$ rpki-client -vvf rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft File: 15qMdwXiQZ6rQpU7a8ilcga6xiY.mft (raw, json) Hash identifier: i6q+8EqbBANDnK0XvDvMrNRlDcrufnqoOxm2S7lxGMA= Subject key identifier: CF:D1:A5:71:66:C0:96:88:B8:E0:8C:DD:F0:1C:9E:CF:94:1B:A3:E9 Authority key identifier: D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 Certificate issuer: /CN=A91BADCE/serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Certificate serial: 04ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft Manifest number: 04E1 Signing time: Sun 19 Oct 2025 01:35:17 +0000 Manifest this update: Sun 19 Oct 2025 01:35:16 +0000 Manifest next update: Sun 26 Oct 2025 01:35:16 +0000 Files and hashes: 1: 15qMdwXiQZ6rQpU7a8ilcga6xiY.crl (hash: VIeUQIz4RupPSWxi1ekfcsVLOtBN53CvCDrT1M0EDqQ=) 2: 4BD423FE3AF911EC918C643AC4F9AE02.roa (hash: zGe92eYB2T/6F6go2IsVT92hr41aOIJDE55tjsezOT0=) 3: 56C4925E3B0711EC9715501EC4F9AE02.roa (hash: fn18Z/WO3LMBPpMiEymfF/J9ml4DPzxPa9csD1f45R4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1261 (0x4ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BADCE, serialNumber=D79A8C7705E2419EAB42953B6BC8A57206BAC626 Validity Not Before: Oct 19 01:35:16 2025 GMT Not After : Oct 26 01:35:16 2025 GMT Subject: CN=68f44055-70d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:af:91:7a:4e:e4:b9:00:33:da:c8:56:6c: cb:1c:3b:c6:81:3b:a0:b4:8c:3f:a4:c9:9f:5a:20: ea:f9:a7:26:95:34:d0:a9:3c:ca:5e:86:d5:56:00: ef:54:bd:2b:54:d5:18:5e:c1:29:c2:7d:ec:31:4a: 65:c5:2c:52:19:10:6a:12:e3:40:bd:d7:73:85:2c: 5b:5f:bb:22:49:98:9f:c9:45:31:b5:a5:07:17:36: b8:5d:c7:60:3a:89:35:ac:2c:56:e7:c0:30:8d:f1: be:db:40:6e:af:75:0e:df:4c:df:ff:1d:55:21:75: 07:8e:9d:7b:17:a3:cd:bb:e4:cf:7c:9e:20:93:39: d4:4e:2d:05:eb:1d:42:a7:d7:d3:39:2e:80:c2:0f: d0:a1:d3:32:90:d5:9e:77:92:c2:2b:d9:42:17:46: c2:d3:e1:de:c4:c3:61:30:bd:cd:f3:f0:05:5f:ac: 99:6a:83:81:d8:47:f0:ae:b9:40:bd:f2:26:01:07: e1:9e:94:da:ab:d5:ac:c6:ee:4a:1b:5f:ce:0d:10: 1e:21:eb:54:75:3b:f1:54:f8:d7:01:45:80:28:24: 1e:77:2b:d1:a7:41:eb:5a:ea:ac:b2:5d:39:5f:d0: e4:f2:a7:9b:1f:7a:5f:c4:e2:73:d2:cd:6e:76:04: 4e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D1:A5:71:66:C0:96:88:B8:E0:8C:DD:F0:1C:9E:CF:94:1B:A3:E9 X509v3 Authority Key Identifier: keyid:D7:9A:8C:77:05:E2:41:9E:AB:42:95:3B:6B:C8:A5:72:06:BA:C6:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15qMdwXiQZ6rQpU7a8ilcga6xiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BADCE/0F7281BC3AF411EC89CE072FC4F9AE02/15qMdwXiQZ6rQpU7a8ilcga6xiY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:8e:3e:2a:08:86:4d:39:56:a0:f4:41:4b:ac:d6:43:cc:4b: 