$ rpki-client -vvf rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft File: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft (raw, json) Hash identifier: xIgKtjD2T8FUqGwrEV4U0feH8MZMxI9GJAa1faIXDwQ= Subject key identifier: 64:74:9C:25:A5:D8:A8:B8:12:13:D7:77:9A:43:02:84:92:50:9D:30 Authority key identifier: AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F Certificate issuer: /CN=A918B5FE/serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F Certificate serial: 070C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft Manifest number: 06F7 Signing time: Tue 04 Nov 2025 22:02:41 +0000 Manifest this update: Tue 04 Nov 2025 22:02:41 +0000 Manifest next update: Tue 11 Nov 2025 22:02:41 +0000 Files and hashes: 1: q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl (hash: lNENe8Hf2w+cbRXCTVGoUD+YEayui2duVbCzUZZWI6w=) 2: DAE15A7248F911EC9F04C439C4F9AE02.roa (hash: uL1H0QbwRjNu//kzatppv+a2Zrx1mIfoO1yF/DRChCo=) 3: DBB4BB6A48F911EC9F04C439C4F9AE02.roa (hash: /T58KApZQd0ra/XBIJpEnSI47L1LMtselRFt+bUqiz8=) 4: DCC969B048F911EC9F04C439C4F9AE02.roa (hash: JdA5JlwXLIa+e4Ydsq+HvnuHIMVtQwL6RUUhoUIWZBE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1804 (0x70c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B5FE, serialNumber=AB905DDC0AFBBD1549F66EFE8117AE15000A5E0F Validity Not Before: Nov 4 22:02:41 2025 GMT Not After : Nov 11 22:02:41 2025 GMT Subject: CN=690a7801-f9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:22:62:ca:22:3f:74:ed:fe:54:ae:51:d1:91: a4:b4:3f:da:1c:6c:ae:2f:7d:31:8c:da:3d:e2:94: 48:d6:ae:14:c7:3a:62:25:18:3c:ff:e0:8a:ed:c2: 91:10:f5:fa:fb:40:b2:a6:88:97:39:bb:73:80:bb: 39:fb:b6:e4:91:a5:24:19:aa:82:00:5b:67:0a:6a: 64:52:83:99:ae:a4:1f:07:a2:c8:1c:2d:4a:65:c0: e5:62:66:57:75:2c:ee:81:79:4f:7b:1b:09:e7:5b: e0:95:55:cc:6f:1b:08:c9:3c:b6:c5:c9:b3:66:39: 0e:81:bf:64:4c:1d:33:c1:ad:ba:2e:41:61:ee:9b: 7d:70:fe:1d:76:1b:9a:a5:f3:ab:24:5c:10:30:bf: ce:fb:50:8e:31:63:a4:0f:c1:06:a9:4c:49:ee:46: fa:2b:72:de:c2:16:27:97:34:3b:d5:2b:3c:fe:69: 77:a4:38:b6:67:81:de:7a:a1:f7:a9:43:89:99:9f: 4f:50:89:e9:60:9e:2e:78:03:16:82:77:e5:65:c4: 5c:b9:49:0b:d7:b1:a5:72:5c:0f:2e:0a:19:8b:d6: db:f6:aa:48:6b:93:3a:33:74:74:6d:55:32:ff:04: ec:06:a3:7a:ca:e5:15:17:a5:19:ae:46:cf:b1:94: 05:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:74:9C:25:A5:D8:A8:B8:12:13:D7:77:9A:43:02:84:92:50:9D:30 X509v3 Authority Key Identifier: