$ rpki-client -vvf rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft File: j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft (raw, json) Hash identifier: 99fCWvtYFIbsY1zb5xnpph5wmoNn8MOVjZYsCzhLbBA= Subject key identifier: DA:CE:3E:A2:DA:26:47:C1:78:FE:D4:63:8D:E1:9D:2E:EB:DF:D3:83 Authority key identifier: 8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84 Certificate issuer: /CN=A918127C/serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184 Certificate serial: 07FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft Manifest number: 07F3 Signing time: Tue 04 Nov 2025 21:10:11 +0000 Manifest this update: Tue 04 Nov 2025 21:10:11 +0000 Manifest next update: Tue 11 Nov 2025 21:10:11 +0000 Files and hashes: 1: j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl (hash: X5LZoo0RhrjMZ9ZIKopdeoKEiqwaZOU2rAiBtx5LTYo=) 2: 2C60C8AAE01111EEA6583A7DC4F9AE02.roa (hash: kz68xtzJ9y0s90fbiNDjg+Qqa/ttWC3I+nb0qBsOygg=) 3: 706E023CD46911EE9E90881CC4F9AE02.roa (hash: cnF49uFGlBMcP7cAW0jvKCj1KnT9PcQRWPzmGKf6pzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918127C, serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184 Validity Not Before: Nov 4 21:10:11 2025 GMT Not After : Nov 11 21:10:11 2025 GMT Subject: CN=690a6bb3-6691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:b0:3e:da:76:3d:af:fd:21:cb:36:17:b3: 29:5d:06:c9:75:48:bb:d3:75:cc:a1:ba:7c:c7:3b: b9:a2:3f:80:c5:3a:3b:ab:d0:fb:74:cc:18:04:4a: 8a:47:c3:5f:7a:05:81:53:00:85:7c:d3:6c:12:f8: 61:e8:ca:58:70:51:5c:a1:e0:e3:71:29:f3:6f:9d: d9:c4:1c:95:1c:46:a2:0c:df:44:ef:73:95:54:02: 0b:11:6f:26:b8:c4:01:b3:a7:91:f3:b8:20:9a:77: bb:f7:76:30:44:81:30:4f:51:72:68:67:3b:5a:da: 2c:ed:03:26:e8:e3:03:f2:ba:ed:19:ad:50:e5:4d: 13:7a:42:bf:92:df:67:73:78:ed:7f:51:8c:7f:8a: 0c:d5:c5:90:fc:b0:c8:da:00:8e:1b:32:7b:5a:41: b0:97:56:3f:67:64:cc:6a:9d:e5:24:3b:39:ad:29: ee:01:e9:1c:8a:46:d0:60:24:cd:68:0e:78:fd:6d: 6f:bb:68:09:21:5a:75:3b:da:ad:0c:80:aa:4e:cd: 14:f3:1d:b5:2d:d0:5d:9c:2b:1b:a2:96:81:de:4e: de:1b:46:d8:6c:3a:15:d3:82:a7:79:5e:c5:fc:15: d2:b9:37:5d:0e:51:a6:68:30:a6:19:31:c9:6f:cc: 1f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CE:3E:A2:DA:26:47:C1:78:FE:D4:63:8D:E1:9D:2E:EB:DF:D3:83 X509v3 Authority Key Identifier: keyid:8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:cd:44:16:56:89:65:c0:04:3e:58:33:b4:6a:2e:87:d0:d8: 