91:e2:32:27:58:a8:25:f7:c7:7f:b7:bb:11:ab:25:0e:6f:4f: 5f:ab:81:fc:8b:ba:ad:1b:30:fa:0b:12:60:15:9a:cd:c3:95: cd:45:21:2d:ff:14:6c:99:16:ce:9a:b4:f0:61:a5:60:47:16: 46:59:6e:e2:a6:61:48:e5:34:1c:e2:5c:4e:d6:ab:73:a1:04: 23:83:7f:6b:c0:03:ad:2d:6c:24:b1:84:57:2f:81:e0:92:6b: 7d:1e:96:99:81:d3:29:82:8f:ae:ac:f1:dc:b6:30:93:96:ef: f2:22:9a:e4:96:21:f8:33:2d:80:7a:59:90:7c:59:a9:bb:31: f3:9e:4a:fb:69:c9:78:d2:cd:94:74:5d:60:a6:de:fb:0e:cb: 09:b7:7d:8d:3c:64:76:19:26:53:57:d5:eb:6a:7c:25:28:75: c0:3a:5f:25:a7:65:e3:c0:8d:06:71:f9:b8:39:36:4d:82:23: 86:32:2a:f3:bd:25:49:fd:9d:3b:82:d9:9e:70:77:16:0f:dc: 28:d2:f5:a7:ce:42:0e:92:a8:a2:e5:42:a8:39:9d:83:40:c1: 52:9a:9d:32:00:29:9f:a1:0c:8a:0f:3c:1d:ed:22:f8:35:5d: 37:30:33:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEQ0UxMTAvBgNVBAUTKEQ3OUE4Qzc3MDVFMjQxOUVBQjQyOTUzQjZCQzhBNTcy MDZCQUM2MjYwHhcNMjUxMDE5MDEzNTE2WhcNMjUxMDI2MDEzNTE2WjAYMRYwFAYD VQQDEw02OGY0NDA1NS03MGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwKvkXpO5LkAM9rIVmzLHDvGgTugtIw/pMmfWiDq+acmlTTQqTzKXobVVgDv VL0rVNUYXsEpwn3sMUplxSxSGRBqEuNAvddzhSxbX7siSZifyUUxtaUHFza4Xcdg Ook1rCxW58AwjfG+20Bur3UO30zf/x1VIXUHjp17F6PNu+TPfJ4gkznUTi0F6x1C p9fTOS6Awg/QodMykNWed5LCK9lCF0bC0+HexMNhML3N8/AFX6yZaoOB2EfwrrlA vfImAQfhnpTaq9Wsxu5KG1/ODRAeIetUdTvxVPjXAUWAKCQedyvRp0HrWuqssl05 X9Dk8qebH3pfxOJz0s1udgROiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/RpXFm wJaIuOCM3fAcns+UG6PpMB8GA1UdIwQYMBaAFNeajHcF4kGeq0KVO2vIpXIGusYm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQURDRS8wRjcyODFCQzNB RjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFaNnJRcFU3YThpbGNnYTZ4 aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1cU1kd1hpUVo2clFwVTdhOGlsY2dhNnhpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QURDRS8wRjcyODFCQzNBRjQxMUVDODlDRTA3MkZDNEY5QUUwMi8xNXFNZHdYaVFa NnJRcFU3YThpbGNnYTZ4aVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrjj4qCIZNOVag9EFLrNZDzEuR4jInWKgl98d/t7sRqyUOb09fq4H8 i7qtGzD6CxJgFZrNw5XNRSEt/xRsmRbOmrTwYaVgRxZGWW7ipmFI5TQc4lxO1qtz oQQjg39rwAOtLWwksYRXL4Hgkmt9HpaZgdMpgo+urPHctjCTlu/yIprkliH4My2A elmQfFmpuzHznkr7acl40s2UdF1gpt77DssJt32NPGR2GSZTV9XranwlKHXAOl8l p2XjwI0Gcfm4OTZNgiOGMirzvSVJ/Z07gtmecHcWD9wo0vWnzkIOkqii5UKoOZ2D QMFSmp0yACmfoQyKDzwd7SL4NV03MDOJ -----END CERTIFICATE-----Generated at Mon Oct 20 16:18:01 2025 by rpki-client