$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft File: 5viFuMHmNK45nsq4FzoD245MEpQ.mft (raw, json) Hash identifier: 8nnpyMD12x5Eo/cTifQ8mpOhp8KN88mzqt04GDkVPFQ= Subject key identifier: 7E:C0:B6:AA:98:EE:B3:65:A1:0D:D4:4F:71:39:5A:31:00:4F:27:77 Authority key identifier: E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94 Certificate issuer: /CN=A914C4D7/serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294 Certificate serial: 0E26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft Manifest number: 0E1D Signing time: Tue 04 Nov 2025 17:54:37 +0000 Manifest this update: Tue 04 Nov 2025 17:54:37 +0000 Manifest next update: Tue 11 Nov 2025 17:54:37 +0000 Files and hashes: 1: 5viFuMHmNK45nsq4FzoD245MEpQ.crl (hash: d0dEDX4DBP3QBVCm+IQbMFLJsoDQGvOpnFy2ei6JJUE=) 2: 1801797EB79211E986129837C4F9AE02.roa (hash: I7CEbkBg9Av7yOv0PNqj77FDrgxZjjIl1US16C5a7sQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3622 (0xe26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4D7, serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294 Validity Not Before: Nov 4 17:54:37 2025 GMT Not After : Nov 11 17:54:37 2025 GMT Subject: CN=690a3ddd-c20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:da:86:72:e0:a6:dd:a2:cf:a9:8b:f5:b1:94: cc:16:a8:f5:4a:9c:9d:4a:fd:6e:b3:2a:62:3d:f8: 26:17:2f:94:2d:53:e2:71:a9:41:54:a4:e4:58:1f: 16:f9:4d:68:e7:dd:07:13:6c:37:34:86:46:a3:e7: a1:cd:80:61:e6:bb:94:a8:e6:f4:d9:f4:19:7b:86: 2d:03:3e:64:1f:e1:d2:f5:34:97:f5:a2:e6:ea:8c: 08:d9:69:d2:6d:85:80:94:7f:92:4a:bc:51:ee:94: 98:dc:26:1d:e6:96:05:22:fb:3c:af:59:4e:12:69: 43:e4:6d:3f:80:73:b7:fa:83:a2:10:5c:06:5f:bf: 8b:13:4b:df:f6:86:2c:45:8f:fe:fa:83:92:1e:c4: 11:4d:5e:12:be:6c:29:5d:f8:b6:90:b6:5e:bf:47: 44:d0:a2:11:11:8a:04:ca:f2:7b:81:1a:b5:e8:12: f4:3d:c2:48:3d:57:a1:e4:4d:8d:16:66:0b:a1:44: 05:f3:9b:e6:7d:fe:a7:a3:d6:07:f1:18:a1:81:a4: cc:1e:dd:82:65:bf:06:ca:b5:c5:00:af:00:d3:71: 2f:7a:64:6d:d4:79:68:13:4c:22:1d:33:4c:a1:6f: 16:eb:05:f0:fa:60:1d:55:74:44:75:3d:e4:c7:41: 90:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C0:B6:AA:98:EE:B3:65:A1:0D:D4:4F:71:39:5A:31:00:4F:27:77 X509v3 Authority Key Identifier: keyid:E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:4e:d1:63:c7:62:a0:04:78:9b:3c:8e:1f:de:79:01:d2:d8: 16:e8:6a:10:43:7c:a1:8c:87:6f:32:3d:a4:57:48:e8:56:fe: 8f:5e:4d:98:96:9f:9a:31:7f:89:d5:cd:93:15:5c:1c:b5:e7: 43:6d:41:de:a7:8d:c5:9b:68:9f:14:e1:f6:e3:a5:f6:ec:7d: e8:d1:2a:2b:fd:35:40:dd:de:c0:40:07:aa:9a:29:d9:6e:13: 0c:46:c0:3e:e8:c2:7e:57:a5:2d:ff:ae:cc:2a:d5:22:58:14: 4c:e5:da:51:a5:4c:ee:50:84:ea:1c:b3:30:60:5d:27:f6:8d: 67:9a:5b:66:16:6f:9b:7c:88:e4:73:dd:3e:41:55:1d:a4:de: a5:d8:73:b2:fa:e5:41:fa:0c:ae:62:a0:ca:6f:89:bd:63:55: fb:65:89:aa:be:68:d9:64:7f:c8:32:8a:77:57:5a:28:5a:40: 6e:7c:a6:70:f4:a9:cb:5f:2f:dc:36:98:b6:cc:d7:30:67:e2: a5:d6:cf:0c:fe:ea:b2:d8:60:a6:98:d8:03:1c:ce:e4:ef:20: 7f:cb:05:9d:2d:a7:26:9e:27:d1:44:d5:fa:83:54:ab:9d:2c: 1d:71:b1:03:62:82:2e:57:f6:32:77:40:c2:29:b4:43:17:95: 44:5d:a3:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RDcxMTAvBgNVBAUTKEU2Rjg4NUI4QzFFNjM0QUUzOTlFQ0FCODE3M0EwM0RC OEU0QzEyOTQwHhcNMjUxMTA0MTc1NDM3WhcNMjUxMTExMTc1NDM3WjAYMRYwFAYD VQQDEw02OTBhM2RkZC1jMjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2tqGcuCm3aLPqYv1sZTMFqj1SpydSv1usypiPfgmFy+ULVPicalBVKTkWB8W +U1o590HE2w3NIZGo+ehzYBh5ruUqOb02fQZe4YtAz5kH+HS9TSX9aLm6owI2WnS bYWAlH+SSrxR7pSY3CYd5pYFIvs8r1lOEmlD5G0/gHO3+oOiEFwGX7+LE0vf9oYs RY/++oOSHsQRTV4SvmwpXfi2kLZev0dE0KIREYoEyvJ7gRq16BL0PcJIPVeh5E2N FmYLoUQF85vmff6no9YH8RihgaTMHt2CZb8GyrXFAK8A03EvemRt1HloE0wiHTNM oW8W6wXw+mAdVXREdT3kx0GQ1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7AtqqY 7rNloQ3UT3E5WjEATyd3MB8GA1UdIwQYMBaAFOb4hbjB5jSuOZ7KuBc6A9uOTBKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRENy85OUQ5MTUzQUI3 OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5LNDVuc3E0RnpvRDI0NU1F cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2aUZ1TUhtTks0NW5zcTRGem9EMjQ1TUVwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRENy85OUQ5MTUzQUI3OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5L NDVuc3E0RnpvRDI0NU1FcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdTtFjx2KgBHibPI4f3nkB0tgW6GoQQ3yhjIdvMj2kV0joVv6PXk2Y lp+aMX+J1c2TFVwctedDbUHep43Fm2ifFOH246X27H3o0Sor/TVA3d7AQAeqminZ bhMMRsA+6MJ+V6Ut/67MKtUiWBRM5dpRpUzuUITqHLMwYF0n9o1nmltmFm+bfIjk c90+QVUdpN6l2HOy+uVB+gyuYqDKb4m9Y1X7ZYmqvmjZZH/IMop3V1ooWkBufKZw 9KnLXy/cNpi2zNcwZ+Kl1s8M/uqy2GCmmNgDHM7k7yB/ywWdLacmnifRRNX6g1Sr nSwdcbEDYoIuV/Yyd0DCKbRDF5VEXaMP -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:41 2025 by rpki-client