$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft File: 5OZ6308FfoAR2ixoJJ18JW1QB0E.mft (raw, json) Hash identifier: jQl9G2aKWDuzCo5q5VNROKu91kmCaKkMXfgFBiUfA2s= Subject key identifier: C5:36:26:F8:81:81:29:BC:19:48:2A:DF:94:55:D7:73:C9:B1:F8:4E Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 Certificate issuer: /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft Manifest number: 01E2 Signing time: Sun 19 Oct 2025 05:07:33 +0000 Manifest this update: Sun 19 Oct 2025 05:07:32 +0000 Manifest next update: Sun 26 Oct 2025 05:07:32 +0000 Files and hashes: 1: 5OZ6308FfoAR2ixoJJ18JW1QB0E.crl (hash: 8DDaBxxGKuAAvp9kNvKXcb9+9p91nllTOa5j5uvFFko=) 2: A6E025D4CEB111EDAE111B61C4F9AE02.roa (hash: b8ZzvlKgDQGk0f2Mf7aPG61cEDCQRJBc44944Geb3Mc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:07:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741 Validity Not Before: Oct 19 05:07:32 2025 GMT Not After : Oct 26 05:07:32 2025 GMT Subject: CN=68f47215-edd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:97:e7:71:8b:df:d4:1b:38:2b:1b:2e:6f:9e: 68:98:72:f8:97:d2:33:68:0a:74:5b:17:5c:65:05: 6c:b5:a8:47:82:83:a4:62:f5:30:1d:e0:5a:53:84: 8a:f5:be:0d:45:1e:f8:ca:37:1e:d3:bc:99:34:e5: 7f:b3:d1:07:6a:2c:d3:cc:f9:77:e6:53:23:09:9c: d4:bc:be:df:a6:06:76:6a:43:83:9f:a8:4b:fe:31: cb:1b:43:3f:26:35:b9:78:70:9f:3c:e5:e1:9f:9b: dd:bc:59:3c:07:60:ef:f1:da:53:1e:e7:a3:5e:5a: d4:12:8d:41:49:6b:db:78:3b:3a:f3:68:ff:72:c7: c4:ca:5f:c2:a2:e8:c4:ce:3f:d9:ee:0b:5f:22:86: f3:0f:d7:71:38:3a:b0:40:35:52:b5:5e:81:f0:23: a1:1b:ac:20:42:a8:f3:fc:33:a1:aa:37:49:f4:f4: 46:59:5b:a9:ee:40:91:1a:10:b7:7b:dc:86:3e:45: 22:89:a9:e1:00:e9:cd:45:ba:0c:f5:e2:6b:9e:2c: 12:61:5d:fd:2c:7e:20:a9:47:a7:5c:79:17:ec:6b: 16:66:70:a8:86:69:8f:d3:59:38:e2:27:48:06:8d: 5f:4a:12:68:b9:55:ab:f7:97:7a:62:88:fd:54:82: db:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:36:26:F8:81:81:29:BC:19:48:2A:DF:94:55:D7:73:C9:B1:F8:4E X509v3 Authority Key Identifier: keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:84:82:83:ce:33:54:e4:ea:c6:e9:18:6e:2e:1e:ff:68:ad: f6:7e:c7:2d:e8:ef:8f:51:8f:34:1b:b5:0c:2d:c7:8e:22:00: e9:c8:dc:00:6f:12:98:28:86:d4:5d:2d:08:e3:0e:b0:2c:4d: b2:61:a1:a0:c1:36:97:48:be:cf:7c:24:ef:14:94:24:a2:68: 11:a2:cb:76:dd:13:3c:31:cb:aa:9a:d8:a6:29:47:ad:5c:c6: 5c:e3:41:8b:3e:46:cd:85:6a:fa:8d:aa:c0:10:0d:e8:3b:77: 18:3b:65:37:7e:bb:98:e2:72:00:64:bf:ca:95:83:42:b2:db: 8f:5a:e3:bb:0f:cd:86:03:bf:0f:85:d7:5e:4d:64:4e:54:53: 59:1d:84:13:a0:d5:6d:ce:4e:33:af:f2:db:0b:be:5c:8e:13: 12:08:26:4e:bd:af:26:64:85:a5:37:55:33:9f:4b:b7:80:37: 0c:28:3b:ae:5a:dd:e6:0e:58:bf:7a:d1:50:cc:0e:6f:16:4c: 34:ba:fc:ea:80:a7:da:ee:e8:3b:48:28:40:cd:c9:f6:71:22: 34:2b:bc:81:c4:64:dc:bd:79:b6:9c:10:8d:5d:8a:68:63:36: dc:33:2d:1f:54:11:a1:1e:73:59:81:e4:14:bc:08:9c:26:95: d2:60:ff:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IzRDYxMTAvBgNVBAUTKEU0RTY3QURGNEYwNTdFODAxMURBMkM2ODI0OUQ3QzI1 NkQ1MDA3NDEwHhcNMjUxMDE5MDUwNzMyWhcNMjUxMDI2MDUwNzMyWjAYMRYwFAYD VQQDEw02OGY0NzIxNS1lZGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpfncYvf1Bs4Kxsub55omHL4l9IzaAp0WxdcZQVstahHgoOkYvUwHeBaU4SK 9b4NRR74yjce07yZNOV/s9EHaizTzPl35lMjCZzUvL7fpgZ2akODn6hL/jHLG0M/ JjW5eHCfPOXhn5vdvFk8B2Dv8dpTHuejXlrUEo1BSWvbeDs682j/csfEyl/CoujE zj/Z7gtfIobzD9dxODqwQDVStV6B8COhG6wgQqjz/DOhqjdJ9PRGWVup7kCRGhC3 e9yGPkUiianhAOnNRboM9eJrniwSYV39LH4gqUenXHkX7GsWZnCohmmP01k44idI Bo1fShJouVWr95d6Yoj9VILbwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMU2JviB gSm8GUgq35RV13PJsfhOMB8GA1UdIwQYMBaAFOTmet9PBX6AEdosaCSdfCVtUAdB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjNENi80NkVDMURFNENF QTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZvQVIyaXhvSkoxOEpXMVFC MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPWjYzMDhGZm9BUjJpeG9KSjE4SlcxUUIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjNENi80NkVDMURFNENFQTMxMUVEQjMwM0Y3MzhDNEY5QUUwMi81T1o2MzA4RmZv QVIyaXhvSkoxOEpXMVFCMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCthIKDzjNU5OrG6RhuLh7/aK32fsct6O+PUY80G7UMLceOIgDpyNwA bxKYKIbUXS0I4w6wLE2yYaGgwTaXSL7PfCTvFJQkomgRost23RM8McuqmtimKUet XMZc40GLPkbNhWr6jarAEA3oO3cYO2U3fruY4nIAZL/KlYNCstuPWuO7D82GA78P hddeTWROVFNZHYQToNVtzk4zr/LbC75cjhMSCCZOva8mZIWlN1Uzn0u3gDcMKDuu Wt3mDli/etFQzA5vFkw0uvzqgKfa7ug7SChAzcn2cSI0K7yBxGTcvXm2nBCNXYpo YzbcMy0fVBGhHnNZgeQUvAicJpXSYP9F -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:29 2025 by rpki-client