$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft File: 5zsrW0iY5HX_6GmyTTSFzsh90Us.mft (raw, json) Hash identifier: XC5v+8Eqhtd4cL7DeCvZlESTrRjjh3c6IiEE9utTUC8= Subject key identifier: EC:49:F7:62:D6:55:BE:5A:BD:FC:F6:84:A7:1D:CE:68:D5:73:62:C0 Authority key identifier: E7:3B:2B:5B:48:98:E4:75:FF:E8:69:B2:4D:34:85:CE:C8:7D:D1:4B Certificate issuer: /CN=A9181C93/serialNumber=E73B2B5B4898E475FFE869B24D3485CEC87DD14B Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft Manifest number: 018A Signing time: Wed 05 Nov 2025 03:43:09 +0000 Manifest this update: Wed 05 Nov 2025 03:43:08 +0000 Manifest next update: Wed 12 Nov 2025 03:43:08 +0000 Files and hashes: 1: 5zsrW0iY5HX_6GmyTTSFzsh90Us.crl (hash: sEribjt40xuqfeGJ9nOShT0+mQCX656fmJ8w9+g59Gc=) 2: A2ED9CA2619D11EE8699DD20C4F9AE02.roa (hash: WdXsExRUw+f/GUR+R+z7/tv+R2Ge9Z2Or4/eLH99sPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.crl rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181C93, serialNumber=E73B2B5B4898E475FFE869B24D3485CEC87DD14B Validity Not Before: Nov 5 03:43:08 2025 GMT Not After : Nov 12 03:43:08 2025 GMT Subject: CN=690ac7cd-0a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c6:83:10:c5:6a:64:27:85:fb:38:89:28:45: 9e:dc:cc:1a:ae:e4:04:62:96:6a:22:b1:26:85:36: bd:e8:d6:1b:14:8e:89:0b:13:c5:cf:8a:12:4b:96: 46:b6:2e:20:0b:5c:a4:9f:5a:99:2c:e1:76:03:98: ed:82:38:53:17:1b:56:a6:98:6e:ef:72:4e:2c:65: 1b:47:9b:4b:10:29:26:a1:05:fd:b1:01:71:d4:71: 08:47:19:27:34:7c:04:f1:5b:1b:7b:15:79:1f:97: 4c:ad:2e:05:ee:e1:9a:b4:7d:6b:21:1b:8f:bd:dd: 7b:63:b4:63:9d:a7:80:84:60:a2:80:2a:51:7f:e9: 3b:ae:b8:c3:c8:1e:29:9d:f1:48:03:13:4f:e8:c1: 27:f2:d8:4c:2e:1f:8d:41:b3:8c:24:81:3c:12:b5: 28:a3:32:cf:f7:2a:27:9d:9f:6e:35:d0:95:fd:29: f4:c4:fb:73:cf:3c:9f:76:74:ba:9f:58:eb:dc:00: e7:87:25:f4:09:13:47:1d:42:88:44:9e:6b:6c:55: f9:d4:05:b5:26:aa:0b:f2:99:12:84:7b:7d:5a:8e: 80:59:f4:1c:40:fa:23:98:57:43:ff:02:c5:bc:e7: 70:c0:83:1f:e7:98:82:3d:d4:69:93:fe:fd:e0:5c: 81:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:49:F7:62:D6:55:BE:5A:BD:FC:F6:84:A7:1D:CE:68:D5:73:62:C0 X509v3 Authority Key Identifier: keyid:E7:3B:2B:5B:48:98:E4:75:FF:E8:69:B2:4D:34:85:CE:C8:7D:D1:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zsrW0iY5HX_6GmyTTSFzsh90Us.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C93/6D0F640E619711EEA62A3676C4F9AE02/5zsrW0iY5HX_6GmyTTSFzsh90Us.