$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft File: 5pLFtgs-8cIERDn8OQrVbcPLzWM.mft (raw, json) Hash identifier: 6ZDIpHYIfP/FvgDxKsfLVb8kcWYb6QhZcOAPihgoZoU= Subject key identifier: E9:D5:DA:8C:FD:B0:EA:DE:6B:7B:3B:3B:31:12:DB:76:DC:D3:B6:5C Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Certificate serial: 08F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft Manifest number: 0868 Signing time: Tue 04 Nov 2025 21:40:40 +0000 Manifest this update: Tue 04 Nov 2025 21:40:39 +0000 Manifest next update: Tue 11 Nov 2025 21:40:39 +0000 Files and hashes: 1: 5pLFtgs-8cIERDn8OQrVbcPLzWM.crl (hash: vkmryPIsusssvkm0TzziTLD42OWJcYGETDMleaKhavI=) 2: 311C494286CC11F09348D16BC4F9AE02.roa (hash: +BsmD54GLCQa0LnHgyrHw492ycZW9i6yM0KqljFRK2Y=) 3: C34D8010A7D311F0A3E6E75EC4F9AE02.roa (hash: E/cmWCt7wJm7XfYKnd6uTnnMTRXprrckSYOl8rNGMiw=) 4: 244B9D1874CB11EEB3C0267DC4F9AE02.roa (hash: D4/4gO/cbJfEP5wlYW+iiyf7YJHeT+1Ir2WyIsZ62e8=) 5: 9765FB988A5D11EE9E6AA223C4F9AE02.roa (hash: VzbPsPGLDl5f/oFOZ9NpXnSyLExyEIRw6V+vhyTevuk=) 6: F3643AD6089C11F09BB44535C4F9AE02.roa (hash: /nLaGI3z1xCPylElkOX2xhje5D3mGsOohSwIv2xzDUQ=) 7: 79986EE8FE3D11EFB763F62EC4F9AE02.roa (hash: bA19Y+YseTfcXQaXEUZi3q3mODfpiIfKTPYCQNkXISs=) 8: 215A8FDE4B9E11EEBF766C7FC4F9AE02.roa (hash: 3KAXB0y77UEXT0NSmBqRqJYol3EdpUOQESEbjqAUowo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2288 (0x8f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Validity Not Before: Nov 4 21:40:39 2025 GMT Not After : Nov 11 21:40:39 2025 GMT Subject: CN=690a72d7-fc1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:55:de:43:d1:fd:4b:5f:42:37:9d:ab:81:45: 0f:c7:ec:36:09:76:5a:ce:20:7c:1b:e4:df:9e:b7: e4:e8:22:a9:80:bc:f6:28:40:d3:e9:df:d6:1b:a6: 56:3c:c7:f7:40:be:97:69:27:b8:16:24:26:9c:b8: af:bc:0c:66:ee:f4:24:1f:63:e4:0c:50:92:ac:1b: bb:fd:7a:03:8b:f6:12:d0:0b:1d:fe:17:06:a5:d2: cd:dc:e5:5d:99:c3:ad:be:c1:54:07:22:8e:f1:d4: 4a:79:f2:92:84:aa:b3:86:67:b2:5f:66:f4:4c:27: a6:1d:0a:03:9c:4c:ca:ed:37:af:6f:de:12:e0:3e: 28:18:21:5f:d8:0c:ae:9e:2b:25:80:f9:23:76:17: 10:8a:48:17:49:ff:ba:52:c0:19:71:8f:92:a4:a2: ea:85:b7:d9:6e:51:c6:38:d4:4d:48:a7:e6:02:60: 71:ed:cd:13:3f:2b:7b:a5:47:9b:49:33:ef:dc:10: 12:c3:d4:ff:9a:0b:07:26:b9:0e:05:c5:72:da:c4: 2c:66:e5:d9:d7:d9:02:38:53:f8:c1:6c:94:fe:26: c6:cb:5b:17:ee:e4:60:24:85:53:e0:8f:da:78:2b: 