$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft File: 5C5CACqDeHpnr4y5qFH5OZdGwTI.mft (raw, json) Hash identifier: ZbSxxScis/PUfrshKfwtWI5LgR4Ck7JxMhFMqVB31kg= Subject key identifier: 88:21:D7:58:42:A2:FD:7B:CD:D6:81:EC:FB:4E:6E:CD:35:A8:70:DC Authority key identifier: E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32 Certificate issuer: /CN=A91566DC/serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft Manifest number: CA Signing time: Wed 05 Nov 2025 05:54:24 +0000 Manifest this update: Wed 05 Nov 2025 05:54:23 +0000 Manifest next update: Wed 12 Nov 2025 05:54:23 +0000 Files and hashes: 1: 5C5CACqDeHpnr4y5qFH5OZdGwTI.crl (hash: kNwN+Ez5K4LPI5SwIHnd2sjC6+o/InHkMjc1W6rWu1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91566DC, serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132 Validity Not Before: Nov 5 05:54:23 2025 GMT Not After : Nov 12 05:54:23 2025 GMT Subject: CN=690ae690-d261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9d:0b:b3:69:23:67:96:da:5e:f8:b3:5c:02: e0:90:37:aa:13:22:c8:01:c7:10:b8:e9:b8:36:28: 41:5f:57:56:b9:57:66:40:c6:31:b1:0c:57:d4:25: b8:61:d7:94:8e:49:82:cb:b5:f3:4e:01:05:73:fc: 27:8f:1c:c5:6f:ad:85:dc:0a:a7:67:e8:bb:07:53: 8d:d5:75:c2:b1:8d:81:5d:2c:59:cd:79:68:35:be: 1d:e3:93:c3:7d:4e:d8:27:30:a9:19:c9:e2:d8:ef: 0c:27:d5:3c:ba:91:b9:cb:87:cb:77:02:a7:24:b4: 93:4d:64:cd:8f:82:17:bd:fd:73:ff:74:57:57:b2: 9d:6a:39:5d:3d:39:a7:72:1c:bd:bc:0e:ae:2b:c6: 9d:49:7d:b5:69:8b:d8:c3:a6:ff:6a:20:e6:62:eb: dd:fa:2f:a8:ad:59:13:6a:68:ba:ae:c8:67:83:58: 01:a5:b9:28:fd:e5:aa:bd:3d:5f:2b:87:b4:89:b9: 80:97:be:11:42:f1:39:05:4e:9d:2f:a2:14:f7:0c: c0:fd:88:fd:d5:5f:da:2b:54:90:2f:ed:2a:ee:91: ec:bb:23:a7:b2:a5:4a:09:59:c9:b5:39:44:30:f5: 13:bd:30:59:a6:17:3a:d3:3a:1c:e3:4c:65:c8:4b: a4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:21:D7:58:42:A2:FD:7B:CD:D6:81:EC:FB:4E:6E:CD:35:A8:70:DC X509v3 Authority Key Identifier: keyid:E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:b6:d4:87:73:78:1f:10:b7:6f:8b:96:16:4c:e4:58:2e:ba: a6:4a:c5:7c:dd:e2:c7:4e:3e:f5:5d:fc:70:f6:20:37:e8:fd: 7b:73:4d:40:04:34:b4:4e:55:6f:1e:ba:a9:dd:97:5d:86:f1: 55:39:e2:82:28:90:02:f0:1b:fb:94:25:69:da:3c:1a:d5:a4: 6f:04:a7:cd:44:18:e8:2a:a4:15:e5:93:d9:d2:69:bc:26:9c: 7d:b7:d8:80:9d:9d:d6:43:3f:44:ef:6c:60:f7:bd:aa:f8:b1: d3:69:55:23:d3:a1:80:e1:96:2b:be:5f:8e:d8:5f:cd:98:8c: f4:b4:58:30:b3:d0:4e:f6:f2:f1:2a:bf:6e:05:05:19:fc:d1: 8f:9e:21:a7:1a:78:a8:ea:62:2a:53:71:2a:70:01:2a:f1:6e: a5:60:05:53:96:37:2b:7d:46:d4:1f:15:51:bf:42:41:42:18: 5f:8a:ac:4b:20:09:89:78:f9:00:53:bc:e8:9e:a0:eb:f3:b4: 86:c6:9e:58:4b:5f:13:e5:e5:1b:d8:07:b1:b5:63:c7:ed:b6: dc:eb:6f:54:fc:bb:e1:26:f8:4d:b8:11:14:3c:02:e3:5c:34: 37:23:c3:2d:1e:05:35:db:95:7f:c3:5d:e3:52:a9:45:61:21: 15:b6:f0:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY2REMxMTAvBgNVBAUTKEU0MkU0MjAwMkE4Mzc4N0E2N0FGOENCOUE4NTFGOTM5 OTc0NkMxMzIwHhcNMjUxMTA1MDU1NDIzWhcNMjUxMTEyMDU1NDIzWjAYMRYwFAYD VQQDEw02OTBhZTY5MC1kMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy50Ls2kjZ5baXvizXALgkDeqEyLIAccQuOm4NihBX1dWuVdmQMYxsQxX1CW4 YdeUjkmCy7XzTgEFc/wnjxzFb62F3AqnZ+i7B1ON1XXCsY2BXSxZzXloNb4d45PD fU7YJzCpGcni2O8MJ9U8upG5y4fLdwKnJLSTTWTNj4IXvf1z/3RXV7KdajldPTmn chy9vA6uK8adSX21aYvYw6b/aiDmYuvd+i+orVkTami6rshng1gBpbko/eWqvT1f K4e0ibmAl74RQvE5BU6dL6IU9wzA/Yj91V/aK1SQL+0q7pHsuyOnsqVKCVnJtTlE MPUTvTBZphc60zoc40xlyEukPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgh11hC ov17zdaB7PtObs01qHDcMB8GA1UdIwQYMBaAFOQuQgAqg3h6Z6+MuahR+TmXRsEy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjZEQy84MENFMjc4QTg0 NkIxMUVGOUM0MjREM0FDNEY5QUUwMi81QzVDQUNxRGVIcG5yNHk1cUZINU9aZEd3 VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDNUNBQ3FEZUhwbnI0eTVxRkg1T1pkR3dUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjZEQy84MENFMjc4QTg0NkIxMUVGOUM0MjREM0FDNEY5QUUwMi81QzVDQUNxRGVI cG5yNHk1cUZINU9aZEd3VEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWttSHc3gfELdvi5YWTORYLrqmSsV83eLHTj71Xfxw9iA36P17c01A BDS0TlVvHrqp3ZddhvFVOeKCKJAC8Bv7lCVp2jwa1aRvBKfNRBjoKqQV5ZPZ0mm8 Jpx9t9iAnZ3WQz9E72xg972q+LHTaVUj06GA4ZYrvl+O2F/NmIz0tFgws9BO9vLx Kr9uBQUZ/NGPniGnGnio6mIqU3EqcAEq8W6lYAVTljcrfUbUHxVRv0JBQhhfiqxL IAmJePkAU7zonqDr87SGxp5YS18T5eUb2AextWPH7bbc629U/LvhJvhNuBEUPALj XDQ3I8MtHgU125V/w13jUqlFYSEVtvDH -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:20 2025 by rpki-client