$ rpki-client -vvf rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft File: 5HE8G511dZKVr2TN-6YrcNuaBTc.mft (raw, json) Hash identifier: gBF0XHL3K4s7dgm1jeP4qRMnOcAX+MmW8kfgO7jjCQk= Subject key identifier: 31:13:3A:CE:29:91:4D:BE:A1:E3:B7:49:9B:D5:B1:4B:30:1D:D1:A6 Authority key identifier: E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 Certificate issuer: /CN=A91561B7/serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Certificate serial: 1DFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft Manifest number: 1DE9 Signing time: Tue 04 Nov 2025 16:12:01 +0000 Manifest this update: Tue 04 Nov 2025 16:12:00 +0000 Manifest next update: Tue 11 Nov 2025 16:12:00 +0000 Files and hashes: 1: 5HE8G511dZKVr2TN-6YrcNuaBTc.crl (hash: yp5s2RjkW5B+ZmRlZbjoHHBsLrgZWrSEr6YWbMLcokc=) 2: 4865DD00A13B11E687921078C4F9AE02.roa (hash: MaFWYkY2HcnSI16cq7zrf3Xg1TMrKe+K2OOU5n2vPcU=) 3: 1D57FF40A01311E684546521C4F9AE02.roa (hash: 8kLRR6g7/NXM5uPCUqU+X4Qb9woBVi0kDN/Wkxs+ARo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:11:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7678 (0x1dfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91561B7, serialNumber=E4713C1B9D75759295AF64CDFBA62B70DB9A0537 Validity Not Before: Nov 4 16:12:00 2025 GMT Not After : Nov 11 16:12:00 2025 GMT Subject: CN=690a25d0-3170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:89:15:54:80:07:06:dd:8c:dc:ab:a4:ad:04: bb:94:e3:06:8e:9a:c2:d4:38:56:17:21:b0:b5:43: b8:dc:c9:e7:4c:7b:76:27:1a:18:fe:a0:1d:0e:16: 57:15:36:fa:38:aa:f9:7e:8c:16:3f:73:ee:c1:92: 8d:61:cd:7b:42:e2:9a:4b:15:fe:00:1c:8b:f9:13: 14:aa:ef:be:be:af:c8:7a:74:d6:26:12:16:84:f2: ce:35:c7:2d:7d:9f:f2:f2:df:45:dd:77:6a:b7:4f: da:d6:ab:23:fd:95:26:bc:f0:4c:63:37:a8:2c:f8: f4:64:81:d1:56:fd:05:59:2d:b3:ad:b7:71:83:d7: ed:4b:4b:1d:47:68:c4:c6:04:76:ca:55:73:03:62: 55:5c:70:9d:b3:4c:ec:19:78:02:3b:2e:21:af:02: 35:84:38:50:69:bf:d3:f2:48:61:75:76:a4:bf:6a: c1:c4:6e:cc:af:ee:ff:0f:df:d1:c9:6b:b0:e4:d4: 99:25:d8:17:19:f8:19:9c:2c:ae:4e:8d:e7:03:26: ee:2c:63:f4:68:c7:b0:fa:69:2f:cd:1b:0c:09:10: a6:93:8d:9d:c3:3b:14:5c:a2:ff:18:55:37:45:c1: 82:fc:50:6c:92:59:85:32:5e:ae:10:06:b4:48:a9: 98:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:13:3A:CE:29:91:4D:BE:A1:E3:B7:49:9B:D5:B1:4B:30:1D:D1:A6 X509v3 Authority Key Identifier: keyid:E4:71:3C:1B:9D:75:75:92:95:AF:64:CD:FB:A6:2B:70:DB:9A:05:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5HE8G511dZKVr2TN-6YrcNuaBTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91561B7/5FA1ED309EF011E681102733C4F9AE02/5HE8G511dZKVr2TN-6YrcNuaBTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d8:1e:5b:cb:c2:80:23:07:6e:3c:df:84:dc:0c:7c:b6:1d: a8:c8:1b:fe:48:66:4b:5d:3d:9d:01:ca:96:39:44:83:0f:7f: eb:eb:10:22:76:24:e8:01:49:1e:54:4c:89:41:8f:b7:10:ba: 66:34:4d:83:b3:17:23:f5:dc:62:92:4a:93:2f:7d:67:1d:5b: de:c0:33:cb:78:35:78:4c:71:a8:8a:56:3c:54:e0:d4:3a:23: 5f:1b:42:3d:6b:31:be:6f:d4:aa:c8:ad:12:e9:d9:dd:d4:ef: 93:ca:2c:67:69:4f:3a:fa:3b:e5:5c:22:ba:7a:5f:a8:21:ef: a9:12:29:49:5a:a2:04:97:57:8c:54:cb:8d:3d:fb:1f:22:c9: a2:91:d7:49:4e:eb:05:3a:92:fc:1a:c4:2b:3f:80:c3:02:c6: 1c:ff:8d:ea:ad:82:60:b5:e6:90:4b:ba:df:ae:85:80:82:19: f1:89:e7:c6:52:f7:3d:62:53:bf:69:43:c1:1e:ad:04:8d:69: cb:37:2b:21:53:7e:f8:55:0e:6d:59:6d:80:4a:88:ff:88:14: ea:5f:66:01:6d:86:35:8c:b2:c8:f5:11:9a:13:ee:d5:2e:90: d2:7d:a5:cb:b9:7c:fa:33:a0:5c:a4:8b:d3:fb:42:05:ae:8f: 30:81:78:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxQjcxMTAvBgNVBAUTKEU0NzEzQzFCOUQ3NTc1OTI5NUFGNjRDREZCQTYyQjcw REI5QTA1MzcwHhcNMjUxMTA0MTYxMjAwWhcNMjUxMTExMTYxMjAwWjAYMRYwFAYD VQQDEw02OTBhMjVkMC0zMTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IkVVIAHBt2M3KukrQS7lOMGjprC1DhWFyGwtUO43MnnTHt2JxoY/qAdDhZX FTb6OKr5fowWP3PuwZKNYc17QuKaSxX+AByL+RMUqu++vq/IenTWJhIWhPLONcct fZ/y8t9F3Xdqt0/a1qsj/ZUmvPBMYzeoLPj0ZIHRVv0FWS2zrbdxg9ftS0sdR2jE xgR2ylVzA2JVXHCds0zsGXgCOy4hrwI1hDhQab/T8khhdXakv2rBxG7Mr+7/D9/R yWuw5NSZJdgXGfgZnCyuTo3nAybuLGP0aMew+mkvzRsMCRCmk42dwzsUXKL/GFU3 RcGC/FBsklmFMl6uEAa0SKmYdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDETOs4p kU2+oeO3SZvVsUswHdGmMB8GA1UdIwQYMBaAFORxPBuddXWSla9kzfumK3DbmgU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjFCNy81RkExRUQzMDlF RjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRaS1ZyMlROLTZZcmNOdWFC VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVIRThHNTExZFpLVnIyVE4tNllyY051YUJUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjFCNy81RkExRUQzMDlFRjAxMUU2ODExMDI3MzNDNEY5QUUwMi81SEU4RzUxMWRa S1ZyMlROLTZZcmNOdWFCVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAr2B5by8KAIwduPN+E3Ax8th2oyBv+SGZLXT2dAcqWOUSDD3/r6xAi diToAUkeVEyJQY+3ELpmNE2Dsxcj9dxikkqTL31nHVvewDPLeDV4THGoilY8VODU OiNfG0I9azG+b9SqyK0S6dnd1O+TyixnaU86+jvlXCK6el+oIe+pEilJWqIEl1eM VMuNPfsfIsmikddJTusFOpL8GsQrP4DDAsYc/43qrYJgteaQS7rfroWAghnxiefG Uvc9YlO/aUPBHq0EjWnLNyshU374VQ5tWW2ASoj/iBTqX2YBbYY1jLLI9RGaE+7V LpDSfaXLuXz6M6BcpIvT+0IFro8wgXhQ -----END CERTIFICATE-----Generated at Wed Nov 5 10:06:29 2025 by rpki-client