$ rpki-client -vvf rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft File: oS5eGyIRchg79rZX3xoG0wyhC_8.mft (raw, json) Hash identifier: IwDNXmIz4WH1c5rXlSsabgLfYgheeWT0ApV/FDWzKUU= Subject key identifier: BE:B2:B7:00:F0:F4:2A:1A:AA:66:B5:8B:44:51:8E:EA:83:0C:F1:F6 Authority key identifier: A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF Certificate issuer: /CN=A918A5D6/serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft Manifest number: 5D Signing time: Wed 05 Nov 2025 07:18:58 +0000 Manifest this update: Wed 05 Nov 2025 07:18:57 +0000 Manifest next update: Wed 12 Nov 2025 07:18:57 +0000 Files and hashes: 1: oS5eGyIRchg79rZX3xoG0wyhC_8.crl (hash: jMrNFHcG5JRUxwVWZAr36XbZFDMX05YPNLZ72a7ZpsI=) 2: 365AF68C2CCD11F08845DC73C4F9AE02.roa (hash: F4KKMKiW48gN9aBGOT2hP2pHnwX5JnqO3laTg5f8NeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A5D6, serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF Validity Not Before: Nov 5 07:18:57 2025 GMT Not After : Nov 12 07:18:57 2025 GMT Subject: CN=690afa61-9b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1f:2f:25:88:16:a7:23:31:3d:ef:3d:43:c2: 25:10:c9:85:e7:2d:06:25:5b:2c:d9:f7:3c:17:8b: 2e:98:d5:81:44:88:4b:a1:63:db:91:fd:ec:a8:a7: 1d:ca:d2:06:ca:bc:c8:d4:31:51:ea:1d:4f:1b:0c: 6e:17:7f:4b:b0:6d:24:33:4b:d2:25:5d:92:75:83: 8c:b1:eb:67:76:85:da:58:a3:3b:e8:ed:58:c2:12: 03:33:ca:3a:c7:7a:81:81:59:e8:de:1b:36:03:54: 56:fc:35:72:cf:5d:99:af:a7:78:ce:2d:13:46:72: 06:f4:72:16:39:33:24:cb:26:79:e9:ec:4f:06:9f: c7:2e:52:63:5a:7c:1a:db:fc:ef:05:1e:df:6b:26: 03:85:a1:0d:eb:46:fc:91:a7:85:ee:5f:9c:54:6a: d6:aa:57:01:74:09:c8:4f:64:44:60:f6:8c:ca:5e: 32:1e:c5:1d:25:1d:12:8d:9d:c3:97:a1:17:5c:05: 95:11:c1:04:7f:4d:d9:7a:e6:02:ce:a1:5b:fe:e2: be:36:44:c8:1c:9a:d4:58:fd:8e:41:6d:cd:3c:ad: 05:87:9b:15:51:d3:fa:16:f9:21:7d:1d:79:89:62: d6:5c:e2:68:c4:17:c6:89:d4:e5:13:ed:2f:2b:d4: 70:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B2:B7:00:F0:F4:2A:1A:AA:66:B5:8B:44:51:8E:EA:83:0C:F1:F6 X509v3 Authority Key Identifier: keyid:A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c5:81:32:7b:c9:1f:f1:ba:86:4f:52:a6:6b:cf:51:b0:90: dd:62:6c:bc:1e:03:64:15:b5:0e:6a:67:73:40:66:69:c3:13: 9b:bb:cb:63:c3:29:c1:70:62:fd:49:a7:93:6a:1c:dc:70:93: 71:9e:71:80:8e:5e:f2:ca:24:ba:27:06:63:26:4f:b7:7b:fa: 40:24:ce:45:b8:72:f7:37:5f:5f:d3:2d:40:02:9a:f3:01:e9: 91:36:64:97:a0:76:41:f2:22:69:9e:19:bc:aa:54:c4:d7:38: ee:98:e5:d9:cf:aa:15:e3:30:5e:09:f8:55:76:9b:ee:85:01: 00:95:ba:ab:1c:bc:1e:5d:fe:62:bf:fa:2e:7e:5f:80:0d:4b: 76:c4:8e:e9:a2:26:ba:87:5c:e8:54:d3:6c:63:22:5b:4e:bc: 77:f8:1d:4f:b5:bd:1b:9b:22:8f:e8:55:2b:88:df:61:ab:f0: c4:a2:0a:1d:5a:fb:e6:ef:71:b0:9b:e7:63:a0:80:ac:d2:ab: 52:e5:38:37:e0:8d:a8:18:ce:2e:6b:2c:45:02:9b:92:69:39: aa:e1:d9:f0:96:06:e9:51:a3:72:8b:5a:68:e4:41:c9:f1:d9: c7:a9:36:e0:7b:70:98:c0:37:29:29:ff:ca:9b:34:79:95:d6: 2c:65:80:58 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTVENjExMC8GA1UEBRMoQTEyRTVFMUIyMjExNzIxODNCRjZCNjU3REYxQTA2RDMw Q0ExMEJGRjAeFw0yNTExMDUwNzE4NTdaFw0yNTExMTIwNzE4NTdaMBgxFjAUBgNV BAMTDTY5MGFmYTYxLTliNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDyHy8liBanIzE97z1DwiUQyYXnLQYlWyzZ9zwXiy6Y1YFEiEuhY9uR/eyopx3K 0gbKvMjUMVHqHU8bDG4Xf0uwbSQzS9IlXZJ1g4yx62d2hdpYozvo7VjCEgMzyjrH eoGBWejeGzYDVFb8NXLPXZmvp3jOLRNGcgb0chY5MyTLJnnp7E8Gn8cuUmNafBrb /O8FHt9rJgOFoQ3rRvyRp4XuX5xUataqVwF0CchPZERg9ozKXjIexR0lHRKNncOX oRdcBZURwQR/Tdl65gLOoVv+4r42RMgcmtRY/Y5Bbc08rQWHmxVR0/oW+SF9HXmJ YtZc4mjEF8aJ1OUT7S8r1HCbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvrK3APD0 KhqqZrWLRFGO6oMM8fYwHwYDVR0jBBgwFoAUoS5eGyIRchg79rZX3xoG0wyhC/8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBNUQ2LzZFQUZCNTI0MkND QjExRjBCRDY2QzI1NUM0RjlBRTAyL29TNWVHeUlSY2hnNzlyWlgzeG9HMHd5aENf OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb1M1ZUd5SVJjaGc3OXJaWDN4b0cwd3loQ184LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB NUQ2LzZFQUZCNTI0MkNDQjExRjBCRDY2QzI1NUM0RjlBRTAyL29TNWVHeUlSY2hn NzlyWlgzeG9HMHd5aENfOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFrFgTJ7yR/xuoZPUqZrz1GwkN1ibLweA2QVtQ5qZ3NAZmnDE5u7y2PD KcFwYv1Jp5NqHNxwk3GecYCOXvLKJLonBmMmT7d7+kAkzkW4cvc3X1/TLUACmvMB 6ZE2ZJegdkHyImmeGbyqVMTXOO6Y5dnPqhXjMF4J+FV2m+6FAQCVuqscvB5d/mK/ +i5+X4ANS3bEjumiJrqHXOhU02xjIltOvHf4HU+1vRubIo/oVSuI32Gr8MSiCh1a ++bvcbCb52OggKzSq1LlODfgjagYzi5rLEUCm5JpOarh2fCWBulRo3KLWmjkQcnx 2cepNuB7cJjANykp/8qbNHmV1ixlgFg= -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:34 2025 by rpki-client