$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft File: 5tdlUVTja2lxFXTiB5a2gCxDtxU.mft (raw, json) Hash identifier: 8AUtV4yDxVTcpMJjM5OJ87uZN1ech6yq1A+aOnIu7dE= Subject key identifier: 8A:A2:7E:5A:4A:60:52:90:23:4B:AD:E3:7C:CF:C9:C2:D9:1D:C6:CD Authority key identifier: E6:D7:65:51:54:E3:6B:69:71:15:74:E2:07:96:B6:80:2C:43:B7:15 Certificate issuer: /CN=A9118EDB/serialNumber=E6D7655154E36B69711574E20796B6802C43B715 Certificate serial: 052A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft Manifest number: 0524 Signing time: Sun 19 Oct 2025 01:18:05 +0000 Manifest this update: Sun 19 Oct 2025 01:18:05 +0000 Manifest next update: Sun 26 Oct 2025 01:18:05 +0000 Files and hashes: 1: 5tdlUVTja2lxFXTiB5a2gCxDtxU.crl (hash: w69CCsuAi10cQ0jkafPyBrj7fBkjQv0hPQSrecJ7YsY=) 2: BA4D01561DE011ECB872BC27C4F9AE02.roa (hash: wf1/Eq3D00+NNmg7EFhhzne2/Whu9vsX8s0Y7UfB8bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.crl rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1322 (0x52a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118EDB, serialNumber=E6D7655154E36B69711574E20796B6802C43B715 Validity Not Before: Oct 19 01:18:05 2025 GMT Not After : Oct 26 01:18:05 2025 GMT Subject: CN=68f43c4d-12e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ee:06:af:05:20:06:61:d0:c0:d3:f7:62:90: 1a:5f:4d:b8:4e:bf:23:e2:23:5e:49:6f:67:6a:44: e1:37:8f:80:53:8c:05:ee:95:cd:80:59:bd:6e:53: 07:32:d5:ba:e6:94:33:a2:ed:fa:88:a5:3a:d6:df: b1:9e:8a:65:6d:65:df:a9:81:d0:e6:6f:78:26:20: 0e:66:e3:27:56:ca:30:71:b6:3d:9b:d5:48:2d:b4: 0f:4f:21:1c:f0:ee:11:42:b5:dc:2b:b9:85:10:47: b4:45:70:ce:f4:2c:08:91:a9:e7:e4:ee:c9:ce:31: 04:dd:fd:37:75:ae:0b:78:bd:24:51:d2:56:66:60: d3:21:1b:17:a1:f8:bd:31:f7:66:35:82:04:50:b7: e4:d2:18:5b:f6:bc:d8:1b:60:1c:13:ef:45:7b:af: 91:ea:04:22:56:8a:08:fd:d7:1e:8f:37:c5:ef:a3: 89:f3:a0:c9:6a:2f:5f:6d:5e:d3:81:02:88:61:e7: d7:27:06:eb:b5:ef:ab:c2:17:0b:63:2c:71:e4:d3: 92:51:99:94:b5:2d:27:60:a4:85:6f:cc:5f:6d:7d: a2:11:ed:d5:24:5a:36:91:68:b1:5f:59:c8:0a:1c: 89:93:e7:c7:ee:c9:5f:d1:64:6b:25:77:1d:aa:a3: b3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A2:7E:5A:4A:60:52:90:23:4B:AD:E3:7C:CF:C9:C2:D9:1D:C6:CD X509v3 Authority Key Identifier: keyid:E6:D7:65:51:54:E3:6B:69:71:15:74:E2:07:96:B6:80:2C:43:B7:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5tdlUVTja2lxFXTiB5a2gCxDtxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EDB/309BE6BE1DDD11EC883B4423C4F9AE02/5tdlUVTja2lxFXTiB5a2gCxDtxU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e7:ba:8c:79:fa:17:d4:ae:46:17:d1:5c:54:e1:ad:9b:94:ff: 