$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft File: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft (raw, json) Hash identifier: XEzjH6SDxSQaIaG2aUo8G+MF223d0V92h/KM6bDKAg8= Subject key identifier: 61:DA:CB:8B:86:C6:D0:F3:3E:85:5C:B3:B3:54:E0:F3:66:46:45:7E Authority key identifier: AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F Certificate issuer: /CN=A918B5FE/serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F Certificate serial: 0704 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft Manifest number: 06EF Signing time: Sat 18 Oct 2025 23:24:48 +0000 Manifest this update: Sat 18 Oct 2025 23:24:47 +0000 Manifest next update: Sat 25 Oct 2025 23:24:47 +0000 Files and hashes: 1: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl (hash: pEQQOo2PZVVtgZEi6pTswC4oEZ1ezA9wYHYoiJILcDI=) 2: DAE15A7248F911EC9F04C439C4F9AE02.roa (hash: uL1H0QbwRjNu//kzatppv+a2Zrx1mIfoO1yF/DRChCo=) 3: DBB4BB6A48F911EC9F04C439C4F9AE02.roa (hash: /T58KApZQd0ra/XBIJpEnSI47L1LMtselRFt+bUqiz8=) 4: DCC969B048F911EC9F04C439C4F9AE02.roa (hash: JdA5JlwXLIa+e4Ydsq+HvnuHIMVtQwL6RUUhoUIWZBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1796 (0x704) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B5FE, serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F Validity Not Before: Oct 18 23:24:47 2025 GMT Not After : Oct 25 23:24:47 2025 GMT Subject: CN=68f421c0-d41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:ca:36:b0:54:1c:aa:4d:eb:cf:0a:c6:3f: 1c:0c:4a:6e:a8:3f:6d:c0:d9:1a:70:4c:19:51:38: f0:ab:0e:7d:af:eb:22:fe:55:5f:f0:e5:d4:91:2a: 81:52:d7:a7:e9:53:12:fb:98:fb:75:b1:46:2b:79: 44:eb:eb:27:09:f9:a6:9b:6f:0d:6c:9d:8e:a4:5d: 1c:b8:65:57:e8:c8:2b:30:52:cd:85:d8:e8:6b:a6: c5:5b:f8:0c:db:96:32:6e:44:f6:c2:95:e2:dc:a2: e3:8a:50:bc:e8:6c:b6:8c:ce:a0:cb:af:92:33:8f: 8d:f4:53:52:58:08:8b:90:e1:35:ef:71:37:90:12: 5a:30:72:5f:43:11:6d:73:b0:d9:a3:15:f3:8e:2f: f6:ec:06:02:aa:f9:d6:11:6b:3e:4d:c9:fa:30:f4: 48:dd:f7:1e:e7:d4:31:61:b1:23:82:93:b4:96:59: 44:d1:3e:f5:82:ca:38:cd:fb:fb:07:18:d0:01:09: 98:b0:a7:30:80:6c:95:a1:08:2b:ce:9b:9c:cd:95: 43:ed:45:34:00:df:bd:11:2a:73:e6:22:29:f0:8d: af:99:5c:60:1d:cd:13:6f:ee:a1:93:3a:85:1f:8d: 2e:60:3d:82:c6:fd:b2:af:74:df:d4:24:e8:35:09: 3c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DA:CB:8B:86:C6:D0:F3:3E:85:5C:B3:B3:54:E0:F3:66:46:45:7E X509v3 Authority Key Identifier: