$ rpki-client -vvf rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft File: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft (raw, json) Hash identifier: QevnoDnuNGHv/Wup+1JkClureXH+tc4n9zfbXvQloZg= Subject key identifier: E8:2D:32:71:40:5C:F5:CC:41:32:E3:40:2A:F4:CB:EA:35:12:C6:78 Authority key identifier: E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74 Certificate issuer: /CN=A9125DDA/serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft Manifest number: 23 Signing time: Sun 19 Oct 2025 11:17:53 +0000 Manifest this update: Sun 19 Oct 2025 11:17:52 +0000 Manifest next update: Sun 26 Oct 2025 11:17:52 +0000 Files and hashes: 1: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl (hash: 1kvvMsjK9oT8jLmtr7nQt4CL3XddB8ndLjFW1B4wM/k=) 2: F91331C4796E11F095D14275C4F9AE02.roa (hash: 6wo7WUrPZLKlQaonftVwuTXqab8pX51e733TWWNJa3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125DDA, serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74 Validity Not Before: Oct 19 11:17:52 2025 GMT Not After : Oct 26 11:17:52 2025 GMT Subject: CN=68f4c8e1-9d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:46:09:68:2c:77:97:e6:50:e8:e2:27:5c:ee: 9d:7c:1a:a2:92:2d:c2:40:33:37:82:01:2e:62:d1: dd:d8:20:f9:6a:77:36:a7:76:e3:6c:09:7c:df:ca: 76:a3:48:a4:25:04:2b:13:99:e4:6e:4f:ac:8f:05: 9a:89:92:57:08:07:f3:83:e5:6b:69:2a:1e:3f:8f: e1:b7:ab:0e:b3:44:b6:a4:c5:c5:21:38:bd:8b:59: 7e:fa:40:d3:d4:a2:1a:2a:8d:a9:f7:28:e1:60:79: 0f:0d:31:04:16:26:9b:53:1e:e4:ef:04:09:0d:13: 39:92:2c:32:b9:2d:8a:70:03:fd:3b:b7:6e:36:fe: 95:ea:67:a3:a7:9d:0e:f9:42:8f:2e:b6:02:96:f6: f7:0b:38:fd:2a:a2:ff:d9:04:aa:51:15:58:35:2f: cb:79:a3:be:12:85:73:67:24:5b:7f:81:ca:26:7c: 08:8b:28:af:c3:4d:6d:69:26:86:c0:ae:d8:19:94: c7:fa:3f:02:8c:86:c6:8f:85:45:ba:70:77:cf:b1: 69:00:23:e4:a2:6d:1b:cc:1f:09:63:c0:45:0a:c0: bc:8a:c8:bf:e5:21:5e:26:60:51:09:36:8d:7f:41: ec:8e:6a:19:ec:17:06:01:e5:3f:66:89:b7:ab:04: d8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2D:32:71:40:5C:F5:CC:41:32:E3:40:2A:F4:CB:EA:35:12:C6:78 X509v3 Authority Key Identifier: keyid:E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:11:c2:fa:e4:bc:da:9b:63:ba:64:5c:8e:60:eb:59:ad:01: 91:25:c9:b9:93:99:7f:f7:e5:79:90:51:ac:e4:9f:09:f5:6a: 81:5c:04:e6:ce:4b:a3:d7:28:f0:f5:e2:a6:ea:c0:3b:b1:af: f8:9a:a0:bf:4c:d7:3b:fe:bb:b3:45:27:c0:6c:8e:84:49:4e: 21:d2:16:21:6f:18:8e:20:90:5f:b3:df:ea:3c:aa:1b:01:1f: 22:69:90:f7:a4:01:1b:78:20:6f:c8:21:1a:4f:8d:61:c2:55: cd:0b:62:05:45:bf:5d:0d:f0:cf:c2:0c:dc:2c:78:97:2e:91: 11:df:2f:96:3d:20:fc:20:60:23:7f:f4:b8:ea:38:96:c3:63: 0d:bd:6f:76:56:40:9b:89:a3:c5:8f:74:a9:a3:79:3e:ff:40: e2:6c:3d:71:43:e9:21:9a:64:23:cf:ca:ce:69:b2:d6:8e:82: 7f:7f:d0:85:73:3c:8a:9d:e9:12:cb:1d:3b:71:71:98:4f:24: 07:e0:72:d8:15:92:35:a1:57:c7:b7:b6:df:9f:1a:9f:a2:eb: f9:e1:1c:14:fd:40:60:ff:fa:9e:ca:c5:64:1f:99:d4:9b:65: 7a:39:30:4b:7d:ea:32:82:25:a7:0b:1c:b4:08:a7:c2:3e:41: 6b:a2:73:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NUREQTExMC8GA1UEBRMoRTUxMDIwOEZEMzkwNDJFMzM2NjIxMzBBNDJBOEY4M0ZF RUNGQkU3NDAeFw0yNTEwMTkxMTE3NTJaFw0yNTEwMjYxMTE3NTJaMBgxFjAUBgNV BAMTDTY4ZjRjOGUxLTlkM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuRgloLHeX5lDo4idc7p18GqKSLcJAMzeCAS5i0d3YIPlqdzanduNsCXzfynaj SKQlBCsTmeRuT6yPBZqJklcIB/OD5WtpKh4/j+G3qw6zRLakxcUhOL2LWX76QNPU ohoqjan3KOFgeQ8NMQQWJptTHuTvBAkNEzmSLDK5LYpwA/07t242/pXqZ6OnnQ75 Qo8utgKW9vcLOP0qov/ZBKpRFVg1L8t5o74ShXNnJFt/gcomfAiLKK/DTW1pJobA rtgZlMf6PwKMhsaPhUW6cHfPsWkAI+SibRvMHwljwEUKwLyKyL/lIV4mYFEJNo1/ QeyOahnsFwYB5T9miberBNiFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6C0ycUBc 9cxBMuNAKvTL6jUSxngwHwYDVR0jBBgwFoAU5RAgj9OQQuM2YhMKQqj4P+7PvnQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1RERBLzgwQUMwOTg2Nzk2 RTExRjA4RkM1MTc3NEM0RjlBRTAyLzVSQWdqOU9RUXVNMlloTUtRcWo0UC03UHZu US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNVJBZ2o5T1FRdU0yWWhNS1FxajRQLTdQdm5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 RERBLzgwQUMwOTg2Nzk2RTExRjA4RkM1MTc3NEM0RjlBRTAyLzVSQWdqOU9RUXVN MlloTUtRcWo0UC03UHZuUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIMRwvrkvNqbY7pkXI5g61mtAZElybmTmX/35XmQUazknwn1aoFcBObO S6PXKPD14qbqwDuxr/iaoL9M1zv+u7NFJ8BsjoRJTiHSFiFvGI4gkF+z3+o8qhsB HyJpkPekARt4IG/IIRpPjWHCVc0LYgVFv10N8M/CDNwseJcukRHfL5Y9IPwgYCN/ 9LjqOJbDYw29b3ZWQJuJo8WPdKmjeT7/QOJsPXFD6SGaZCPPys5pstaOgn9/0IVz PIqd6RLLHTtxcZhPJAfgctgVkjWhV8e3tt+fGp+i6/nhHBT9QGD/+p7KxWQfmdSb ZXo5MEt96jKCJacLHLQIp8I+QWuicwE= -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:43 2025 by rpki-client