$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft File: 0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json) Hash identifier: H4Bj8hmjDyuB2Ck2A7kPGbzWOzQCXo2t70cVUfO6txw= Subject key identifier: 61:5E:54:C0:01:5B:F0:BA:FB:94:2A:4F:25:66:68:0D:37:CD:8F:F0 Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Certificate serial: 0B22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft Manifest number: 0B16 Signing time: Mon 20 Oct 2025 20:03:09 +0000 Manifest this update: Mon 20 Oct 2025 20:03:08 +0000 Manifest next update: Mon 27 Oct 2025 20:03:08 +0000 Files and hashes: 1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: t6xK3WFpX2ma0Pbzwlo1vuRRXKAF9caPtUjDacBEt0k=) 2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: rFiMZXa2OxD0Ej0KwFsbxfHbUbN1ZogDT7O8NAGWwno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2850 (0xb22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Validity Not Before: Oct 20 20:03:08 2025 GMT Not After : Oct 27 20:03:08 2025 GMT Subject: CN=68f6957c-d6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:17:ba:73:0c:ef:35:4d:6a:fc:2a:13:4f:16: 19:88:fb:4b:b7:1c:62:1e:19:75:a1:9f:d8:83:d3: bd:9c:79:39:59:8d:ee:d8:0e:eb:e4:da:93:fa:59: 03:3f:47:78:52:e9:34:7f:d0:19:c9:1a:a7:ce:43: 37:d7:9f:be:d1:da:f9:f3:c9:11:52:0b:fe:55:ba: 7f:21:9a:c7:3d:91:37:41:0d:24:04:56:89:ed:27: a2:6c:b3:07:39:18:78:cc:b7:fb:8c:a4:d1:97:68: 0c:87:d0:33:95:f8:b9:de:c0:02:d5:8e:b2:b6:e2: 99:4b:47:7e:b1:a2:27:bd:93:36:bc:72:30:85:eb: 63:01:cf:33:8b:81:45:bd:3d:ba:05:90:36:14:7a: 5c:39:ef:63:60:71:06:58:a6:c5:95:4f:d4:b0:d3: a9:dd:05:ed:05:09:bc:36:a4:26:c2:f8:24:32:50: 65:65:3d:01:cd:c9:0a:08:05:ce:e9:d1:89:eb:9f: 45:95:6d:d9:45:93:56:4d:bf:5c:16:cc:6c:0e:57: 7e:6e:51:60:f1:5f:51:44:16:c0:24:b5:33:a2:4b: 64:bd:73:73:be:9f:8e:8f:23:4e:9c:69:02:a2:e1: b4:b6:96:4e:59:e6:cd:8c:2c:b4:d7:b0:f8:87:22: bf:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5E:54:C0:01:5B:F0:BA:FB:94:2A:4F:25:66:68:0D:37:CD:8F:F0 X509v3 Authority Key Identifier: keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:5c:0c:51:08:45:a3:54:98:93:48:7c:fa:98:0a:41:90:3e: cc:11:b8:92:a5:06:8f:a0:a4:c2:f2:2e:8b:3c:e0:17:df:98: 65:84:65:5b:61:67:c0:87:c1:d4:47:8b:20:4d:4a:c4:8e:c1: 01:e7:24:1a:27:a3:ca:47:1d:db:df:cc:04:f9:62:da:57:69: 65:4a:49:50:ba:3f:76:72:93:3d:c5:bc:8e:a6:c4:0c:72:1d: 58:e7:d6:04:b4:b9:03:90:74:c9:b6:37:2b:d2:b1:84:5b:67: 5b:3c:38:2b:74:88:ce:e6:54:35:4d:d5:10:ff:af:33:b3:32: 03:64:a0:86:c0:a3:5a:d6:0b:9b:f4:24:80:10:35:3b:c7:80: 91:6b:1d:ba:39:12:6c:8f:c4:97:c1:5e:c8:79:62:e4:13:08: 54:af:dd:b3:c6:a1:7d:cc:5e:ad:0c:03:60:a3:f1:84:fa:3f: 76:a3:4f:92:24:a9:f9:7a:d4:a8:a6:3c:c0:2e:3b:b0:be:89: 34:c7:f6:a0:c9:da:2e:0f:ab:b9:6e:f2:f9:e7:61:40:06:57: fc:6a:ca:e3:fc:d6:40:d7:9c:12:24:e5:d0:c3:8d:52:88:86: 20:70:88:d4:a5:a1:22:c7:6f:a4:1b:47:62:56:36:a8:9b:f8: 96:dc:f4:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGRTgxMTAvBgNVBAUTKEQwMkQ5MEZCOTEyQTU5NjBCQkU1NkNCNEU3NTM1MTZB MjRDNkVGN0IwHhcNMjUxMDIwMjAwMzA4WhcNMjUxMDI3MjAwMzA4WjAYMRYwFAYD VQQDEw02OGY2OTU3Yy1kNmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Be6cwzvNU1q/CoTTxYZiPtLtxxiHhl1oZ/Yg9O9nHk5WY3u2A7r5NqT+lkD P0d4Uuk0f9AZyRqnzkM315++0dr588kRUgv+Vbp/IZrHPZE3QQ0kBFaJ7SeibLMH ORh4zLf7jKTRl2gMh9Azlfi53sAC1Y6ytuKZS0d+saInvZM2vHIwhetjAc8zi4FF vT26BZA2FHpcOe9jYHEGWKbFlU/UsNOp3QXtBQm8NqQmwvgkMlBlZT0BzckKCAXO 6dGJ659FlW3ZRZNWTb9cFsxsDld+blFg8V9RRBbAJLUzoktkvXNzvp+OjyNOnGkC ouG0tpZOWebNjCy017D4hyK/KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGFeVMAB W/C6+5QqTyVmaA03zY/wMB8GA1UdIwQYMBaAFNAtkPuRKllgu+VstOdTUWokxu97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEZFOC8xMkY5NkZCMjRF RkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdXQzc1V3kwNTFOUmFpVEc3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBDMlEtNUVxV1dDNzVXeTA1MU5SYWlURzczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEZFOC8xMkY5NkZCMjRFRkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdX Qzc1V3kwNTFOUmFpVEc3M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMXAxRCEWjVJiTSHz6mApBkD7MEbiSpQaPoKTC8i6LPOAX35hlhGVb YWfAh8HUR4sgTUrEjsEB5yQaJ6PKRx3b38wE+WLaV2llSklQuj92cpM9xbyOpsQM ch1Y59YEtLkDkHTJtjcr0rGEW2dbPDgrdIjO5lQ1TdUQ/68zszIDZKCGwKNa1gub 9CSAEDU7x4CRax26ORJsj8SXwV7IeWLkEwhUr92zxqF9zF6tDANgo/GE+j92o0+S JKn5etSopjzALjuwvok0x/agydouD6u5bvL552FABlf8asrj/NZA15wSJOXQw41S iIYgcIjUpaEix2+kG0diVjaom/iW3PS5 -----END CERTIFICATE-----Generated at Tue Oct 21 02:11:22 2025 by rpki-client