$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json) Hash identifier: LLDxfLfsAhXBfR7VZ5rb+va/B2r/D0u4LxsER50vtYY= Subject key identifier: A6:E4:7C:6A:4B:2B:C7:43:68:6F:3E:12:4B:A4:DC:BC:2E:DC:4B:98 Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Certificate serial: 0B5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft Manifest number: 0B4B Signing time: Sat 18 Oct 2025 20:05:22 +0000 Manifest this update: Sat 18 Oct 2025 20:05:21 +0000 Manifest next update: Sat 25 Oct 2025 20:05:21 +0000 Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: kutd7LFGeP4+0EtI0QzWaZeiFaeQXcCwuUVJoiMkCBo=) 2: A2DE5B44AE1C11EAA46DAF7FC4F9AE02.roa (hash: V6+vy3CAemLZlLXO9CQsgxzuypWLmdriyqfxb6TbA2w=) 3: 3FC1B85E431811EA84E68121C4F9AE02.roa (hash: UC5fAcuOiaup4uE6RhB6Ul5GKkjN2FqHQr3rrq2JOA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2906 (0xb5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Validity Not Before: Oct 18 20:05:21 2025 GMT Not After : Oct 25 20:05:21 2025 GMT Subject: CN=68f3f301-8718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:af:4e:00:1f:d3:65:1c:cb:5a:97:c9:20: c4:de:b5:90:c1:1c:cf:0c:0e:fd:5f:2e:82:2d:39: 17:2b:18:f0:f5:78:3e:08:ff:85:d4:a4:43:a3:a5: 9c:81:2a:18:8d:5e:0c:04:4d:7b:32:c0:37:59:b7: 38:82:53:4e:43:0d:13:2a:2f:26:8b:9e:4a:31:d4: 10:95:a8:d0:34:9b:63:c6:e1:11:42:8f:2b:cc:db: a5:9d:66:e7:9b:d9:ad:82:ab:3a:04:3c:b7:e7:83: 37:63:9d:df:67:ac:57:45:d6:da:1b:99:f2:9c:81: 7f:f6:f4:8e:cd:f4:36:c4:c5:c1:03:d7:ac:36:38: 52:69:80:96:51:54:12:81:31:f7:24:b1:6a:80:85: 7b:e7:54:2f:71:05:82:26:19:f1:f6:d9:2e:57:81: 8a:03:aa:aa:e5:39:73:f3:9f:48:11:b0:1c:fe:bc: 46:60:1d:fb:0f:97:39:4a:d5:c1:04:c9:cc:91:5a: b9:79:ac:7d:e3:b6:e9:aa:03:e9:32:47:e2:12:b5: bc:b1:36:a0:99:66:38:9b:d6:f8:99:9f:68:0a:42: c1:76:30:97:25:6d:ea:be:06:f9:08:e3:d5:cc:b0: cb:f5:40:00:9d:c8:28:f5:39:d5:18:3d:a6:b9:b2: 83:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E4:7C:6A:4B:2B:C7:43:68:6F:3E:12:4B:A4:DC:BC:2E:DC:4B:98 X509v3 Authority Key Identifier: keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:d1:c8:1d:bb:21:26:34:c4:69:0c:8d:81:4a:8f:37:7e:e0: b5:8d:e6:89:d0:d1:ae:a3:49:65:54:ec:e0:43:d8:b2:9a:92: 32:23:0e:37:f4:ea:cb:a5:3e:fb:d5:f5:20:35:36:2d:c6:55: 47:85:15:cf:7e:8a:cc:2c:50:32:43:cb:cc:39:16:aa:19:45: 65:36:2a:c3:26:5b:c6:73:49:df:69:df:9f:da:31:f5:57:10: 78:cf:32:65:8d:5f:ab:69:d1:01:55:9a:07:24:6f:d5:9e:85: f4:de:c8:17:50:5d:ba:dd:6b:fa:c7:63:18:10:eb:b4:45:14: 02:6c:76:50:7f:50:99:64:ac:5d:f2:05:fc:e5:82:54:4b:22: f6:cb:be:84:4f:76:e4:f3:bf:0b:44:85:af:4a:04:e9:50:94: c2:cf:8a:f2:e6:1e:d1:07:3d:53:4d:0e:81:54:7d:2d:5e:fb: ae:80:d8:b6:de:21:f9:8f:c8:2b:bf:17:6e:3c:51:3a:2e:bf: ff:a4:b1:d9:62:98:30:c7:de:5a:1d:7e:12:f9:01:de:87:af: 0c:af:bb:29:93:01:16:a7:84:fd:66:70:65:cd:ce:89:53:19: a4:58:13:be:10:66:9f:2e:db:38:da:93:ac:4f:91:3a:92:b8: e2:1d:a0:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1REMxMTAvBgNVBAUTKEQxMEU0M0UwNTkzREVGMURCOEQ3RjQ0QzZGMUNEMTNF NzNDMkYyMzAwHhcNMjUxMDE4MjAwNTIxWhcNMjUxMDI1MjAwNTIxWjAYMRYwFAYD VQQDEw02OGYzZjMwMS04NzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuK6vTgAf02Ucy1qXySDE3rWQwRzPDA79Xy6CLTkXKxjw9Xg+CP+F1KRDo6Wc gSoYjV4MBE17MsA3Wbc4glNOQw0TKi8mi55KMdQQlajQNJtjxuERQo8rzNulnWbn m9mtgqs6BDy354M3Y53fZ6xXRdbaG5nynIF/9vSOzfQ2xMXBA9esNjhSaYCWUVQS gTH3JLFqgIV751QvcQWCJhnx9tkuV4GKA6qq5Tlz859IEbAc/rxGYB37D5c5StXB BMnMkVq5eax947bpqgPpMkfiErW8sTagmWY4m9b4mZ9oCkLBdjCXJW3qvgb5COPV zLDL9UAAncgo9TnVGD2mubKD6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbkfGpL K8dDaG8+Ekuk3Lwu3EuYMB8GA1UdIwQYMBaAFNEOQ+BZPe8duNf0TG8c0T5zwvIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVEQy80NjEyRDUxRTQz MTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4MjQxX1JNYnh6UlBuUEM4 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRNUQ0Rms5N3gyNDFfUk1ieHpSUG5QQzhqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVEQy80NjEyRDUxRTQzMTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4 MjQxX1JNYnh6UlBuUEM4akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl0cgduyEmNMRpDI2BSo83fuC1jeaJ0NGuo0llVOzgQ9iympIyIw43 9OrLpT771fUgNTYtxlVHhRXPforMLFAyQ8vMORaqGUVlNirDJlvGc0nfad+f2jH1 VxB4zzJljV+radEBVZoHJG/VnoX03sgXUF263Wv6x2MYEOu0RRQCbHZQf1CZZKxd 8gX85YJUSyL2y76ET3bk878LRIWvSgTpUJTCz4ry5h7RBz1TTQ6BVH0tXvuugNi2 3iH5j8grvxduPFE6Lr//pLHZYpgwx95aHX4S+QHeh68Mr7spkwEWp4T9ZnBlzc6J UxmkWBO+EGafLts42pOsT5E6krjiHaCZ -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:59 2025 by rpki-client