4a:f0:09:4d:c8:75:3a:8f:c6:e2:81:e9:26:9f:4a:6d:f7:0a: 01:ad:5d:cb:7f:25:4d:d1:24:42:2d:b1:0b:ad:b1:78:86:6c: a0:5f:c0:9d:a5:88:ba:7e:75:9c:48:cf:8f:42:17:3a:e9:4a: f4:2d:1f:3d:ec:61:d7:21:6c:de:5e:48:5a:9d:f0:35:61:ca: e2:10:52:2e:70:10:47:c1:6f:08:a4:4f:ee:5f:ee:37:fb:10: 48:59:d8:a9:e0:37:c5:98:77:fb:11:d2:ce:0c:07:84:30:ed: 9c:f7:1e:74:b4:56:63:bf:2d:de:73:00:94:89:94:0a:d2:c3: c0:4c:83:77:ac:1e:81:3c:ea:ba:c2:3c:91:4a:3a:04:e1:c4: 6c:52:ac:53:c3:3f:1c:95:92:f4:bd:a7:06:8f:5d:d4:94:fd: 41:2a:92:e8:73:8c:c0:75:63:78:12:3e:71:b1:4e:8f:d6:34: 29:d6:49:1c:a7:ad:bd:cc:ec:31:29:91:ba:a4:7c:46:6b:57: 23:44:25:ef:29:f8:74:8d:48:25:32:16:ca:37:99:b3:13:58: 13:5e:94:57:d9:ff:c7:3d:46:18:a9:ac:36:50:e9:15:00:f8: 11:0c:87:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEyN0MxMTAvBgNVBAUTKDhGOTQyMjUyQjdENDA0RTMzREI5QjFFMzU0RTA5MTAz QUFDNTAxODQwHhcNMjUxMTA0MjExMDExWhcNMjUxMTExMjExMDExWjAYMRYwFAYD VQQDEw02OTBhNmJiMy02NjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEuwPtp2Pa/9Ics2F7MpXQbJdUi703XMobp8xzu5oj+AxTo7q9D7dMwYBEqK R8NfegWBUwCFfNNsEvhh6MpYcFFcoeDjcSnzb53ZxByVHEaiDN9E73OVVAILEW8m uMQBs6eR87ggmne793YwRIEwT1FyaGc7Wtos7QMm6OMD8rrtGa1Q5U0TekK/kt9n c3jtf1GMf4oM1cWQ/LDI2gCOGzJ7WkGwl1Y/Z2TMap3lJDs5rSnuAekcikbQYCTN aA54/W1vu2gJIVp1O9qtDICqTs0U8x21LdBdnCsbopaB3k7eG0bYbDoV04KneV7F /BXSuTddDlGmaDCmGTHJb8wfKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrOPqLa JkfBeP7UY43hnS7r39ODMB8GA1UdIwQYMBaAFI+UIlK31ATjPbmx41TgkQOqxQGE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTI3Qy9FNjk3MTEyQTA2 QUQxMUVCOTgyMTA1N0ZDNEY5QUUwMi9qNVFpVXJmVUJPTTl1YkhqVk9DUkE2ckZB WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1UWlVcmZVQk9NOXViSGpWT0NSQTZyRkFZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTI3Qy9FNjk3MTEyQTA2QUQxMUVCOTgyMTA1N0ZDNEY5QUUwMi9qNVFpVXJmVUJP TTl1YkhqVk9DUkE2ckZBWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBzUQWVollwAQ+WDO0ai6H0NhK8AlNyHU6j8bigekmn0pt9woBrV3L fyVN0SRCLbELrbF4hmygX8CdpYi6fnWcSM+PQhc66Ur0LR897GHXIWzeXkhanfA1 YcriEFIucBBHwW8IpE/uX+43+xBIWdip4DfFmHf7EdLODAeEMO2c9x50tFZjvy3e cwCUiZQK0sPATIN3rB6BPOq6wjyRSjoE4cRsUqxTwz8clZL0vacGj13UlP1BKpLo c4zAdWN4Ej5xsU6P1jQp1kkcp629zOwxKZG6pHxGa1cjRCXvKfh0jUglMhbKN5mz E1gTXpRX2f/HPUYYqaw2UOkVAPgRDIdS -----END CERTIFICATE-----Generated at Wed Nov 5 21:14:59 2025 by rpki-client