$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft File: pQc6SYTllxATMLnnoFjzic6TKa4.mft (raw, json) Hash identifier: oea8ooLqwA3HWrrRtFPg3fK3RdHSGu2TvRYypygbzZQ= Subject key identifier: 30:D3:F6:57:22:70:B3:47:53:A1:1C:CD:43:50:2E:62:31:AD:0B:50 Authority key identifier: A5:07:3A:49:84:E5:97:10:13:30:B9:E7:A0:58:F3:89:CE:93:29:AE Certificate issuer: /CN=A9154B9F/serialNumber=A5073A4984E597101330B9E7A058F389CE9329AE Certificate serial: 0517 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft Manifest number: 0513 Signing time: Tue 04 Nov 2025 23:39:51 +0000 Manifest this update: Tue 04 Nov 2025 23:39:50 +0000 Manifest next update: Tue 11 Nov 2025 23:39:50 +0000 Files and hashes: 1: pQc6SYTllxATMLnnoFjzic6TKa4.crl (hash: JXIVouE+C3pRG6DSbkV7nlckHar4sQ9MGxBxK42uDog=) 2: 76987158273511ECB7FB443DC4F9AE02.roa (hash: W3CoFW/9z7UlujIbTWP3AOKXFMu+6O4kA5ioHKglL9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.crl rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1303 (0x517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154B9F, serialNumber=A5073A4984E597101330B9E7A058F389CE9329AE Validity Not Before: Nov 4 23:39:50 2025 GMT Not After : Nov 11 23:39:50 2025 GMT Subject: CN=690a8ec7-ab9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:cc:84:49:97:2e:d5:08:ee:d1:60:72:22: ac:69:15:18:ec:44:69:02:b5:9e:ba:e7:5d:5f:11: 1f:d7:8c:6e:c6:0b:e5:c8:7b:51:39:80:d7:0d:7e: d0:2b:ff:84:78:0a:46:ee:03:55:2c:6f:ba:d5:42: fa:6c:ff:fe:dc:a4:b9:70:f1:d2:b7:16:2d:ed:11: 22:f7:a1:23:82:7b:03:9c:a4:bd:28:d7:2d:f2:bb: 9c:f8:29:b5:d1:1a:d0:2e:df:73:40:38:19:ec:15: ff:20:f0:47:59:ec:c6:4c:39:37:80:c8:4e:b6:1d: f8:56:c1:ee:cf:a1:6c:5d:dc:64:0a:da:da:ed:55: 39:df:bb:d3:82:64:48:8b:99:8b:93:59:1b:e9:88: 2d:a2:87:d6:b7:da:8f:77:d2:d1:ab:ac:97:4a:b3: 23:97:a3:2e:9f:3c:19:04:c5:26:df:e6:bb:ec:a1: 96:cc:9c:9c:a7:8f:f6:b5:fb:b5:28:2f:9e:98:5a: ca:2a:18:15:8b:d0:28:2e:43:2f:8a:48:4c:09:1b: 16:67:f6:ea:77:0d:27:24:fc:b0:29:24:54:71:6a: d5:5c:aa:c7:c6:3e:26:8f:c4:9e:45:e7:31:e0:f7: 6d:a5:19:de:dc:31:e4:87:f1:34:df:bb:25:83:f4: 4d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D3:F6:57:22:70:B3:47:53:A1:1C:CD:43:50:2E:62:31:AD:0B:50 X509v3 Authority Key Identifier: keyid:A5:07:3A:49:84:E5:97:10:13:30:B9:E7:A0:58:F3:89:CE:93:29:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:15:fe:94:21:43:de:1e:e1:e7:ea:e3:73:76:d7:f9:6c:71: