$ rpki-client -vvf rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft File: Ql8CIk3cYp0viP9mPH9K32zWRT4.mft (raw, json) Hash identifier: WyLqgZ++72D+4//zHTR5nvp7yFquGa/g2DgdABQnxxE= Subject key identifier: 7C:74:BD:1C:F6:05:18:BE:C2:F4:AF:AE:21:3F:DC:15:63:16:0F:5E Authority key identifier: 42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E Certificate issuer: /CN=A915430A/serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Certificate serial: 02C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft Manifest number: 02C2 Signing time: Mon 03 Nov 2025 01:22:57 +0000 Manifest this update: Mon 03 Nov 2025 01:22:57 +0000 Manifest next update: Mon 10 Nov 2025 01:22:57 +0000 Files and hashes: 1: Ql8CIk3cYp0viP9mPH9K32zWRT4.crl (hash: 2mo/BM6iX3hqe8WaSBzVUK2U30rbU40LpoSsp/xT+uY=) 2: 55C580C2108411EDB5AE6333C4F9AE02.roa (hash: 5LLhaXKcNjdSvxtPIbCpTbd8HLd8mRgw+b6A/xz88zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 710 (0x2c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915430A, serialNumber=425F02224DDC629D2F88FF663C7F4ADF6CD6453E Validity Not Before: Nov 3 01:22:57 2025 GMT Not After : Nov 10 01:22:57 2025 GMT Subject: CN=690803f1-bfbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:51:a5:6d:43:81:bf:b2:3e:ae:f6:16:5b:c6: a6:48:1e:77:31:cc:c6:27:b7:c4:fd:29:ce:95:c1: aa:a1:e0:c4:27:ca:d5:23:a5:ba:95:43:82:c5:61: de:da:67:57:c7:4a:15:f7:06:eb:a1:a0:92:e7:47: 3c:13:d7:7a:66:e3:ff:31:01:35:2f:54:94:1e:e6: 64:b6:c3:31:17:4f:21:2e:26:24:3e:55:ee:d5:d4: 69:71:8a:4a:71:d5:b6:82:5a:a7:eb:07:1b:3d:0f: 52:f1:97:fc:71:81:b7:e8:f1:e0:19:8e:99:68:cd: 80:fd:2d:27:38:10:59:cd:73:20:06:0c:76:b9:8e: d2:c0:ec:a1:ae:e5:fb:37:77:30:04:82:c4:61:78: 19:6c:11:f3:17:66:9d:83:53:f4:16:52:cf:79:81: 68:cf:40:dd:a8:25:7d:39:21:a3:f8:6b:d2:0d:d8: a0:0b:10:88:6b:e7:8b:27:9d:ec:2f:ad:60:9a:7b: 90:d0:75:a5:fc:48:08:0f:ab:a9:9d:24:58:c6:46: e6:74:00:4a:13:55:7b:1a:2c:2f:e8:80:af:73:89: 15:5f:d9:51:3b:0b:4a:ad:06:d4:ce:7c:c0:56:30: 3f:4d:fd:3d:8a:90:b2:a0:b7:34:e5:70:44:ff:f3: 63:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:74:BD:1C:F6:05:18:BE:C2:F4:AF:AE:21:3F:DC:15:63:16:0F:5E X509v3 Authority Key Identifier: keyid:42:5F:02:22:4D:DC:62:9D:2F:88:FF:66:3C:7F:4A:DF:6C:D6:45:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ql8CIk3cYp0viP9mPH9K32zWRT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915430A/7EBF7CC20FF211ED9FE79686C4F9AE02/Ql8CIk3cYp0viP9mPH9K32zWRT4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:43:26:35:19:0a:8b:f4:2c:e5:f7:25:1e:02:59:9e:33:ef: