$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: jL5VYJYxujMIPpH4UU4MGwaMOcwS2SQhQPBe6O5RBwo= Subject key identifier: 8E:DA:C5:7B:96:CC:E4:2B:A6:A7:EE:6B:A3:7D:86:73:08:29:64:79 Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 03B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 03A1 Signing time: Mon 03 Nov 2025 00:43:16 +0000 Manifest this update: Mon 03 Nov 2025 00:43:15 +0000 Manifest next update: Mon 10 Nov 2025 00:43:15 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: 8V2lq4kx8fpPKZN9JfBbQ0dgz+VGdH5X8yfzXWxTfW8=) 2: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: OB3c0FOnO7U7Cy2O3WKkzCkZvRGF4Swy8zD33qNbalg=) 3: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: PCa5nWLR+HuKgmwdVX9BOmG2ZZvLJrtIyJd8CbPbXng=) 4: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: JCVj+AscF7hWsvaIqNJTPDabzygkqnGZEfVjCkrIsro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 945 (0x3b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Nov 3 00:43:15 2025 GMT Not After : Nov 10 00:43:15 2025 GMT Subject: CN=6907faa3-1c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:75:6a:67:13:d3:38:c2:35:b8:36:8f:c5:69: d2:ee:bb:ae:73:ca:73:50:a8:98:52:fe:74:54:45: 21:69:4f:b8:eb:d9:bd:15:99:c8:0e:39:a2:a6:77: e2:0d:30:29:6f:3b:a8:86:5a:43:59:13:df:06:aa: 30:de:5c:9a:b0:b9:2c:bf:04:b4:a8:a4:9b:09:f3: 12:8c:ed:07:d1:bc:7b:83:0a:6b:43:ca:bd:91:a6: 19:bb:81:ad:07:56:72:5b:46:a7:67:97:7b:de:53: ba:ec:99:9f:7d:2b:60:73:d5:df:8f:2f:fe:23:b2: 06:b6:5e:31:bf:cb:f3:e2:ae:6c:33:8d:c3:f3:43: be:57:db:01:1a:94:09:b7:53:80:9f:89:87:b4:8f: 95:9a:25:69:17:4a:33:ac:32:7b:3e:4b:32:d4:59: c4:34:a5:e2:b0:bb:db:b3:90:f6:1a:00:8a:3e:7f: 34:af:23:f3:1c:bf:43:e8:27:09:3a:dc:d6:21:74: d4:cb:ce:8e:dd:63:5e:42:98:97:b2:a1:89:71:8a: 36:f8:dc:da:db:8a:2d:56:3c:f6:35:27:4b:21:1c: c9:fb:5a:79:5d:8f:fd:4f:46:09:c7:a0:86:7d:79: 94:60:05:65:35:dc:4b:d2:ba:ae:0b:66:18:a1:7b: ec:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DA:C5:7B:96:CC:E4:2B:A6:A7:EE:6B:A3:7D:86:73:08:29:64:79 X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:41:6d:be:c6:33:ed:2d:11:7a:d1:6d:95:56:d8:07:53:e2: e0:eb:3b:23:91:2b:89:51:94:3c:23:9e:be:4c:cc:8c:8e:28: 96:e7:a1:a1:2d:87:59:3d:8a:3c:3d:db:e7:ee:12:c6:31:63: 4f:d3:f0:fb:7d:b4:3d:f7:bf:c0:8c:ea:66:eb:83:b8:8a:8b: 31:c7:df:c2:d4:1d:63:7e:ad:ad:4a:f6:52:52:a3:dd:72:ce: 31:01:b0:13:33:1b:24:39:15:8f:03:82:e0:1c:96:aa:8b:f4: 68:b4:ad:df:3d:75:9f:ae:d6:69:19:60:c6:15:e6:cb:d5:95: 48:73:57:19:c9:f3:d9:d5:42:ea:08:fe:0c:75:d1:e4:c1:0e: a9:32:f5:bc:96:bf:ac:a3:36:09:26:d2:ae:29:80:6f:e7:9c: c3:cc:36:6b:c4:6e:32:5c:c5:28:52:3a:ff:89:f9:2f:f5:f9: 64:8a:5b:d7:9f:f1:d0:cf:fb:dc:a5:37:ef:17:0b:5d:e0:3a: e5:b6:4d:b6:d9:83:94:34:cb:6e:55:61:ed:97:aa:8e:e3:45: 83:42:db:e9:e3:86:86:78:97:08:56:29:d1:28:ca:e1:f3:47: b6:b6:92:bb:61:97:f4:a5:83:4e:a0:43:0a:f8:46:89:db:f4: 0c:92:a7:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjUxMTAzMDA0MzE1WhcNMjUxMTEwMDA0MzE1WjAYMRYwFAYD VQQDEw02OTA3ZmFhMy0xYzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3VqZxPTOMI1uDaPxWnS7ruuc8pzUKiYUv50VEUhaU+469m9FZnIDjmipnfi DTApbzuohlpDWRPfBqow3lyasLksvwS0qKSbCfMSjO0H0bx7gwprQ8q9kaYZu4Gt B1ZyW0anZ5d73lO67JmffStgc9Xfjy/+I7IGtl4xv8vz4q5sM43D80O+V9sBGpQJ t1OAn4mHtI+VmiVpF0ozrDJ7Pksy1FnENKXisLvbs5D2GgCKPn80ryPzHL9D6CcJ OtzWIXTUy86O3WNeQpiXsqGJcYo2+Nza24otVjz2NSdLIRzJ+1p5XY/9T0YJx6CG fXmUYAVlNdxL0rquC2YYoXvs/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7axXuW zOQrpqfua6N9hnMIKWR5MB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADQW2+xjPtLRF60W2VVtgHU+Lg6zsjkSuJUZQ8I56+TMyMjiiW56Gh LYdZPYo8Pdvn7hLGMWNP0/D7fbQ997/AjOpm64O4iosxx9/C1B1jfq2tSvZSUqPd cs4xAbATMxskORWPA4LgHJaqi/RotK3fPXWfrtZpGWDGFebL1ZVIc1cZyfPZ1ULq CP4MddHkwQ6pMvW8lr+sozYJJtKuKYBv55zDzDZrxG4yXMUoUjr/ifkv9flkilvX n/HQz/vcpTfvFwtd4Drltk222YOUNMtuVWHtl6qO40WDQtvp44aGeJcIVinRKMrh 80e2tpK7YZf0pYNOoEMK+EaJ2/QMkqd0 -----END CERTIFICATE-----Generated at Tue Nov 4 20:04:54 2025 by rpki-client