$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft File: o5TKy9vYxM31SvFn4m1WJKUk4u4.mft (raw, json) Hash identifier: vFi/WsfxV+Pf5wKhOfy8rrscmr672R72HZ5sjTGrmgk= Subject key identifier: 0A:2C:F8:D1:FE:C7:0C:DC:F3:DE:A4:15:4F:F4:3D:1A:E1:F7:99:87 Authority key identifier: A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE Certificate issuer: /CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft Manifest number: 0112 Signing time: Wed 05 Nov 2025 05:03:05 +0000 Manifest this update: Wed 05 Nov 2025 05:03:04 +0000 Manifest next update: Wed 12 Nov 2025 05:03:04 +0000 Files and hashes: 1: o5TKy9vYxM31SvFn4m1WJKUk4u4.crl (hash: 7imLIJW6JM6WmN/yxbZ8zcLD8U+4kHP1SJelUAQoIuw=) 2: 8D61B05219AE11EFB41EAC2CC4F9AE02.roa (hash: Xw2sISfrALvudWqULocxNEzVc0wvy3kE1iz0dcAI+cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D7A4, serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE Validity Not Before: Nov 5 05:03:04 2025 GMT Not After : Nov 12 05:03:04 2025 GMT Subject: CN=690ada89-9437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c1:87:c1:40:7b:90:5b:d7:1f:b9:e8:f3:b0: 3d:c4:50:93:7b:7d:f3:38:80:ba:15:c2:28:6a:76: 53:29:d4:96:49:9c:d0:59:00:e4:13:5e:37:07:a2: 86:69:cd:71:53:05:cc:04:53:4a:bc:57:82:96:0b: 0b:7f:0f:fd:cc:f8:a8:6c:6a:7b:75:1c:e9:23:8c: e3:37:e3:e9:9f:38:b6:6c:d2:a9:c4:d2:a1:a5:89: af:8b:1b:34:5c:0c:65:07:f7:48:95:0e:38:82:24: d2:a1:d6:0e:d3:ec:fd:e5:99:da:bc:8a:9f:a6:0c: bb:83:94:55:02:76:e3:ad:8b:4c:f1:54:3f:8a:96: 41:d9:16:65:69:76:21:4b:54:e4:c9:33:48:63:1d: 0a:5c:16:0b:f3:ca:65:35:1e:e7:f1:ab:4f:73:37: 90:c8:2b:f0:21:41:47:da:4b:a0:64:18:ca:62:7c: c2:08:14:73:59:b8:5e:e8:fa:54:ae:c2:bc:18:2e: 2a:73:b4:46:cb:22:eb:42:70:78:78:8b:fc:5c:52: 28:95:15:dd:c5:c5:99:4a:c7:98:10:b8:0e:bc:91: 7d:03:b5:61:10:77:1f:d3:63:fc:0d:61:63:47:8c: b8:43:c2:85:31:7e:28:e5:2b:bc:e8:d9:08:2a:41: d6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2C:F8:D1:FE:C7:0C:DC:F3:DE:A4:15:4F:F4:3D:1A:E1:F7:99:87 X509v3 Authority Key Identifier: keyid:A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:82:42:72:b7:36:4b:ab:8f:22:bf:5e:1c:09:25:ec:b8:0c: 57:62:18:fb:a4:e6:18:d2:de:09:ca:86:e2:e1:24:dc:f1:3d: f6:aa:75:49:3e:61:2e:8b:56:64:25:2e:92:71:90:11:7e:2c: 24:86:ef:25:6d:a6:87:31:a9:95:fb:b1:ed:c8:81:9f:26:eb: f0:41:6f:5a:30:0c:6d:e3:ff:84:2d:3a:bf:41:30:bf:10:d5: c3:ad:ed:ce:c6:a1:82:b1:fe:94:be:8d:fa:89:2d:60:ab:18: f3:b4:fc:0b:23:90:02:2e:f0:a8:d3:ff:e9:d5:5a:b7:ed:df: e9:37:78:9b:6a:da:9c:37:51:80:c7:c4:99:94:e9:c7:f4:96: ce:fd:9e:e8:b6:d9:09:d1:72:59:e2:12:51:9e:77:e1:5d:60: fa:39:7f:3d:35:47:ae:b0:47:40:d4:cf:5f:af:84:13:13:bd: ab:a7:f4:fe:f9:ac:38:94:ea:0f:bc:2e:7f:7b:d0:65:3a:84: a6:70:e2:c4:3b:ab:62:ba:33:4a:6f:50:96:6d:9c:3d:36:d3: 70:89:78:ae:de:10:5c:3d:bb:59:f2:58:b7:ef:5d:cc:4e:f3: 85:76:da:c1:28:74:ef:be:59:08:b7:3d:dd:ff:c1:96:38:e6: b2:ff:92:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3QTQxMTAvBgNVBAUTKEEzOTRDQUNCREJEOEM0Q0RGNTRBRjE2N0UyNkQ1NjI0 QTUyNEUyRUUwHhcNMjUxMTA1MDUwMzA0WhcNMjUxMTEyMDUwMzA0WjAYMRYwFAYD VQQDEw02OTBhZGE4OS05NDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsGHwUB7kFvXH7no87A9xFCTe33zOIC6FcIoanZTKdSWSZzQWQDkE143B6KG ac1xUwXMBFNKvFeClgsLfw/9zPiobGp7dRzpI4zjN+Ppnzi2bNKpxNKhpYmvixs0 XAxlB/dIlQ44giTSodYO0+z95ZnavIqfpgy7g5RVAnbjrYtM8VQ/ipZB2RZlaXYh S1TkyTNIYx0KXBYL88plNR7n8atPczeQyCvwIUFH2kugZBjKYnzCCBRzWbhe6PpU rsK8GC4qc7RGyyLrQnB4eIv8XFIolRXdxcWZSseYELgOvJF9A7VhEHcf02P8DWFj R4y4Q8KFMX4o5Su86NkIKkHWwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAos+NH+ xwzc896kFU/0PRrh95mHMB8GA1UdIwQYMBaAFKOUysvb2MTN9UrxZ+JtViSlJOLu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDdBNC82M0VENDAxMDE5 ODYxMUVGODkwODdFMzBDNEY5QUUwMi9vNVRLeTl2WXhNMzFTdkZuNG0xV0pLVWs0 dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL281VEt5OXZZeE0zMVN2Rm40bTFXSktVazR1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDdBNC82M0VENDAxMDE5ODYxMUVGODkwODdFMzBDNEY5QUUwMi9vNVRLeTl2WXhN MzFTdkZuNG0xV0pLVWs0dTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdgkJytzZLq48iv14cCSXsuAxXYhj7pOYY0t4Jyobi4STc8T32qnVJ PmEui1ZkJS6ScZARfiwkhu8lbaaHMamV+7HtyIGfJuvwQW9aMAxt4/+ELTq/QTC/ ENXDre3OxqGCsf6Uvo36iS1gqxjztPwLI5ACLvCo0//p1Vq37d/pN3ibatqcN1GA x8SZlOnH9JbO/Z7ottkJ0XJZ4hJRnnfhXWD6OX89NUeusEdA1M9fr4QTE72rp/T+ +aw4lOoPvC5/e9BlOoSmcOLEO6tiujNKb1CWbZw9NtNwiXiu3hBcPbtZ8li3713M TvOFdtrBKHTvvlkItz3d/8GWOOay/5LK -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:02 2025 by rpki-client