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:62:d7:38:53:f7:ee:97:76:31:59:27:09:67:88:75:48:85: 86:14:83:e7:9a:92:fa:b1:c3:4b:d6:1d:46:f9:b8:6d:fa:59: 50:1c:06:06:f7:5a:aa:15:0a:58:a3:ca:67:0c:2c:8a:08:18: f9:44:40:1b:b4:83:d3:40:07:7c:1c:03:ba:40:bf:bf:f2:6a: cc:f5:41:70:2c:c0:cb:a4:2e:ec:e8:a4:03:e2:7e:f2:18:13: 0a:62:92:3b:52:27:7c:d2:9f:45:e1:23:c7:9d:1d:b6:c8:76: 4e:e7:71:5c:4c:83:a8:70:6b:8b:2d:cf:31:66:dd:d1:fa:30: ab:a1:1a:c6:23:8e:8a:5d:78:a6:1a:bc:a5:06:85:5c:d7:8a: 66:99:e5:9a:21:ea:38:f7:75:3d:e5:02:91:00:59:69:6b:da: be:26:06:1e:92:76:8e:92:25:07:6d:97:4e:20:4a:a5:16:8b: fe:92:81:3a:d5:f9:35:9c:9d:09:cb:62:5c:25:74:64:87:20: dc:8e:78:0c:a6:64:73:ba:85:b5:e9:96:b3:cb:d6:c9:ce:bd: 01:5d:58:ca:dc:6d:43:2a:8d:11:14:85:3c:3d:39:a3:f9:46: 21:59:1b:24:18:16:e9:d6:36:90:78:38:e2:c7:c8:0c:01:dd: bc:59:f4:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFDOTMxMTAvBgNVBAUTKEU3M0IyQjVCNDg5OEU0NzVGRkU4NjlCMjREMzQ4NUNF Qzg3REQxNEIwHhcNMjUxMTA1MDM0MzA4WhcNMjUxMTEyMDM0MzA4WjAYMRYwFAYD VQQDEw02OTBhYzdjZC0wYTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1caDEMVqZCeF+ziJKEWe3MwaruQEYpZqIrEmhTa96NYbFI6JCxPFz4oSS5ZG ti4gC1ykn1qZLOF2A5jtgjhTFxtWpphu73JOLGUbR5tLECkmoQX9sQFx1HEIRxkn NHwE8VsbexV5H5dMrS4F7uGatH1rIRuPvd17Y7RjnaeAhGCigCpRf+k7rrjDyB4p nfFIAxNP6MEn8thMLh+NQbOMJIE8ErUoozLP9yonnZ9uNdCV/Sn0xPtzzzyfdnS6 n1jr3ADnhyX0CRNHHUKIRJ5rbFX51AW1JqoL8pkShHt9Wo6AWfQcQPojmFdD/wLF vOdwwIMf55iCPdRpk/794FyBRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxJ92LW Vb5avfz2hKcdzmjVc2LAMB8GA1UdIwQYMBaAFOc7K1tImOR1/+hpsk00hc7IfdFL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUM5My82RDBGNjQwRTYx OTcxMUVFQTYyQTM2NzZDNEY5QUUwMi81enNyVzBpWTVIWF82R215VFRTRnpzaDkw VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV6c3JXMGlZNUhYXzZHbXlUVFNGenNoOTBVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUM5My82RDBGNjQwRTYxOTcxMUVFQTYyQTM2NzZDNEY5QUUwMi81enNyVzBpWTVI WF82R215VFRTRnpzaDkwVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxYtc4U/ful3YxWScJZ4h1SIWGFIPnmpL6scNL1h1G+bht+llQHAYG 91qqFQpYo8pnDCyKCBj5REAbtIPTQAd8HAO6QL+/8mrM9UFwLMDLpC7s6KQD4n7y GBMKYpI7Uid80p9F4SPHnR22yHZO53FcTIOocGuLLc8xZt3R+jCroRrGI46KXXim GrylBoVc14pmmeWaIeo493U95QKRAFlpa9q+JgYeknaOkiUHbZdOIEqlFov+koE6 1fk1nJ0Jy2JcJXRkhyDcjngMpmRzuoW16Zazy9bJzr0BXVjK3G1DKo0RFIU8PTmj +UYhWRskGBbp1jaQeDjix8gMAd28WfT7 -----END CERTIFICATE-----Generated at Wed Nov 5 19:47:02 2025 by rpki-client