$ rpki-client -vvf rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft File: q0w-Na78VbW6NYykBu2WJqQiD9A.mft (raw, json) Hash identifier: 0qiewOm8m+489GQOe29cePgg4ENe8mM9PehfNDQrnjc= Subject key identifier: E5:3F:31:4E:ED:81:CE:01:2A:7D:68:7D:F1:34:ED:9E:B7:84:86:E0 Authority key identifier: AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0 Certificate issuer: /CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0 Certificate serial: 0B09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft Manifest number: 0AFA Signing time: Sun 02 Nov 2025 19:22:20 +0000 Manifest this update: Sun 02 Nov 2025 19:22:19 +0000 Manifest next update: Sun 09 Nov 2025 19:22:19 +0000 Files and hashes: 1: q0w-Na78VbW6NYykBu2WJqQiD9A.crl (hash: V8TojENK8nWs8IQyyH892pVXbOHU06V+y6EfAp/YXz8=) 2: 7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa (hash: Q8JrUCR4e83/VWNJt2ZiQdVnlQqYm7C09//kOXveNys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2825 (0xb09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A553, serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0 Validity Not Before: Nov 2 19:22:19 2025 GMT Not After : Nov 9 19:22:19 2025 GMT Subject: CN=6907af6c-265a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:94:cd:57:2b:ae:4f:f8:de:85:0e:db:f4:5c: 16:a2:63:cc:5d:05:c5:c7:5d:9e:09:89:08:d1:d8: e3:da:8f:a0:69:94:91:13:2d:16:eb:cc:4f:18:61: 6a:ca:89:cc:19:72:6e:96:9d:2d:4e:bb:93:2f:b5: 40:ea:f3:62:99:43:c9:c2:a1:11:db:f8:28:09:14: ed:1f:43:12:68:63:c8:7e:1f:33:b2:9e:9a:6f:de: 7b:18:31:ef:ae:a7:f2:99:1e:3b:56:ae:f8:49:1b: e2:68:b3:7a:60:3e:1a:a6:7d:b9:38:5f:a0:6a:1f: 0d:1c:65:83:87:53:dc:37:a2:a8:dd:48:a7:b1:d9: ac:e9:16:b8:6d:56:dd:d1:f4:a9:d0:a7:e0:42:49: 87:b8:02:45:0c:5d:84:72:f1:94:68:54:cc:8f:11: e8:b1:b2:a5:91:51:67:40:ae:91:28:07:4c:2a:41: 98:76:22:42:60:12:9e:d1:9c:23:61:f7:cc:32:f8: d8:d0:cc:a3:ce:2f:fb:18:22:1a:7e:da:55:4f:7c: 7d:a9:d7:7d:97:5a:72:d4:1a:3f:3d:4f:3f:13:31: f1:25:06:46:df:80:ed:1d:ad:c5:3c:4d:66:0c:16: 3a:67:c9:33:c4:85:4b:b0:54:8f:76:3e:ae:c9:fb: db:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3F:31:4E:ED:81:CE:01:2A:7D:68:7D:F1:34:ED:9E:B7:84:86:E0 X509v3 Authority Key Identifier: keyid:AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:b4:bf:a1:f5:ff:4d:e0:fe:a7:8d:36:27:e9:7d:39:f7:71: 9a:46:e3:9a:41:16:4a:d3:0d:a2:db:cb:52:b4:e6:e9:31:89: 7d:b2:b4:30:f3:5f:49:93:d6:04:9e:0c:44:5c:78:33:fc:07: da:41:c9:ae:27:02:45:9a:a2:69:e4:44:0d:63:3e:8a:5d:41: 14:5c:ce:72:14:64:51:b6:bf:63:88:2e:ad:2c:48:38:6a:3d: 0b:f2:c3:eb:f1:2c:b4:a5:58:43:3e:a9:95:cc:36:7a:b0:d1: d7:6d:ba:4e:cc:2a:f4:df:a1:54:88:2b:ec:c2:2f:ef:54:2d: 4c:6a:c4:83:90:72:a6:e8:57:b0:25:e3:0c:aa:1d:8c:80:89: 21:70:1a:7b:3f:9b:d3:29:b8:d8:e5:17:6e:52:04:ed:fb:48: c6:34:3e:bf:11:ca:f4:5b:d6:6d:34:b2:93:50:00:f7:99:ae: f2:e8:27:4e:e9:dc:58:b6:43:e0:be:38:77:68:0e:43:22:42: b3:dc:9b:49:e9:69:ff:a6:7d:4b:57:ae:88:8a:4c:60:d9:f4: 9f:97:01:4c:61:58:64:09:44:1d:d8:0d:48:08:31:79:db:d8: 90:4b:9a:b3:3f:0e:4d:b0:04:9f:c4:e8:84:ae:60:86:0f:14: 65:a7:d0:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1NTMxMTAvBgNVBAUTKEFCNEMzRTM1QUVGQzU1QjVCQTM1OENBNDA2RUQ5NjI2 QTQyMjBGRDAwHhcNMjUxMTAyMTkyMjE5WhcNMjUxMTA5MTkyMjE5WjAYMRYwFAYD VQQDEw02OTA3YWY2Yy0yNjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JTNVyuuT/jehQ7b9FwWomPMXQXFx12eCYkI0djj2o+gaZSREy0W68xPGGFq yonMGXJulp0tTruTL7VA6vNimUPJwqER2/goCRTtH0MSaGPIfh8zsp6ab957GDHv rqfymR47Vq74SRviaLN6YD4apn25OF+gah8NHGWDh1PcN6Ko3Uinsdms6Ra4bVbd 0fSp0KfgQkmHuAJFDF2EcvGUaFTMjxHosbKlkVFnQK6RKAdMKkGYdiJCYBKe0Zwj YffMMvjY0Myjzi/7GCIaftpVT3x9qdd9l1py1Bo/PU8/EzHxJQZG34DtHa3FPE1m DBY6Z8kzxIVLsFSPdj6uyfvbyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOU/MU7t gc4BKn1offE07Z63hIbgMB8GA1UdIwQYMBaAFKtMPjWu/FW1ujWMpAbtliakIg/Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU1My85NUM4QTNFNDU3 QTMxMUVBQTkzNUMwODNDNEY5QUUwMi9xMHctTmE3OFZiVzZOWXlrQnUyV0pxUWlE OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Ewdy1OYTc4VmJXNk5ZeWtCdTJXSnFRaUQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU1My85NUM4QTNFNDU3QTMxMUVBQTkzNUMwODNDNEY5QUUwMi9xMHctTmE3OFZi VzZOWXlrQnUyV0pxUWlEOUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYtL+h9f9N4P6njTYn6X0593GaRuOaQRZK0w2i28tStObpMYl9srQw 819Jk9YEngxEXHgz/AfaQcmuJwJFmqJp5EQNYz6KXUEUXM5yFGRRtr9jiC6tLEg4 aj0L8sPr8Sy0pVhDPqmVzDZ6sNHXbbpOzCr036FUiCvswi/vVC1MasSDkHKm6Few JeMMqh2MgIkhcBp7P5vTKbjY5RduUgTt+0jGND6/Ecr0W9ZtNLKTUAD3ma7y6CdO 6dxYtkPgvjh3aA5DIkKz3JtJ6Wn/pn1LV66Iikxg2fSflwFMYVhkCUQd2A1ICDF5 29iQS5qzPw5NsASfxOiErmCGDxRlp9Bi -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:33 2025 by rpki-client