$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft File: _qS5bzmD92nHM5dFbBK5D2QkbHw.mft (raw, json) Hash identifier: /NwiAegYTwrkT0NwBaGcpo/vdJZRDjseiD98N2Uw51U= Subject key identifier: C3:FE:B2:A0:47:22:EF:8C:55:F6:7D:C2:3B:7D:40:1D:C6:DD:00:BD Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C Certificate issuer: /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Certificate serial: 18B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft Manifest number: 189A Signing time: Tue 04 Nov 2025 16:34:39 +0000 Manifest this update: Tue 04 Nov 2025 16:34:39 +0000 Manifest next update: Tue 11 Nov 2025 16:34:39 +0000 Files and hashes: 1: _qS5bzmD92nHM5dFbBK5D2QkbHw.crl (hash: efcj8Th7NkqHs6M19LCRX9fWkTmOQLpzocV9QTnxVXo=) 2: 8C3BBD78F0D611EDAF996E15C4F9AE02.roa (hash: 2r5VjPZLTfd0cN6seY2Crq6UpUlVqdCBOQkEgVVnHqw=) 3: C6454260AA9A11E7B4776E52C4F9AE02.roa (hash: 7d8V8MNuo6bJmRMm86LwefJ5d/hybMOT1p1twJY8ips=) 4: 7F77220A143811EE97A64D19C4F9AE02.roa (hash: diKGcxmwQTel5YY8WsC3uD2ZYX3TcWgxBxLiKnkwFdQ=) 5: 5A8744D8143411EEAB1A5D73C4F9AE02.roa (hash: 9oN/rraJSk7Kign78bcfJYuxiKVkz1RMvAOI+ErcKZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6325 (0x18b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C Validity Not Before: Nov 4 16:34:39 2025 GMT Not After : Nov 11 16:34:39 2025 GMT Subject: CN=690a2b1f-2ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:36:2b:ec:64:37:41:3b:3a:21:ea:31:82:b5: db:17:bd:3f:5d:e2:76:29:a5:b1:9e:68:db:03:54: 04:62:5c:1a:2f:8b:33:7d:93:a8:21:5f:08:25:c5: f9:f1:f8:0e:cd:f2:f2:14:d3:8b:da:c4:fb:e6:99: 15:bd:4f:0f:5d:1f:67:b1:24:16:a5:12:96:ff:98: bf:51:3f:0f:77:b0:78:94:89:ba:24:eb:47:28:d5: 78:90:25:30:c3:af:4e:24:21:a3:8e:ba:18:25:60: 2e:a6:e0:22:e9:d2:d9:14:6f:9a:1e:3a:7c:53:4b: e3:79:ec:8a:0a:9b:d4:f5:56:b9:3e:f4:b8:a4:c1: dc:e0:98:d3:cb:2d:5d:d0:f6:c0:0f:68:fc:3f:cc: a3:91:fe:71:ad:d5:ad:e8:36:b2:09:d0:5b:55:90: 89:ab:dc:84:74:98:23:38:3b:52:4c:f3:49:59:67: 83:63:bb:05:b1:7f:ab:d3:6e:79:27:60:27:b1:7b: a0:1d:5c:6e:37:e6:64:d6:8a:c0:4c:d6:96:f9:c6: 06:3c:2c:8e:bf:a1:a2:ac:a4:7c:3e:e0:e0:d4:81: ae:32:08:5a:43:36:e0:34:f8:b3:74:3a:f6:e8:58: 36:ee:66:17:0b:96:10:f7:d1:2f:cc:89:c2:90:cd: c4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FE:B2:A0:47:22:EF:8C:55:F6:7D:C2:3B:7D:40:1D:C6:DD:00:BD X509v3 Authority Key Identifier: keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:fe:ed:ce:39:0a:08:a1:ac:60:50:bf:ad:d1:1f:16:74:3d: 73:7a:94:c5:27:3c:9a:e7:35:5d:9e:99:dd:0f:18:ef:63:c2: 6a:3e:b7:30:85:05:3e:2f:d0:5b:6b:a0:81:ea:aa:c5:76:56: 55:2e:59:26:84:54:b6:e6:50:27:ee:0b:95:db:e3:74:5f:02: 44:d8:41:33:20:b6:a0:23:9b:e4:52:7b:3c:1e:8a:01:0d:39: 47:a5:e9:15:2a:85:7d:65:0b:ad:87:02:fc:c7:07:a3:34:d8: 3f:b4:b2:35:79:1e:f8:4f:c4:4a:b2:67:64:90:3a:a4:87:40: 2b:2e:a9:4e:2b:18:a8:d3:fd:a7:d8:93:e3:13:b7:81:6f:d9: a3:eb:a9:f4:ee:3b:35:91:9e:85:24:7e:e0:d0:9c:68:1a:f3: ac:32:93:9c:3c:27:ba:3e:6d:ef:6a:6b:68:f8:b0:3f:bb:f7: cb:b4:2b:55:f5:fe:c1:fb:59:77:31:43:1a:0f:72:ae:06:e8: ec:4b:1e:bb:7c:b2:cb:81:35:4d:76:4d:1c:92:30:0f:bd:e3: 50:9f:94:ed:9c:bd:e0:0f:dc:2d:31:d9:8e:d2:77:89:c9:c9: 8f:a6:48:01:f5:53:88:5b:8d:be:61:66:f9:e4:e5:f1:c2:c8: cf:66:23:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQzNkExMTAvBgNVBAUTKEZFQTRCOTZGMzk4M0Y3NjlDNzMzOTc0NTZDMTJCOTBG NjQyNDZDN0MwHhcNMjUxMTA0MTYzNDM5WhcNMjUxMTExMTYzNDM5WjAYMRYwFAYD VQQDEw02OTBhMmIxZi0yYWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTYr7GQ3QTs6IeoxgrXbF70/XeJ2KaWxnmjbA1QEYlwaL4szfZOoIV8IJcX5 8fgOzfLyFNOL2sT75pkVvU8PXR9nsSQWpRKW/5i/UT8Pd7B4lIm6JOtHKNV4kCUw w69OJCGjjroYJWAupuAi6dLZFG+aHjp8U0vjeeyKCpvU9Va5PvS4pMHc4JjTyy1d 0PbAD2j8P8yjkf5xrdWt6DayCdBbVZCJq9yEdJgjODtSTPNJWWeDY7sFsX+r0255 J2AnsXugHVxuN+Zk1orATNaW+cYGPCyOv6GirKR8PuDg1IGuMghaQzbgNPizdDr2 6Fg27mYXC5YQ99EvzInCkM3EkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMP+sqBH Iu+MVfZ9wjt9QB3G3QC9MB8GA1UdIwQYMBaAFP6kuW85g/dpxzOXRWwSuQ9kJGx8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDM2QS8zN0FCRDcwOEFB OUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDkybkhNNWRGYkJLNUQyUWti SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19xUzViem1EOTJuSE01ZEZiQks1RDJRa2JIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDM2QS8zN0FCRDcwOEFBOUExMUU3QkFDNDEyNTJDNEY5QUUwMi9fcVM1YnptRDky bkhNNWRGYkJLNUQyUWtiSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6/u3OOQoIoaxgUL+t0R8WdD1zepTFJzya5zVdnpndDxjvY8JqPrcw hQU+L9Bba6CB6qrFdlZVLlkmhFS25lAn7guV2+N0XwJE2EEzILagI5vkUns8HooB DTlHpekVKoV9ZQuthwL8xwejNNg/tLI1eR74T8RKsmdkkDqkh0ArLqlOKxio0/2n 2JPjE7eBb9mj66n07js1kZ6FJH7g0JxoGvOsMpOcPCe6Pm3vamto+LA/u/fLtCtV 9f7B+1l3MUMaD3KuBujsSx67fLLLgTVNdk0ckjAPveNQn5TtnL3gD9wtMdmO0neJ ycmPpkgB9VOIW42+YWb55OXxwsjPZiMa -----END CERTIFICATE-----Generated at Wed Nov 5 10:00:55 2025 by rpki-client