$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft File: b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft (raw, json) Hash identifier: 0XhP1Q5nz3CSdTg0keUxtTCPoKNts0CoYDSEMnlE2rQ= Subject key identifier: 48:E8:D9:5E:29:C5:65:7D:B8:B9:B2:90:21:FB:47:6E:51:AA:EA:42 Authority key identifier: 6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D Certificate issuer: /CN=A918D2CA/serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft Manifest number: 5A Signing time: Wed 05 Nov 2025 07:22:45 +0000 Manifest this update: Wed 05 Nov 2025 07:22:45 +0000 Manifest next update: Wed 12 Nov 2025 07:22:45 +0000 Files and hashes: 1: b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl (hash: Sqa2zRiX+GNbvFAg72VOexMeYa82YatxsXrhKYZZHyE=) 2: 8C9E2B18354711F09FCEEE25C4F9AE02.roa (hash: Rm2y9XYNOuLaJLPo5EgOIcrmYm6wYWaPwijgwTBKrVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D2CA, serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D Validity Not Before: Nov 5 07:22:45 2025 GMT Not After : Nov 12 07:22:45 2025 GMT Subject: CN=690afb45-542c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:98:c1:54:08:ef:e9:4a:19:4e:c8:ea:a7:5e: 94:0b:e8:d3:5a:6b:5b:ba:62:43:33:ae:bf:5c:f9: 5f:3f:51:5f:23:ee:8e:bf:90:b1:c0:7c:29:35:da: 9d:39:fa:10:dc:3d:51:a2:0e:59:4a:c7:88:3c:c0: 06:99:c7:a5:91:1f:06:d4:e9:81:4a:bb:1d:0d:34: 56:e5:9b:24:0b:a0:e7:94:8c:bb:2c:cf:47:c7:b4: 24:26:51:e5:2a:17:3e:f5:c9:11:3c:af:a1:63:f5: 58:6b:13:7c:1d:56:d3:d3:72:54:69:06:32:42:0e: 54:2d:71:0f:fb:8f:e5:6b:44:ef:2f:e0:74:d9:8a: a1:45:7e:28:8d:3c:0e:1d:26:13:78:57:3c:ac:f6: f1:a2:d6:f1:74:a8:f1:db:5b:7a:66:e0:b7:77:53: 1c:b4:33:3e:4a:58:36:37:11:84:89:32:07:ec:4c: d1:13:ac:52:86:83:7b:4e:00:10:ff:c2:5f:a1:f6: c1:17:a2:1a:c3:91:5c:a3:00:96:48:4f:11:a1:63: 55:3c:e2:d5:5b:a7:4f:4c:f2:c3:1e:7f:74:71:f7: 45:5f:d5:21:e9:c2:35:49:cc:74:ae:83:2d:9a:5d: e0:a6:9b:33:78:d1:e5:5c:a7:8e:cb:88:8e:7f:f7: cb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E8:D9:5E:29:C5:65:7D:B8:B9:B2:90:21:FB:47:6E:51:AA:EA:42 X509v3 Authority Key Identifier: keyid:6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:51:c3:db:4c:fb:7d:21:ca:5e:93:f8:f2:57:22:41:42:6e: 3e:8a:28:e6:24:60:70:6c:6d:c1:1a:4c:ab:78:29:f0:d7:3c: fc:90:fc:66:a5:c0:04:6d:88:0f:93:e5:b2:b3:18:b0:0e:8a: 04:6c:8b:ce:8c:59:d6:73:0b:5e:cb:c1:f8:a9:8d:c6:6e:3a: 2a:8b:7b:55:78:34:2d:f5:3b:1d:3b:b7:e7:18:92:62:2a:74: ec:b8:ab:15:ad:1a:b5:92:74:5e:01:61:1d:bd:e7:db:01:99: a4:60:5f:c8:c1:20:e4:54:33:fb:95:32:c4:5f:70:3e:75:e7: ab:d8:5a:c9:72:6b:e6:e5:78:d2:29:fe:91:a3:17:1b:44:e8: 8b:f1:47:77:14:69:da:78:91:2c:da:3e:53:c4:26:2c:4f:09: 12:ff:50:1c:c5:13:54:6e:5e:39:4c:a2:4c:5f:41:79:4e:1f: 09:3b:14:a6:b7:73:c0:56:8d:01:7b:f9:9d:dc:c9:30:56:b5: 71:02:3f:2e:6e:ad:81:4d:be:76:91:17:ae:35:69:c2:72:d0: c0:6c:77:c5:0b:93:0b:07:a6:b5:78:9f:df:59:9e:50:7c:6f: b9:d8:52:d3:f2:c3:13:b0:23:04:bb:fd:f9:f8:ec:f5:41:91: 88:fe:2b:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDJDQTExMC8GA1UEBRMoNkY5MUM3NkE0Rjc0NjY0MTAwREQ4REVCRDE3ODUxNDJF MTM3ODAyRDAeFw0yNTExMDUwNzIyNDVaFw0yNTExMTIwNzIyNDVaMBgxFjAUBgNV BAMTDTY5MGFmYjQ1LTU0MmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD3mMFUCO/pShlOyOqnXpQL6NNaa1u6YkMzrr9c+V8/UV8j7o6/kLHAfCk12p05 +hDcPVGiDllKx4g8wAaZx6WRHwbU6YFKux0NNFblmyQLoOeUjLssz0fHtCQmUeUq Fz71yRE8r6Fj9VhrE3wdVtPTclRpBjJCDlQtcQ/7j+VrRO8v4HTZiqFFfiiNPA4d JhN4Vzys9vGi1vF0qPHbW3pm4Ld3Uxy0Mz5KWDY3EYSJMgfsTNETrFKGg3tOABD/ wl+h9sEXohrDkVyjAJZITxGhY1U84tVbp09M8sMef3Rx90Vf1SHpwjVJzHSugy2a XeCmmzN40eVcp47LiI5/98tFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSOjZXinF ZX24ubKQIftHblGq6kIwHwYDVR0jBBgwFoAUb5HHak90ZkEA3Y3r0XhRQuE3gC0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEMkNBLzA5Rjc0RUY2MzU0 NzExRjA4MTAzQkUyNEM0RjlBRTAyL2I1SEhhazkwWmtFQTNZM3IwWGhSUXVFM2dD MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYjVISGFrOTBaa0VBM1kzcjBYaFJRdUUzZ0MwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE MkNBLzA5Rjc0RUY2MzU0NzExRjA4MTAzQkUyNEM0RjlBRTAyL2I1SEhhazkwWmtF QTNZM3IwWGhSUXVFM2dDMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJJRw9tM+30hyl6T+PJXIkFCbj6KKOYkYHBsbcEaTKt4KfDXPPyQ/Gal wARtiA+T5bKzGLAOigRsi86MWdZzC17LwfipjcZuOiqLe1V4NC31Ox07t+cYkmIq dOy4qxWtGrWSdF4BYR2959sBmaRgX8jBIORUM/uVMsRfcD5156vYWslya+bleNIp /pGjFxtE6IvxR3cUadp4kSzaPlPEJixPCRL/UBzFE1RuXjlMokxfQXlOHwk7FKa3 c8BWjQF7+Z3cyTBWtXECPy5urYFNvnaRF641acJy0MBsd8ULkwsHprV4n99ZnlB8 b7nYUtPywxOwIwS7/fn47PVBkYj+K/Y= -----END CERTIFICATE-----Generated at Wed Nov 5 15:43:02 2025 by rpki-client