$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft File: 5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft (raw, json) Hash identifier: RESLJkAqDEnxzhMEmlM7+mmVQ0riMF0BsA6vpCr1t68= Subject key identifier: F7:15:48:C5:69:76:7B:CB:84:72:52:B1:96:91:09:E5:41:E1:F3:AC Authority key identifier: E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D Certificate issuer: /CN=A9177C3F/serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft Manifest number: 32 Signing time: Wed 05 Nov 2025 07:50:10 +0000 Manifest this update: Wed 05 Nov 2025 07:50:10 +0000 Manifest next update: Wed 12 Nov 2025 07:50:10 +0000 Files and hashes: 1: 5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl (hash: IRby3rNJ6iKu0KcmQCkUqxS2RUx441i1tSE/Z651xM0=) 2: 707ABBBE73F811F0B8A9582CC4F9AE02.roa (hash: J1DqxnoENL3lRHLKjDYZRI0kV9ABA98ydy0Zc/t3Fg8=) 3: 7013EE7A73F811F0B8A9582CC4F9AE02.roa (hash: ckP5BxcHxNFbdmi2/GsSqI6AzRvAVZrOdnnQHyfARKM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177C3F, serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D Validity Not Before: Nov 5 07:50:10 2025 GMT Not After : Nov 12 07:50:10 2025 GMT Subject: CN=690b01b2-ee3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:97:00:cf:3b:b1:f0:ca:f8:a0:65:5c:1c:b6: 4b:f9:87:5e:ce:db:cb:70:6c:86:f3:c0:1c:a6:b0: 81:32:68:d4:0f:6c:e0:fc:be:08:27:48:a8:3e:34: f5:36:13:63:e7:47:0c:22:85:d3:6e:bb:d0:17:44: 7a:c7:1e:1a:86:b0:6f:c0:77:0e:c2:e2:18:30:43: c2:37:3d:c4:9c:49:e7:2e:c3:2b:e7:9e:30:80:dc: 05:ea:45:44:d7:b8:1d:ef:23:f7:cc:03:73:ce:fa: ee:8c:b9:13:c5:dd:40:19:6d:de:93:9b:a1:ef:d2: fc:76:5c:61:0c:d5:54:5c:25:14:b4:b8:6e:32:03: 26:d5:39:70:a6:49:12:17:1e:73:bd:4a:9c:2d:c0: 1d:b7:b1:2b:7d:05:3e:e0:ef:a4:10:36:91:a0:3c: 5b:6c:e6:2f:84:b5:ae:96:4d:52:a3:e8:2f:dd:8b: 9c:33:af:11:53:65:83:e1:ac:4d:3e:ed:cf:78:1d: 2b:2d:4c:bf:91:d1:7a:17:08:70:5f:49:67:e0:13: 44:4a:0a:a9:34:70:bb:35:2a:42:4d:5d:5f:ad:b3: 4d:f0:82:d5:cb:d0:ca:a3:b3:2c:2d:98:3f:7b:db: e1:25:e5:64:4a:c6:65:b6:e1:d6:79:90:c7:ee:b2: 59:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:15:48:C5:69:76:7B:CB:84:72:52:B1:96:91:09:E5:41:E1:F3:AC X509v3 Authority Key Identifier: keyid:E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:70:90:5f:45:50:55:cc:7b:f4:82:cd:51:1f:85:2a:24:23: 