1c:9f:00:ea:7e:2f:c0:db:34:3b:d9:8b:bd:56: 5b:b1:09:46:41:77:de:88:89:a1:7b:9a:cf:19:e5: 16:cc:da:a6:64:f4:83:ce:1b:b7:da:ce:f8:f3:b7: 46:0a:0b:c3:f4:42:85:a3:6f:91:7a:f6:53:85:94: b9:33:25:ea:8c:fc:da:58:d6:81:fe:d1:c9:d9:66: 9d:d4:db:2e:2e:9f:7f:fb:03:f2:d1:81:6c:73:af: f0:70:f9:2a:e6:69:a2:9a:51:c5:48:df:c1:4a:87: fd:0e:4a:45:d7:ee:6e:11:28:95:7c:0d:e3:13:01: a9:a4:d8:e3:92:02:b7:a0:43:d0:39:a6:a2:27:01: 2e:52:9b:e1:3a:1f:1f:f6:79:81:b9:80:b3:16:f6: 9c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:22:98:CB:A7:94:97:BC:63:82:E3:34:2C:BA:02:BB:8F:2C:A2:86 X509v3 Authority Key Identifier: keyid:0B:DB:AC:15:22:5F:1B:F9:B6:14:B2:A3:47:A1:B9:6C:4A:0F:96:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C9usFSJfG_m2FLKjR6G5bEoPlpw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/4F481AC8FD2911EEA629AE62C4F9AE02/C9usFSJfG_m2FLKjR6G5bEoPlpw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6f:a5:5e:d6:dd:47:70:b4:55:61:ad:6c:02:a8:0f:ab:5d: 9b:fc:3a:46:a7:ee:44:fe:fe:5a:99:90:09:39:b3:2e:be:d7: 94:77:ed:65:15:52:b9:97:6b:ec:48:b6:69:75:69:5b:eb:5e: 10:f4:5e:ba:dc:6a:61:92:2a:f9:03:f9:61:63:f4:47:91:72: f6:f2:58:9e:bd:d0:b3:3f:c2:e5:f5:d7:7c:12:5b:18:c6:89: d4:29:90:91:b1:7e:7c:ae:8b:4b:a6:a5:c5:02:9f:d5:b5:35: 87:20:57:b5:c6:4b:18:20:b0:6e:49:68:8c:af:aa:b7:ad:ad: 39:26:f1:d7:0a:35:18:c3:40:73:56:a7:60:f6:cb:88:f0:16: 4a:db:e2:6a:3e:76:bb:58:93:8e:da:85:c9:f5:e7:3d:9d:39: 4b:a6:c8:3a:0a:54:0c:c8:0a:98:a4:7b:16:e7:f7:5e:ff:a0: cb:77:b7:1e:2e:23:1a:d8:0e:52:07:54:07:12:4e:52:e2:88: c9:9b:56:d0:83:bb:c0:2e:80:48:11:67:c4:38:1c:1b:97:f4: db:a5:52:04:29:fa:59:ca:a4:12:f6:7c:a4:6d:2b:19:81:12: a2:91:62:ca:01:5b:ff:5e:d5:85:8e:eb:6a:1e:eb:35:c8:7d: 0c:79:f6:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEQTcxMTAvBgNVBAUTKDBCREJBQzE1MjI1RjFCRjlCNjE0QjJBMzQ3QTFCOTZD NEEwRjk2OUMwHhcNMjUxMDE5MDc0MDQ0WhcNMjUxMDI2MDc0MDQ0WjAYMRYwFAYD VQQDEw02OGY0OTVmZC00ZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhPCf76uuoaEQCnqrLKdfCrCBJj5DkFFIgJi+2YbWSB9b6ASwtgMBXgPAOrR uJqYnCVO1Tx8KgdxGysj14Ummb3wDvdaMvaSSf5AgtUCU1786pFhky2wgh2hk6P5 ituN5wyQqDkY+143HJ8A6n4vwNs0O9mLvVZbsQlGQXfeiImhe5rPGeUWzNqmZPSD zhu32s7487dGCgvD9EKFo2+RevZThZS5MyXqjPzaWNaB/tHJ2Wad1NsuLp9/+wPy 0YFsc6/wcPkq5mmimlHFSN/BSof9DkpF1+5uESiVfA3jEwGppNjjkgK3oEPQOaai JwEuUpvhOh8f9nmBuYCzFvacYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUimMun lJe8Y4LjNCy6AruPLKKGMB8GA1UdIwQYMBaAFAvbrBUiXxv5thSyo0ehuWxKD5ac MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRBNy80RjQ4MUFDOEZE MjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdfbTJGTEtqUjZHNWJFb1Bs cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M5dXNGU0pmR19tMkZMS2pSNkc1YkVvUGxwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkRBNy80RjQ4MUFDOEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9DOXVzRlNKZkdf bTJGTEtqUjZHNWJFb1BscHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8b6Ve1t1HcLRVYa1sAqgPq12b/DpGp+5E/v5amZAJObMuvteUd+1l FVK5l2vsSLZpdWlb614Q9F663Gphkir5A/lhY/RHkXL28lievdCzP8Ll9dd8ElsY xonUKZCRsX58rotLpqXFAp/VtTWHIFe1xksYILBuSWiMr6q3ra05JvHXCjUYw0Bz Vqdg9suI8BZK2+JqPna7WJOO2oXJ9ec9nTlLpsg6ClQMyAqYpHsW5/de/6DLd7ce LiMa2A5SB1QHEk5S4ojJm1bQg7vALoBIEWfEOBwbl/TbpVIEKfpZyqQS9nykbSsZ gRKikWLKAVv/XtWFjutqHus1yH0Mefb/ -----END CERTIFICATE-----Generated at Mon Oct 20 12:00:58 2025 by rpki-client