$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft File: 5CHll4Srb9cADNFZcQHsNg3ZQGY.mft (raw, json) Hash identifier: rWup8RpidmhRdssuajNkTVzK7IlxP8omwPDr2ujHQ24= Subject key identifier: 5C:5C:A4:F5:BD:65:93:E4:07:37:BA:61:A4:D1:BB:3F:7D:25:A8:D6 Authority key identifier: E4:21:E5:97:84:AB:6F:D7:00:0C:D1:59:71:01:EC:36:0D:D9:40:66 Certificate issuer: /CN=A91A1E1C/serialNumber=E421E59784AB6FD7000CD1597101EC360DD94066 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CHll4Srb9cADNFZcQHsNg3ZQGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft Manifest number: C2 Signing time: Mon 03 Nov 2025 05:54:14 +0000 Manifest this update: Mon 03 Nov 2025 05:54:13 +0000 Manifest next update: Mon 10 Nov 2025 05:54:13 +0000 Files and hashes: 1: 5CHll4Srb9cADNFZcQHsNg3ZQGY.crl (hash: mC712NnrKhhDEJvgA7b4YChWJfdRxoo8oHvnGRnKpxY=) 2: 5BC18D6C9A6C11EF8C656668C4F9AE02.roa (hash: 1ljn9MSckdlGvWQ7HkpY2v8ly/0oxPt9z/n6V7MEeDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.crl rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CHll4Srb9cADNFZcQHsNg3ZQGY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1E1C, serialNumber=E421E59784AB6FD7000CD1597101EC360DD94066 Validity Not Before: Nov 3 05:54:13 2025 GMT Not After : Nov 10 05:54:13 2025 GMT Subject: CN=69084386-9c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:62:63:7d:1a:06:8e:6a:8c:5f:d4:0e:eb:24: 68:a9:50:b6:db:32:09:f5:51:a1:df:16:a1:98:5c: d4:6f:82:75:58:e3:da:72:1e:fa:4d:59:6f:6b:4c: 03:d4:8e:f9:62:b5:ba:3c:f0:67:9e:2d:ce:ad:f3: bc:ef:10:ff:c8:13:4f:f4:e8:f7:d7:39:da:aa:27: b7:24:e1:e0:fa:75:e0:b8:00:aa:a4:26:23:5c:d3: ae:9b:b0:a6:95:25:db:fa:66:44:df:37:24:70:cb: 35:f4:d4:3d:b0:ab:7d:d1:22:56:95:77:6c:b8:e2: f2:55:d6:9d:61:59:d6:ff:d1:a1:73:af:9d:33:e8: f1:72:61:34:86:e3:3c:49:b6:0d:b8:ad:89:25:19: ee:b4:db:0e:d5:71:f2:71:90:a8:76:2d:70:9d:63: 59:c2:37:cd:80:18:d5:87:03:7c:14:f1:f3:cd:f3: f1:9b:84:dc:f6:5a:80:18:3f:1b:8f:08:b1:38:ca: 1a:22:66:a3:51:ed:a2:a0:ca:0b:70:3d:b0:f7:52: 95:e5:83:4a:10:4d:aa:63:dc:f5:82:d6:46:72:16: 9e:ab:4f:10:a6:9a:27:d2:ef:9b:a0:41:71:95:9b: d9:f2:5b:cf:f6:15:36:ef:84:4e:05:20:a7:2d:09: d8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5C:A4:F5:BD:65:93:E4:07:37:BA:61:A4:D1:BB:3F:7D:25:A8:D6 X509v3 Authority Key Identifier: keyid:E4:21:E5:97:84:AB:6F:D7:00:0C:D1:59:71:01:EC:36:0D:D9:40:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CHll4Srb9cADNFZcQHsNg3ZQGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1E1C/25222D80920011EF9E0C3D6BC4F9AE02/5CHll4Srb9cADNFZcQHsNg3ZQGY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:a1:b2:79:80:0a:5f:2e:52:14:83:65:3a:26:18:01:61:2d: f1:f2:e5:32:87:d1:1d:04:1b:97:97:df:a7:77:ef:86:14:11: 4b:a0:19:b8:10:35:cb:89:7c:83:f2:d9:4e:ba:d3:3b:de:5d: ad:13:20:74:ef:f6:03:a7:65:44:40:bf:6a:b6:2b:28:8f:6a: be:36:d6:45:11:82:dc:41:1c:e4:15:43:28:9a:62:9d:02:25: f3:cb:d7:7a:93:91:72:80:02:f9:91:8b:b2:6b:77:f8:ce:99: a9:24:b3:64:f8:d4:6c:4b:0d:73:f1:a8:bf:e9:81:2e:d8:49: fb:a7:ac:3b:d4:ae:95:ba:00:fa:e1:72:20:34:5f:a4:57:60: 35:88:59:62:f3:4e:1c:96:7b:d2:8b:d1:a5:4f:0f:6b:35:74: 8b:66:9b:38:db:32:b8:ca:6b:46:4a:8e:df:d0:8d:15:12:fa: 83:3a:15:76:15:71:f7:ec:f7:19:1f:29:1b:f3:de:00:36:16: 30:46:dd:ca:09:26:5d:c6:e8:03:2f:97:fc:b0:15:71:51:13: 80:8a:ff:cc:2d:d7:8f:30:1e:44:3d:94:4e:e8:a2:de:c9:6d: 70:4d:51:c3:0b:cf:ea:fa:38:53:b1:95:3c:2a:f9:fd:8d:e0: 90:17:94:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFFMUMxMTAvBgNVBAUTKEU0MjFFNTk3ODRBQjZGRDcwMDBDRDE1OTcxMDFFQzM2 MEREOTQwNjYwHhcNMjUxMTAzMDU1NDEzWhcNMjUxMTEwMDU1NDEzWjAYMRYwFAYD VQQDEw02OTA4NDM4Ni05YzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGJjfRoGjmqMX9QO6yRoqVC22zIJ9VGh3xahmFzUb4J1WOPach76TVlva0wD 1I75YrW6PPBnni3OrfO87xD/yBNP9Oj31znaqie3JOHg+nXguACqpCYjXNOum7Cm lSXb+mZE3zckcMs19NQ9sKt90SJWlXdsuOLyVdadYVnW/9Ghc6+dM+jxcmE0huM8 SbYNuK2JJRnutNsO1XHycZCodi1wnWNZwjfNgBjVhwN8FPHzzfPxm4Tc9lqAGD8b jwixOMoaImajUe2ioMoLcD2w91KV5YNKEE2qY9z1gtZGchaeq08Qppon0u+boEFx lZvZ8lvP9hU274ROBSCnLQnYWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxcpPW9 ZZPkBze6YaTRuz99JajWMB8GA1UdIwQYMBaAFOQh5ZeEq2/XAAzRWXEB7DYN2UBm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUUxQy8yNTIyMkQ4MDky MDAxMUVGOUUwQzNENkJDNEY5QUUwMi81Q0hsbDRTcmI5Y0FETkZaY1FIc05nM1pR R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDSGxsNFNyYjljQURORlpjUUhzTmczWlFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUUxQy8yNTIyMkQ4MDkyMDAxMUVGOUUwQzNENkJDNEY5QUUwMi81Q0hsbDRTcmI5 Y0FETkZaY1FIc05nM1pRR1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2obJ5gApfLlIUg2U6JhgBYS3x8uUyh9EdBBuXl9+nd++GFBFLoBm4 EDXLiXyD8tlOutM73l2tEyB07/YDp2VEQL9qtisoj2q+NtZFEYLcQRzkFUMommKd AiXzy9d6k5FygAL5kYuya3f4zpmpJLNk+NRsSw1z8ai/6YEu2En7p6w71K6VugD6 4XIgNF+kV2A1iFli804clnvSi9GlTw9rNXSLZps42zK4ymtGSo7f0I0VEvqDOhV2 FXH37PcZHykb894ANhYwRt3KCSZdxugDL5f8sBVxUROAiv/MLdePMB5EPZRO6KLe yW1wTVHDC8/q+jhTsZU8Kvn9jeCQF5RZ -----END CERTIFICATE-----Generated at Wed Nov 5 05:17:11 2025 by rpki-client