$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft File: o5hxRib4es6-X2_QHlBwGRWqfRU.mft (raw, json) Hash identifier: ZCpG510GI8bdiNo5ePeWJrCZztHiZF7OPh6XBAEbt5k= Subject key identifier: 7A:66:85:32:F3:5D:D6:FD:B8:C5:DA:04:9F:BB:4B:CE:C5:4A:A0:84 Authority key identifier: A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15 Certificate issuer: /CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15 Certificate serial: C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft Manifest number: C6 Signing time: Wed 05 Nov 2025 05:58:31 +0000 Manifest this update: Wed 05 Nov 2025 05:58:31 +0000 Manifest next update: Wed 12 Nov 2025 05:58:31 +0000 Files and hashes: 1: o5hxRib4es6-X2_QHlBwGRWqfRU.crl (hash: 8oWO5vEgocDuKvBeXgBs3tNTjNJhBAb8DQmdHpNybrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827C5, serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15 Validity Not Before: Nov 5 05:58:31 2025 GMT Not After : Nov 12 05:58:31 2025 GMT Subject: CN=690ae787-be86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ae:ca:7a:25:4b:07:7b:1b:b5:37:45:ba:5f: bb:8f:dc:4d:be:f5:67:a2:42:51:6e:1b:fa:ee:e9: 85:ce:47:ca:0b:35:2b:4a:f7:4c:02:13:fd:b4:a3: c5:2f:f2:d4:4d:86:b3:f9:56:f8:c7:9d:ea:71:9b: 47:6f:fe:77:1f:1b:07:72:ec:61:8f:a9:fe:46:c2: 4c:67:be:fb:b8:2f:a8:83:00:3c:2d:ea:8e:bb:ac: b4:b1:c2:04:64:8c:5a:82:35:33:3a:1c:0d:d9:f9: 68:b8:25:a3:c3:6d:f7:9c:e8:40:82:e1:ac:14:b1: 70:4d:4c:a0:c2:d8:70:ca:87:a4:c4:85:5b:b4:b9: 35:15:e7:4b:58:4e:6f:83:9b:fa:6f:59:3e:fe:6b: 51:46:e5:17:98:10:48:2b:31:ca:67:f4:ce:9c:20: 3e:fe:0f:1d:21:75:94:a8:1e:b0:9e:33:69:df:3d: 2a:3b:f0:0e:29:2a:fb:98:9c:36:df:4b:04:05:d1: e7:8d:a9:7b:9d:0f:bc:3b:91:4e:3d:70:ae:cf:3f: 53:a1:72:b4:d0:6c:1b:3e:37:ef:96:87:be:a8:82: 6a:28:4d:90:56:5a:10:9e:92:91:a9:46:39:98:7b: cb:de:1b:85:56:7d:dd:83:d1:1f:aa:fd:3b:6d:62: 37:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:66:85:32:F3:5D:D6:FD:B8:C5:DA:04:9F:BB:4B:CE:C5:4A:A0:84 X509v3 Authority Key Identifier: keyid:A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:8d:86:26:fd:3c:ab:0d:f5:9f:7d:a9:d4:2c:de:d4:37:dc: f0:7c:67:40:95:eb:14:0a:08:b9:39:6a:98:e9:79:20:60:20: 51:d8:35:8f:f1:e8:4b:ed:c3:4a:bd:a2:69:ca:bc:f9:88:db: 9e:b8:7a:1e:2d:6c:8c:ed:84:27:5a:3c:24:3c:71:78:6f:e8: 3d:e5:67:30:c2:90:94:a3:f1:cc:56:61:36:71:55:ac:8f:a5: 24:18:61:75:e7:f7:8f:5b:7a:39:48:01:f7:ed:ea:5b:79:1e: 8d:84:95:76:88:c1:bf:90:51:2d:61:98:1e:4d:05:74:75:f5: a9:7f:0c:77:83:9e:9f:2b:12:e8:a1:6a:41:89:34:eb:b4:fd: d4:64:c3:38:b4:e2:b3:7d:63:b6:97:f7:62:ec:a6:15:f2:2d: 3e:ca:90:6d:4f:39:73:5f:36:3f:a2:d9:9f:e6:e4:02:5b:51: e2:b6:4d:c3:d9:e2:d4:54:2f:2c:ab:50:78:cc:e4:e6:da:32: 64:07:bb:6c:80:44:f2:c2:90:16:01:10:c4:90:39:3c:44:a0: 8c:6b:ee:de:c1:53:5b:20:27:3f:b3:e3:22:c9:a8:32:cf:15: 3d:0a:26:8f:b6:53:f0:d1:16:ba:58:fb:54:87:a1:b7:e1:d5: 6f:4f:e6:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3QzUxMTAvBgNVBAUTKEEzOTg3MTQ2MjZGODdBQ0VCRTVGNkZEMDFFNTA3MDE5 MTVBQTdEMTUwHhcNMjUxMTA1MDU1ODMxWhcNMjUxMTEyMDU1ODMxWjAYMRYwFAYD VQQDEw02OTBhZTc4Ny1iZTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt67KeiVLB3sbtTdFul+7j9xNvvVnokJRbhv67umFzkfKCzUrSvdMAhP9tKPF L/LUTYaz+Vb4x53qcZtHb/53HxsHcuxhj6n+RsJMZ777uC+ogwA8LeqOu6y0scIE ZIxagjUzOhwN2flouCWjw233nOhAguGsFLFwTUygwthwyoekxIVbtLk1FedLWE5v g5v6b1k+/mtRRuUXmBBIKzHKZ/TOnCA+/g8dIXWUqB6wnjNp3z0qO/AOKSr7mJw2 30sEBdHnjal7nQ+8O5FOPXCuzz9ToXK00GwbPjfvloe+qIJqKE2QVloQnpKRqUY5 mHvL3huFVn3dg9Efqv07bWI3TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpmhTLz Xdb9uMXaBJ+7S87FSqCEMB8GA1UdIwQYMBaAFKOYcUYm+HrOvl9v0B5QcBkVqn0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdDNS9EOUFBQjgyQzhB RDkxMUVGOTgxQzgyODNDNEY5QUUwMi9vNWh4UmliNGVzNi1YMl9RSGxCd0dSV3Fm UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL281aHhSaWI0ZXM2LVgyX1FIbEJ3R1JXcWZSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjdDNS9EOUFBQjgyQzhBRDkxMUVGOTgxQzgyODNDNEY5QUUwMi9vNWh4UmliNGVz Ni1YMl9RSGxCd0dSV3FmUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJjYYm/TyrDfWffanULN7UN9zwfGdAlesUCgi5OWqY6XkgYCBR2DWP 8ehL7cNKvaJpyrz5iNueuHoeLWyM7YQnWjwkPHF4b+g95WcwwpCUo/HMVmE2cVWs j6UkGGF15/ePW3o5SAH37epbeR6NhJV2iMG/kFEtYZgeTQV0dfWpfwx3g56fKxLo oWpBiTTrtP3UZMM4tOKzfWO2l/di7KYV8i0+ypBtTzlzXzY/otmf5uQCW1Hitk3D 2eLUVC8sq1B4zOTm2jJkB7tsgETywpAWARDEkDk8RKCMa+7ewVNbICc/s+Miyagy zxU9CiaPtlPw0Ra6WPtUh6G34dVvT+ZC -----END CERTIFICATE-----Generated at Wed Nov 5 15:32:58 2025 by rpki-client