$ rpki-client -vvf rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft File: S5R0cysQASlff10ywBNpOhk3aBM.mft (raw, json) Hash identifier: wHiFgUHSq+HuJWSFyn/eH8HGx5ifMfWYEBIHEPCXXO4= Subject key identifier: 66:10:8C:B3:88:D8:3F:93:F4:0E:86:DF:03:A7:89:A2:E7:0C:9C:6E Authority key identifier: 4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13 Certificate issuer: /CN=A915393C/serialNumber=4B9474732B1001295F7F5D32C013693A19376813 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft Manifest number: DF Signing time: Mon 03 Nov 2025 05:29:49 +0000 Manifest this update: Mon 03 Nov 2025 05:29:48 +0000 Manifest next update: Mon 10 Nov 2025 05:29:48 +0000 Files and hashes: 1: S5R0cysQASlff10ywBNpOhk3aBM.crl (hash: 55gepfS04sBb34QveKnJKjwoHpBssvOtJX6lSEYbufQ=) 2: D970354A640E11EF93D18659C4F9AE02.roa (hash: etNLN0xdcIQbsfAOgbyJVGgcDaVOQsDMFkI6IBI01Ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915393C, serialNumber=4B9474732B1001295F7F5D32C013693A19376813 Validity Not Before: Nov 3 05:29:48 2025 GMT Not After : Nov 10 05:29:48 2025 GMT Subject: CN=69083dcc-e334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5b:fa:66:70:7d:09:4a:b6:45:67:2b:64:46: 2e:f8:37:bd:dd:75:c4:98:0a:78:46:27:18:df:29: 22:49:b5:69:b0:88:90:32:02:d7:2d:ef:40:eb:b8: 78:cb:a1:e5:2a:b5:f0:2e:50:3d:fc:fc:28:f6:dc: 3c:fa:8c:0d:f4:24:59:95:d8:8d:d6:f7:d8:c5:91: 54:1b:7f:e3:1e:dd:67:72:3b:42:5b:00:bb:83:a1: c9:00:c5:cc:52:77:5a:3d:80:9e:10:64:2d:73:0b: 24:d3:61:45:f8:eb:7e:5a:5d:45:39:f9:61:fe:fb: 01:10:46:17:b4:23:ff:a7:12:82:6d:41:5b:df:fb: 4c:4e:ee:4f:76:a3:d4:47:20:76:1e:34:5e:0d:20: 61:7e:04:ce:cb:ab:d8:cd:64:01:99:d5:78:b2:4f: 1b:f8:08:43:48:29:b9:fc:83:9b:54:2f:a9:1b:4d: bf:f7:5d:ab:2a:e2:a8:07:13:3f:a8:5d:7e:66:54: 63:63:d3:e9:d6:8a:1e:bd:e3:7d:08:b2:ba:a1:6e: 9f:42:e9:58:b5:bb:41:1f:0f:f9:86:79:cf:c4:a3: bf:2b:75:e4:0a:52:e9:0a:59:4e:04:e7:3d:fa:d7: 21:eb:a1:1f:5f:1f:f7:74:d2:34:7c:85:1b:ef:91: a6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:10:8C:B3:88:D8:3F:93:F4:0E:86:DF:03:A7:89:A2:E7:0C:9C:6E X509v3 Authority Key Identifier: keyid:4B:94:74:73:2B:10:01:29:5F:7F:5D:32:C0:13:69:3A:19:37:68:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5R0cysQASlff10ywBNpOhk3aBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915393C/6D04315E640E11EFB5446458C4F9AE02/S5R0cysQASlff10ywBNpOhk3aBM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:bd:4e:cb:84:3e:b3:01:b3:94:90:b8:8f:71:84:90:6e:fe: