$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft File: M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft (raw, json) Hash identifier: hmk7X+lb6ptvr2Kfe0qGy8eRtB1/kyQwasa9HGujHy0= Subject key identifier: A9:1A:6B:CA:59:7C:26:24:1A:D0:24:D8:B6:F1:DF:92:5B:14:EE:CE Authority key identifier: 33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0 Certificate issuer: /CN=A91A4030/serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft Manifest number: 0E Signing time: Wed 05 Nov 2025 08:10:56 +0000 Manifest this update: Wed 05 Nov 2025 08:10:56 +0000 Manifest next update: Wed 12 Nov 2025 08:10:56 +0000 Files and hashes: 1: M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl (hash: nkjnMq7czo0sT4yHHkVysnhUqaM9dq1g/EIWkkVY6Nc=) 2: E56B8AFEAB1411F0B1936926C4F9AE02.roa (hash: kENvzHNKo6IjGoWcT7mvOgf2Y85E5p1Dl4B5gZlD2OE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4030, serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0 Validity Not Before: Nov 5 08:10:56 2025 GMT Not After : Nov 12 08:10:56 2025 GMT Subject: CN=690b0690-a958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ab:c1:18:5f:e4:1f:f8:10:21:b0:6d:9c:b5: 3d:f6:e5:f2:ef:28:58:66:95:4b:a0:50:2b:cf:65: eb:25:94:75:5b:5a:1c:93:89:68:a7:e6:50:30:e1: ed:a7:5e:f6:02:6b:9c:ba:86:7a:c7:dc:7b:62:7c: 70:f4:0c:69:4c:32:48:b3:c8:b2:07:25:45:83:f6: cb:9e:a8:52:4e:90:97:b5:d6:c5:00:82:b9:b5:35: 86:e2:e4:10:62:7b:e6:66:5f:fc:de:41:12:06:5c: c9:55:2b:3f:ec:4c:69:61:63:5d:17:e0:35:81:c5: bd:25:28:de:a4:2b:58:0b:ad:66:bb:9d:fb:91:0a: 24:64:f0:b9:22:6f:91:52:a2:d2:12:73:82:50:c7: 07:82:31:e6:b2:46:f6:46:5d:c4:d8:c1:e8:c4:69: cd:80:47:90:e7:ca:51:8a:81:be:81:82:b8:6e:24: 7a:6f:2a:13:0c:43:dc:35:cd:0d:40:dc:d4:c7:e1: 47:e2:9f:92:b2:b4:26:01:d2:0b:b4:29:18:51:21: 6e:83:19:8e:97:bb:d2:0d:30:a8:e8:25:df:d1:9c: d9:ee:2c:29:7c:de:39:40:27:f3:22:45:d1:50:d0: 73:82:f9:5c:d7:5c:cb:9c:c3:1d:c1:94:f3:68:15: 3f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1A:6B:CA:59:7C:26:24:1A:D0:24:D8:B6:F1:DF:92:5B:14:EE:CE X509v3 Authority Key Identifier: keyid:33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:70:cf:73:db:dc:97:ec:fa:ea:a7:65:ce:c7:78:79:32:80: 8e:3b:e3:83:ab:ea:70:f4:10:f3:23:05:48:bc:1f:d9:9a:7b: b5:b4:45:f9:53:a0:72:80:b4:04:fc:0e:e3:71:7d:da:5b:c0: 97:0a:d9:18:7a:15:63:23:dd:0d:1e:a9:92:ef:ec:17:0b:3e: de:3f:10:a7:71:c8:ea:df:7a:6d:4e:33:5e:d9:60:63:4a:bc: df:94:1f:fc:19:3e:8e:aa:fc:aa:5d:47:4a:fb:cd:c3:e9:fc: e8:81:98:c3:74:77:6a:38:88:00:c4:9d:f0:ef:62:30:43:a9: b2:fd:20:a2:b1:41:d3:3b:bb:93:93:20:30:0f:00:da:1b:0e: 76:ae:a9:0e:e4:87:98:bb:23:35:c2:72:89:3c:4c:7d:49:6b: de:98:be:f8:47:51:c2:c2:c4:29:3f:32:62:df:2e:57:d6:f7: 80:b3:86:1e:69:0f:c2:10:7d:60:2a:fe:f4:10:19:f1:68:0d: 13:7b:17:3f:5e:31:06:c1:5f:8e:0e:64:55:af:b7:eb:19:c9: 0a:5c:b4:0c:58:18:09:d4:98:23:17:23:f5:ca:86:bc:22:2c: bd:df:ba:9f:f5:d3:12:8d:c6:55:6c:77:87:e4:c8:be:04:3b: e9:a7:b6:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NDAzMDExMC8GA1UEBRMoMzM5N0I4ODkwRTMzN0RBMDk0OEQ2OTdENDIzMEQ2RkU0 NjMzRDBEMDAeFw0yNTExMDUwODEwNTZaFw0yNTExMTIwODEwNTZaMBgxFjAUBgNV BAMTDTY5MGIwNjkwLWE5NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNq8EYX+Qf+BAhsG2ctT325fLvKFhmlUugUCvPZesllHVbWhyTiWin5lAw4e2n XvYCa5y6hnrH3HtifHD0DGlMMkizyLIHJUWD9sueqFJOkJe11sUAgrm1NYbi5BBi e+ZmX/zeQRIGXMlVKz/sTGlhY10X4DWBxb0lKN6kK1gLrWa7nfuRCiRk8Lkib5FS otISc4JQxweCMeayRvZGXcTYwejEac2AR5DnylGKgb6BgrhuJHpvKhMMQ9w1zQ1A 3NTH4Ufin5KytCYB0gu0KRhRIW6DGY6Xu9INMKjoJd/RnNnuLCl83jlAJ/MiRdFQ 0HOC+VzXXMucwx3BlPNoFT97AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqRpryll8 JiQa0CTYtvHfklsU7s4wHwYDVR0jBBgwFoAUM5e4iQ4zfaCUjWl9QjDW/kYz0NAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0MDMwLzIwMDYzQzYwQUIx MzExRjA5NzZDOUIxRUM0RjlBRTAyL001ZTRpUTR6ZmFDVWpXbDlRakRXX2tZejBO QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTTVlNGlRNHpmYUNValdsOVFqRFdfa1l6ME5BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0 MDMwLzIwMDYzQzYwQUIxMzExRjA5NzZDOUIxRUM0RjlBRTAyL001ZTRpUTR6ZmFD VWpXbDlRakRXX2tZejBOQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJlwz3Pb3Jfs+uqnZc7HeHkygI4744Or6nD0EPMjBUi8H9mae7W0RflT oHKAtAT8DuNxfdpbwJcK2Rh6FWMj3Q0eqZLv7BcLPt4/EKdxyOrfem1OM17ZYGNK vN+UH/wZPo6q/KpdR0r7zcPp/OiBmMN0d2o4iADEnfDvYjBDqbL9IKKxQdM7u5OT IDAPANobDnauqQ7kh5i7IzXCcok8TH1Ja96YvvhHUcLCxCk/MmLfLlfW94Czhh5p D8IQfWAq/vQQGfFoDRN7Fz9eMQbBX44OZFWvt+sZyQpctAxYGAnUmCMXI/XKhrwi LL3fup/10xKNxlVsd4fkyL4EO+mntm0= -----END CERTIFICATE-----Generated at Wed Nov 5 09:29:14 2025 by rpki-client