$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft File: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json) Hash identifier: gp/fXWoin5Cdg8i9+Eg5bSTSosAMDxlBACVZS8mlmOo= Subject key identifier: BA:4B:21:83:FD:83:89:5F:F9:B0:D8:4C:D9:52:E6:50:CF:E2:06:E0 Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft Manifest number: 0113 Signing time: Wed 05 Nov 2025 05:05:32 +0000 Manifest this update: Wed 05 Nov 2025 05:05:31 +0000 Manifest next update: Wed 12 Nov 2025 05:05:31 +0000 Files and hashes: 1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: qg0Dd6BM2WzJHe4g4lEWpRGif2LSZce4W2FUBFH1X4E=) 2: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: CpFFYzKvaiG5h+2sUf464A2//gzHqQgpH0EvUR1TKwU=) 3: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: 51G/atnUP8WE3vN2KzPoIXBsyS6vS2RXr0QbqdKbjAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Validity Not Before: Nov 5 05:05:31 2025 GMT Not After : Nov 12 05:05:31 2025 GMT Subject: CN=690adb1c-ee82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:03:3e:30:81:17:7c:84:64:7e:7a:e1:82:30: 72:ce:7b:98:71:d8:c5:96:53:d6:9b:c5:40:d2:fa: b0:3e:50:be:80:0b:fe:d9:49:4f:00:54:19:27:81: 7c:73:cd:9f:42:08:ab:a9:08:9a:f9:99:61:f7:48: 9f:52:ee:03:78:08:fb:47:f9:cb:1f:10:cd:94:c4: 7c:dd:e7:79:14:41:65:54:55:91:c0:6d:b1:e9:df: 87:db:2b:05:d0:c8:13:d0:ca:79:6d:f9:e3:02:19: c5:f5:d7:b0:58:3e:0c:2c:06:18:52:b6:8f:50:ac: a6:65:91:16:cb:99:be:fd:72:29:9f:90:be:78:29: 6d:ca:a0:ea:5c:19:eb:f3:86:fc:90:9a:3b:bb:30: 59:75:0e:00:44:73:ad:0e:e6:d4:0b:24:32:27:b9: e4:18:85:83:75:ce:b9:b8:5f:bb:67:94:7e:40:6a: 67:e1:78:de:26:de:1c:d8:0c:cf:89:ae:53:4e:c5: 96:26:90:c4:2c:93:0a:19:56:92:54:9b:2f:95:2b: 43:25:c1:7b:ba:0c:75:94:ce:57:c2:68:a1:9d:84: ca:41:05:55:bf:82:48:a0:36:9e:36:89:c5:cf:a1: 72:72:e1:31:b6:ec:ff:41:9f:45:f1:bd:70:53:b2: 32:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4B:21:83:FD:83:89:5F:F9:B0:D8:4C:D9:52:E6:50:CF:E2:06:E0 X509v3 Authority Key Identifier: keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:c8:0c:02:f5:79:49:2c:a5:ba:0b:f3:7e:ec:c7:6d:10:cd: 00:cc:7f:64:bd:fa:cc:c0:d5:35:e7:d0:15:46:74:dd:58:f5: 79:cd:e0:b9:2c:79:cb:87:78:a7:91:f0:65:ba:4f:56:ea:2a: 1c:4d:96:19:6a:21:29:cf:e3:71:14:31:eb:99:32:e3:8c:74: de:d3:d8:26:37:a6:4a:63:81:74:94:f2:c9:04:57:1a:60:41: 2c:2a:72:d4:f2:64:2a:5c:d2:1f:7a:fc:2c:43:24:97:fa:67: 9b:b8:e9:f7:fd:72:f2:2f:94:94:9d:8f:de:5f:c8:df:31:c1: 24:69:8e:fe:88:1c:1d:60:12:0f:03:f5:61:45:31:00:77:30: c0:e9:0b:18:ac:d3:ae:39:b5:18:7e:c5:00:c3:b8:3b:8f:ae: 6f:8f:cf:24:1d:c7:1c:72:2c:57:32:63:2b:bd:0a:26:82:5a: 5e:c1:df:b9:fc:14:67:2a:4c:ee:13:d5:2e:71:63:6b:f4:4f: f8:46:19:8c:65:ac:27:f3:2f:1d:98:32:61:c4:72:98:cf:4e: f1:90:3b:5c:18:48:8f:83:b2:27:52:a8:e9:9e:26:66:80:c5: 92:0f:41:d8:fb:ae:90:74:10:76:58:f2:91:ea:b9:3f:29:eb: df:86:73:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4RUMxMTAvBgNVBAUTKEU1OEYwRjUyQTREMkQxREU0NDY3NUFDQTE3NTU3QkY5 ODJFQzdENzkwHhcNMjUxMTA1MDUwNTMxWhcNMjUxMTEyMDUwNTMxWjAYMRYwFAYD VQQDEw02OTBhZGIxYy1lZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwM+MIEXfIRkfnrhgjByznuYcdjFllPWm8VA0vqwPlC+gAv+2UlPAFQZJ4F8 c82fQgirqQia+Zlh90ifUu4DeAj7R/nLHxDNlMR83ed5FEFlVFWRwG2x6d+H2ysF 0MgT0Mp5bfnjAhnF9dewWD4MLAYYUraPUKymZZEWy5m+/XIpn5C+eCltyqDqXBnr 84b8kJo7uzBZdQ4ARHOtDubUCyQyJ7nkGIWDdc65uF+7Z5R+QGpn4XjeJt4c2AzP ia5TTsWWJpDELJMKGVaSVJsvlStDJcF7ugx1lM5XwmihnYTKQQVVv4JIoDaeNonF z6FycuExtuz/QZ9F8b1wU7IyzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpLIYP9 g4lf+bDYTNlS5lDP4gbgMB8GA1UdIwQYMBaAFOWPD1Kk0tHeRGdayhdVe/mC7H15 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8yMUU1QTMwQTFF RTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBkNUVaMXJLRjFWNy1ZTHNm WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZOFBVcVRTMGQ1RVoxcktGMVY3LVlMc2ZYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OThFQy8yMUU1QTMwQTFFRTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBk NUVaMXJLRjFWNy1ZTHNmWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwyAwC9XlJLKW6C/N+7MdtEM0AzH9kvfrMwNU159AVRnTdWPV5zeC5 LHnLh3inkfBluk9W6iocTZYZaiEpz+NxFDHrmTLjjHTe09gmN6ZKY4F0lPLJBFca YEEsKnLU8mQqXNIfevwsQySX+mebuOn3/XLyL5SUnY/eX8jfMcEkaY7+iBwdYBIP A/VhRTEAdzDA6QsYrNOuObUYfsUAw7g7j65vj88kHccccixXMmMrvQomglpewd+5 /BRnKkzuE9UucWNr9E/4RhmMZawn8y8dmDJhxHKYz07xkDtcGEiPg7InUqjpniZm gMWSD0HY+66QdBB2WPKR6rk/KevfhnOr -----END CERTIFICATE-----Generated at Wed Nov 5 07:58:51 2025 by rpki-client