$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json) Hash identifier: SYjqfFvi9diKYNZWHj65JV9+MKUgFkG+azJ2X05/Mdc= Subject key identifier: 20:72:C6:07:29:3B:19:C1:6F:3C:96:F2:DA:BC:9E:1E:24:78:C7:EC Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Certificate serial: 08FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft Manifest number: 08F1 Signing time: Tue 04 Nov 2025 20:26:10 +0000 Manifest this update: Tue 04 Nov 2025 20:26:09 +0000 Manifest next update: Tue 11 Nov 2025 20:26:09 +0000 Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: Yc3PFKIHyzzI90RnggVJzeW1/3zunrZAypP5F6TxHtM=) 2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: qDuXN79IYo1ayNnk4ZRYUkR9U2DK4zQbiGKyGGdoBrg=) 3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: bgNv+IqWCSXLvojk2Z7PhxXcctTDA8/7IvD4X7CUQGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2302 (0x8fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403 Validity Not Before: Nov 4 20:26:09 2025 GMT Not After : Nov 11 20:26:09 2025 GMT Subject: CN=690a6162-9977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f1:f0:f2:f7:87:61:07:fa:5a:b4:67:ee:cb: 98:0e:96:9e:cf:14:ca:3b:34:85:6a:ea:26:8c:e6: 12:6c:b3:11:3a:c0:59:b6:e4:42:55:f0:8d:2f:6c: c0:02:c2:fe:42:d4:4f:2f:00:fa:1f:1b:f8:8e:53: 5b:e6:e6:52:3e:4d:90:46:7d:e8:82:62:c0:5e:f1: d2:d7:d1:85:38:bc:cc:bf:36:ea:38:3f:3b:ab:60: 60:2b:55:fe:96:e7:24:d4:eb:1a:14:33:5e:42:47: f3:9f:ef:5d:a1:c9:86:f9:c7:a6:75:b5:7d:d2:4a: 10:f7:ca:f3:65:6b:cf:86:c6:f3:b1:89:69:ca:ee: d6:c4:0f:e0:93:ad:46:ea:0f:3b:b2:67:78:10:f4: 40:48:06:05:80:f6:18:07:e7:a9:aa:f5:3a:a0:54: 93:64:ba:33:db:f8:b7:c1:d7:db:82:00:26:93:46: 85:1f:37:7b:4c:cb:a9:df:a5:ce:96:40:6f:1b:d6: dc:01:89:38:b2:4a:68:00:14:27:df:7a:71:f6:67: 63:cc:ac:e2:bb:90:db:31:8c:48:ad:c5:b9:f9:20: 03:15:47:69:43:77:4b:dd:22:73:2a:de:bc:e2:62: 59:02:1e:d7:e1:f6:80:88:84:66:10:8a:ef:aa:e6: c1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:72:C6:07:29:3B:19:C1:6F:3C:96:F2:DA:BC:9E:1E:24:78:C7:EC X509v3 Authority Key Identifier: keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:6e:8d:98:52:12:6b:c4:1b:ca:94:56:bb:e4:c0:f8:46:a4: 6b:c8:38:21:60:e3:98:42:b1:c1:0f:6a:9b:43:41:9e:7a:44: 22:50:89:e2:da:96:d4:fe:d1:3d:55:07:f6:17:e3:79:e9:b5: c1:3c:1a:ad:4e:72:04:89:7a:91:b5:23:fb:03:d1:57:6a:f7: 15:c9:6e:07:30:33:e5:bd:a9:9c:9c:be:75:ec:33:97:f8:f7: 46:66:89:9a:ea:43:8f:ea:2c:56:6d:1d:c8:40:5c:30:91:66: 3a:f7:ef:78:f5:dd:5e:cd:25:62:a1:22:e6:aa:4d:07:84:e5: c6:57:e5:08:c7:14:76:46:90:e7:0d:e0:fa:e3:9c:ef:5e:24: 74:e8:47:a4:db:e2:77:1a:19:3f:f3:38:c0:f2:4d:c8:7b:43: 52:9e:a3:8d:de:dd:47:c9:27:e5:2a:fb:d7:55:45:ce:1f:41: 99:52:4d:ab:20:2e:a5:c1:c4:98:bc:58:00:18:55:1d:da:3f: 22:84:21:a9:b3:91:24:78:92:3b:61:59:92:6d:ad:bc:aa:82: 68:69:6b:96:6b:88:41:8f:1f:41:73:36:2e:40:08:27:87:e0: 73:26:41:16:41:8c:9c:a1:97:12:f0:4d:1c:82:06:c2:3b:9f: 2a:af:06:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3 QzNBRkU0MDMwHhcNMjUxMTA0MjAyNjA5WhcNMjUxMTExMjAyNjA5WjAYMRYwFAYD VQQDEw02OTBhNjE2Mi05OTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPHw8veHYQf6WrRn7suYDpaezxTKOzSFauomjOYSbLMROsBZtuRCVfCNL2zA AsL+QtRPLwD6Hxv4jlNb5uZSPk2QRn3ogmLAXvHS19GFOLzMvzbqOD87q2BgK1X+ luck1OsaFDNeQkfzn+9docmG+cemdbV90koQ98rzZWvPhsbzsYlpyu7WxA/gk61G 6g87smd4EPRASAYFgPYYB+epqvU6oFSTZLoz2/i3wdfbggAmk0aFHzd7TMup36XO lkBvG9bcAYk4skpoABQn33px9mdjzKziu5DbMYxIrcW5+SADFUdpQ3dL3SJzKt68 4mJZAh7X4faAiIRmEIrvqubBrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCByxgcp OxnBbzyW8tq8nh4keMfsMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1 QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTJGNy83Q0M0NUZBRUJBQUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElk UjdHelZad0oxdXA4T3Y1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQbo2YUhJrxBvKlFa75MD4RqRryDghYOOYQrHBD2qbQ0GeekQiUIni 2pbU/tE9VQf2F+N56bXBPBqtTnIEiXqRtSP7A9FXavcVyW4HMDPlvamcnL517DOX +PdGZoma6kOP6ixWbR3IQFwwkWY69+949d1ezSVioSLmqk0HhOXGV+UIxxR2RpDn DeD645zvXiR06Eek2+J3Ghk/8zjA8k3Ie0NSnqON3t1HySflKvvXVUXOH0GZUk2r IC6lwcSYvFgAGFUd2j8ihCGps5EkeJI7YVmSba28qoJoaWuWa4hBjx9BczYuQAgn h+BzJkEWQYycoZcS8E0cggbCO58qrwaO -----END CERTIFICATE-----Generated at Wed Nov 5 12:27:57 2025 by rpki-client