$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft File: 5rsDqligwnDrZrPq6yQI__q6Xsc.mft (raw, json) Hash identifier: bQUilo9arJsBMl+6YSN01kfAN8Iw9c4Y5FKyOTlPdGo= Subject key identifier: 3D:99:51:58:0D:82:47:4C:AB:E6:38:A9:58:F1:E2:59:65:6C:D2:CB Authority key identifier: E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 Certificate issuer: /CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft Manifest number: 01EA Signing time: Wed 05 Nov 2025 02:47:04 +0000 Manifest this update: Wed 05 Nov 2025 02:47:04 +0000 Manifest next update: Wed 12 Nov 2025 02:47:04 +0000 Files and hashes: 1: 5rsDqligwnDrZrPq6yQI__q6Xsc.crl (hash: eTlDAa0DX3mwFiivLILL98fo+X8vwiWWGIWFvIrKM4I=) 2: AEF266ECD34811EDAD96D95DC4F9AE02.roa (hash: KXSCbuQLHG9xWL+hihrwdJUS/R0sgZW/C4dlIANzg14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D2BF, serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Validity Not Before: Nov 5 02:47:04 2025 GMT Not After : Nov 12 02:47:04 2025 GMT Subject: CN=690abaa8-e994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ed:49:01:6c:ce:c3:24:77:ae:b3:06:14:d9: 0d:f9:7e:e2:8d:37:86:ad:ad:35:3b:1b:89:aa:0e: 1a:55:e2:e3:c3:e1:2d:8d:a3:c2:29:ae:7a:f5:4b: 2f:b8:c0:8b:8c:5e:07:79:11:1f:7e:06:39:15:73: 07:f4:c9:8d:98:51:cd:97:bd:b0:2f:49:9a:de:5b: 5b:41:7a:7d:c4:6a:d2:44:bd:6c:86:8d:98:14:96: 00:f3:0a:52:ef:b3:3e:51:25:8d:27:16:b4:74:7c: 19:7b:3b:ba:6e:28:71:50:3b:36:15:fc:70:bb:90: 73:6c:39:35:86:48:75:61:e5:2c:09:d2:7e:ce:da: 87:d9:8d:4b:a4:4e:64:be:2b:1b:eb:b7:c7:de:cd: b8:b4:84:03:da:17:4d:ab:51:78:6b:6e:32:00:db: e9:6a:17:e8:d8:ff:3d:91:37:c3:94:dd:94:19:86: 94:f8:ed:39:de:02:71:04:fa:ec:e4:2a:94:c3:88: 8a:c4:7a:e8:d7:cb:59:a3:d6:31:ba:35:49:8c:4b: 16:be:27:ef:25:4e:d9:06:04:ad:7b:92:59:e0:2a: ce:57:4a:32:34:bf:0f:5f:a4:ec:be:86:f8:0a:ca: 16:be:56:0c:1b:66:2f:08:99:f8:fb:67:a2:df:f5: 33:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:99:51:58:0D:82:47:4C:AB:E6:38:A9:58:F1:E2:59:65:6C:D2:CB X509v3 Authority Key Identifier: keyid:E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:01:fc:37:c2:d3:0d:5a:46:02:25:43:58:42:f7:c5:3b:37: 52:9a:c6:b5:dc:52:03:d6:ce:28:2f:6d:50:a0:ed:2e:fa:c5: ae:74:9d:92:cf:45:54:29:4f:d4:07:47:f9:61:5d:47:80:b5: eb:43:9f:64:0d:16:94:bb:62:a9:d5:5a:47:0b:63:6b:d8:8a: 6e:0f:1d:fb:b3:42:d6:b3:09:c8:32:8f:af:e7:5b:9c:39:40: 75:b8:9c:c6:d7:3a:2a:67:0d:77:3f:60:6d:31:93:1f:94:cf: 1d:84:8e:d1:ba:81:90:72:ec:6f:9c:01:33:ed:0a:ea:3b:2a: a9:87:98:2b:61:4b:7e:57:d5:81:c3:92:20:7b:70:43:2a:a0: 75:c0:94:cb:27:73:ce:7f:4e:4b:bc:0e:0c:21:33:52:ad:6f: 01:f4:9b:5b:60:b3:f5:e4:30:1c:0b:f4:57:76:61:b8:58:d4: 5a:7b:a3:79:f7:c0:78:1d:81:46:55:b8:90:ab:55:63:6e:63: 03:bd:8a:c2:99:66:64:45:c8:18:84:9d:ca:8a:cf:a5:70:e8: 28:1a:4f:f2:8f:c9:5c:0e:93:c9:59:b2:29:76:10:4b:5a:c8: 5d:20:9c:f6:e6:b5:2d:82:c2:51:e6:54:1d:16:4c:89:0f:91: 2a:8c:06:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyQkYxMTAvBgNVBAUTKEU2QkIwM0FBNThBMEMyNzBFQjY2QjNFQUVCMjQwOEZG RkFCQTVFQzcwHhcNMjUxMTA1MDI0NzA0WhcNMjUxMTEyMDI0NzA0WjAYMRYwFAYD VQQDEw02OTBhYmFhOC1lOTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4O1JAWzOwyR3rrMGFNkN+X7ijTeGra01OxuJqg4aVeLjw+EtjaPCKa569Usv uMCLjF4HeREffgY5FXMH9MmNmFHNl72wL0ma3ltbQXp9xGrSRL1sho2YFJYA8wpS 77M+USWNJxa0dHwZezu6bihxUDs2Ffxwu5BzbDk1hkh1YeUsCdJ+ztqH2Y1LpE5k visb67fH3s24tIQD2hdNq1F4a24yANvpahfo2P89kTfDlN2UGYaU+O053gJxBPrs 5CqUw4iKxHro18tZo9YxujVJjEsWvifvJU7ZBgSte5JZ4CrOV0oyNL8PX6Tsvob4 CsoWvlYMG2YvCJn4+2ei3/UzWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2ZUVgN gkdMq+Y4qVjx4lllbNLLMB8GA1UdIwQYMBaAFOa7A6pYoMJw62az6uskCP/6ul7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJCRi8yQTcxRTZCQ0Qz NDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3duRHJaclBxNnlRSV9fcTZY c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyc0RxbGlnd25EclpyUHE2eVFJX19xNlhzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDJCRi8yQTcxRTZCQ0QzNDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3du RHJaclBxNnlRSV9fcTZYc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApAfw3wtMNWkYCJUNYQvfFOzdSmsa13FID1s4oL21QoO0u+sWudJ2S z0VUKU/UB0f5YV1HgLXrQ59kDRaUu2Kp1VpHC2Nr2IpuDx37s0LWswnIMo+v51uc OUB1uJzG1zoqZw13P2BtMZMflM8dhI7RuoGQcuxvnAEz7QrqOyqph5grYUt+V9WB w5Ige3BDKqB1wJTLJ3POf05LvA4MITNSrW8B9JtbYLP15DAcC/RXdmG4WNRae6N5 98B4HYFGVbiQq1VjbmMDvYrCmWZkRcgYhJ3Kis+lcOgoGk/yj8lcDpPJWbIpdhBL WshdIJz25rUtgsJR5lQdFkyJD5EqjAaq -----END CERTIFICATE-----Generated at Wed Nov 5 17:19:32 2025 by rpki-client