$ rpki-client -vvf rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft File: 0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft (raw, json) Hash identifier: jYOqmNbFcXYuYNHYQ85IkuIhOPm13Sa09UymEaDg/wg= Subject key identifier: BD:2C:F9:60:32:91:EC:F6:A4:EB:7A:13:62:16:D0:E0:B1:89:A5:CA Authority key identifier: D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11 Certificate issuer: /CN=A914E215/serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911 Certificate serial: 06B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft Manifest number: 06AF Signing time: Sun 02 Nov 2025 22:12:13 +0000 Manifest this update: Sun 02 Nov 2025 22:12:12 +0000 Manifest next update: Sun 09 Nov 2025 22:12:12 +0000 Files and hashes: 1: 0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl (hash: Dp2MoXypUNw72lG01eRscrMRMYh0EWZEcv2Ds4x9IP0=) 2: 436B3BEC822D11EBB19C1844C4F9AE02.roa (hash: aR8xqbFUFjm+ccG/d5FkPfm2CRqS0a29lHr1SXFGeCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1717 (0x6b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E215, serialNumber=D20E52D09CEBE6B57050358CA2930D8939772911 Validity Not Before: Nov 2 22:12:12 2025 GMT Not After : Nov 9 22:12:12 2025 GMT Subject: CN=6907d73d-278b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2b:c1:78:6c:16:b9:f8:3e:91:c2:18:d6:55: ca:76:54:8a:22:b6:e1:95:45:b6:8a:e4:0b:01:ad: 73:b8:05:51:d2:52:13:4f:3f:37:6c:37:d6:9d:c3: 69:4a:51:9c:87:99:8f:6c:62:5f:62:8a:62:96:28: f6:15:50:66:fd:8c:39:5d:c5:05:a9:b8:e5:fb:1a: d4:8e:62:c3:d1:0b:7a:d5:8d:d0:63:38:45:8b:57: 5c:72:5c:48:0d:30:75:ea:6f:1f:bf:ee:31:ee:89: e0:d2:17:32:7b:82:16:2e:cc:d3:52:88:0b:23:36: 9f:16:a1:52:33:c1:0c:dc:bc:f7:f1:37:47:ef:66: c8:7f:24:73:25:6f:33:f1:76:78:7c:66:b6:cf:02: 56:28:f3:71:39:e9:6f:8d:79:e8:33:8d:d1:ae:c6: 38:6f:e8:dc:3c:fe:e5:c7:2e:2f:35:07:92:43:f3: e3:c0:b5:1b:73:ee:73:ed:6b:69:8d:fe:3a:1b:7f: b2:bf:b7:44:15:82:57:1e:43:8b:3b:f1:a2:bb:36: 00:b5:32:2c:b7:dc:b1:62:1d:c4:05:c1:10:63:89: f0:14:db:2a:74:a4:c1:2c:0e:42:31:b8:11:9e:f5: 3b:d6:c2:2b:2f:0d:e0:59:c1:2f:17:d0:d0:37:28: 3b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2C:F9:60:32:91:EC:F6:A4:EB:7A:13:62:16:D0:E0:B1:89:A5:CA X509v3 Authority Key Identifier: keyid:D2:0E:52:D0:9C:EB:E6:B5:70:50:35:8C:A2:93:0D:89:39:77:29:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0g5S0Jzr5rVwUDWMopMNiTl3KRE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E215/922DBB94822B11EBBBC75E42C4F9AE02/0g5S0Jzr5rVwUDWMopMNiTl3KRE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:c8:d1:cc:9f:9b:4e:ba:31:77:fd:ea:19:f1:01:e8:ba:68: 