$ rpki-client -vvf rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft File: 5r9G5TDfkimPrAMq-8mECcRDBDk.mft (raw, json) Hash identifier: VnQqIQwzCPdQz9D5ioyWgex2nGuMnN2qsJUQS8KEGOE= Subject key identifier: A1:2E:30:33:AC:A1:0B:8E:E5:01:BA:21:FE:5B:44:CC:76:15:7E:BA Authority key identifier: E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 Certificate issuer: /CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Certificate serial: 34FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft Manifest number: 34E8 Signing time: Tue 04 Nov 2025 14:58:59 +0000 Manifest this update: Tue 04 Nov 2025 14:58:58 +0000 Manifest next update: Tue 11 Nov 2025 14:58:58 +0000 Files and hashes: 1: 5r9G5TDfkimPrAMq-8mECcRDBDk.crl (hash: Qpduz1C5YZgFwAcShYQCGJJCFfLVW9juM7g3Ghxz6vk=) 2: 909C5126F0A711EEA6150174C4F9AE02.roa (hash: HW9R1Ep56SryGIz4W6P5CqXSgSxlXz4KavtGaF387a4=) 3: AD5BA998D85D11EB8E31070BC4F9AE02.roa (hash: AqcTvl3JE8iQmp2mHhzhnxH+2xnTnNkhAQ8gJbtZg+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13564 (0x34fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91527F9, serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Validity Not Before: Nov 4 14:58:58 2025 GMT Not After : Nov 11 14:58:58 2025 GMT Subject: CN=690a14b3-b40c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:75:5f:6f:d2:38:87:93:82:08:45:5b:ea:07: ba:a8:bc:d2:85:2f:d2:0a:26:bd:f9:2c:cd:e6:b0: 17:66:2c:ac:c1:60:57:3c:82:f0:d2:37:71:72:69: a3:89:9c:dc:5d:5d:35:1d:be:32:7a:2a:06:0a:ac: 55:19:2e:a0:d6:97:2f:05:c4:0e:b6:fb:c5:4d:ee: 9b:6e:6a:cc:ff:66:31:57:71:5f:8e:8f:41:af:12: e4:51:ca:d8:30:9a:b6:03:72:8f:71:89:a0:b8:68: e0:42:e8:3d:94:96:da:6f:c4:27:8d:f2:0f:ad:1d: 3e:61:a9:15:db:f1:48:5b:6d:93:50:5e:e4:63:23: a3:d0:37:19:49:d4:5c:0b:a6:a0:61:c7:a2:ed:c5: 8d:6d:66:df:9c:80:f4:3f:4d:8a:85:27:4f:20:f8: 83:97:80:39:0b:37:7f:7f:b6:65:92:5f:ba:9c:34: c6:66:e0:e1:05:9d:f7:30:a6:c7:de:e3:71:4c:4b: fb:59:72:eb:58:16:33:35:7a:68:61:7a:dc:e8:1d: 29:af:da:5e:35:91:3a:9c:17:a9:c8:de:02:20:8f: 37:e9:24:24:33:d2:10:cf:c2:9f:4d:5c:48:af:bc: e2:03:f5:b4:67:21:02:9b:9a:c6:eb:5d:49:dc:f7: 1f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2E:30:33:AC:A1:0B:8E:E5:01:BA:21:FE:5B:44:CC:76:15:7E:BA X509v3 Authority Key Identifier: keyid:E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ed:18:9e:7e:44:2e:73:3f:c2:cd:5b:d7:49:ba:3f:0f:11: 54:40:d8:f4:cc:56:75:54:61:73:e1:3c:73:66:6e:2f:f4:84: 2a:49:3a:82:28:1a:0b:05:c1:51:b9:4a:e8:63:7a:86:21:96: 39:19:24:84:30:a9:fd:30:9a:5d:e5:9d:ba:b7:73:b8:b4:0b: dc:69:bd:ce:e5:16:88:f8:78:41:b3:31:0b:cc:c0:b9:e7:98: 28:3c:03:f2:7e:5f:ca:b6:3c:e1:e3:d2:66:5a:bb:b3:45:fa: a6:67:66:ac:43:02:66:e3:22:f5:d5:f5:60:ed:e5:31:00:c4: 0d:24:c7:33:56:6d:ca:f6:d2:6e:54:0f:eb:ce:18:6b:e3:d3: 5a:c0:4a:cc:34:9d:9d:5f:d5:1a:e7:91:34:35:b9:fb:9a:ef: 15:a6:61:42:02:d4:37:45:b1:bb:c9:91:37:d2:2c:86:d8:7c: 00:e5:4f:2f:6c:06:6b:cf:e2:7c:8d:48:77:78:2e:1f:59:0d: 43:f5:18:13:4e:48:92:c8:b5:11:c4:dd:2e:b5:89:00:ec:6c: 4a:8d:0c:66:a6:3b:f0:d8:9e:76:26:1a:69:42:d9:b4:00:b5: a5:7e:91:5d:9c:36:2f:69:ff:79:e5:76:42:de:b3:ba:8d:87: 9b:ca:e9:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3RjkxMTAvBgNVBAUTKEU2QkY0NkU1MzBERjkyMjk4RkFDMDMyQUZCQzk4NDA5 QzQ0MzA0MzkwHhcNMjUxMTA0MTQ1ODU4WhcNMjUxMTExMTQ1ODU4WjAYMRYwFAYD VQQDEw02OTBhMTRiMy1iNDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nVfb9I4h5OCCEVb6ge6qLzShS/SCia9+SzN5rAXZiyswWBXPILw0jdxcmmj iZzcXV01Hb4yeioGCqxVGS6g1pcvBcQOtvvFTe6bbmrM/2YxV3Ffjo9BrxLkUcrY MJq2A3KPcYmguGjgQug9lJbab8QnjfIPrR0+YakV2/FIW22TUF7kYyOj0DcZSdRc C6agYcei7cWNbWbfnID0P02KhSdPIPiDl4A5Czd/f7Zlkl+6nDTGZuDhBZ33MKbH 3uNxTEv7WXLrWBYzNXpoYXrc6B0pr9peNZE6nBepyN4CII836SQkM9IQz8KfTVxI r7ziA/W0ZyECm5rG611J3PcfZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEuMDOs oQuO5QG6If5bRMx2FX66MB8GA1UdIwQYMBaAFOa/RuUw35Ipj6wDKvvJhAnEQwQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjdGOS82RUQyRUJBQTFE OUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtpbVByQU1xLThtRUNjUkRC RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyOUc1VERma2ltUHJBTXEtOG1FQ2NSREJEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjdGOS82RUQyRUJBQTFEOUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtp bVByQU1xLThtRUNjUkRCRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr7RiefkQucz/CzVvXSbo/DxFUQNj0zFZ1VGFz4TxzZm4v9IQqSTqC KBoLBcFRuUroY3qGIZY5GSSEMKn9MJpd5Z26t3O4tAvcab3O5RaI+HhBszELzMC5 55goPAPyfl/Ktjzh49JmWruzRfqmZ2asQwJm4yL11fVg7eUxAMQNJMczVm3K9tJu VA/rzhhr49NawErMNJ2dX9Ua55E0Nbn7mu8VpmFCAtQ3RbG7yZE30iyG2HwA5U8v bAZrz+J8jUh3eC4fWQ1D9RgTTkiSyLURxN0utYkA7GxKjQxmpjvw2J52JhppQtm0 ALWlfpFdnDYvaf955XZC3rO6jYebyunM -----END CERTIFICATE-----Generated at Wed Nov 5 12:36:34 2025 by rpki-client