$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft File: u5dqWY5eywXjf6wApbeIjlf1HFI.mft (raw, json) Hash identifier: KZBGO6m77tC/sfo7tMCVRJo4590p3SziVcUotTfhbKw= Subject key identifier: 38:69:14:FB:ED:4D:84:2D:02:38:65:A9:96:D9:CF:A7:C0:42:4B:31 Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 Certificate issuer: /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Certificate serial: 1952 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft Manifest number: 1919 Signing time: Tue 04 Nov 2025 16:33:44 +0000 Manifest this update: Tue 04 Nov 2025 16:33:43 +0000 Manifest next update: Tue 11 Nov 2025 16:33:43 +0000 Files and hashes: 1: u5dqWY5eywXjf6wApbeIjlf1HFI.crl (hash: RgY+ek6UTHsjev7n8cB/WSqufg70zOlKlUpr2OEhjw8=) 2: 1295ACC8511811F0BC16C641C4F9AE02.roa (hash: R8XRFOIDeyA0zkEPG1aEWumISmv4uchl7mAPbuAAI+Q=) 3: 4D12993446CC11F08EB9471AC4F9AE02.roa (hash: CSY6qOROtmw30A6xQccy8vmsJfZI5dJ5MZbhg1cI3+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6482 (0x1952) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Validity Not Before: Nov 4 16:33:43 2025 GMT Not After : Nov 11 16:33:43 2025 GMT Subject: CN=690a2ae8-721e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:99:a8:7f:50:0e:3f:40:63:e2:6e:ae:a4:8f: d9:76:d6:f8:b7:8d:0f:ce:f5:aa:f5:35:be:f8:45: b5:1b:d7:d6:56:6b:10:3c:e5:0d:10:a8:80:cd:18: 91:ca:28:7d:48:11:40:93:da:d8:ec:51:ce:c8:e7: 39:b7:de:25:e9:a1:52:d6:84:2a:40:95:1e:24:9c: 5d:cc:03:7b:64:bd:6f:18:e9:3a:97:cf:59:17:ee: 2e:bb:8f:e4:e6:b0:73:f6:96:78:b8:09:86:28:46: 75:54:06:08:a2:37:22:80:00:52:5e:ab:8e:b0:b6: 79:63:db:54:4e:31:ed:80:df:92:23:f6:3c:e2:82: d4:91:b2:1e:24:74:7d:9d:8d:90:d1:21:62:50:db: 6b:cb:23:b6:3c:48:d7:6e:5a:96:50:75:49:71:d4: 5e:4a:48:4e:c3:76:77:26:7d:a6:7b:0d:1e:37:bc: db:3e:26:60:50:ad:9f:8e:34:de:71:9d:95:d4:d8: 7d:b7:c6:ce:a2:ff:76:e0:cf:33:1a:26:db:4d:69: 18:cb:25:b5:ff:26:cc:e6:7a:58:88:34:d4:f2:76: dd:88:85:67:0d:fa:fc:cf:83:7d:61:a7:9d:a1:87: 13:69:94:1f:38:26:0a:12:97:6d:29:ef:d7:f0:a3: 12:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:69:14:FB:ED:4D:84:2D:02:38:65:A9:96:D9:CF:A7:C0:42:4B:31 X509v3 Authority Key Identifier: keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:33:f5:bc:9c:14:d2:e3:70:19:c9:d2:cb:20:67:7e:ef:85: eb:a5:58:1e:9c:f7:87:a0:4c:c4:ef:73:76:47:13:52:0c:63: 76:0f:eb:c8:ec:e7:fa:82:d7:48:02:6f:13:32:9c:eb:46:3a: 0b:0d:17:e4:21:2a:59:0c:ed:18:4d:a7:89:fc:37:69:61:3c: 6c:3e:b7:ed:4c:b9:d3:35:cb:2f:aa:86:d5:1f:ad:51:5e:03: 99:f6:b2:0a:6e:f0:a2:e9:99:c5:d6:b5:52:62:8d:eb:b5:ad: f4:9d:e1:ec:5f:ec:13:97:2c:f6:9b:16:c3:58:e2:c0:93:46: 69:89:6f:db:bd:b1:d4:18:73:2f:0e:a2:82:45:d2:f9:b2:45: 64:2f:d7:01:c1:ba:db:3f:85:39:7f:e6:b6:35:6b:ac:4e:18: 32:ee:3b:3b:08:f8:17:df:50:e6:a8:9a:93:12:ab:76:81:a1: 56:76:9f:5e:f4:a8:16:b8:36:0f:e9:ad:fe:96:9f:e0:4d:36: 62:e0:f1:6d:1e:ac:65:ec:b8:1d:5f:b8:71:c8:be:39:22:ba: aa:54:d5:0c:69:c1:68:7c:28:27:c8:63:4b:15:d0:2a:65:d6: c0:6c:06:97:6d:b4:39:04:76:8d:79:01:58:78:12:f9:c6:e2: 8a:1e:7d:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwRTMxMTAvBgNVBAUTKEJCOTc2QTU5OEU1RUNCMDVFMzdGQUMwMEE1Qjc4ODhF NTdGNTFDNTIwHhcNMjUxMTA0MTYzMzQzWhcNMjUxMTExMTYzMzQzWjAYMRYwFAYD VQQDEw02OTBhMmFlOC03MjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Zmof1AOP0Bj4m6upI/Zdtb4t40PzvWq9TW++EW1G9fWVmsQPOUNEKiAzRiR yih9SBFAk9rY7FHOyOc5t94l6aFS1oQqQJUeJJxdzAN7ZL1vGOk6l89ZF+4uu4/k 5rBz9pZ4uAmGKEZ1VAYIojcigABSXquOsLZ5Y9tUTjHtgN+SI/Y84oLUkbIeJHR9 nY2Q0SFiUNtryyO2PEjXblqWUHVJcdReSkhOw3Z3Jn2mew0eN7zbPiZgUK2fjjTe cZ2V1Nh9t8bOov924M8zGibbTWkYyyW1/ybM5npYiDTU8nbdiIVnDfr8z4N9Yaed oYcTaZQfOCYKEpdtKe/X8KMScQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhpFPvt TYQtAjhlqZbZz6fAQksxMB8GA1UdIwQYMBaAFLuXalmOXssF43+sAKW3iI5X9RxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTBFMy9EQTE4QjE4NDlB NDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3WGpmNndBcGJlSWpsZjFI RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1ZHFXWTVleXdYamY2d0FwYmVJamxmMUhGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTBFMy9EQTE4QjE4NDlBNDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3 WGpmNndBcGJlSWpsZjFIRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTM/W8nBTS43AZydLLIGd+74XrpVgenPeHoEzE73N2RxNSDGN2D+vI 7Of6gtdIAm8TMpzrRjoLDRfkISpZDO0YTaeJ/DdpYTxsPrftTLnTNcsvqobVH61R XgOZ9rIKbvCi6ZnF1rVSYo3rta30neHsX+wTlyz2mxbDWOLAk0ZpiW/bvbHUGHMv DqKCRdL5skVkL9cBwbrbP4U5f+a2NWusThgy7js7CPgX31DmqJqTEqt2gaFWdp9e 9KgWuDYP6a3+lp/gTTZi4PFtHqxl7LgdX7hxyL45IrqqVNUMacFofCgnyGNLFdAq ZdbAbAaXbbQ5BHaNeQFYeBL5xuKKHn1g -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:31 2025 by rpki-client