$ rpki-client -vvf rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft File: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft (raw, json) Hash identifier: jJB5oG0pOONdu7FSgMRWiQiY4geYZv+YTEmMqQdWyLU= Subject key identifier: 66:27:CD:96:39:45:C9:5F:33:C5:D2:D8:18:60:0A:D9:90:15:36:33 Authority key identifier: 73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76 Certificate issuer: /CN=A91316E5/serialNumber=73987ECCE77E44EB36651E098D33750FA864E676 Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft Manifest number: 0198 Signing time: Mon 03 Nov 2025 03:22:25 +0000 Manifest this update: Mon 03 Nov 2025 03:22:25 +0000 Manifest next update: Mon 10 Nov 2025 03:22:25 +0000 Files and hashes: 1: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl (hash: S6LkdfyV6QaJwEe2Mgzc5PoJmhxARyDQMeevp1rxTL8=) 2: C1A8182646D011EE8BE5AE80C4F9AE02.roa (hash: gAXQ6XOA3NODkbVV4z4rY8FPGvcx9W1CdIeenZ4k+xI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91316E5, serialNumber=73987ECCE77E44EB36651E098D33750FA864E676 Validity Not Before: Nov 3 03:22:25 2025 GMT Not After : Nov 10 03:22:25 2025 GMT Subject: CN=69081ff1-03fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:8a:b2:ab:c7:96:f3:20:a4:f6:af:c2:84: 43:f5:c7:e9:ef:d3:74:41:d9:b8:84:4e:26:c6:39: 7e:61:0d:19:8e:a4:c2:72:b4:06:db:9f:10:7b:b3: a0:63:78:0d:4a:00:c2:dc:0b:37:a1:5c:af:73:03: 5c:0d:1a:cb:40:b9:17:a0:d0:37:a8:c2:10:f5:2e: aa:cf:50:43:1b:4b:d6:bc:08:34:1e:e0:8a:ec:20: 4d:f1:92:ef:10:92:49:af:6b:25:da:1f:fe:60:11: e9:4d:cd:78:30:56:7e:5e:10:03:3a:ea:7a:81:2c: ef:b1:2b:e9:30:6e:a3:a4:87:2d:3d:86:a5:12:2a: 72:e1:1c:e7:31:fd:ac:ab:ba:65:53:20:46:f1:1d: 9e:4c:cd:22:39:af:cd:ed:52:a9:45:3c:81:09:74: 72:d0:18:ab:96:73:65:3a:b2:11:f6:97:5d:89:bc: 2b:dd:ac:66:9d:ff:92:9c:03:85:24:39:42:f8:9a: 05:a4:4a:14:70:94:f0:9d:2f:3f:bc:57:6b:af:d9: f2:91:a9:9b:bc:5c:5e:be:8a:8b:5a:38:51:67:86: c8:84:e9:b5:ee:00:1e:8c:d9:9d:87:66:40:30:30: cb:b1:5b:36:77:38:2c:f3:07:44:20:81:6c:88:34: b2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:27:CD:96:39:45:C9:5F:33:C5:D2:D8:18:60:0A:D9:90:15:36:33 X509v3 Authority Key Identifier: keyid:73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:70:70:53:e6:71:f6:b7:80:8f:46:c7:61:58:5b:07:75:48: 93:c8:ed:75:32:29:64:eb:4c:af:3f:97:bf:07:c3:7a:de:3d: 4b:88:d1:7f:4d:c2:62:81:2a:85:d6:64:85:7f:20:bc:01:2a: f1:1e:fe:b7:d7:9d:f6:b2:e2:fe:80:2b:54:c4:f1:cb:09:44: 3e:7e:96:24:6c:5e:7b:a9:54:35:e5:a3:02:d2:dc:b5:b2:31: 97:a7:30:0c:05:7e:ca:df:dd:b0:fc:9b:17:5a:55:58:a5:0d: 31:c3:80:04:6d:67:2d:76:b0:e3:93:f1:6f:42:7f:4e:77:1b: 24:76:be:33:b4:d8:88:0a:10:cb:db:1d:44:6b:35:a9:97:b6: 6f:74:44:da:3d:f3:55:13:4a:8a:9e:29:5f:79:b0:b6:f0:dc: dc:88:bc:5e:6c:d2:00:8c:e6:bc:70:91:60:8e:c8:f7:82:ab: a0:2d:bb:49:c0:65:76:f0:95:bf:8d:dd:a4:3f:3b:0f:14:2f: 08:be:12:58:4f:49:1b:ad:f7:5f:1f:9e:d7:70:9e:29:e3:a5: ab:23:d4:6d:23:f8:9c:a0:39:51:ab:d8:38:b4:7d:bf:98:ef: 32:37:47:da:96:57:c6:f0:8e:66:6a:c2:09:fe:83:14:7b:12: d7:fe:ff:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE2RTUxMTAvBgNVBAUTKDczOTg3RUNDRTc3RTQ0RUIzNjY1MUUwOThEMzM3NTBG QTg2NEU2NzYwHhcNMjUxMTAzMDMyMjI1WhcNMjUxMTEwMDMyMjI1WjAYMRYwFAYD VQQDEw02OTA4MWZmMS0wM2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSGKsqvHlvMgpPavwoRD9cfp79N0Qdm4hE4mxjl+YQ0ZjqTCcrQG258Qe7Og Y3gNSgDC3As3oVyvcwNcDRrLQLkXoNA3qMIQ9S6qz1BDG0vWvAg0HuCK7CBN8ZLv EJJJr2sl2h/+YBHpTc14MFZ+XhADOup6gSzvsSvpMG6jpIctPYalEipy4RznMf2s q7plUyBG8R2eTM0iOa/N7VKpRTyBCXRy0BirlnNlOrIR9pddibwr3axmnf+SnAOF JDlC+JoFpEoUcJTwnS8/vFdrr9nykambvFxevoqLWjhRZ4bIhOm17gAejNmdh2ZA MDDLsVs2dzgs8wdEIIFsiDSyCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYnzZY5 RclfM8XS2BhgCtmQFTYzMB8GA1UdIwQYMBaAFHOYfsznfkTrNmUeCY0zdQ+oZOZ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZFNS81MUY5ODM1QzQ2 RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJPczJaUjRKalROMUQ2aGs1 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1aC16T2QtUk9zMlpSNEpqVE4xRDZoazVuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTZFNS81MUY5ODM1QzQ2RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJP czJaUjRKalROMUQ2aGs1blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+cHBT5nH2t4CPRsdhWFsHdUiTyO11Milk60yvP5e/B8N63j1LiNF/ TcJigSqF1mSFfyC8ASrxHv631532suL+gCtUxPHLCUQ+fpYkbF57qVQ15aMC0ty1 sjGXpzAMBX7K392w/JsXWlVYpQ0xw4AEbWctdrDjk/FvQn9Odxskdr4ztNiIChDL 2x1EazWpl7ZvdETaPfNVE0qKnilfebC28NzciLxebNIAjOa8cJFgjsj3gqugLbtJ wGV28JW/jd2kPzsPFC8IvhJYT0kbrfdfH57XcJ4p46WrI9RtI/icoDlRq9g4tH2/ mO8yN0fallfG8I5masIJ/oMUexLX/v9P -----END CERTIFICATE-----Generated at Wed Nov 5 02:19:06 2025 by rpki-client