$ rpki-client -vvf rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft File: RqE3XwEj9TNI8MT5A02QQP7p08o.mft (raw, json) Hash identifier: E8ecNiVwu6GVCXqbmNJwS0SXnmTcJLQGVl8xzgbbsxM= Subject key identifier: CA:0C:EB:35:DD:A9:C7:4C:4B:CD:02:31:75:61:1A:5E:DB:BD:32:51 Authority key identifier: 46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA Certificate issuer: /CN=A912C3BD/serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA Certificate serial: 05E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft Manifest number: 05DD Signing time: Tue 04 Nov 2025 23:05:53 +0000 Manifest this update: Tue 04 Nov 2025 23:05:53 +0000 Manifest next update: Tue 11 Nov 2025 23:05:53 +0000 Files and hashes: 1: RqE3XwEj9TNI8MT5A02QQP7p08o.crl (hash: mXl+fOiNwiV13mK1nx7+TrvPYUf7+dpTBYgJYv78Kow=) 2: 6079B40AD98211EBAA210852C4F9AE02.roa (hash: cPDgWfK2zOB3bgbWohc7RllaAj78iS9Dek771g2OWfM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1510 (0x5e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C3BD, serialNumber=46A1375F0123F53348F0C4F9034D9040FEE9D3CA Validity Not Before: Nov 4 23:05:53 2025 GMT Not After : Nov 11 23:05:53 2025 GMT Subject: CN=690a86d1-07e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:03:81:e5:3a:a2:94:b8:80:ea:d1:11:12:7b: e0:45:5b:1e:c6:1f:92:f4:8d:0f:48:b5:96:da:c1: 12:95:2c:23:22:b4:6d:db:f4:63:be:a5:79:d3:dc: cc:86:45:31:de:58:03:15:29:c1:2c:9c:29:f0:08: 2b:fa:fa:56:db:31:a3:20:f7:ce:e9:5d:2a:c1:11: 13:be:01:9c:55:68:9f:15:47:22:02:fa:70:f0:de: 6c:de:76:61:f5:ef:a5:bb:b3:16:cb:b3:a6:2f:97: ad:72:db:f3:16:27:33:f6:9a:fe:50:a0:13:78:4e: ea:10:fc:fe:64:02:04:71:29:86:6d:e0:1a:05:6a: 3c:53:cf:dd:fb:57:2f:8d:c9:b7:7f:3e:4c:56:63: ca:a6:0f:fb:0d:ab:5f:09:e2:b3:79:f3:0d:2b:ee: 47:a6:ed:75:27:8d:6a:53:db:9c:7c:cd:75:04:aa: ee:82:dd:62:7a:db:8a:7d:cf:4a:b2:b0:e0:49:d6: 03:1b:8a:90:5b:ee:b3:ac:a8:72:90:af:30:6b:5e: ec:dd:98:b6:1c:ba:f7:cc:08:b6:54:b6:3a:84:93: d6:0d:cc:ed:53:e4:6a:49:05:b3:2d:62:6b:d4:a3: e9:46:77:e7:21:f4:95:4e:97:7b:38:b8:90:db:af: 42:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0C:EB:35:DD:A9:C7:4C:4B:CD:02:31:75:61:1A:5E:DB:BD:32:51 X509v3 Authority Key Identifier: keyid:46:A1:37:5F:01:23:F5:33:48:F0:C4:F9:03:4D:90:40:FE:E9:D3:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RqE3XwEj9TNI8MT5A02QQP7p08o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C3BD/1A8108F2D97F11EB9E13594FC4F9AE02/RqE3XwEj9TNI8MT5A02QQP7p08o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8d:3d:80:93:07:ba:bc:eb:ac:e8:f7:27:c0:bf:c6:64:b3: