$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft File: h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft (raw, json) Hash identifier: xOGHrELo3waICasY4AjBqss+FhQYOXxytS3Xp1H/Vss= Subject key identifier: 6B:1E:0C:BE:4C:00:0F:18:4C:92:26:52:68:E1:B1:B3:2A:C3:3C:44 Authority key identifier: 87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C Certificate issuer: /CN=A916BCDF/serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C Certificate serial: 1268 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft Manifest number: 1259 Signing time: Mon 20 Oct 2025 17:33:01 +0000 Manifest this update: Mon 20 Oct 2025 17:33:00 +0000 Manifest next update: Mon 27 Oct 2025 17:33:00 +0000 Files and hashes: 1: h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl (hash: XzigJafNl3fwc8OpLzouOpRCKhXv0hXKS6+c73XL13w=) 2: 698B3FA6986011EE969A225FC4F9AE02.roa (hash: IPMaIsA9uRnd6F5Aml0jreWHK2WPPMV0a6PLoDBBAuw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4712 (0x1268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BCDF, serialNumber=87954C0231CAACB2BE2DFDB567C74AF5ECB75B0C Validity Not Before: Oct 20 17:33:00 2025 GMT Not After : Oct 27 17:33:00 2025 GMT Subject: CN=68f6724d-f929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:51:b1:e8:39:90:a9:9f:82:eb:3b:68:b4:ec: ef:55:eb:bf:7e:97:7a:61:d3:ec:65:e2:44:38:fc: 2d:cb:30:d2:c0:ab:58:44:61:3e:2e:66:bd:cf:24: 82:1d:a6:4d:84:50:ef:42:7f:a7:6d:97:83:8c:ca: e6:e6:0a:c9:e8:44:50:7a:6f:50:89:f0:e4:8e:6c: ff:b7:47:a6:46:e3:3d:18:57:ef:37:d8:36:29:ac: 20:87:b1:f2:33:c8:2c:e3:6a:6f:91:e1:83:4a:86: 85:aa:ff:cc:01:e0:5b:45:ef:ae:f2:0b:f1:8f:e8: 7f:b7:0d:e3:43:06:05:de:35:2f:2a:ae:b2:6c:ee: 67:24:bf:e5:27:2d:a1:6a:a8:cd:e5:f8:33:87:4c: 41:62:02:e6:12:cc:17:53:2a:83:66:65:9d:4f:bd: f3:1e:bf:7f:c5:c1:b9:f1:55:de:b0:ec:0f:86:51: ac:b1:2e:3f:43:84:7b:02:9e:b8:46:1e:4f:05:8c: 6a:e2:28:5f:5a:fb:c4:0f:3a:bb:35:05:ab:93:ec: e6:3b:74:f4:b5:ed:db:de:a7:fd:8d:1f:15:61:fd: 0b:5b:8c:b8:b8:10:4b:e6:38:ed:22:79:ca:48:e0: 7d:25:3a:eb:d6:c4:18:07:dc:0b:7c:53:c4:80:7c: a3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1E:0C:BE:4C:00:0F:18:4C:92:26:52:68:E1:B1:B3:2A:C3:3C:44 X509v3 Authority Key Identifier: keyid:87:95:4C:02:31:CA:AC:B2:BE:2D:FD:B5:67:C7:4A:F5:EC:B7:5B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h5VMAjHKrLK-Lf21Z8dK9ey3Www.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/ECE0FBE6E36D11E8956F3516C4F9AE02/h5VMAjHKrLK-Lf21Z8dK9ey3Www.