$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json) Hash identifier: NEhvsec+CM3y/DzuTeAC6V9t3NtKb6heurgRMWVoVUc= Subject key identifier: 14:90:4C:EE:8A:FE:FD:44:F5:07:B0:DB:40:8B:D7:45:D4:69:F1:7C Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft Manifest number: 0157 Signing time: Sun 19 Oct 2025 07:02:36 +0000 Manifest this update: Sun 19 Oct 2025 07:02:36 +0000 Manifest next update: Sun 26 Oct 2025 07:02:36 +0000 Files and hashes: 1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: DySeM9lxbCKbUS0ni5JPaI8waIJ8okdHRXUZh7cXpuI=) 2: 762CACD0B04311EF95390327C4F9AE02.roa (hash: 7lH097TnqT2Frr0JL7F0/A/6TnFN0hBEwwqzvbNC3Tc=) 3: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: iA4PiBqhCGu6j+QREktQJZZ0YDevgINmDR162rqZIpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Validity Not Before: Oct 19 07:02:36 2025 GMT Not After : Oct 26 07:02:36 2025 GMT Subject: CN=68f48d0c-59a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c3:fe:ea:dc:b0:7d:95:b1:df:d4:90:9b:00: e3:94:39:90:96:97:0d:d2:ac:43:ec:83:c6:eb:72: d1:74:c3:83:24:49:f8:93:75:fa:98:41:4f:8d:e9: 6d:4c:bb:fe:c3:d3:bf:1a:5b:36:bb:67:d0:4a:7c: fe:50:48:6c:e6:16:c0:83:04:e0:90:43:e6:ff:9a: 0a:5c:91:11:e8:8b:78:91:51:fa:27:3b:f2:ae:e9: b3:0b:aa:41:37:f8:47:bc:e0:12:e3:13:f0:88:a5: 77:45:34:06:ab:92:fc:7b:2e:11:3d:84:5f:f2:f6: e0:d6:1e:04:51:f9:e7:c9:6a:8d:81:2e:1d:58:3e: d2:60:9e:0f:2e:80:73:5d:42:aa:ef:02:be:e3:84: 0b:89:fc:2e:dc:41:03:db:44:70:b3:a0:6c:14:dd: 46:99:28:ea:7a:e7:8d:a7:21:ac:59:4c:00:f2:ff: 4b:91:59:14:01:9f:6a:c8:e2:fa:8f:34:00:b0:0f: 24:14:7d:ee:05:06:68:c8:70:93:ee:eb:4d:a0:f6: 4e:b8:ba:94:c5:ee:d5:32:d0:1b:0b:36:51:44:4a: a1:79:da:43:16:bf:ad:a1:69:0f:81:29:e3:13:a4: 55:ae:9f:e9:0c:b3:54:41:f7:8e:45:84:30:5d:7b: f2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:90:4C:EE:8A:FE:FD:44:F5:07:B0:DB:40:8B:D7:45:D4:69:F1:7C X509v3 Authority Key Identifier: keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:7b:3c:5f:67:09:82:cd:3a:97:92:21:cc:90:97:62:4b:65: 33:2c:d4:5c:32:9f:c2:f9:a6:11:03:69:4a:2e:50:21:82:5d: 91:df:f8:57:ec:d2:dc:6b:2b:65:9e:b4:72:42:1d:34:dc:30: 0f:bf:67:c4:4e:45:3e:39:ab:e5:ec:ae:61:6d:92:ce:b7:d4: 64:23:2e:ab:0e:bf:e9:2d:04:70:48:2b:22:87:47:af:d4:67: ed:21:7a:10:11:bb:b3:a5:ca:cc:ab:00:2b:d0:35:ec:a3:90: 7b:27:68:09:7b:96:9d:2d:0f:b8:9a:db:7c:1d:ad:01:f0:81: 1a:5f:a3:3b:83:6d:a3:7a:b6:95:7f:f6:e6:86:06:e7:91:03: 76:bb:d7:f3:44:6e:57:84:83:57:2a:6b:a4:de:f8:59:c4:c3: 19:29:c2:12:f0:77:95:81:3e:0e:48:73:b3:54:d8:ca:14:5d: 86:7e:26:d6:87:20:88:13:de:bb:9c:97:bc:bf:87:61:35:56: d9:c1:a2:58:58:b3:3a:28:1d:17:e7:2c:3e:38:d5:96:c0:ac: e7:f5:18:34:a3:ee:7c:26:34:fe:99:fd:5b:7a:cf:56:ad:92: 38:ca:1b:a4:85:9e:ad:85:f2:fe:d1:e7:08:dc:af:bc:c4:3a: 22:dc:ed:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMEQxMTAvBgNVBAUTKEIzOTkyRjBENDlCQUY2QTM2RkRBNjU4RTVCNDU5NDY5 NTIxRTVCNDQwHhcNMjUxMDE5MDcwMjM2WhcNMjUxMDI2MDcwMjM2WjAYMRYwFAYD VQQDEw02OGY0OGQwYy01OWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8P+6tywfZWx39SQmwDjlDmQlpcN0qxD7IPG63LRdMODJEn4k3X6mEFPjelt TLv+w9O/Gls2u2fQSnz+UEhs5hbAgwTgkEPm/5oKXJER6It4kVH6JzvyrumzC6pB N/hHvOAS4xPwiKV3RTQGq5L8ey4RPYRf8vbg1h4EUfnnyWqNgS4dWD7SYJ4PLoBz XUKq7wK+44QLifwu3EED20Rws6BsFN1GmSjqeueNpyGsWUwA8v9LkVkUAZ9qyOL6 jzQAsA8kFH3uBQZoyHCT7utNoPZOuLqUxe7VMtAbCzZRREqhedpDFr+toWkPgSnj E6RVrp/pDLNUQfeORYQwXXvy7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSQTO6K /v1E9Qew20CL10XUafF8MB8GA1UdIwQYMBaAFLOZLw1Juvajb9pljltFlGlSHltE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9ERDdFMDkxQ0I2 NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlxTnYybVdPVzBXVWFWSWVX MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3M1a3ZEVW02OXFOdjJtV09XMFdVYVZJZVcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwRC9ERDdFMDkxQ0I2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlx TnYybVdPVzBXVWFWSWVXMFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOezxfZwmCzTqXkiHMkJdiS2UzLNRcMp/C+aYRA2lKLlAhgl2R3/hX 7NLcaytlnrRyQh003DAPv2fETkU+Oavl7K5hbZLOt9RkIy6rDr/pLQRwSCsih0ev 1GftIXoQEbuzpcrMqwAr0DXso5B7J2gJe5adLQ+4mtt8Ha0B8IEaX6M7g22jeraV f/bmhgbnkQN2u9fzRG5XhINXKmuk3vhZxMMZKcIS8HeVgT4OSHOzVNjKFF2GfibW hyCIE967nJe8v4dhNVbZwaJYWLM6KB0X5yw+ONWWwKzn9Rg0o+58JjT+mf1bes9W rZI4yhukhZ6thfL+0ecI3K+8xDoi3O1N -----END CERTIFICATE-----Generated at Mon Oct 20 16:47:45 2025 by rpki-client