6c:27:fc:74:f5:9c:c5:bc:0b:74:cd:96:fc:47:b1:34:1e:76: f7:df:b9:a1:f1:6f:ea:20:86:8f:59:42:be:9e:f7:8b:3d:a3: c4:06:30:3a:4c:35:46:7f:25:6b:8b:aa:8d:9e:47:48:8c:cf: 95:3e:87:10:7f:d2:4d:99:29:29:55:35:aa:33:d1:eb:03:3f: ef:09:ca:82:39:83:f3:10:1b:1c:96:d2:a1:17:c3:8c:bf:66: 3a:ff:74:cb:60:ad:6a:b7:b4:44:38:c3:ab:00:d7:fa:7a:14: 42:ef:47:ed:33:1d:d5:47:b5:35:74:1e:6b:4a:89:39:f5:a9: 8f:8b:cf:83:0c:7c:d2:b9:94:f0:fa:ed:d6:f2:08:3a:f3:23: 71:cc:4a:15:54:57:47:af:b1:a8:75:05:28:68:4b:9e:f3:6d: af:b7:5d:3e:7c:fe:e1:7a:59:1f:9d:ed:e8:e9:80:f9:7a:fa: 75:8c:79:79:4d:1c:a4:6c:af:87:5b:ef:74:e5:1b:02:a7:bb: 51:44:17:cf:ee:8b:11:19:c8:c0:dd:d9:ee:0b:88:68:6f:31: a2:73:f9:85:3d:12:ac:05:18:08:1f:6a:4b:d7:68:aa:f4:68: 8a:d2:5b:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThFREIxMTAvBgNVBAUTKEU2RDc2NTUxNTRFMzZCNjk3MTE1NzRFMjA3OTZCNjgw MkM0M0I3MTUwHhcNMjUxMDE5MDExODA1WhcNMjUxMDI2MDExODA1WjAYMRYwFAYD VQQDEw02OGY0M2M0ZC0xMmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+4GrwUgBmHQwNP3YpAaX024Tr8j4iNeSW9nakThN4+AU4wF7pXNgFm9blMH MtW65pQzou36iKU61t+xnoplbWXfqYHQ5m94JiAOZuMnVsowcbY9m9VILbQPTyEc 8O4RQrXcK7mFEEe0RXDO9CwIkann5O7JzjEE3f03da4LeL0kUdJWZmDTIRsXofi9 MfdmNYIEULfk0hhb9rzYG2AcE+9Fe6+R6gQiVooI/dcejzfF76OJ86DJai9fbV7T gQKIYefXJwbrte+rwhcLYyxx5NOSUZmUtS0nYKSFb8xfbX2iEe3VJFo2kWixX1nI ChyJk+fH7slf0WRrJXcdqqOzowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqiflpK YFKQI0ut43zPycLZHcbNMB8GA1UdIwQYMBaAFObXZVFU42tpcRV04geWtoAsQ7cV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEVEQi8zMDlCRTZCRTFE REQxMUVDODgzQjQ0MjNDNEY5QUUwMi81dGRsVVZUamEybHhGWFRpQjVhMmdDeER0 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV0ZGxVVlRqYTJseEZYVGlCNWEyZ0N4RHR4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEVEQi8zMDlCRTZCRTFEREQxMUVDODgzQjQ0MjNDNEY5QUUwMi81dGRsVVZUamEy bHhGWFRpQjVhMmdDeER0eFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDnuox5+hfUrkYX0VxU4a2blP9sJ/x09ZzFvAt0zZb8R7E0Hnb337mh 8W/qIIaPWUK+nveLPaPEBjA6TDVGfyVri6qNnkdIjM+VPocQf9JNmSkpVTWqM9Hr Az/vCcqCOYPzEBscltKhF8OMv2Y6/3TLYK1qt7REOMOrANf6ehRC70ftMx3VR7U1 dB5rSok59amPi8+DDHzSuZTw+u3W8gg68yNxzEoVVFdHr7GodQUoaEue822vt10+ fP7helkfne3o6YD5evp1jHl5TRykbK+HW+905RsCp7tRRBfP7osRGcjA3dnuC4ho bzGic/mFPRKsBRgIH2pL12iq9GiK0luq -----END CERTIFICATE-----Generated at Mon Oct 20 08:22:24 2025 by rpki-client