$ rpki-client -vvf rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft File: a5tdFBgYlY1zBFgvJU6hddhD4_0.mft (raw, json) Hash identifier: NJ3B80TTbwjAZOWMm4UypHwWwoRvfGgX8IoWaxJaelg= Subject key identifier: 1E:4E:6E:BD:44:51:26:99:07:0F:8A:05:96:DF:B8:05:EF:4A:32:92 Authority key identifier: 6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD Certificate issuer: /CN=A91359CD/serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Certificate serial: 0A19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft Manifest number: 0A11 Signing time: Tue 04 Nov 2025 19:53:58 +0000 Manifest this update: Tue 04 Nov 2025 19:53:57 +0000 Manifest next update: Tue 11 Nov 2025 19:53:57 +0000 Files and hashes: 1: a5tdFBgYlY1zBFgvJU6hddhD4_0.crl (hash: 3w1FI5UnVLpBXAbDWy7G+nv9MNp7AA7T1R8hteK3Hgc=) 2: 8F467E0082DD11EABD325010C4F9AE02.roa (hash: nTti14+ixHvCqHgk8IwtFdkQ1Ouiq6aL3zx3Hm8MMGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2585 (0xa19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91359CD, serialNumber=6B9B5D141818958D7304582F254EA175D843E3FD Validity Not Before: Nov 4 19:53:57 2025 GMT Not After : Nov 11 19:53:57 2025 GMT Subject: CN=690a59d5-bdd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:eb:61:32:f4:17:17:87:1a:54:1e:99:06:51: 40:eb:1a:93:3b:fd:1a:8a:2b:a9:c0:d1:02:8c:5d: 89:ee:b3:af:b2:ef:11:b2:57:9c:7d:3c:01:b3:8e: 2b:15:67:ec:d9:3a:42:7b:27:eb:f8:7a:03:9f:d2: 19:97:dc:b3:31:7e:eb:df:c9:dc:ba:46:54:93:03: 6e:9e:e1:e7:68:d5:08:d0:03:7d:0d:77:57:49:80: 71:13:11:64:fb:f1:27:32:18:e5:42:ba:8c:0e:5b: e2:b2:16:f5:38:0e:4e:cd:69:2f:65:74:09:4d:ad: 82:47:d9:35:65:56:09:59:84:15:f5:c1:85:9f:ba: e7:1c:a8:76:c8:b5:42:6c:48:1a:1a:b6:dd:2d:f9: ca:a4:2c:b3:d4:be:52:a8:9b:b7:04:b0:fb:5f:ae: 97:28:ac:4b:8d:8c:79:7c:ac:a1:49:4d:cc:b9:00: 52:ef:11:98:b5:a8:82:82:8a:1d:72:a5:8e:b1:a8: 77:93:9e:96:f8:a5:6a:c4:c9:ae:90:60:fb:a8:9e: 06:81:86:db:20:51:93:b4:01:db:32:00:90:2b:9f: 95:77:2d:ee:d3:91:0d:4c:ee:2a:1f:84:84:5f:66: be:ac:b4:41:be:86:b4:fa:51:20:0d:7e:88:10:98: 4e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4E:6E:BD:44:51:26:99:07:0F:8A:05:96:DF:B8:05:EF:4A:32:92 X509v3 Authority Key Identifier: keyid:6B:9B:5D:14:18:18:95:8D:73:04:58:2F:25:4E:A1:75:D8:43:E3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a5tdFBgYlY1zBFgvJU6hddhD4_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91359CD/185FFC2882DB11EAAC2CD60AC4F9AE02/a5tdFBgYlY1zBFgvJU6hddhD4_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:c0:28:82:b2:99:42:f6:f5:d9:cb:44:bf:78:ff:22:15:f7: 