$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft File: 0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json) Hash identifier: X4UoYZtgspSBYSQf/ObCpDAU8Kj52PUjbJMT9nwYTCM= Subject key identifier: 3C:2B:20:7E:2F:5D:AF:C6:38:3F:C8:25:37:D5:2C:29:97:D6:4A:7A Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Certificate serial: 0B2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft Manifest number: 0B1E Signing time: Tue 04 Nov 2025 19:24:38 +0000 Manifest this update: Tue 04 Nov 2025 19:24:38 +0000 Manifest next update: Tue 11 Nov 2025 19:24:38 +0000 Files and hashes: 1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: W7qCFjb50MvGRRYlkxasr1qguRpk9zOR47Y05R4Xz3Q=) 2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: rFiMZXa2OxD0Ej0KwFsbxfHbUbN1ZogDT7O8NAGWwno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2858 (0xb2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Validity Not Before: Nov 4 19:24:38 2025 GMT Not After : Nov 11 19:24:38 2025 GMT Subject: CN=690a52f6-e7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:74:23:4f:65:57:48:12:d0:1b:f3:81:11: 0d:e9:12:b3:e3:7e:bd:16:77:b2:12:e9:9a:bc:2f: d0:5a:32:cf:ce:c8:f7:cd:54:eb:68:24:a5:6b:f8: d6:45:2b:b1:84:06:44:d4:0f:63:87:5d:52:cf:82: 45:4d:5a:21:34:6d:9d:ac:d9:e0:8b:15:25:00:ec: ff:24:94:e7:25:b7:50:8f:3a:fc:5a:84:ae:3c:5c: 2e:89:80:ea:2a:98:6f:8a:a4:66:4e:c6:59:30:27: 85:44:a1:a8:a9:94:42:e3:6a:ce:78:21:34:0f:24: 10:82:51:f0:05:4a:2d:b8:ce:71:bf:bb:6d:3f:1d: 8d:18:1c:82:8c:4b:7f:ad:e1:68:59:a6:57:a0:e4: 3c:fa:fc:a1:78:10:93:09:8e:c6:a7:df:73:82:fc: d9:11:f2:73:54:b1:8d:96:d2:fd:17:a4:ee:62:ed: 63:2a:e5:1a:db:cd:72:84:c3:30:12:59:2b:76:07: 11:38:7a:d0:d0:6b:4f:80:67:d5:f1:a7:d5:59:83: b1:3b:8d:2e:8e:d7:77:30:78:24:76:24:ec:eb:cf: 1d:9c:0f:24:c6:8e:70:0a:20:15:cc:0c:e1:20:56: 42:d7:67:c3:9f:99:4c:c3:a9:33:6d:0d:6b:4e:c9: dd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2B:20:7E:2F:5D:AF:C6:38:3F:C8:25:37:D5:2C:29:97:D6:4A:7A X509v3 Authority Key Identifier: keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:9f:6f:dc:f2:21:37:cd:1e:a4:6d:dc:49:e9:e1:a4:a5:98: 2a:29:d0:5d:41:e1:6e:11:91:62:88:e1:24:ac:0e:ef:43:ef: d7:22:b9:34:d8:82:fc:06:19:0a:97:15:07:dc:5d:8b:07:9f: 21:2d:57:09:58:7b:75:1e:3c:5b:b7:d7:0b:ce:50:51:c2:cf: 0f:9a:8c:08:24:dc:03:c9:a0:6e:6a:d9:e5:7f:39:1b:f8:13: f7:9f:e7:d2:03:cd:9e:42:83:ec:3f:be:5b:dd:b2:d2:e6:a9: af:c7:8f:cd:be:22:c3:99:3d:b0:f1:2f:0b:ba:44:b3:65:7d: e3:cc:74:c0:98:bc:cb:ac:24:8c:a6:61:0b:29:88:0d:e0:50: 56:54:19:25:2e:1a:fb:40:0a:0c:fb:b9:ff:b7:37:cc:7f:64: be:aa:6c:fb:a3:5a:f3:4f:72:76:b5:84:5f:0c:29:5b:48:62: 23:a9:03:f9:d6:3c:f1:5c:cc:bc:bc:bc:94:c4:23:18:cf:e5: 56:b4:f7:6d:f6:0a:4c:ab:af:61:5a:5f:c2:19:01:ad:c9:4f: d5:16:b2:b4:0c:39:c3:09:3d:09:5a:0f:bc:99:8f:8b:e5:93: 27:58:6d:29:e8:20:4c:ef:a9:ef:59:83:bf:40:e1:51:12:1f: 23:31:62:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGRTgxMTAvBgNVBAUTKEQwMkQ5MEZCOTEyQTU5NjBCQkU1NkNCNEU3NTM1MTZB MjRDNkVGN0IwHhcNMjUxMTA0MTkyNDM4WhcNMjUxMTExMTkyNDM4WjAYMRYwFAYD VQQDEw02OTBhNTJmNi1lN2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRp0I09lV0gS0BvzgREN6RKz4369FneyEumavC/QWjLPzsj3zVTraCSla/jW RSuxhAZE1A9jh11Sz4JFTVohNG2drNngixUlAOz/JJTnJbdQjzr8WoSuPFwuiYDq KphviqRmTsZZMCeFRKGoqZRC42rOeCE0DyQQglHwBUotuM5xv7ttPx2NGByCjEt/ reFoWaZXoOQ8+vyheBCTCY7Gp99zgvzZEfJzVLGNltL9F6TuYu1jKuUa281yhMMw ElkrdgcROHrQ0GtPgGfV8afVWYOxO40ujtd3MHgkdiTs688dnA8kxo5wCiAVzAzh IFZC12fDn5lMw6kzbQ1rTsndbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwrIH4v Xa/GOD/IJTfVLCmX1kp6MB8GA1UdIwQYMBaAFNAtkPuRKllgu+VstOdTUWokxu97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEZFOC8xMkY5NkZCMjRF RkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdXQzc1V3kwNTFOUmFpVEc3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBDMlEtNUVxV1dDNzVXeTA1MU5SYWlURzczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEZFOC8xMkY5NkZCMjRFRkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdX Qzc1V3kwNTFOUmFpVEc3M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmn2/c8iE3zR6kbdxJ6eGkpZgqKdBdQeFuEZFiiOEkrA7vQ+/XIrk0 2IL8BhkKlxUH3F2LB58hLVcJWHt1Hjxbt9cLzlBRws8PmowIJNwDyaBuatnlfzkb +BP3n+fSA82eQoPsP75b3bLS5qmvx4/NviLDmT2w8S8LukSzZX3jzHTAmLzLrCSM pmELKYgN4FBWVBklLhr7QAoM+7n/tzfMf2S+qmz7o1rzT3J2tYRfDClbSGIjqQP5 1jzxXMy8vLyUxCMYz+VWtPdt9gpMq69hWl/CGQGtyU/VFrK0DDnDCT0JWg+8mY+L 5ZMnWG0p6CBM76nvWYO/QOFREh8jMWLO -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:29 2025 by rpki-client