8b:d6:7d:79:aa:5a:60:16:da:9a:bb:d7:04:e7:e7:75:13:96: f7:0a:22:86:6a:7c:5d:65:58:92:5f:18:71:0b:e5:c7:21:e6: 67:9d:84:57:f3:22:9f:71:54:fc:b5:06:ee:52:ea:09:6f:99: 66:de:49:28:53:cc:5b:9e:67:69:1e:61:71:47:d6:7d:f7:5d: 4e:70:89:5a:7a:18:29:00:ad:c7:31:9e:fc:de:6a:3d:02:a3: f6:9e:49:a1:4b:c7:70:2f:23:91:82:aa:64:b6:ad:e8:83:2e: df:96:4f:50:74:ce:fe:07:6a:eb:3a:8c:8f:fc:ab:f8:2f:ba: 46:89:99:b8:e8:0d:85:1f:4b:c2:48:e2:44:4d:ac:c3:31:5b: 42:d4:da:88:50:90:87:88:ca:3c:61:6d:c4:b8:fa:7c:05:08: 55:8b:c5:74:b4:ca:f6:f2:c8:8e:5c:ce:5e:8c:fb:d6:6f:54: 69:cc:f9:38:51:ac:96:48:00:00:50:45:ae:fe:a1:61:34:22: 4b:c5:2b:af:f3:9d:94:2f:e1:15:9e:01:bf:55:c4:b8:b2:9e: 3e:51:6a:48:aa:fa:b7:75:bf:1f:f7:fc:79:c6:66:7f:07:fa: 0e:4c:88:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUyMTUxMTAvBgNVBAUTKEQyMEU1MkQwOUNFQkU2QjU3MDUwMzU4Q0EyOTMwRDg5 Mzk3NzI5MTEwHhcNMjUxMTAyMjIxMjEyWhcNMjUxMTA5MjIxMjEyWjAYMRYwFAYD VQQDEw02OTA3ZDczZC0yNzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtivBeGwWufg+kcIY1lXKdlSKIrbhlUW2iuQLAa1zuAVR0lITTz83bDfWncNp SlGch5mPbGJfYopilij2FVBm/Yw5XcUFqbjl+xrUjmLD0Qt61Y3QYzhFi1dcclxI DTB16m8fv+4x7ong0hcye4IWLszTUogLIzafFqFSM8EM3Lz38TdH72bIfyRzJW8z 8XZ4fGa2zwJWKPNxOelvjXnoM43RrsY4b+jcPP7lxy4vNQeSQ/PjwLUbc+5z7Wtp jf46G3+yv7dEFYJXHkOLO/GiuzYAtTIst9yxYh3EBcEQY4nwFNsqdKTBLA5CMbgR nvU71sIrLw3gWcEvF9DQNyg7SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0s+WAy kez2pOt6E2IW0OCxiaXKMB8GA1UdIwQYMBaAFNIOUtCc6+a1cFA1jKKTDYk5dykR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTIxNS85MjJEQkI5NDgy MkIxMUVCQkJDNzVFNDJDNEY5QUUwMi8wZzVTMEp6cjVyVndVRFdNb3BNTmlUbDNL UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBnNVMwSnpyNXJWd1VEV01vcE1OaVRsM0tSRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTIxNS85MjJEQkI5NDgyMkIxMUVCQkJDNzVFNDJDNEY5QUUwMi8wZzVTMEp6cjVy VndVRFdNb3BNTmlUbDNLUkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjyNHMn5tOujF3/eoZ8QHoumiL1n15qlpgFtqau9cE5+d1E5b3CiKG anxdZViSXxhxC+XHIeZnnYRX8yKfcVT8tQbuUuoJb5lm3kkoU8xbnmdpHmFxR9Z9 911OcIlaehgpAK3HMZ783mo9AqP2nkmhS8dwLyORgqpktq3ogy7flk9QdM7+B2rr OoyP/Kv4L7pGiZm46A2FH0vCSOJETazDMVtC1NqIUJCHiMo8YW3EuPp8BQhVi8V0 tMr28siOXM5ejPvWb1RpzPk4UayWSAAAUEWu/qFhNCJLxSuv852UL+EVngG/VcS4 sp4+UWpIqvq3db8f9/x5xmZ/B/oOTIgY -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:57 2025 by rpki-client