2a:83:90:1e:96:bf:f2:f2:56:4c:1c:c6:53:c6:b2:11:3a:ed: 10:bb:af:e1:52:b5:d6:2d:f5:54:33:dd:a9:b8:e7:3d:76:51: ed:36:44:1e:94:03:a6:70:0a:52:ab:91:da:45:cd:55:e0:b0: a6:3b:66:b4:7d:c0:b0:11:a9:a6:5f:c7:36:3e:8f:a6:bd:f0: c9:1f:c8:e5:5d:78:73:a9:aa:91:88:fc:7f:77:fa:a4:3a:04: 96:60:ad:01:d8:6c:76:06:94:51:f5:de:e7:21:65:ca:1a:ea: 0d:91:78:b2:e2:a1:11:bb:ff:86:06:78:ad:50:fc:b1:73:d0: 4e:59:ff:7f:11:96:ed:8a:5d:d7:ad:bf:1b:3f:a0:bb:be:45: 30:b0:a1:fd:98:5c:c4:b2:dc:76:a6:9a:3f:e6:10:1f:75:e0: 6c:f6:37:1c:98:98:cc:24:ee:71:e0:0b:22:49:34:dd:82:c8: 02:d7:9b:2d:d2:5f:35:d5:65:8c:e6:75:75:53:af:2d:23:e8: e6:f1:42:11:c6:71:db:a2:5c:5c:c7:d9:11:dc:c5:7e:38:63: 4e:fa:bf:c1:4e:d0:c4:eb:04:24:b3:e4:fa:ec:aa:47:8f:12: b3:e2:a9:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU5Q0QxMTAvBgNVBAUTKDZCOUI1RDE0MTgxODk1OEQ3MzA0NTgyRjI1NEVBMTc1 RDg0M0UzRkQwHhcNMjUxMTA0MTk1MzU3WhcNMjUxMTExMTk1MzU3WjAYMRYwFAYD VQQDEw02OTBhNTlkNS1iZGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruthMvQXF4caVB6ZBlFA6xqTO/0aiiupwNECjF2J7rOvsu8RslecfTwBs44r FWfs2TpCeyfr+HoDn9IZl9yzMX7r38ncukZUkwNunuHnaNUI0AN9DXdXSYBxExFk +/EnMhjlQrqMDlvishb1OA5OzWkvZXQJTa2CR9k1ZVYJWYQV9cGFn7rnHKh2yLVC bEgaGrbdLfnKpCyz1L5SqJu3BLD7X66XKKxLjYx5fKyhSU3MuQBS7xGYtaiCgood cqWOsah3k56W+KVqxMmukGD7qJ4GgYbbIFGTtAHbMgCQK5+Vdy3u05ENTO4qH4SE X2a+rLRBvoa0+lEgDX6IEJhO/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5Obr1E USaZBw+KBZbfuAXvSjKSMB8GA1UdIwQYMBaAFGubXRQYGJWNcwRYLyVOoXXYQ+P9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTlDRC8xODVGRkMyODgy REIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZMXpCRmd2SlU2aGRkaEQ0 XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1dGRGQmdZbFkxekJGZ3ZKVTZoZGRoRDRfMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTlDRC8xODVGRkMyODgyREIxMUVBQUMyQ0Q2MEFDNEY5QUUwMi9hNXRkRkJnWWxZ MXpCRmd2SlU2aGRkaEQ0XzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgwCiCsplC9vXZy0S/eP8iFfcqg5Aelr/y8lZMHMZTxrIROu0Qu6/h UrXWLfVUM92puOc9dlHtNkQelAOmcApSq5HaRc1V4LCmO2a0fcCwEammX8c2Po+m vfDJH8jlXXhzqaqRiPx/d/qkOgSWYK0B2Gx2BpRR9d7nIWXKGuoNkXiy4qERu/+G BnitUPyxc9BOWf9/EZbtil3Xrb8bP6C7vkUwsKH9mFzEstx2ppo/5hAfdeBs9jcc mJjMJO5x4AsiSTTdgsgC15st0l811WWM5nV1U68tI+jm8UIRxnHbolxcx9kR3MV+ OGNO+r/BTtDE6wQks+T67KpHjxKz4qlk -----END CERTIFICATE-----Generated at Wed Nov 5 08:03:11 2025 by rpki-client