$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft File: 5rsDqligwnDrZrPq6yQI__q6Xsc.mft (raw, json) Hash identifier: V852hykMniWKnXzgXmfZhHePoDBkhIqpDHGhG/shP10= Subject key identifier: 6E:2F:01:73:53:33:E5:FC:D3:DC:50:F8:C6:8A:43:D2:D4:35:D5:91 Authority key identifier: E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 Certificate issuer: /CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft Manifest number: 01E4 Signing time: Sat 25 Oct 2025 06:03:09 +0000 Manifest this update: Sat 25 Oct 2025 06:03:08 +0000 Manifest next update: Sat 01 Nov 2025 06:03:08 +0000 Files and hashes: 1: 5rsDqligwnDrZrPq6yQI__q6Xsc.crl (hash: dXgcqans9IubC4tXYg3E9XXwFRoPOnB89b8nt9MhLGU=) 2: AEF266ECD34811EDAD96D95DC4F9AE02.roa (hash: KXSCbuQLHG9xWL+hihrwdJUS/R0sgZW/C4dlIANzg14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 06:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D2BF, serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7 Validity Not Before: Oct 25 06:03:08 2025 GMT Not After : Nov 1 06:03:08 2025 GMT Subject: CN=68fc681c-3faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ad:22:ba:70:34:c2:27:2e:b6:7b:47:b6:9e: 5e:c5:d5:56:29:2d:1c:d5:0c:50:04:40:5e:08:5e: a8:e2:9a:90:21:68:bf:4c:51:40:c5:4a:89:1a:f2: 06:56:21:ef:52:8b:2f:59:27:5e:34:4e:5e:90:fb: 06:42:53:8f:2a:9f:33:6a:92:31:e6:3f:6d:be:a3: 42:f7:76:95:09:13:41:c6:86:b4:d2:4e:a4:bf:c8: 56:1a:7a:bc:fb:60:9e:6a:fb:08:39:9b:76:50:59: 45:d6:c0:da:06:4f:ef:d4:02:c2:7c:dc:84:fc:ac: 45:43:fb:fe:d2:48:5f:d8:a3:fb:84:f8:69:bb:34: a5:51:77:4b:d2:84:6d:4e:96:6a:cc:01:5d:81:7e: 0d:14:4a:b5:5d:e2:3c:e6:d6:ad:32:00:c9:30:ec: 5d:24:76:8c:d8:09:84:09:c2:df:06:ce:57:49:ef: 95:0e:a5:37:4a:89:72:23:34:4b:05:14:d6:25:24: 75:ba:7d:1c:e7:45:88:3c:f0:cd:47:a7:cc:b4:a5: 73:a6:f0:64:a0:0b:c2:fa:c1:bc:f6:de:84:c2:fb: ef:d2:c0:ca:6b:0d:16:d2:b7:30:7c:51:00:aa:30: 6f:3a:fb:6d:ea:32:9e:9c:4d:60:f3:c3:58:50:74: 18:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2F:01:73:53:33:E5:FC:D3:DC:50:F8:C6:8A:43:D2:D4:35:D5:91 X509v3 Authority Key Identifier: keyid:E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:07:e3:19:b8:c5:56:19:45:9b:c2:c6:15:ab:f0:35:26:61: 8b:af:51:fa:72:76:a4:31:ad:18:bb:26:98:50:ed:40:b0:bd: 13:3d:24:28:cd:b8:55:15:1f:a3:af:52:41:62:2b:81:67:94: ae:98:71:3d:e9:65:a0:73:84:e5:ac:f2:9e:48:7c:8b:b0:fc: 4a:c3:ab:6a:56:7a:8a:21:1d:5d:72:b3:b7:91:d5:d9:2c:ff: 92:a3:ca:b0:2f:31:37:df:a6:45:46:0c:a3:71:c1:e8:b9:13: 8e:5f:46:3c:1c:c9:7d:1b:2d:6d:b0:0c:0f:9d:46:ed:92:ac: e2:0a:16:e4:b4:b0:44:38:2a:dd:eb:d3:ef:8f:78:40:ba:2d: 65:4d:6d:47:8e:6a:17:d5:5c:0d:7a:f5:70:92:8c:3e:44:1d: 46:3a:32:7c:83:a8:4f:b5:56:02:05:62:4d:3d:0c:82:11:67: f1:38:97:d5:e0:06:3d:f3:0c:ab:99:34:b5:85:8d:04:26:7e: 7d:85:1a:25:55:08:a1:0f:77:bc:95:24:94:06:53:dd:fa:19: 49:bd:0d:da:13:fe:36:9a:a0:bb:d4:c3:28:3f:b3:7d:52:5a: 28:77:f5:a1:21:30:6f:93:c1:f9:73:89:5f:35:36:2f:fc:34: 10:46:e6:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyQkYxMTAvBgNVBAUTKEU2QkIwM0FBNThBMEMyNzBFQjY2QjNFQUVCMjQwOEZG RkFCQTVFQzcwHhcNMjUxMDI1MDYwMzA4WhcNMjUxMTAxMDYwMzA4WjAYMRYwFAYD VQQDEw02OGZjNjgxYy0zZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAta0iunA0wicutntHtp5exdVWKS0c1QxQBEBeCF6o4pqQIWi/TFFAxUqJGvIG ViHvUosvWSdeNE5ekPsGQlOPKp8zapIx5j9tvqNC93aVCRNBxoa00k6kv8hWGnq8 +2CeavsIOZt2UFlF1sDaBk/v1ALCfNyE/KxFQ/v+0khf2KP7hPhpuzSlUXdL0oRt TpZqzAFdgX4NFEq1XeI85tatMgDJMOxdJHaM2AmECcLfBs5XSe+VDqU3SolyIzRL BRTWJSR1un0c50WIPPDNR6fMtKVzpvBkoAvC+sG89t6Ewvvv0sDKaw0W0rcwfFEA qjBvOvtt6jKenE1g88NYUHQYdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4vAXNT M+X809xQ+MaKQ9LUNdWRMB8GA1UdIwQYMBaAFOa7A6pYoMJw62az6uskCP/6ul7H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDJCRi8yQTcxRTZCQ0Qz NDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3duRHJaclBxNnlRSV9fcTZY c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyc0RxbGlnd25EclpyUHE2eVFJX19xNlhzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDJCRi8yQTcxRTZCQ0QzNDQxMUVEOEUyQzU0NjRDNEY5QUUwMi81cnNEcWxpZ3du RHJaclBxNnlRSV9fcTZYc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzB+MZuMVWGUWbwsYVq/A1JmGLr1H6cnakMa0YuyaYUO1AsL0TPSQo zbhVFR+jr1JBYiuBZ5SumHE96WWgc4TlrPKeSHyLsPxKw6tqVnqKIR1dcrO3kdXZ LP+So8qwLzE336ZFRgyjccHouROOX0Y8HMl9Gy1tsAwPnUbtkqziChbktLBEOCrd 69Pvj3hAui1lTW1HjmoX1VwNevVwkow+RB1GOjJ8g6hPtVYCBWJNPQyCEWfxOJfV 4AY98wyrmTS1hY0EJn59hRolVQihD3e8lSSUBlPd+hlJvQ3aE/42mqC71MMoP7N9 Ulood/WhITBvk8H5c4lfNTYv/DQQRub+ -----END CERTIFICATE-----Generated at Sun Oct 26 01:38:05 2025 by rpki-client