$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft File: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json) Hash identifier: AXoDYuhHe3iBmcjjAFE9X5W32Wjv1X5rEL1ZVftGRvs= Subject key identifier: 80:2B:E3:9A:BC:14:24:25:C0:4E:99:40:64:11:8B:10:8B:2F:7A:B1 Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft Manifest number: E0 Signing time: Mon 03 Nov 2025 05:31:29 +0000 Manifest this update: Mon 03 Nov 2025 05:31:28 +0000 Manifest next update: Mon 10 Nov 2025 05:31:28 +0000 Files and hashes: 1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: 2JM127Qq8uTJ2J319BxfYZ0T3x8EZWUoFeJtqmxguG0=) 2: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: 4PdtbIsL2ZotyQ7lOujn962oNOjC34OWUPtAk2nb5/I=) 3: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: 8qwHnAzkWpQMSqbxW4gRTYW6uWniUVjWaHfJJJJlxJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DD8, serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Validity Not Before: Nov 3 05:31:28 2025 GMT Not After : Nov 10 05:31:28 2025 GMT Subject: CN=69083e30-6893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:57:e8:1a:3f:86:6e:cf:55:b7:20:5e:c4:7c: 75:e6:49:a3:20:d4:1c:66:ab:58:85:74:5f:7c:64: f5:81:06:fa:3a:24:3e:c3:34:73:4b:35:51:6d:65: 99:60:65:ca:59:2b:99:64:c8:20:f7:a4:d3:40:97: de:d8:bd:d6:27:43:de:ae:60:bd:69:c1:9b:43:1f: 0f:74:9a:81:86:07:d9:8a:85:13:dd:03:1d:60:31: e3:23:5e:48:3a:9e:0c:7e:8b:e3:a7:03:cc:04:f1: 03:d0:64:f7:2b:c0:d1:c9:4e:7b:fc:28:1a:76:1e: c4:97:f0:10:37:a8:00:e3:3c:02:b5:36:c1:60:76: 60:33:78:24:fa:89:5f:0b:f4:0a:ff:30:72:d8:69: 1d:5b:0f:f4:98:57:46:19:d6:cf:d7:ba:f6:20:6a: d9:d2:64:76:8e:80:e2:10:02:bf:c5:3a:90:1e:78: 2c:c1:05:01:43:8e:b8:f5:15:04:04:3a:73:df:76: e2:97:d7:03:89:2d:1c:33:04:dd:0f:d8:6e:19:4e: 6e:98:62:c6:7f:3b:cf:07:eb:de:8d:7f:9e:b3:8d: 93:ca:1f:df:eb:03:41:48:62:ce:d6:cc:d0:44:9d: ad:16:c5:16:a9:df:c2:da:d6:71:c9:f9:96:72:52: 20:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2B:E3:9A:BC:14:24:25:C0:4E:99:40:64:11:8B:10:8B:2F:7A:B1 X509v3 Authority Key Identifier: keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:a3:c8:64:a9:53:62:7f:32:7b:5e:0e:55:45:63:5c:b3:1c: 55:a5:89:a4:c5:26:61:94:a1:39:b8:04:65:f6:6f:77:ff:b5: 41:9c:6a:ca:32:dd:6b:d1:63:c8:41:3f:79:fc:45:2f:73:1b: f5:f0:1c:1f:38:15:aa:67:19:a4:21:bd:bb:28:35:a1:67:d9: 8d:bd:c4:61:56:37:ee:db:97:05:98:9d:59:96:50:38:b3:0e: 9d:d0:21:bc:2e:24:ef:76:b1:73:d3:77:14:3b:a2:37:d8:c7: d6:c7:d1:c6:61:d1:ac:b6:25:5f:64:4a:e3:ae:29:13:f8:e7: 50:ed:81:6d:2d:a1:7b:99:75:7e:75:0d:33:0c:fd:0b:f7:01: 63:3d:f2:84:ee:2f:ce:13:f2:fb:36:26:a6:01:39:f5:ea:15: 50:55:53:a5:8a:cd:6a:a1:61:69:39:b3:ca:6f:86:4f:92:32: c8:99:b8:08:f3:20:32:6a:df:2f:2a:10:95:83:5c:ec:9a:eb: 9d:e0:09:7f:f6:d8:b7:13:72:44:d8:d5:b2:4c:5f:7f:21:71: 76:27:69:11:3f:e6:cf:d2:da:fb:a2:2f:a7:fc:9d:ef:54:44: 95:51:1f:63:00:61:c0:37:c7:fd:82:60:2c:5a:6d:0b:bb:be: 8c:65:3a:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBERDgxMTAvBgNVBAUTKEU2QjU0RDAyN0NFMzQ5OEJGMzVFNEQwNjVCQzQ3OEE5 MzZDMTYxNjkwHhcNMjUxMTAzMDUzMTI4WhcNMjUxMTEwMDUzMTI4WjAYMRYwFAYD VQQDEw02OTA4M2UzMC02ODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1foGj+Gbs9VtyBexHx15kmjINQcZqtYhXRffGT1gQb6OiQ+wzRzSzVRbWWZ YGXKWSuZZMgg96TTQJfe2L3WJ0PermC9acGbQx8PdJqBhgfZioUT3QMdYDHjI15I Op4MfovjpwPMBPED0GT3K8DRyU57/Cgadh7El/AQN6gA4zwCtTbBYHZgM3gk+olf C/QK/zBy2GkdWw/0mFdGGdbP17r2IGrZ0mR2joDiEAK/xTqQHngswQUBQ4649RUE BDpz33bil9cDiS0cMwTdD9huGU5umGLGfzvPB+vejX+es42Tyh/f6wNBSGLO1szQ RJ2tFsUWqd/C2tZxyfmWclIgbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIAr45q8 FCQlwE6ZQGQRixCLL3qxMB8GA1UdIwQYMBaAFOa1TQJ840mL815NBlvEeKk2wWFp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEREOC9BNjZBNzVFRTY1 QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZdnpYazBHVzhSNHFUYkJZ V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyVk5BbnpqU1l2elhrMEdXOFI0cVRiQllXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEREOC9BNjZBNzVFRTY1QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZ dnpYazBHVzhSNHFUYkJZV2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDo8hkqVNifzJ7Xg5VRWNcsxxVpYmkxSZhlKE5uARl9m93/7VBnGrK Mt1r0WPIQT95/EUvcxv18BwfOBWqZxmkIb27KDWhZ9mNvcRhVjfu25cFmJ1ZllA4 sw6d0CG8LiTvdrFz03cUO6I32MfWx9HGYdGstiVfZErjrikT+OdQ7YFtLaF7mXV+ dQ0zDP0L9wFjPfKE7i/OE/L7NiamATn16hVQVVOlis1qoWFpObPKb4ZPkjLImbgI 8yAyat8vKhCVg1zsmuud4Al/9ti3E3JE2NWyTF9/IXF2J2kRP+bP0tr7oi+n/J3v VESVUR9jAGHAN8f9gmAsWm0Lu76MZTq0 -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:11 2025 by rpki-client