$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json) Hash identifier: ZAAPTjbhznR1BWkRsRoyXnHjNgXyRArgRQRI9WElolk= Subject key identifier: 86:B0:8C:6D:D0:39:AA:19:06:FF:FB:13:39:0C:D9:CD:CA:98:34:76 Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Certificate serial: 08F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft Manifest number: 08E6 Signing time: Sat 18 Oct 2025 21:28:55 +0000 Manifest this update: Sat 18 Oct 2025 21:28:54 +0000 Manifest next update: Sat 25 Oct 2025 21:28:54 +0000 Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: FSnSHOT8gkH6zGvRkNTiG4CjTGJvCVywYoni57dpRSo=) 2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: JY394gUy9qqM6BqtEt3A+TeeEC3ZSaP+KRzIxp12INs=) 3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: pwrQo06SW1WaZHmpSMN3Di6drTMadsg0IhrZWaRW7r4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2289 (0x8f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Validity Not Before: Oct 18 21:28:54 2025 GMT Not After : Oct 25 21:28:54 2025 GMT Subject: CN=68f40696-862c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:27:7f:99:85:46:ac:31:d4:50:0b:53:75:6d: 2d:b3:12:69:1e:45:1c:af:c9:79:5b:3b:7f:df:d5: 4c:7c:49:d7:58:7d:e8:83:8d:1f:d8:93:1d:d0:05: d0:4a:6c:86:90:d5:b3:81:55:98:38:47:3e:aa:1a: 49:81:eb:5b:2a:7e:57:d7:b1:35:a5:43:df:ab:a2: 0d:76:4a:dc:8a:6b:ff:d4:0c:94:06:cd:9d:89:b6: 67:82:de:07:74:73:5a:cf:81:a0:0a:4f:25:b5:39: f6:6f:58:56:b0:59:21:f0:eb:f8:24:ba:cb:77:0e: c1:b4:41:df:a1:77:63:19:da:cd:a9:f6:d1:bf:04: d5:4a:e7:78:5b:24:c8:44:8c:b2:21:85:33:6c:a4: dd:d4:86:a1:9c:e9:24:97:28:5e:13:d3:08:7f:0f: 8a:83:da:d3:5d:d5:f7:2b:48:73:4a:75:1b:29:7c: 57:54:a8:2f:37:79:4b:a3:ea:18:37:73:e2:d5:f0: 54:0f:c8:be:b7:22:45:ca:88:c5:84:1b:95:0c:78: c1:e9:88:f1:7b:85:cd:f5:40:42:88:b4:c3:c2:6a: 70:5c:ff:66:21:92:7b:a9:3b:00:cd:78:5e:e7:61: 06:c2:78:da:93:f2:0c:95:19:3c:4b:bf:c5:68:a9: 61:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B0:8C:6D:D0:39:AA:19:06:FF:FB:13:39:0C:D9:CD:CA:98:34:76 X509v3 Authority Key Identifier: keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d3:84:2d:24:2e:7c:b1:94:8e:46:df:f5:73:02:ce:3a:79: 05:2b:c6:e9:88:99:7e:c6:37:4a:37:fa:95:c1:19:81:87:60: 83:fa:e5:45:31:e9:81:af:b0:57:db:dc:ae:a6:bc:e7:7e:14: ce:6f:0d:12:45:4a:4a:12:56:82:13:52:3f:e8:f7:35:35:3f: 98:3e:cb:87:2c:78:b7:a3:fc:89:3c:2e:d3:d3:e7:52:ce:03: 43:13:85:74:66:e8:30:2a:ce:44:27:9e:f0:41:aa:60:50:2b: ad:62:0d:8b:28:18:f6:ea:b3:68:30:17:b9:a3:2e:58:5a:e1: 26:6f:22:ea:c0:bf:91:bf:12:94:f9:b9:a3:23:4c:e8:ac:1b: 1d:fe:e8:93:59:2d:ba:0b:42:fd:70:d1:9e:e6:43:6a:1f:fb: 0c:53:0f:66:dc:f8:7e:0b:49:bf:37:00:17:06:05:60:a9:1b: 06:49:c0:9e:6c:bb:d1:50:5c:31:03:df:36:ba:3c:1b:3a:7a: 9f:99:6f:b1:27:4d:ab:02:4d:4a:7b:b3:0e:f3:19:a0:ae:a6: bb:87:98:ed:ac:0e:80:d9:dc:ce:bb:87:f0:34:8b:8c:20:06: 08:e7:77:1c:57:43:9c:c6:2f:03:0d:2a:1b:e1:e3:24:51:b3: 86:b0:74:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3 QzNBRkU0MDMwHhcNMjUxMDE4MjEyODU0WhcNMjUxMDI1MjEyODU0WjAYMRYwFAYD VQQDEw02OGY0MDY5Ni04NjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyd/mYVGrDHUUAtTdW0tsxJpHkUcr8l5Wzt/39VMfEnXWH3og40f2JMd0AXQ SmyGkNWzgVWYOEc+qhpJgetbKn5X17E1pUPfq6INdkrcimv/1AyUBs2dibZngt4H dHNaz4GgCk8ltTn2b1hWsFkh8Ov4JLrLdw7BtEHfoXdjGdrNqfbRvwTVSud4WyTI RIyyIYUzbKTd1IahnOkklyheE9MIfw+Kg9rTXdX3K0hzSnUbKXxXVKgvN3lLo+oY N3Pi1fBUD8i+tyJFyojFhBuVDHjB6Yjxe4XN9UBCiLTDwmpwXP9mIZJ7qTsAzXhe 52EGwnjak/IMlRk8S7/FaKlhGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIawjG3Q OaoZBv/7EzkM2c3KmDR2MB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTJGNy83Q0M0NUZBRUJBQUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElk UjdHelZad0oxdXA4T3Y1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB904QtJC58sZSORt/1cwLOOnkFK8bpiJl+xjdKN/qVwRmBh2CD+uVF MemBr7BX29yuprznfhTObw0SRUpKElaCE1I/6Pc1NT+YPsuHLHi3o/yJPC7T0+dS zgNDE4V0ZugwKs5EJ57wQapgUCutYg2LKBj26rNoMBe5oy5YWuEmbyLqwL+RvxKU +bmjI0zorBsd/uiTWS26C0L9cNGe5kNqH/sMUw9m3Ph+C0m/NwAXBgVgqRsGScCe bLvRUFwxA982ujwbOnqfmW+xJ02rAk1Ke7MO8xmgrqa7h5jtrA6A2dzOu4fwNIuM IAYI53ccV0Ocxi8DDSob4eMkUbOGsHQT -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:32 2025 by rpki-client