keyid:AB:90:5D:DC:0A:FB:BD:15:49:F6:6E:FE:81:17:AE:15:00:0A:5E:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B5FE/32C300286A9E11EBB6762318C4F9AE02/q5Bd3Ar7vRVJ9m7-gReuFQAKXg8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:21:85:6b:77:e2:ad:19:33:73:13:19:e3:b2:09:35:a3:a0: de:30:3f:08:03:87:8c:0b:57:cb:de:0f:1a:e3:9c:b5:d7:29: 9d:0a:5e:3f:2b:42:7b:68:dc:05:b3:39:1b:2b:10:82:9d:1c: 96:23:b0:cd:c6:b0:72:55:94:1f:1b:27:fa:89:db:bb:db:6d: 57:c8:3b:29:67:62:7d:72:93:41:c3:75:59:80:7c:3c:e5:4a: e2:a0:3f:3b:9f:eb:5d:24:51:1c:d2:af:88:6f:c7:a2:f5:ac: ad:74:95:bd:91:d5:5f:f3:22:88:85:fb:50:2a:e7:24:9d:8c: a0:ce:45:c2:a3:b5:ab:24:e9:6f:4d:20:e9:c4:00:3f:6b:70: 5d:28:3f:34:4f:bb:44:78:8e:d0:40:78:23:ba:5b:f6:23:ce: e8:df:a6:f9:56:d6:25:74:72:4f:93:ef:fa:ad:71:60:e0:03: 80:63:9a:09:eb:6c:03:fe:1b:df:03:7a:9c:2f:ad:28:44:fe: 0a:a5:a5:aa:ad:af:fa:b4:86:bc:e2:a5:47:8d:a7:74:de:a9: 73:6c:cf:2c:fd:4a:9f:b8:15:95:97:13:05:8f:29:2a:9a:9e: 45:1b:71:21:92:85:2c:a5:4e:67:30:5c:79:4f:c6:c2:ad:22: 3d:63:64:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI1RkUxMTAvBgNVBAUTKEFCOTA1RERDMEFGQkJEMTU0OUY2NkVGRTgxMTdBRTE1 MDAwQTVFMEYwHhcNMjUxMTA0MjIwMjQxWhcNMjUxMTExMjIwMjQxWjAYMRYwFAYD VQQDEw02OTBhNzgwMS1mOWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryJiyiI/dO3+VK5R0ZGktD/aHGyuL30xjNo94pRI1q4UxzpiJRg8/+CK7cKR EPX6+0CypoiXObtzgLs5+7bkkaUkGaqCAFtnCmpkUoOZrqQfB6LIHC1KZcDlYmZX dSzugXlPexsJ51vglVXMbxsIyTy2xcmzZjkOgb9kTB0zwa26LkFh7pt9cP4ddhua pfOrJFwQML/O+1COMWOkD8EGqUxJ7kb6K3LewhYnlzQ71Ss8/ml3pDi2Z4HeeqH3 qUOJmZ9PUInpYJ4ueAMWgnflZcRcuUkL17GlclwPLgoZi9bb9qpIa5M6M3R0bVUy /wTsBqN6yuUVF6UZrkbPsZQFZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGR0nCWl 2Ki4EhPXd5pDAoSSUJ0wMB8GA1UdIwQYMBaAFKuQXdwK+70VSfZu/oEXrhUACl4P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjVGRS8zMkMzMDAyODZB OUUxMUVCQjY3NjIzMThDNEY5QUUwMi9xNUJkM0FyN3ZSVko5bTctZ1JldUZRQUtY ZzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3E1QmQzQXI3dlJWSjltNy1nUmV1RlFBS1hnOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjVGRS8zMkMzMDAyODZBOUUxMUVCQjY3NjIzMThDNEY5QUUwMi9xNUJkM0FyN3ZS Vko5bTctZ1JldUZRQUtYZzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPIYVrd+KtGTNzExnjsgk1o6DeMD8IA4eMC1fL3g8a45y11ymdCl4/ K0J7aNwFszkbKxCCnRyWI7DNxrByVZQfGyf6idu7221XyDspZ2J9cpNBw3VZgHw8 5UrioD87n+tdJFEc0q+Ib8ei9aytdJW9kdVf8yKIhftQKucknYygzkXCo7WrJOlv TSDpxAA/a3BdKD80T7tEeI7QQHgjulv2I87o36b5VtYldHJPk+/6rXFg4AOAY5oJ 62wD/hvfA3qcL60oRP4KpaWqra/6tIa84qVHjad03qlzbM8s/UqfuBWVlxMFjykq mp5FG3EhkoUspU5nMFx5T8bCrSI9Y2Rg -----END CERTIFICATE-----Generated at Wed Nov 5 15:39:45 2025 by rpki-client