$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft File: A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft (raw, json) Hash identifier: YM5FIhl3BVQOEAEPdimnfI1j7ptAWEXAPnC3gUDwt9o= Subject key identifier: 0C:D6:60:96:24:3E:D9:21:41:4B:17:E8:ED:14:8D:50:59:27:4E:34 Authority key identifier: 03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59 Certificate issuer: /CN=A91380F7/serialNumber=0391D9A70E893E751BC61289C54417B87A104559 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft Manifest number: B2 Signing time: Wed 05 Nov 2025 06:16:54 +0000 Manifest this update: Wed 05 Nov 2025 06:16:54 +0000 Manifest next update: Wed 12 Nov 2025 06:16:54 +0000 Files and hashes: 1: A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl (hash: pwppH8tT19KFvrrc/34T9RZViJg1trzY0KOx93ADP1E=) 2: 9B3FE178A7FA11EFA7886875C4F9AE02.roa (hash: wskyOCDE340iqc6+xbxJBMsRJGfe9vODWh/hz8Ga1HM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380F7, serialNumber=0391D9A70E893E751BC61289C54417B87A104559 Validity Not Before: Nov 5 06:16:54 2025 GMT Not After : Nov 12 06:16:54 2025 GMT Subject: CN=690aebd6-4364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:86:ae:ed:1f:18:9e:6a:78:bb:ba:80:b0:0c: 6b:38:91:6c:38:90:63:a0:f0:71:ef:21:19:cb:7d: 14:51:1e:51:8a:d3:bb:b9:61:6e:7e:f3:6f:5f:93: ac:e4:50:af:c0:57:02:9e:d3:4c:f0:a8:c1:71:f4: 77:fe:65:11:93:ef:28:9c:a9:80:62:6e:f5:de:bd: 5f:07:84:de:90:d6:2e:41:27:d0:12:df:8d:f2:c5: 4b:d7:24:f0:33:71:00:98:1e:ae:bb:06:b7:33:83: 6b:f4:51:5b:f8:08:dd:99:68:c4:c3:ec:d9:0a:fe: f1:80:62:c6:26:21:0f:d4:b8:82:bd:1d:cc:aa:b6: 64:06:da:b9:4b:07:2e:c4:81:87:56:4a:ed:37:5f: 8c:13:1e:9c:d4:94:c2:6a:0a:60:07:46:66:0d:f5: 97:b3:3f:17:1e:25:22:fc:2d:b3:a2:6e:e6:96:22: e7:58:0e:9e:6a:23:3a:5f:c4:73:e3:f7:9c:20:9c: 4f:31:ab:f7:48:29:91:99:af:cd:d0:17:b1:cb:15: 3c:d4:f0:81:65:e8:05:c2:ee:ff:da:b5:23:29:24: 6a:30:7f:f9:f9:a5:ef:81:36:65:70:a8:2f:70:59: 83:6e:a7:70:7b:d9:9d:fe:64:4c:78:6a:36:a7:66: 74:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D6:60:96:24:3E:D9:21:41:4B:17:E8:ED:14:8D:50:59:27:4E:34 X509v3 Authority Key Identifier: keyid:03:91:D9:A7:0E:89:3E:75:1B:C6:12:89:C5:44:17:B8:7A:10:45:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A5HZpw6JPnUbxhKJxUQXuHoQRVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/A7EBC1D2A7F811EFBB44F371C4F9AE02/A5HZpw6JPnUbxhKJxUQXuHoQRVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:1f:74:69:fd:5d:84:75:36:30:6f:18:63:3a:0b:c0:59:c4: de:2f:ac:b6:54:a5:b2:c9:ef:ea:7e:4b:1e:bf:9c:1c:62:11: b7:96:23:b2:dd:45:3d:45:1e:63:41:d6:59:08:ad:2c:5f:fe: c1:b4:b6:88:0f:dc:89:9f:3b:b5:de:96:0d:98:0e:1e:8b:0a: e8:22:45:c3:db:22:ac:13:70:b8:4c:9e:93:ef:0f:0f:be:f1: eb:99:8f:41:8b:54:da:9f:d7:89:6a:07:9c:4d:07:2b:60:9f: 9b:06:a8:1b:16:cf:44:95:c5:c6:93:13:de:49:e0:d8:14:af: d3:e5:c8:48:44:0d:34:3e:1f:d4:af:18:32:d4:4d:7d:db:04: f6:7a:28:34:88:5c:1a:ea:ac:76:b8:78:d6:8f:d3:36:a1:7c: bb:4f:23:f0:a3:fd:ea:d7:fb:bb:13:56:fb:4a:a0:7c:bf:12: 3f:cd:3a:fe:07:af:d2:e9:61:20:65:69:78:56:7a:a4:21:4d: 78:4a:45:37:fd:76:d4:5d:d3:67:b7:45:45:13:a4:94:df:28: 9d:c8:79:9f:be:43:36:e8:2e:2e:49:a7:2c:73:94:9c:48:25: 2c:41:6b:3f:1b:6f:d3:ee:12:eb:0a:19:c3:7f:5a:aa:2e:3d: 59:df:a2:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwRjcxMTAvBgNVBAUTKDAzOTFEOUE3MEU4OTNFNzUxQkM2MTI4OUM1NDQxN0I4 N0ExMDQ1NTkwHhcNMjUxMTA1MDYxNjU0WhcNMjUxMTEyMDYxNjU0WjAYMRYwFAYD VQQDEw02OTBhZWJkNi00MzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYau7R8Ynmp4u7qAsAxrOJFsOJBjoPBx7yEZy30UUR5RitO7uWFufvNvX5Os 5FCvwFcCntNM8KjBcfR3/mURk+8onKmAYm713r1fB4TekNYuQSfQEt+N8sVL1yTw M3EAmB6uuwa3M4Nr9FFb+AjdmWjEw+zZCv7xgGLGJiEP1LiCvR3MqrZkBtq5Swcu xIGHVkrtN1+MEx6c1JTCagpgB0ZmDfWXsz8XHiUi/C2zom7mliLnWA6eaiM6X8Rz 4/ecIJxPMav3SCmRma/N0BexyxU81PCBZegFwu7/2rUjKSRqMH/5+aXvgTZlcKgv cFmDbqdwe9md/mRMeGo2p2Z0vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAzWYJYk PtkhQUsX6O0UjVBZJ040MB8GA1UdIwQYMBaAFAOR2acOiT51G8YSicVEF7h6EEVZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODBGNy9BN0VCQzFEMkE3 RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BNUhacHc2SlBuVWJ4aEtKeFVRWHVIb1FS VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E1SFpwdzZKUG5VYnhoS0p4VVFYdUhvUVJWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODBGNy9BN0VCQzFEMkE3RjgxMUVGQkI0NEYzNzFDNEY5QUUwMi9BNUhacHc2SlBu VWJ4aEtKeFVRWHVIb1FSVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAH3Rp/V2EdTYwbxhjOgvAWcTeL6y2VKWyye/qfksev5wcYhG3liOy 3UU9RR5jQdZZCK0sX/7BtLaID9yJnzu13pYNmA4eiwroIkXD2yKsE3C4TJ6T7w8P vvHrmY9Bi1Tan9eJagecTQcrYJ+bBqgbFs9ElcXGkxPeSeDYFK/T5chIRA00Ph/U rxgy1E192wT2eig0iFwa6qx2uHjWj9M2oXy7TyPwo/3q1/u7E1b7SqB8vxI/zTr+ B6/S6WEgZWl4VnqkIU14SkU3/XbUXdNnt0VFE6SU3yidyHmfvkM26C4uSacsc5Sc SCUsQWs/G2/T7hLrChnDf1qqLj1Z36Io -----END CERTIFICATE-----Generated at Wed Nov 5 15:40:40 2025 by rpki-client