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:d2:20:a3:48:fa:d3:a8:05:60:fb:cf:b9:f6:0a:83:01:f9: c8:45:c1:14:cb:ae:69:88:6c:75:45:27:b7:c6:ee:a5:ca:18: 27:f3:09:bf:55:78:b2:17:a0:54:20:81:e4:15:4b:52:5e:f4: b3:37:59:2f:d5:0b:bb:fd:0f:e9:ab:2f:5a:b0:bb:ff:ee:77: ba:37:90:7d:cd:a0:01:6b:3c:9e:94:21:db:b0:85:d3:09:b7: 67:ad:5a:9d:d4:4a:9d:bb:7a:53:24:cc:b0:a4:f6:aa:9c:7f: ca:a5:f6:f7:2d:ef:67:9c:08:c8:b1:6b:6a:68:44:1f:96:2c: 59:ae:44:5c:60:05:3e:61:f3:99:de:47:98:ba:03:23:a7:99: 7e:9b:84:0b:4d:e8:48:97:c2:01:6f:07:93:4c:60:4c:42:38: bc:aa:5c:20:87:29:78:b6:80:5d:bc:e8:99:89:10:f7:74:54: 36:fe:52:35:b4:66:5e:b3:a2:5a:54:70:d9:9b:2f:8c:b3:56: 8b:b5:53:9d:71:8d:87:5e:12:de:19:e9:41:bb:50:f8:08:dd: 49:e6:81:1a:eb:b3:a0:1e:e2:bf:76:1a:01:8e:fc:0d:d9:99: 30:bb:14:3d:fa:b0:b2:75:a4:ce:d3:9a:df:8e:29:6c:9b:69: cf:ab:17:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJDREYxMTAvBgNVBAUTKDg3OTU0QzAyMzFDQUFDQjJCRTJERkRCNTY3Qzc0QUY1 RUNCNzVCMEMwHhcNMjUxMDIwMTczMzAwWhcNMjUxMDI3MTczMzAwWjAYMRYwFAYD VQQDEw02OGY2NzI0ZC1mOTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1Gx6DmQqZ+C6ztotOzvVeu/fpd6YdPsZeJEOPwtyzDSwKtYRGE+Lma9zySC HaZNhFDvQn+nbZeDjMrm5grJ6ERQem9QifDkjmz/t0emRuM9GFfvN9g2Kawgh7Hy M8gs42pvkeGDSoaFqv/MAeBbRe+u8gvxj+h/tw3jQwYF3jUvKq6ybO5nJL/lJy2h aqjN5fgzh0xBYgLmEswXUyqDZmWdT73zHr9/xcG58VXesOwPhlGssS4/Q4R7Ap64 Rh5PBYxq4ihfWvvEDzq7NQWrk+zmO3T0te3b3qf9jR8VYf0LW4y4uBBL5jjtInnK SOB9JTrr1sQYB9wLfFPEgHyjZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGseDL5M AA8YTJImUmjhsbMqwzxEMB8GA1UdIwQYMBaAFIeVTAIxyqyyvi39tWfHSvXst1sM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkNERi9FQ0UwRkJFNkUz NkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9oNVZNQWpIS3JMSy1MZjIxWjhkSzlleTNX d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2g1Vk1BakhLckxLLUxmMjFaOGRLOWV5M1d3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkNERi9FQ0UwRkJFNkUzNkQxMUU4OTU2RjM1MTZDNEY5QUUwMi9oNVZNQWpIS3JM Sy1MZjIxWjhkSzlleTNXd3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD0iCjSPrTqAVg+8+59gqDAfnIRcEUy65piGx1RSe3xu6lyhgn8wm/ VXiyF6BUIIHkFUtSXvSzN1kv1Qu7/Q/pqy9asLv/7ne6N5B9zaABazyelCHbsIXT CbdnrVqd1Eqdu3pTJMywpPaqnH/Kpfb3Le9nnAjIsWtqaEQflixZrkRcYAU+YfOZ 3keYugMjp5l+m4QLTehIl8IBbweTTGBMQji8qlwghyl4toBdvOiZiRD3dFQ2/lI1 tGZes6JaVHDZmy+Ms1aLtVOdcY2HXhLeGelBu1D4CN1J5oEa67OgHuK/dhoBjvwN 2ZkwuxQ9+rCydaTO05rfjilsm2nPqxcK -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:19 2025 by rpki-client