keyid:AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f9:86:d8:4e:5f:35:e6:eb:6f:cd:10:2d:37:26:db:64:a9:3e: 42:97:fb:5b:fa:a2:62:87:e0:52:a2:4d:83:cf:ec:8e:fe:24: 52:1d:72:f9:fe:6e:37:c5:d0:66:f2:f5:07:40:84:ea:04:2a: 82:82:cf:70:c9:b9:10:db:3a:58:30:ab:18:97:f3:fb:09:05: 1c:cc:18:8b:0e:6c:33:2b:2b:22:26:36:f6:dd:af:55:4b:ed: e3:1b:e1:b3:cc:f8:b0:ee:e8:7a:39:c4:d3:22:8a:aa:38:0d: a8:81:2e:61:bf:dc:ee:24:cb:a5:dc:0e:4e:9b:9c:89:b1:20: a1:07:32:83:34:f6:d3:ba:ef:b6:90:50:81:23:dc:b0:8f:c5: d2:b4:79:94:97:1a:7c:48:44:6a:49:f5:f1:8a:e2:02:44:12: 8f:51:d3:30:0b:bb:ab:1e:ab:79:a2:97:41:5b:b3:c9:20:ff: c1:b6:81:5a:76:5d:7d:fa:3a:81:02:35:ad:e2:25:7d:ce:82: 8a:19:6b:2b:e9:a8:03:e7:25:e8:ba:60:17:74:20:5c:aa:b1: 2a:ee:1d:91:12:1d:0b:6b:a6:c2:ce:5e:ed:b6:67:dd:e8:4d: fb:4a:ba:d4:4f:3a:25:f8:ed:67:c5:c5:34:4f:7a:87:a5:40: c1:16:e5:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI1RkUxMTAvBgNVBAUTKEFCOTA1RERDMEFGQkJEMTU0OUY2NkVGRTgxMTdBRTE1 MDAwQTVFMEYwHhcNMjUxMDE4MjMyNDQ3WhcNMjUxMDI1MjMyNDQ3WjAYMRYwFAYD VQQDEw02OGY0MjFjMC1kNDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtB7KNrBUHKpN688Kxj8cDEpuqD9twNkacEwZUTjwqw59r+si/lVf8OXUkSqB Uten6VMS+5j7dbFGK3lE6+snCfmmm28NbJ2OpF0cuGVX6MgrMFLNhdjoa6bFW/gM 25YybkT2wpXi3KLjilC86Gy2jM6gy6+SM4+N9FNSWAiLkOE173E3kBJaMHJfQxFt c7DZoxXzji/27AYCqvnWEWs+Tcn6MPRI3fce59QxYbEjgpO0lllE0T71gso4zfv7 BxjQAQmYsKcwgGyVoQgrzpuczZVD7UU0AN+9ESpz5iIp8I2vmVxgHc0Tb+6hkzqF H40uYD2Cxv2yr3Tf1CToNQk80wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHay4uG xtDzPoVcs7NU4PNmRkV+MB8GA1UdIwQYMBaAFKuQXdwK+70VSfZu/oEXrhUACl4P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjVGRS8zMkMzMDAyODZB OUUxMUVCQjY3NjIzMThDNEY5QUUwMi9xNUJkM0FyN3ZSVko5bTctZ1JldUZRQUtY ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3E1QmQzQXI3dlJWSjltNy1nUmV1RlFBS1hnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjVGRS8zMkMzMDAyODZBOUUxMUVCQjY3NjIzMThDNEY5QUUwMi9xNUJkM0FyN3ZS Vko5bTctZ1JldUZRQUtYZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQD5hthOXzXm62/NEC03JttkqT5Cl/tb+qJih+BSok2Dz+yO/iRSHXL5 /m43xdBm8vUHQITqBCqCgs9wybkQ2zpYMKsYl/P7CQUczBiLDmwzKysiJjb23a9V S+3jG+GzzPiw7uh6OcTTIoqqOA2ogS5hv9zuJMul3A5Om5yJsSChBzKDNPbTuu+2 kFCBI9ywj8XStHmUlxp8SERqSfXxiuICRBKPUdMwC7urHqt5opdBW7PJIP/BtoFa dl19+jqBAjWt4iV9zoKKGWsr6agD5yXoumAXdCBcqrEq7h2REh0La6bCzl7ttmfd 6E37SrrUTzol+O1nxcU0T3qHpUDBFuVG -----END CERTIFICATE-----Generated at Mon Oct 20 21:45:21 2025 by rpki-client