5b:b1:57:f1:91:71:97:4f:a8:dc:bf:ec:29:54:14: 55:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D5:DA:8C:FD:B0:EA:DE:6B:7B:3B:3B:31:12:DB:76:DC:D3:B6:5C X509v3 Authority Key Identifier: keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:65:e4:57:10:ae:4c:90:54:4c:3d:4f:c4:59:1a:c2:48:56: 34:d1:08:d9:c1:f6:8e:b3:0d:79:d0:d5:69:4b:e6:17:fb:b7: fc:64:10:18:fa:9f:13:27:ed:1c:9a:36:5d:d6:cd:56:06:e8: 7a:7e:c4:c2:e6:fd:90:37:7b:9f:82:03:c8:c6:dc:c9:55:3e: ba:74:4d:d0:b3:51:a8:3a:77:10:66:14:67:67:78:b8:ef:80: 61:4d:af:6c:54:92:46:4f:f6:a1:75:bd:b3:49:63:29:ed:ca: 61:87:03:9d:fa:f1:73:4b:c1:17:b7:8c:b8:58:e7:1e:1d:7c: 57:33:f5:08:d0:0f:5f:b4:a1:32:c7:35:0f:cf:f3:5c:60:00: 03:6d:04:c8:3e:a5:d0:ec:b1:d2:0b:90:5c:9b:f5:37:fd:8f: 8a:7e:c4:01:53:be:1d:26:60:c9:a2:a3:d5:da:0c:48:50:1e: b7:88:25:cd:f2:31:bf:a4:a4:09:ee:65:d5:28:65:27:3c:bf: 5a:02:20:b1:9d:6f:07:74:2d:eb:72:84:50:05:b3:58:30:52: 14:0b:48:3b:f2:8e:c3:e7:f6:0a:95:25:be:56:10:fd:f9:c8: 4c:d0:a6:30:37:e9:97:57:aa:19:bb:8d:f8:51:ac:76:63:ae: 03:ad:7b:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE QzNDQkNENjMwHhcNMjUxMTA0MjE0MDM5WhcNMjUxMTExMjE0MDM5WjAYMRYwFAYD VQQDEw02OTBhNzJkNy1mYzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA71XeQ9H9S19CN52rgUUPx+w2CXZaziB8G+Tfnrfk6CKpgLz2KEDT6d/WG6ZW PMf3QL6XaSe4FiQmnLivvAxm7vQkH2PkDFCSrBu7/XoDi/YS0Asd/hcGpdLN3OVd mcOtvsFUByKO8dRKefKShKqzhmeyX2b0TCemHQoDnEzK7Tevb94S4D4oGCFf2Ayu nislgPkjdhcQikgXSf+6UsAZcY+SpKLqhbfZblHGONRNSKfmAmBx7c0TPyt7pUeb STPv3BASw9T/mgsHJrkOBcVy2sQsZuXZ19kCOFP4wWyU/ibGy1sX7uRgJIVT4I/a eCtbsVfxkXGXT6jcv+wpVBRVOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnV2oz9 sOrea3s7OzES23bc07ZcMB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3 M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDFFQS85QzkzMkI0ODE3M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThj SUVSRG44T1FyVmJjUEx6V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiZeRXEK5MkFRMPU/EWRrCSFY00QjZwfaOsw150NVpS+YX+7f8ZBAY +p8TJ+0cmjZd1s1WBuh6fsTC5v2QN3ufggPIxtzJVT66dE3Qs1GoOncQZhRnZ3i4 74BhTa9sVJJGT/ahdb2zSWMp7cphhwOd+vFzS8EXt4y4WOceHXxXM/UI0A9ftKEy xzUPz/NcYAADbQTIPqXQ7LHSC5Bcm/U3/Y+KfsQBU74dJmDJoqPV2gxIUB63iCXN 8jG/pKQJ7mXVKGUnPL9aAiCxnW8HdC3rcoRQBbNYMFIUC0g78o7D5/YKlSW+VhD9 +chM0KYwN+mXV6oZu434Uax2Y64DrXuI -----END CERTIFICATE-----Generated at Wed Nov 5 02:17:47 2025 by rpki-client