$ rpki-client -vvf rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft File: 0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft (raw, json) Hash identifier: P52ZErymjMdbf/xI6jk7OvHllwarKX2Td8SexdpJsyU= Subject key identifier: B6:88:76:0F:F5:E3:54:FA:9C:73:6B:4A:2E:8F:04:0B:7F:1B:75:BB Authority key identifier: D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11 Certificate issuer: /CN=A914E215/serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911 Certificate serial: 06B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft Manifest number: 06B0 Signing time: Tue 04 Nov 2025 22:18:41 +0000 Manifest this update: Tue 04 Nov 2025 22:18:41 +0000 Manifest next update: Tue 11 Nov 2025 22:18:41 +0000 Files and hashes: 1: 0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl (hash: ip3OKxIWA3H0zo1Z5q0q7ZukGzOGmfoQZGzzDwkdz0A=) 2: 436B3BEC822D11EBB19C1844C4F9AE02.roa (hash: aR8xqbFUFjm+ccG/d5FkPfm2CRqS0a29lHr1SXFGeCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E215, serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911 Validity Not Before: Nov 4 22:18:41 2025 GMT Not After : Nov 11 22:18:41 2025 GMT Subject: CN=690a7bc1-0434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:07:be:aa:20:7d:74:0d:67:83:2e:7d:0e: 20:08:1c:fc:b2:15:1b:e9:cc:ec:bc:61:39:d8:8f: 9a:4a:61:82:13:15:25:08:5b:25:2b:74:3e:7b:34: e3:26:a9:06:b7:26:59:8f:aa:d5:b3:22:d9:38:03: 25:fb:1b:f0:74:7e:20:2e:c7:73:79:0f:52:57:25: 26:4e:2a:66:ec:31:7e:a2:a1:42:7c:79:ab:b4:26: 7e:6f:73:b9:67:de:e6:6a:3f:79:7e:eb:13:0c:7a: d1:93:b0:76:83:c1:e3:c4:d9:08:16:40:71:f7:7d: 4f:e2:ea:67:4e:cb:2c:c9:05:4a:b4:bd:c0:2a:4c: d8:65:da:c4:47:7f:2e:ef:51:2c:a8:c9:55:e1:24: 22:5f:bf:60:d9:24:eb:cd:1a:fd:51:97:16:76:bb: 95:f1:eb:ba:a5:a3:b9:8b:0c:bd:5b:34:a4:16:ed: e0:1d:3f:d7:19:e6:f7:49:c6:63:4e:bc:30:dd:97: 72:ab:07:43:0d:62:2b:70:a9:fd:4b:74:13:f3:60: a2:61:99:22:8f:4b:61:34:c0:a4:b4:66:88:a8:d2: d2:b6:79:68:e3:87:ad:dd:ad:04:dc:a9:6e:52:f9: eb:47:66:f1:5e:f1:43:25:d3:a9:df:d9:d2:67:48: 4f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:88:76:0F:F5:E3:54:FA:9C:73:6B:4A:2E:8F:04:0B:7F:1B:75:BB X509v3 Authority Key Identifier: keyid:D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:49:53:3e:23:ee:1b:18:27:71:a4:d6:60:f1:a5:73:be:66: 2a:bb:8d:03:bb:f0:e5:d2:ac:c3:23:9b:23:5d:e2:84:9c:35: 1d:84:4c:a2:01:96:c2:d7:44:7e:cc:cd:c8:57:d8:6c:de:c3: d5:77:1b:1e:1f:c7:72:78:0b:70:57:54:bc:a1:79:fe:eb:41: 2a:12:a4:fb:88:1b:f9:f4:4a:d3:6f:82:f8:34:12:8e:53:23: 15:4d:1c:11:e7:e2:d2:4e:db:8e:bc:21:38:55:3f:ef:58:d8: ad:13:88:f7:be:0d:22:64:cb:76:85:30:c2:eb:09:38:d2:83: ef:cf:1e:0a:14:a2:e0:d4:b2:2c:39:24:30:72:e8:aa:a1:6f: b2:73:d2:ae:22:53:fc:38:a2:66:22:26:19:cb:6b:b4:aa:15: 40:e6:d0:b3:6b:1c:98:a1:f4:c2:b6:49:15:d2:9b:76:66:db: 89:c8:6d:1f:ac:55:85:54:c8:fa:4b:a0:8d:f0:ba:ac:32:a8: 79:46:aa:1a:cd:cf:b0:5a:56:d5:23:16:4f:09:73:ad:f1:f7: a7:32:16:a6:54:3c:9c:55:1d:01:17:d2:9b:a4:10:6f:ce:7c: 21:94:75:3c:c0:37:69:e6:21:ba:8c:15:3f:30:46:62:26:73: 0b:83:b4:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUyMTUxMTAvBgNVBAUTKEQyMEU1MkQwOUNFQkU2QjU3MDUwMzU4Q0EyOTMwRDg5 Mzk3NzI5MTEwHhcNMjUxMTA0MjIxODQxWhcNMjUxMTExMjIxODQxWjAYMRYwFAYD VQQDEw02OTBhN2JjMS0wNDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFoHvqogfXQNZ4MufQ4gCBz8shUb6czsvGE52I+aSmGCExUlCFslK3Q+ezTj JqkGtyZZj6rVsyLZOAMl+xvwdH4gLsdzeQ9SVyUmTipm7DF+oqFCfHmrtCZ+b3O5 Z97maj95fusTDHrRk7B2g8HjxNkIFkBx931P4upnTsssyQVKtL3AKkzYZdrER38u 71EsqMlV4SQiX79g2STrzRr9UZcWdruV8eu6paO5iwy9WzSkFu3gHT/XGeb3ScZj Trww3ZdyqwdDDWIrcKn9S3QT82CiYZkij0thNMCktGaIqNLStnlo44et3a0E3Klu UvnrR2bxXvFDJdOp39nSZ0hPgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaIdg/1 41T6nHNrSi6PBAt/G3W7MB8GA1UdIwQYMBaAFNIOUtCc6+a1cFA1jKKTDYk5dykR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTIxNS85MjJEQkI5NDgy MkIxMUVCQkJDNzVFNDJDNEY5QUUwMi8wZzVTMEp6cjVyVndVRFdNb3BNTmlUbDNL UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBnNVMwSnpyNXJWd1VEV01vcE1OaVRsM0tSRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTIxNS85MjJEQkI5NDgyMkIxMUVCQkJDNzVFNDJDNEY5QUUwMi8wZzVTMEp6cjVy VndVRFdNb3BNTmlUbDNLUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0SVM+I+4bGCdxpNZg8aVzvmYqu40Du/Dl0qzDI5sjXeKEnDUdhEyi AZbC10R+zM3IV9hs3sPVdxseH8dyeAtwV1S8oXn+60EqEqT7iBv59ErTb4L4NBKO UyMVTRwR5+LSTtuOvCE4VT/vWNitE4j3vg0iZMt2hTDC6wk40oPvzx4KFKLg1LIs OSQwcuiqoW+yc9KuIlP8OKJmIiYZy2u0qhVA5tCzaxyYofTCtkkV0pt2ZtuJyG0f rFWFVMj6S6CN8LqsMqh5Rqoazc+wWlbVIxZPCXOt8fenMhamVDycVR0BF9KbpBBv znwhlHU8wDdp5iG6jBU/MEZiJnMLg7RV -----END CERTIFICATE-----Generated at Wed Nov 5 20:26:02 2025 by rpki-client