$ rpki-client -vvf rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft File: 0Q5D4Fk97x241_RMbxzRPnPC8jA.mft (raw, json) Hash identifier: gK75eYdaUPv02ws8rJTJZBZmpXtbwJ79CqU7ZXf0RB0= Subject key identifier: 8D:6D:07:BD:1C:7C:22:98:63:05:9C:4A:A9:46:CE:01:F8:70:C2:26 Authority key identifier: D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 Certificate issuer: /CN=A91325DC/serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Certificate serial: 0B65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft Manifest number: 0B56 Signing time: Tue 04 Nov 2025 19:16:44 +0000 Manifest this update: Tue 04 Nov 2025 19:16:44 +0000 Manifest next update: Tue 11 Nov 2025 19:16:44 +0000 Files and hashes: 1: 0Q5D4Fk97x241_RMbxzRPnPC8jA.crl (hash: 0L1k3nayKb+wEYQqCa3w+H0KmATFLoriqDzL0Qm3V+8=) 2: A2DE5B44AE1C11EAA46DAF7FC4F9AE02.roa (hash: V6+vy3CAemLZlLXO9CQsgxzuypWLmdriyqfxb6TbA2w=) 3: 3FC1B85E431811EA84E68121C4F9AE02.roa (hash: UC5fAcuOiaup4uE6RhB6Ul5GKkjN2FqHQr3rrq2JOA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2917 (0xb65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325DC, serialNumber=D10E43E0593DEF1DB8D7F44C6F1CD13E73C2F230 Validity Not Before: Nov 4 19:16:44 2025 GMT Not After : Nov 11 19:16:44 2025 GMT Subject: CN=690a511c-a83d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:37:8b:7c:d7:02:b2:76:4c:f8:10:6c:ce:32: b8:e7:35:a8:58:c6:f9:00:2d:e9:42:5d:19:5f:3d: 2e:23:d3:92:96:b0:2c:95:b8:f1:91:35:4f:80:97: eb:07:4e:dd:d7:8f:dd:d4:f2:cc:a3:1e:10:ed:ec: 75:5f:4a:30:ea:22:93:0d:7c:74:b2:f6:92:ee:33: 40:22:90:c6:b0:4d:03:81:86:04:10:76:0a:5b:cc: bc:96:e9:3d:b4:bc:50:a6:de:27:57:f9:ea:f1:13: c6:98:4e:94:22:15:f2:67:96:65:d2:c4:1a:49:b2: fb:08:e5:fe:f6:e3:f0:fc:a0:68:56:64:67:7f:71: 23:30:8e:66:0f:01:a8:d1:87:11:27:d1:6f:cc:d8: 02:76:af:0e:1c:41:55:4e:b2:46:03:84:93:99:04: 2b:10:6c:98:55:d8:8b:c5:c7:25:57:f4:da:24:8b: f5:1d:3c:6c:a0:83:c6:b9:eb:71:e2:45:79:97:03: db:34:37:4f:9d:51:92:94:4f:bb:52:ec:b8:7c:f1: 5c:a1:88:7b:69:e7:3d:d9:be:1b:da:4d:9b:0f:60: 54:f6:53:70:35:12:fd:ef:3f:6e:dc:be:62:c5:8a: cf:f0:1b:7e:f3:ec:4e:f5:ed:bc:15:1e:d5:7a:a2: 55:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6D:07:BD:1C:7C:22:98:63:05:9C:4A:A9:46:CE:01:F8:70:C2:26 X509v3 Authority Key Identifier: keyid:D1:0E:43:E0:59:3D:EF:1D:B8:D7:F4:4C:6F:1C:D1:3E:73:C2:F2:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Q5D4Fk97x241_RMbxzRPnPC8jA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325DC/4612D51E431611EAB262781DC4F9AE02/0Q5D4Fk97x241_RMbxzRPnPC8jA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:a8:c9:92:11:9a:bc:91:65:33:cf:a2:46:c1:9e:0b:56:b9: 