ca:40:49:25:16:07:43:de:ca:c4:af:5e:b6:e4:65:b4:7b:5f: 64:8d:f6:15:fd:89:24:53:c1:ac:5a:c2:73:7e:81:be:0e:0f: 22:9a:db:d0:57:f7:5b:b6:b0:66:68:fb:e0:04:a7:4f:24:cc: 36:64:1b:e1:4a:08:08:e7:f7:00:0d:c5:31:12:2f:46:9f:9c: c8:c8:de:f8:99:9c:b9:a0:89:62:6a:0d:34:fe:f5:d1:d7:d9: 86:c2:b1:14:85:4e:b2:0c:a4:0d:0c:6e:99:86:17:08:72:b3: 57:5d:f6:45:27:2b:eb:5a:94:18:07:34:3a:c8:7a:a1:1d:3c: c7:b7:e5:b8:9c:5e:cf:1a:9a:e0:60:d1:2e:6d:8b:7b:a5:8c: 13:af:1a:8f:68:e8:6e:c4:19:a6:5d:25:5c:30:b1:17:ab:60: ac:44:2d:ab:26:bc:06:7f:c3:1f:29:14:ff:94:b4:52:13:02: 44:e8:38:98:a3:b4:ed:07:c0:0b:dd:48:32:0b:50:80:c0:75: b1:43:f4:97:78:63:7f:8c:36:56:af:e8:ec:a6:c0:11:5f:42: f9:19:96:ac:c6:a9:29:c7:1e:15:3e:e9:df:da:88:6b:49:6d: 25:78:42:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMzQkQxMTAvBgNVBAUTKDQ2QTEzNzVGMDEyM0Y1MzM0OEYwQzRGOTAzNEQ5MDQw RkVFOUQzQ0EwHhcNMjUxMTA0MjMwNTUzWhcNMjUxMTExMjMwNTUzWjAYMRYwFAYD VQQDEw02OTBhODZkMS0wN2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wOB5TqilLiA6tEREnvgRVsexh+S9I0PSLWW2sESlSwjIrRt2/RjvqV509zM hkUx3lgDFSnBLJwp8Agr+vpW2zGjIPfO6V0qwRETvgGcVWifFUciAvpw8N5s3nZh 9e+lu7MWy7OmL5etctvzFicz9pr+UKATeE7qEPz+ZAIEcSmGbeAaBWo8U8/d+1cv jcm3fz5MVmPKpg/7DatfCeKzefMNK+5Hpu11J41qU9ucfM11BKrugt1ietuKfc9K srDgSdYDG4qQW+6zrKhykK8wa17s3Zi2HLr3zAi2VLY6hJPWDcztU+RqSQWzLWJr 1KPpRnfnIfSVTpd7OLiQ269CFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoM6zXd qcdMS80CMXVhGl7bvTJRMB8GA1UdIwQYMBaAFEahN18BI/UzSPDE+QNNkED+6dPK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzNCRC8xQTgxMDhGMkQ5 N0YxMUVCOUUxMzU5NEZDNEY5QUUwMi9ScUUzWHdFajlUTkk4TVQ1QTAyUVFQN3Aw OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JxRTNYd0VqOVROSThNVDVBMDJRUVA3cDA4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzNCRC8xQTgxMDhGMkQ5N0YxMUVCOUUxMzU5NEZDNEY5QUUwMi9ScUUzWHdFajlU Tkk4TVQ1QTAyUVFQN3AwOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPjT2Akwe6vOus6PcnwL/GZLPKQEklFgdD3srEr1625GW0e19kjfYV /YkkU8GsWsJzfoG+Dg8imtvQV/dbtrBmaPvgBKdPJMw2ZBvhSggI5/cADcUxEi9G n5zIyN74mZy5oIliag00/vXR19mGwrEUhU6yDKQNDG6ZhhcIcrNXXfZFJyvrWpQY BzQ6yHqhHTzHt+W4nF7PGprgYNEubYt7pYwTrxqPaOhuxBmmXSVcMLEXq2CsRC2r JrwGf8MfKRT/lLRSEwJE6DiYo7TtB8AL3UgyC1CAwHWxQ/SXeGN/jDZWr+jspsAR X0L5GZasxqkpxx4VPunf2ohrSW0leEIw -----END CERTIFICATE-----Generated at Wed Nov 5 21:15:46 2025 by rpki-client