$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft File: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft (raw, json) Hash identifier: dkaH9gRys7IB6GZqoioop8bd4lIm5YgUnsWC6dN9sM4= Subject key identifier: 1B:E1:D5:5C:BA:DF:0B:45:9C:02:55:10:7E:97:8C:7A:A6:4C:CC:E4 Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18 Certificate issuer: /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft Manifest number: 019C Signing time: Wed 05 Nov 2025 03:29:35 +0000 Manifest this update: Wed 05 Nov 2025 03:29:35 +0000 Manifest next update: Wed 12 Nov 2025 03:29:35 +0000 Files and hashes: 1: 5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl (hash: eVEXt1ZTGKoj0ZwtH5pHMzrSz5TimLxpz8sOyn2SW4E=) 2: 444EB35A459D11EEA8758641C4F9AE02.roa (hash: HxWrs2XE/yxdbhgHCsYXC3cP1Nukb/SzqytOwhYHUgs=) 3: 57F3935045A011EEA9A5215EC4F9AE02.roa (hash: zhWHaUx74UFv//O6sI95zwvuuZgRyOVSokAfykLA4G4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91367E0, serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818 Validity Not Before: Nov 5 03:29:35 2025 GMT Not After : Nov 12 03:29:35 2025 GMT Subject: CN=690ac49f-23f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6f:f0:2e:56:e0:ee:50:43:63:93:14:ab:1f: 3f:01:b6:91:12:b4:ba:c6:be:79:b5:b4:4f:99:81: b7:f0:06:ee:d4:5e:7e:cf:8c:f4:50:04:8e:c4:14: e1:cd:91:dc:0f:13:bb:8a:51:7d:7f:6a:33:1e:ad: 10:56:1e:80:c0:b1:4e:25:b2:06:8b:75:0d:21:88: 1b:c6:06:93:a6:b7:89:a2:aa:25:9c:db:00:86:9c: 39:00:eb:4a:6e:70:61:06:4f:c7:13:6c:d3:55:91: 1e:e5:27:53:bf:f9:84:61:cd:d6:7e:6c:1f:3a:b7: ba:ba:33:5b:54:aa:c8:10:1c:76:8d:97:f9:d1:08: af:9f:12:d4:ae:3d:67:a8:fa:68:42:00:24:7c:d3: 17:d9:21:77:8b:0c:d9:24:a7:b0:05:81:38:41:1b: 98:ff:97:29:07:df:8d:f2:7b:a4:a8:81:95:a8:3f: 61:d8:10:e8:fe:0e:b3:47:ec:6d:69:a1:9e:d4:c1: 28:e9:e4:13:1e:92:fb:2b:f1:3f:57:ca:77:cf:c1: 87:50:61:80:43:2e:6f:7b:48:d2:6b:bf:97:68:ba: c1:06:40:cb:7c:8e:01:63:b9:57:24:96:af:3c:27: cb:fa:24:ac:d9:11:42:1a:26:ec:01:ba:d7:33:34: 6d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E1:D5:5C:BA:DF:0B:45:9C:02:55:10:7E:97:8C:7A:A6:4C:CC:E4 X509v3 Authority Key Identifier: keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:77:67:bb:f1:40:81:84:33:ee:00:5a:f9:6d:75:30:62:db: 40:20:ef:21:7c:a8:c8:28:bb:2f:37:50:4e:06:5d:74:83:e1: 5c:9a:fd:19:6f:e7:30:8b:41:63:6f:93:8e:87:e0:6c:55:63: 94:33:46:6c:52:1d:9c:a6:7e:0a:b7:1c:47:b4:fe:d0:a5:c9: 5b:1a:07:41:37:88:1a:a6:04:27:40:58:8b:1d:2c:75:66:30: ea:33:9b:d6:47:68:a5:37:a7:18:07:c8:b7:08:a0:9b:69:69: af:a4:26:01:b4:6a:2c:3f:f1:39:4a:1e:c7:c8:c5:04:81:69: 60:2a:a1:a2:33:b7:b1:45:88:2e:84:2a:7a:d8:f8:57:3d:17: 1b:e0:dd:74:f0:06:67:ea:cf:e6:2b:20:7d:b6:1e:5d:3f:98: c9:e7:13:a2:30:53:10:42:1d:db:fa:48:5f:5e:93:6b:81:35: fd:57:e7:5b:26:a7:b4:34:29:f1:10:3b:7a:4f:57:c4:68:c6: ba:c3:da:2e:c1:18:2f:4f:8c:8f:ed:b3:95:85:b9:41:08:42: 1a:f5:6a:fb:95:24:23:bb:90:8c:eb:6f:ba:8b:87:58:13:14: 2c:de:69:b4:ad:74:14:45:cc:e1:91:57:c1:55:a0:61:da:be: 9f:d3:1c:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY3RTAxMTAvBgNVBAUTKEU2MUJFQzEzOTI4NjMyODNEQzk5RTJGRjkzMTU3NUEz MTgxQzI4MTgwHhcNMjUxMTA1MDMyOTM1WhcNMjUxMTEyMDMyOTM1WjAYMRYwFAYD VQQDEw02OTBhYzQ5Zi0yM2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvm/wLlbg7lBDY5MUqx8/AbaRErS6xr55tbRPmYG38Abu1F5+z4z0UASOxBTh zZHcDxO7ilF9f2ozHq0QVh6AwLFOJbIGi3UNIYgbxgaTpreJoqolnNsAhpw5AOtK bnBhBk/HE2zTVZEe5SdTv/mEYc3WfmwfOre6ujNbVKrIEBx2jZf50QivnxLUrj1n qPpoQgAkfNMX2SF3iwzZJKewBYE4QRuY/5cpB9+N8nukqIGVqD9h2BDo/g6zR+xt aaGe1MEo6eQTHpL7K/E/V8p3z8GHUGGAQy5ve0jSa7+XaLrBBkDLfI4BY7lXJJav PCfL+iSs2RFCGibsAbrXMzRtzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBvh1Vy6 3wtFnAJVEH6XjHqmTMzkMB8GA1UdIwQYMBaAFOYb7BOShjKD3Jni/5MVdaMYHCgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjdFMC9FNDE4OTkxMDQ1 OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01vUGNtZUxfa3hWMW94Z2NL QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVodnNFNUtHTW9QY21lTF9reFYxb3hnY0tCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjdFMC9FNDE4OTkxMDQ1OUMxMUVFQjY5RDY4MzFDNEY5QUUwMi81aHZzRTVLR01v UGNtZUxfa3hWMW94Z2NLQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDgd2e78UCBhDPuAFr5bXUwYttAIO8hfKjIKLsvN1BOBl10g+Fcmv0Z b+cwi0Fjb5OOh+BsVWOUM0ZsUh2cpn4KtxxHtP7QpclbGgdBN4gapgQnQFiLHSx1 ZjDqM5vWR2ilN6cYB8i3CKCbaWmvpCYBtGosP/E5Sh7HyMUEgWlgKqGiM7exRYgu hCp62PhXPRcb4N108AZn6s/mKyB9th5dP5jJ5xOiMFMQQh3b+khfXpNrgTX9V+db Jqe0NCnxEDt6T1fEaMa6w9ouwRgvT4yP7bOVhblBCEIa9Wr7lSQju5CM62+6i4dY ExQs3mm0rXQURczhkVfBVaBh2r6f0xyY -----END CERTIFICATE-----Generated at Wed Nov 5 17:16:54 2025 by rpki-client