fb:41:89:1b:de:56:cd:90:25:3f:de:33:72:97:4c:f2:85:f2: 8e:ba:a2:b9:5a:f0:88:7c:e4:78:3f:a4:b9:ca:e3:3c:0f:81: 1f:6b:52:23:66:f4:e1:56:e3:3b:57:61:fc:e4:a4:7c:71:14: 66:8e:bb:8c:26:49:54:0e:ae:60:35:26:d1:13:20:84:ab:ee: 85:9e:85:c4:55:11:66:79:42:91:76:2d:73:68:12:4d:60:3c: 20:46:1b:15:a3:ad:3f:13:e3:ee:f4:6a:8f:a3:c1:9a:fb:9c: e9:aa:45:ff:87:0f:37:2c:f5:97:6f:26:ad:0f:3a:d9:61:7e: e8:f4:2f:23:1d:9d:2c:f7:4f:bd:8a:ba:ae:10:9b:54:ce:58: 53:72:5b:e0:7d:a3:1f:6d:6f:39:a3:e5:a1:df:c5:63:fe:f3: 63:0e:cd:bb:cd:2e:b5:98:4c:39:f6:eb:d7:43:46:82:cc:51: 81:0c:db:5e:06:7d:e1:06:95:46:7d:83:62:47:2f:ed:12:51: f5:f9:f8:80:01:bb:0f:93:e4:47:1c:bb:4d:67:db:71:e0:6c: c3:56:c7:3a:e5:aa:4a:6e:12:ad:97:8e:ea:8e:4f:64:c6:24: 2d:4d:33:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRCOUYxMTAvBgNVBAUTKEE1MDczQTQ5ODRFNTk3MTAxMzMwQjlFN0EwNThGMzg5 Q0U5MzI5QUUwHhcNMjUxMTA0MjMzOTUwWhcNMjUxMTExMjMzOTUwWjAYMRYwFAYD VQQDEw02OTBhOGVjNy1hYjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9fMhEmXLtUI7tFgciKsaRUY7ERpArWeuuddXxEf14xuxgvlyHtROYDXDX7Q K/+EeApG7gNVLG+61UL6bP/+3KS5cPHStxYt7REi96EjgnsDnKS9KNct8ruc+Cm1 0RrQLt9zQDgZ7BX/IPBHWezGTDk3gMhOth34VsHuz6FsXdxkCtra7VU537vTgmRI i5mLk1kb6YgtoofWt9qPd9LRq6yXSrMjl6MunzwZBMUm3+a77KGWzJycp4/2tfu1 KC+emFrKKhgVi9AoLkMvikhMCRsWZ/bqdw0nJPywKSRUcWrVXKrHxj4mj8SeRecx 4PdtpRne3DHkh/E037slg/RNmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDT9lci cLNHU6EczUNQLmIxrQtQMB8GA1UdIwQYMBaAFKUHOkmE5ZcQEzC556BY84nOkymu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEI5Ri9GNzhEQjVEQzI3 MzIxMUVDQUFFM0Y5M0FDNEY5QUUwMi9wUWM2U1lUbGx4QVRNTG5ub0ZqemljNlRL YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BRYzZTWVRsbHhBVE1Mbm5vRmp6aWM2VEthNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEI5Ri9GNzhEQjVEQzI3MzIxMUVDQUFFM0Y5M0FDNEY5QUUwMi9wUWM2U1lUbGx4 QVRNTG5ub0ZqemljNlRLYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsFf6UIUPeHuHn6uNzdtf5bHH7QYkb3lbNkCU/3jNyl0zyhfKOuqK5 WvCIfOR4P6S5yuM8D4Efa1IjZvThVuM7V2H85KR8cRRmjruMJklUDq5gNSbREyCE q+6FnoXEVRFmeUKRdi1zaBJNYDwgRhsVo60/E+Pu9GqPo8Ga+5zpqkX/hw83LPWX byatDzrZYX7o9C8jHZ0s90+9irquEJtUzlhTclvgfaMfbW85o+Wh38Vj/vNjDs27 zS61mEw59uvXQ0aCzFGBDNteBn3hBpVGfYNiRy/tElH1+fiAAbsPk+RHHLtNZ9tx 4GzDVsc65apKbhKtl47qjk9kxiQtTTPS -----END CERTIFICATE-----Generated at Wed Nov 5 23:52:24 2025 by rpki-client