$ rpki-client -vvf rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft File: q0w-Na78VbW6NYykBu2WJqQiD9A.mft (raw, json) Hash identifier: 4goZq5MP37gmqWOY1XxmQS4JB/SS79yHmieNOLey6eM= Subject key identifier: 2F:77:BE:0E:54:15:1E:97:16:E2:D4:1E:A6:DC:FD:E1:4E:ED:74:35 Authority key identifier: AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0 Certificate issuer: /CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0 Certificate serial: 0B01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft Manifest number: 0AF2 Signing time: Sat 18 Oct 2025 20:21:08 +0000 Manifest this update: Sat 18 Oct 2025 20:21:07 +0000 Manifest next update: Sat 25 Oct 2025 20:21:07 +0000 Files and hashes: 1: q0w-Na78VbW6NYykBu2WJqQiD9A.crl (hash: GpFhfsPfF/rS/BpeL534kgUQhY4j+7DkjEZAEoWzG2g=) 2: 7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa (hash: Q8JrUCR4e83/VWNJt2ZiQdVnlQqYm7C09//kOXveNys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2817 (0xb01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A553, serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0 Validity Not Before: Oct 18 20:21:07 2025 GMT Not After : Oct 25 20:21:07 2025 GMT Subject: CN=68f3f6b4-b407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:41:53:2a:a5:2b:2d:85:e9:e5:36:d4:5a:87: 20:f9:39:6b:70:88:08:9f:c5:1e:25:2a:bf:4c:8b: 5c:96:91:2d:69:d5:af:74:13:8f:7f:4b:4d:9e:98: d8:e6:46:6d:93:fc:6f:c0:75:b5:cf:8a:a9:cc:89: a9:e6:72:5e:26:08:ae:3f:c6:80:78:f7:3a:0d:98: 28:cd:18:14:1b:b2:c9:8e:97:cd:f3:1c:4e:eb:0c: 75:3e:6e:be:ed:f7:98:6e:4e:b8:9f:4b:a7:b9:c5: 4e:d7:2b:87:fd:cf:ea:fd:fa:a7:22:fa:83:2b:40: c7:7f:6a:2f:10:91:02:48:23:28:ca:6d:e2:c1:f1: b2:cf:1d:86:63:d9:1c:e8:ad:e1:1d:48:5d:66:68: d4:32:34:58:bd:b4:c9:0c:c4:45:96:86:f4:f3:43: 6f:79:c5:ef:23:d5:9e:4a:9a:5b:c0:b8:10:b5:84: 80:78:1c:8f:e2:a3:75:0a:30:43:43:0a:83:8e:0f: c6:d2:c0:c1:54:9d:54:ed:70:04:f3:d0:63:08:34: f3:f6:01:23:28:cd:f6:ed:6f:a6:75:29:82:9b:0c: 47:26:f4:04:84:e9:da:53:8f:20:51:45:18:a2:d1: b8:17:1a:b0:fe:4a:94:f0:aa:5a:8f:54:90:96:00: 46:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:77:BE:0E:54:15:1E:97:16:E2:D4:1E:A6:DC:FD:E1:4E:ED:74:35 X509v3 Authority Key Identifier: keyid:AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:12:af:ed:9f:dc:d7:73:c2:9b:80:ed:14:14:2e:18:dd:77: eb:ce:0f:c6:03:eb:94:16:09:c1:0c:44:9b:12:20:a4:c7:d9: d0:99:49:df:d5:d9:43:d7:02:4f:6a:5d:c1:fd:53:ba:85:1a: 4a:b3:c0:f4:1f:5e:a4:11:6d:33:dc:55:dd:59:89:57:d5:10: 68:68:ab:7a:1d:51:31:d4:77:d8:59:2e:b1:ac:9e:bf:77:02: 68:fe:cd:3d:70:f7:61:dd:43:78:13:a6:b4:e5:f3:52:78:8a: 04:c1:4a:9f:0e:07:11:08:85:04:e9:da:a1:ab:47:35:90:a5: 8a:c5:9b:dc:2b:bf:da:1f:50:dc:c5:37:0d:b0:14:cd:3b:87: 92:83:27:34:95:20:23:16:00:5c:0f:b2:a0:f0:84:d6:ee:d0: 97:c1:7d:e3:10:f8:be:82:f2:89:b6:0b:0b:e8:fc:7a:5c:5e: e1:ec:fd:9f:84:b1:b9:1d:66:a3:d4:15:d2:e8:ac:17:af:d3: df:1c:10:8a:99:fd:ea:e7:45:81:2d:d4:45:d9:95:42:1c:e6: 0c:ed:dc:75:e7:70:ac:16:c8:24:fb:80:50:f0:ae:b8:bc:73: ee:16:61:e0:c0:76:f1:d5:bf:d2:87:40:be:e7:4d:61:be:bd: b9:a3:5b:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1NTMxMTAvBgNVBAUTKEFCNEMzRTM1QUVGQzU1QjVCQTM1OENBNDA2RUQ5NjI2 QTQyMjBGRDAwHhcNMjUxMDE4MjAyMTA3WhcNMjUxMDI1MjAyMTA3WjAYMRYwFAYD VQQDEw02OGYzZjZiNC1iNDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5EFTKqUrLYXp5TbUWocg+TlrcIgIn8UeJSq/TItclpEtadWvdBOPf0tNnpjY 5kZtk/xvwHW1z4qpzImp5nJeJgiuP8aAePc6DZgozRgUG7LJjpfN8xxO6wx1Pm6+ 7feYbk64n0unucVO1yuH/c/q/fqnIvqDK0DHf2ovEJECSCMoym3iwfGyzx2GY9kc 6K3hHUhdZmjUMjRYvbTJDMRFlob080NvecXvI9WeSppbwLgQtYSAeByP4qN1CjBD QwqDjg/G0sDBVJ1U7XAE89BjCDTz9gEjKM327W+mdSmCmwxHJvQEhOnaU48gUUUY otG4Fxqw/kqU8Kpaj1SQlgBGbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC93vg5U FR6XFuLUHqbc/eFO7XQ1MB8GA1UdIwQYMBaAFKtMPjWu/FW1ujWMpAbtliakIg/Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1My85NUM4QTNFNDU3 QTMxMUVBQTkzNUMwODNDNEY5QUUwMi9xMHctTmE3OFZiVzZOWXlrQnUyV0pxUWlE OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Ewdy1OYTc4VmJXNk5ZeWtCdTJXSnFRaUQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU1My85NUM4QTNFNDU3QTMxMUVBQTkzNUMwODNDNEY5QUUwMi9xMHctTmE3OFZi VzZOWXlrQnUyV0pxUWlEOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmEq/tn9zXc8KbgO0UFC4Y3Xfrzg/GA+uUFgnBDESbEiCkx9nQmUnf 1dlD1wJPal3B/VO6hRpKs8D0H16kEW0z3FXdWYlX1RBoaKt6HVEx1HfYWS6xrJ6/ dwJo/s09cPdh3UN4E6a05fNSeIoEwUqfDgcRCIUE6dqhq0c1kKWKxZvcK7/aH1Dc xTcNsBTNO4eSgyc0lSAjFgBcD7Kg8ITW7tCXwX3jEPi+gvKJtgsL6Px6XF7h7P2f hLG5HWaj1BXS6KwXr9PfHBCKmf3q50WBLdRF2ZVCHOYM7dx153CsFsgk+4BQ8K64 vHPuFmHgwHbx1b/Sh0C+501hvr25o1vJ -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:21 2025 by rpki-client