f5:28:86:94:78:a7:2c:a1:e6:fd:2d:72:6d:fc:55:5d:01:f9: 99:9b:99:20:e1:3a:fa:46:b7:fa:06:07:0d:57:92:90:91:1a: b2:5d:e5:aa:f0:a5:16:01:c0:a0:eb:d4:fd:25:d5:2a:9f:88: 53:fe:23:3e:4a:6b:95:43:ad:76:ff:89:9e:0c:e9:e1:1e:f8: 59:2b:32:8a:33:5f:7c:b5:86:8f:53:e9:57:20:ee:f9:93:c9: a2:81:52:f3:fc:46:75:ea:41:08:d0:3e:e0:d3:53:05:2c:73: 15:c0:01:90:30:8b:34:f6:aa:6c:dc:0e:11:cc:b7:b4:78:17: 3d:f8:a0:fd:9b:30:ed:40:c0:c6:1f:2d:9f:48:52:62:60:5d: 37:66:95:68:e9:c2:1c:7c:5b:ef:22:c5:c8:53:e6:72:f1:e3: ee:5a:90:30:0a:93:b6:de:a1:c3:ff:cf:98:69:77:73:c8:80: be:4e:be:6d:0a:32:18:3d:8a:58:26:83:09:d7:41:94:78:5d: fe:fc:fb:e5:8d:3a:d1:2d:0e:3c:f3:30:4b:a7:22:61:d2:44: 3f:df:d3:10:e7:7e:13:6a:f3:8e:4c:8b:f5:8e:6c:1d:38:63: dc:7a:33:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM5M0MxMTAvBgNVBAUTKDRCOTQ3NDczMkIxMDAxMjk1RjdGNUQzMkMwMTM2OTNB MTkzNzY4MTMwHhcNMjUxMTAzMDUyOTQ4WhcNMjUxMTEwMDUyOTQ4WjAYMRYwFAYD VQQDEw02OTA4M2RjYy1lMzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFv6ZnB9CUq2RWcrZEYu+De93XXEmAp4RicY3ykiSbVpsIiQMgLXLe9A67h4 y6HlKrXwLlA9/Pwo9tw8+owN9CRZldiN1vfYxZFUG3/jHt1ncjtCWwC7g6HJAMXM UndaPYCeEGQtcwsk02FF+Ot+Wl1FOflh/vsBEEYXtCP/pxKCbUFb3/tMTu5PdqPU RyB2HjReDSBhfgTOy6vYzWQBmdV4sk8b+AhDSCm5/IObVC+pG02/912rKuKoBxM/ qF1+ZlRjY9Pp1ooeveN9CLK6oW6fQulYtbtBHw/5hnnPxKO/K3XkClLpCllOBOc9 +tch66EfXx/3dNI0fIUb75GmvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYQjLOI 2D+T9A6G3wOniaLnDJxuMB8GA1UdIwQYMBaAFEuUdHMrEAEpX39dMsATaToZN2gT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzkzQy82RDA0MzE1RTY0 MEUxMUVGQjU0NDY0NThDNEY5QUUwMi9TNVIwY3lzUUFTbGZmMTB5d0JOcE9oazNh Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M1UjBjeXNRQVNsZmYxMHl3Qk5wT2hrM2FCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzkzQy82RDA0MzE1RTY0MEUxMUVGQjU0NDY0NThDNEY5QUUwMi9TNVIwY3lzUUFT bGZmMTB5d0JOcE9oazNhQk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRvU7LhD6zAbOUkLiPcYSQbv71KIaUeKcsoeb9LXJt/FVdAfmZm5kg 4Tr6Rrf6BgcNV5KQkRqyXeWq8KUWAcCg69T9JdUqn4hT/iM+SmuVQ612/4meDOnh HvhZKzKKM198tYaPU+lXIO75k8migVLz/EZ16kEI0D7g01MFLHMVwAGQMIs09qps 3A4RzLe0eBc9+KD9mzDtQMDGHy2fSFJiYF03ZpVo6cIcfFvvIsXIU+Zy8ePuWpAw CpO23qHD/8+YaXdzyIC+Tr5tCjIYPYpYJoMJ10GUeF3+/PvljTrRLQ488zBLpyJh 0kQ/39MQ534TavOOTIv1jmwdOGPcejOg -----END CERTIFICATE-----Generated at Tue Nov 4 12:41:58 2025 by rpki-client