7e:c8:c4:52:39:0c:92:47:d1:ba:32:b1:22:84:6c:b5:8c:51: 2e:49:ea:84:cb:5b:33:af:f3:94:8a:57:fa:71:3b:d9:fa:5d: b7:2b:75:ee:a7:79:ce:ac:4a:22:29:b0:d6:1e:ab:39:04:8e: bd:09:23:fa:18:eb:66:3d:71:e5:5f:d6:52:9f:56:f0:54:a1: 56:35:26:58:50:e1:80:be:1d:6b:0d:ec:67:b9:1c:c4:bb:96: bf:3f:08:ac:4a:c4:e9:29:7d:da:58:c0:df:7f:a5:47:0f:06: eb:44:c8:99:98:a7:5b:17:07:2c:6d:72:2b:4a:a1:78:bd:88: 01:08:82:c4:d7:ff:af:59:6f:c9:81:9d:78:0e:8b:09:6c:11: 47:d8:2d:43:e1:e4:e4:49:f6:7d:2b:e5:e0:11:91:c6:2f:3b: df:03:50:ac:d4:9a:64:a8:0a:de:b6:5d:1f:2f:16:ee:65:df: 97:e7:d0:30:49:d8:ba:ca:8e:a8:ee:3f:17:f0:32:7a:67:93: e4:4b:91:e6:6e:27:53:ef:3d:b2:fb:fd:e6:6e:fb:31:b7:1f: 24:49:5b:58:01:cb:ea:5f:bd:b3:16:5c:b4:77:2f:d3:cf:23: b2:c5:63:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 N0MzRjExMC8GA1UEBRMoRTUyMTA3RjRDMURFMDY0NTNFQkQ2RTY5QjRCRjgyNDQ3 MzE2QUExRDAeFw0yNTExMDUwNzUwMTBaFw0yNTExMTIwNzUwMTBaMBgxFjAUBgNV BAMTDTY5MGIwMWIyLWVlM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFlwDPO7HwyvigZVwctkv5h17O28twbIbzwBymsIEyaNQPbOD8vggnSKg+NPU2 E2PnRwwihdNuu9AXRHrHHhqGsG/Adw7C4hgwQ8I3PcScSecuwyvnnjCA3AXqRUTX uB3vI/fMA3PO+u6MuRPF3UAZbd6Tm6Hv0vx2XGEM1VRcJRS0uG4yAybVOXCmSRIX HnO9SpwtwB23sSt9BT7g76QQNpGgPFts5i+Eta6WTVKj6C/di5wzrxFTZYPhrE0+ 7c94HSstTL+R0XoXCHBfSWfgE0RKCqk0cLs1KkJNXV+ts03wgtXL0MqjsywtmD97 2+El5WRKxmW24dZ5kMfuslllAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9xVIxWl2 e8uEclKxlpEJ5UHh86wwHwYDVR0jBBgwFoAU5SEH9MHeBkU+vW5ptL+CRHMWqh0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3QzNGL0NEQjM2QTNBNzMz MzExRjA4MzlDREM4M0M0RjlBRTAyLzVTRUg5TUhlQmtVLXZXNXB0TC1DUkhNV3Fo MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNVNFSDlNSGVCa1Utdlc1cHRMLUNSSE1XcWgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3 QzNGL0NEQjM2QTNBNzMzMzExRjA4MzlDREM4M0M0RjlBRTAyLzVTRUg5TUhlQmtV LXZXNXB0TC1DUkhNV3FoMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANhwkF9FUFXMe/SCzVEfhSokI37IxFI5DJJH0boysSKEbLWMUS5J6oTL WzOv85SKV/pxO9n6Xbcrde6nec6sSiIpsNYeqzkEjr0JI/oY62Y9ceVf1lKfVvBU oVY1JlhQ4YC+HWsN7Ge5HMS7lr8/CKxKxOkpfdpYwN9/pUcPButEyJmYp1sXByxt citKoXi9iAEIgsTX/69Zb8mBnXgOiwlsEUfYLUPh5ORJ9n0r5eARkcYvO98DUKzU mmSoCt62XR8vFu5l35fn0DBJ2LrKjqjuPxfwMnpnk+RLkeZuJ1PvPbL7/eZu+zG3 HyRJW1gBy+pfvbMWXLR3L9PPI7LFY+I= -----END CERTIFICATE-----Generated at Wed Nov 5 14:01:48 2025 by rpki-client