$ rpki-client -vvf rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft File: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft (raw, json) Hash identifier: SH9vPLEVyOV2SxL6uPoi7+GU3iQRuWdNzL9LnSwqeJs= Subject key identifier: 8B:70:E5:8C:A3:0C:41:65:D1:59:A2:3C:B6:83:59:19:D6:B3:CA:72 Authority key identifier: E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69 Certificate issuer: /CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569 Certificate serial: 02DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft Manifest number: 02D8 Signing time: Wed 05 Nov 2025 01:24:51 +0000 Manifest this update: Wed 05 Nov 2025 01:24:51 +0000 Manifest next update: Wed 12 Nov 2025 01:24:51 +0000 Files and hashes: 1: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl (hash: cXIlrbC5EHuC1/ynaa4QJYmN1fd4EAtuGdekK4ezvyI=) 2: E757164C074511EDB229157DC4F9AE02.roa (hash: onRdgGkpkgbRrilTwhd//fNz2yNBz6ru8beWXJE4ohY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 732 (0x2dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916148F, serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569 Validity Not Before: Nov 5 01:24:51 2025 GMT Not After : Nov 12 01:24:51 2025 GMT Subject: CN=690aa763-fe7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:24:42:f2:c6:d9:09:cc:6a:1d:10:6f:e8: 00:51:15:fd:67:2c:00:59:41:2e:23:be:86:3f:7b: 14:87:5c:90:7d:5e:cf:07:9a:dc:e5:23:19:26:eb: 6d:4e:c4:52:a2:38:55:7e:28:bc:97:fc:65:fc:97: 4b:2c:c8:ea:41:61:1f:09:1f:42:78:26:76:30:4f: 09:f1:d3:58:e0:0a:24:9a:d6:21:28:40:cb:c4:dd: 4a:cb:6f:cb:da:04:b5:12:7c:cc:52:87:d2:3f:27: a2:cc:b1:5e:93:5e:df:86:9d:e6:e9:c7:be:26:5d: 60:f1:de:12:47:98:38:88:d8:3d:e6:85:41:d1:d4: 84:fd:3e:40:54:57:32:a0:a9:bc:8f:9d:e2:a6:44: 61:f6:ab:14:bf:86:dc:a7:fe:6c:c5:be:7c:7a:5a: 7c:90:4c:c8:c0:d2:8d:29:96:9e:eb:68:09:c2:0b: c4:7a:fd:70:44:92:89:55:0a:d7:5b:1d:8a:b4:23: 69:bf:93:52:77:60:f3:25:41:d1:18:cb:97:30:12: 5e:a4:33:a8:26:bd:30:af:4e:86:e0:b6:3d:e4:5a: b9:7e:60:d6:a1:da:e5:ef:71:cf:84:fa:27:70:5a: 22:24:0c:6b:e7:22:77:10:11:bb:9e:d1:45:4f:7d: 40:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:70:E5:8C:A3:0C:41:65:D1:59:A2:3C:B6:83:59:19:D6:B3:CA:72 X509v3 Authority Key Identifier: keyid:E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:00:fe:cb:01:e5:6e:35:b0:aa:39:97:d8:da:01:22:26:95: 2b:6c:6e:9f:ad:fb:c8:e6:88:79:cd:6f:21:89:b1:8b:b4:85: 3d:ba:4a:e2:21:60:6e:53:f7:7f:ae:b7:34:2e:6b:7e:5a:76: 71:73:fd:c6:46:5f:ff:e4:a9:c2:7f:48:bc:2e:84:70:31:c6: 22:6d:14:23:06:10:f5:40:2d:0c:f1:7a:51:4e:5b:8f:f6:df: 26:cc:d3:f4:f9:57:ac:64:5b:e9:a0:62:8f:29:69:bf:0c:8c: 75:7b:25:31:92:f7:cf:ff:0e:75:91:6e:2b:09:f2:bc:6e:da: 6b:c0:2d:78:68:58:72:28:fb:70:85:fc:c2:c8:79:15:53:8c: 00:1e:a2:c1:52:5a:44:df:fb:4c:be:74:aa:6e:6a:36:11:40: 20:9a:09:fd:81:ed:24:e2:0d:6b:9c:28:c5:04:af:2f:64:a0: f3:30:51:ed:b7:68:37:62:aa:3e:aa:4d:18:a2:3e:fe:e8:8d: c4:5e:47:ad:b7:d0:f3:12:cf:98:56:d4:5f:6b:1e:07:db:90: e4:e5:e4:84:12:86:97:a9:9a:ff:84:11:b4:79:54:41:cc:60: 3f:2c:66:fb:24:f4:bb:9c:c9:f4:fe:59:f1:7c:5d:df:75:ce: a4:00:d7:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE0OEYxMTAvBgNVBAUTKEU1MDg3M0FGNDc1RUQ2RUVCN0NCOTYzQzY1RThEOTgw NUI4QkI1NjkwHhcNMjUxMTA1MDEyNDUxWhcNMjUxMTEyMDEyNDUxWjAYMRYwFAYD VQQDEw02OTBhYTc2My1mZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3wkQvLG2QnMah0Qb+gAURX9ZywAWUEuI76GP3sUh1yQfV7PB5rc5SMZJutt TsRSojhVfii8l/xl/JdLLMjqQWEfCR9CeCZ2ME8J8dNY4AokmtYhKEDLxN1Ky2/L 2gS1EnzMUofSPyeizLFek17fhp3m6ce+Jl1g8d4SR5g4iNg95oVB0dSE/T5AVFcy oKm8j53ipkRh9qsUv4bcp/5sxb58elp8kEzIwNKNKZae62gJwgvEev1wRJKJVQrX Wx2KtCNpv5NSd2DzJUHRGMuXMBJepDOoJr0wr06G4LY95Fq5fmDWodrl73HPhPon cFoiJAxr5yJ3EBG7ntFFT31A+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFItw5Yyj DEFl0VmiPLaDWRnWs8pyMB8GA1UdIwQYMBaAFOUIc69HXtbut8uWPGXo2YBbi7Vp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTQ4Ri82ODg0ODI2ODA3 NDExMUVEQUIxOUQ0NDdDNEY5QUUwMi81UWh6cjBkZTF1NjN5NVk4WmVqWmdGdUx0 V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVRaHpyMGRlMXU2M3k1WThaZWpaZ0Z1THRXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTQ4Ri82ODg0ODI2ODA3NDExMUVEQUIxOUQ0NDdDNEY5QUUwMi81UWh6cjBkZTF1 NjN5NVk4WmVqWmdGdUx0V2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVAP7LAeVuNbCqOZfY2gEiJpUrbG6frfvI5oh5zW8hibGLtIU9ukri IWBuU/d/rrc0Lmt+WnZxc/3GRl//5KnCf0i8LoRwMcYibRQjBhD1QC0M8XpRTluP 9t8mzNP0+VesZFvpoGKPKWm/DIx1eyUxkvfP/w51kW4rCfK8btprwC14aFhyKPtw hfzCyHkVU4wAHqLBUlpE3/tMvnSqbmo2EUAgmgn9ge0k4g1rnCjFBK8vZKDzMFHt t2g3Yqo+qk0Yoj7+6I3EXkett9DzEs+YVtRfax4H25Dk5eSEEoaXqZr/hBG0eVRB zGA/LGb7JPS7nMn0/lnxfF3fdc6kANfH -----END CERTIFICATE-----Generated at Wed Nov 5 16:43:19 2025 by rpki-client