5b:d3:bf:28:6c:30:71:e2:1c:cd:50:1b:5c:7c:07:73:0c:3f: c6:5c:1a:4c:08:79:42:d3:04:da:cc:c5:d5:78:68:74:42:50: 17:29:82:1e:07:ed:0d:34:8a:4f:86:13:0c:4d:7e:04:9e:b4: 8b:76:44:36:59:23:62:7d:0a:b9:c0:6b:0d:8e:a3:db:e8:e3: 85:29:78:66:7f:e6:fa:33:34:4b:3e:fe:e6:e3:38:96:7d:46: 01:13:e4:c6:c0:58:d7:bb:5c:af:14:88:ac:2b:f9:ee:83:05: 34:93:0a:df:ee:25:af:44:2e:0a:07:ef:e3:ad:6d:73:39:c0: 8b:da:4c:4d:6e:51:04:48:fc:b7:5c:51:c6:6a:88:c7:a3:62: bd:29:79:2c:3e:14:eb:5e:87:12:da:99:f1:94:6b:21:da:07: 13:8e:24:fa:b9:a7:0e:3d:48:23:be:5a:a0:5d:a7:b1:1c:eb: 2a:42:2d:65:68:de:4a:9a:00:4e:9d:26:f7:cb:2c:ec:ee:90: e1:b2:0f:26:a2:2e:44:a8:9c:81:ac:27:f2:38:c9:83:d9:77: 40:2d:68:44:06:a8:45:e2:78:29:8b:4a:7c:b5:41:84:7f:7c: ab:23:8e:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1REMxMTAvBgNVBAUTKEQxMEU0M0UwNTkzREVGMURCOEQ3RjQ0QzZGMUNEMTNF NzNDMkYyMzAwHhcNMjUxMTA0MTkxNjQ0WhcNMjUxMTExMTkxNjQ0WjAYMRYwFAYD VQQDEw02OTBhNTExYy1hODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjeLfNcCsnZM+BBszjK45zWoWMb5AC3pQl0ZXz0uI9OSlrAslbjxkTVPgJfr B07d14/d1PLMox4Q7ex1X0ow6iKTDXx0svaS7jNAIpDGsE0DgYYEEHYKW8y8luk9 tLxQpt4nV/nq8RPGmE6UIhXyZ5Zl0sQaSbL7COX+9uPw/KBoVmRnf3EjMI5mDwGo 0YcRJ9FvzNgCdq8OHEFVTrJGA4STmQQrEGyYVdiLxcclV/TaJIv1HTxsoIPGuetx 4kV5lwPbNDdPnVGSlE+7Uuy4fPFcoYh7aec92b4b2k2bD2BU9lNwNRL97z9u3L5i xYrP8Bt+8+xO9e28FR7VeqJVOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1tB70c fCKYYwWcSqlGzgH4cMImMB8GA1UdIwQYMBaAFNEOQ+BZPe8duNf0TG8c0T5zwvIw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVEQy80NjEyRDUxRTQz MTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4MjQxX1JNYnh6UlBuUEM4 akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRNUQ0Rms5N3gyNDFfUk1ieHpSUG5QQzhqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVEQy80NjEyRDUxRTQzMTYxMUVBQjI2Mjc4MURDNEY5QUUwMi8wUTVENEZrOTd4 MjQxX1JNYnh6UlBuUEM4akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnqMmSEZq8kWUzz6JGwZ4LVrlb078obDBx4hzNUBtcfAdzDD/GXBpM CHlC0wTazMXVeGh0QlAXKYIeB+0NNIpPhhMMTX4EnrSLdkQ2WSNifQq5wGsNjqPb 6OOFKXhmf+b6MzRLPv7m4ziWfUYBE+TGwFjXu1yvFIisK/nugwU0kwrf7iWvRC4K B+/jrW1zOcCL2kxNblEESPy3XFHGaojHo2K9KXksPhTrXocS2pnxlGsh2gcTjiT6 uacOPUgjvlqgXaexHOsqQi1laN5KmgBOnSb3yyzs7pDhsg8moi5EqJyBrCfyOMmD 2XdALWhEBqhF4ngpi0p8tUGEf3yrI447 -----END CERTIFICATE-----Generated at Wed Nov 5 05:18:54 2025 by rpki-client