e7:5f:18:18:f1:00:40:b1:63:71:29:7c:75:db:2e:4d:5e:76: af:c1:42:d6:06:1b:52:66:37:1d:34:db:b7:ca:68:36:82:cf: 7b:76:b6:30:dd:fd:e4:cf:fb:fc:fd:d1:32:05:e0:6b:e8:64: d7:d3:61:bf:aa:ff:9c:6e:6b:9a:47:7c:53:01:c4:ff:3e:e3: de:3e:3e:78:60:b9:f3:80:30:ff:13:4c:1f:3c:46:2e:8d:0b: 5d:72:b4:de:79:4f:40:a4:33:2d:ab:2e:54:c4:e9:6c:b7:47: 33:77:fa:05:4a:37:44:5b:09:6b:24:b3:b8:a2:46:61:8b:56: 5d:b4:60:db:bd:c1:24:93:a5:41:7d:d7:42:8c:fe:9a:bd:fc: 83:ff:63:72:7d:5c:3c:22:b7:cd:44:4e:a2:3f:dc:ee:fb:e5: 06:0a:01:28:9a:f4:5c:b4:15:c2:c5:b4:02:b2:33:54:ad:cf: f2:f5:bc:67:a3:8f:f1:2c:b9:6c:5d:bb:f4:e4:1e:19:9b:2c: ef:f5:4a:78:ac:a2:47:af:e3:b0:a5:82:42:4b:b1:93:34:39: 1d:be:52:1c:ff:66:c1:0e:6f:10:03:32:c7:0c:8d:1e:61:e7: d6:46:f1:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMEExMTAvBgNVBAUTKDQyNUYwMjIyNEREQzYyOUQyRjg4RkY2NjNDN0Y0QURG NkNENjQ1M0UwHhcNMjUxMTAzMDEyMjU3WhcNMjUxMTEwMDEyMjU3WjAYMRYwFAYD VQQDEw02OTA4MDNmMS1iZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1GlbUOBv7I+rvYWW8amSB53MczGJ7fE/SnOlcGqoeDEJ8rVI6W6lUOCxWHe 2mdXx0oV9wbroaCS50c8E9d6ZuP/MQE1L1SUHuZktsMxF08hLiYkPlXu1dRpcYpK cdW2glqn6wcbPQ9S8Zf8cYG36PHgGY6ZaM2A/S0nOBBZzXMgBgx2uY7SwOyhruX7 N3cwBILEYXgZbBHzF2adg1P0FlLPeYFoz0DdqCV9OSGj+GvSDdigCxCIa+eLJ53s L61gmnuQ0HWl/EgID6upnSRYxkbmdABKE1V7Giwv6ICvc4kVX9lROwtKrQbUznzA VjA/Tf09ipCyoLc05XBE//NjdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHx0vRz2 BRi+wvSvriE/3BVjFg9eMB8GA1UdIwQYMBaAFEJfAiJN3GKdL4j/Zjx/St9s1kU+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMwQS83RUJGN0NDMjBG RjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lwMHZpUDltUEg5SzMyeldS VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FsOENJazNjWXAwdmlQOW1QSDlLMzJ6V1JUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMwQS83RUJGN0NDMjBGRjIxMUVEOUZFNzk2ODZDNEY5QUUwMi9RbDhDSWszY1lw MHZpUDltUEg5SzMyeldSVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8QyY1GQqL9Czl9yUeAlmeM+/nXxgY8QBAsWNxKXx12y5NXnavwULW BhtSZjcdNNu3ymg2gs97drYw3f3kz/v8/dEyBeBr6GTX02G/qv+cbmuaR3xTAcT/ PuPePj54YLnzgDD/E0wfPEYujQtdcrTeeU9ApDMtqy5UxOlst0czd/oFSjdEWwlr JLO4okZhi1ZdtGDbvcEkk6VBfddCjP6avfyD/2NyfVw8IrfNRE6iP9zu++UGCgEo mvRctBXCxbQCsjNUrc/y9bxno4/xLLlsXbv05B4Zmyzv9Up4rKJHr+OwpYJCS7GT NDkdvlIc/2bBDm8QAzLHDI0eYefWRvFE -----END CERTIFICATE-----Generated at Wed Nov 5 00:24:22 2025 by rpki-client