$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft File: cx5XsN_ep5G6TV1xly2oEF3JPos.mft (raw, json) Hash identifier: knvMck++ON7IRSyrrkpvpM8LUeSPktMGpD6PvydRFkQ= Subject key identifier: 48:59:8A:D6:0C:16:A7:43:1D:DC:11:0A:73:E3:98:85:FD:CE:79:F4 Authority key identifier: 73:1E:57:B0:DF:DE:A7:91:BA:4D:5D:71:97:2D:A8:10:5D:C9:3E:8B Certificate issuer: /CN=A91AA444/serialNumber=731E57B0DFDEA791BA4D5D71972DA8105DC93E8B Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft Manifest number: 0155 Signing time: Wed 05 Nov 2025 04:18:42 +0000 Manifest this update: Wed 05 Nov 2025 04:18:42 +0000 Manifest next update: Wed 12 Nov 2025 04:18:42 +0000 Files and hashes: 1: cx5XsN_ep5G6TV1xly2oEF3JPos.crl (hash: Xm5ZxPsBXt/hrLNpCD51Vgr0A2qxyjQ0Ha3iB4EnBP0=) 2: 24DD519CEEA311EFA5EDDD76C4F9AE02.roa (hash: +mEj5z+agEcnRzWZMjR0oYobGLfQGCXmi+n1VzU085s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.crl rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA444, serialNumber=731E57B0DFDEA791BA4D5D71972DA8105DC93E8B Validity Not Before: Nov 5 04:18:42 2025 GMT Not After : Nov 12 04:18:42 2025 GMT Subject: CN=690ad022-0fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:46:19:b1:4b:75:ad:fb:58:b9:9d:6e:72:c0: 41:40:1a:08:f1:d7:ef:60:10:d0:64:4e:30:51:59: 3a:c8:a4:6b:b3:38:0f:c0:b1:e3:3c:db:4e:b1:c3: 6b:8f:24:3c:06:84:9f:9f:17:71:0c:d4:71:cc:28: fd:2b:3c:28:08:85:14:f6:ed:6c:dd:4f:e7:e3:dc: e8:2f:41:f6:33:db:c8:c7:2b:c3:3e:22:9b:82:1b: b7:43:c5:ec:60:91:53:50:4c:9b:24:16:f5:6e:c6: 38:86:5a:9a:d3:02:6b:0f:54:c6:97:05:08:86:b1: c4:12:6e:63:37:1f:08:89:d0:9c:5a:a8:38:9c:fe: 30:48:25:1b:a1:58:2a:00:a1:d5:28:8b:77:aa:a6: fc:94:cb:aa:c4:9e:a4:6a:72:c4:aa:f8:7d:aa:96: 5b:dd:49:e7:ca:b3:f8:02:5f:f4:cb:6d:e6:cf:c9: 35:05:d1:82:b9:a3:19:91:13:59:2b:d8:b6:ca:e9: 27:f6:21:e2:bf:a6:a6:6f:70:c6:6d:30:f5:06:1f: c5:d0:0a:d3:6b:15:da:5b:52:9b:7b:c6:fc:4e:5b: 26:87:1f:88:06:62:7f:d5:6f:05:af:53:7a:7b:36: 98:c3:33:f6:52:eb:70:7d:64:93:0a:b5:03:ca:21: 3d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:59:8A:D6:0C:16:A7:43:1D:DC:11:0A:73:E3:98:85:FD:CE:79:F4 X509v3 Authority Key Identifier: keyid:73:1E:57:B0:DF:DE:A7:91:BA:4D:5D:71:97:2D:A8:10:5D:C9:3E:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx5XsN_ep5G6TV1xly2oEF3JPos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA444/8DCE274AB11D11EEA3363319C4F9AE02/cx5XsN_ep5G6TV1xly2oEF3JPos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:59:7f:71:40:02:b3:c0:d0:5c:c2:52:85:8c:6a:57:12:46: ff:77:22:2d:e6:43:e6:52:42:6d:f3:6b:4c:0d:29:f3:4c:8a: ca:39:13:30:f2:d2:bc:0f:16:d5:67:1e:87:7c:9c:ef:77:ff: 9d:79:94:f0:34:6d:89:3c:c1:44:be:40:1a:39:40:27:75:94: 5d:12:78:85:bc:2f:b8:70:a5:c8:08:ff:a2:26:26:b4:e2:3f: 59:04:2a:d4:21:72:f3:56:b0:c6:51:51:31:3a:fa:eb:08:e4: a2:b9:26:6e:4a:31:5a:a3:76:96:da:52:30:12:56:7a:80:2b: 76:03:5c:49:4a:4e:ea:e9:82:d5:e6:d2:bc:78:57:71:72:3f: 0f:17:55:d0:30:3b:68:03:13:f2:8d:10:7b:81:51:d5:28:2b: 5a:67:10:48:19:aa:57:c3:8a:a5:e9:68:68:ee:3b:fa:3f:fa: 5f:16:ac:3f:a1:14:24:9c:1e:a2:a3:a5:96:a6:b8:2d:27:e2: ac:93:5a:b6:b2:3e:08:12:0e:8d:43:d7:49:3c:44:05:20:7b: 15:11:8d:2e:a8:5c:9b:3a:43:23:5b:90:ac:ef:91:77:bc:61: be:2f:34:6a:a5:e9:ab:48:74:af:02:19:31:bb:fa:ec:1a:ae: a0:89:62:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0NDQxMTAvBgNVBAUTKDczMUU1N0IwREZERUE3OTFCQTRENUQ3MTk3MkRBODEw NURDOTNFOEIwHhcNMjUxMTA1MDQxODQyWhcNMjUxMTEyMDQxODQyWjAYMRYwFAYD VQQDEw02OTBhZDAyMi0wZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEYZsUt1rftYuZ1ucsBBQBoI8dfvYBDQZE4wUVk6yKRrszgPwLHjPNtOscNr jyQ8BoSfnxdxDNRxzCj9KzwoCIUU9u1s3U/n49zoL0H2M9vIxyvDPiKbghu3Q8Xs YJFTUEybJBb1bsY4hlqa0wJrD1TGlwUIhrHEEm5jNx8IidCcWqg4nP4wSCUboVgq AKHVKIt3qqb8lMuqxJ6kanLEqvh9qpZb3UnnyrP4Al/0y23mz8k1BdGCuaMZkRNZ K9i2yukn9iHiv6amb3DGbTD1Bh/F0ArTaxXaW1Kbe8b8Tlsmhx+IBmJ/1W8Fr1N6 ezaYwzP2UutwfWSTCrUDyiE9DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhZitYM FqdDHdwRCnPjmIX9znn0MB8GA1UdIwQYMBaAFHMeV7Df3qeRuk1dcZctqBBdyT6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ0NC84RENFMjc0QUIx MUQxMUVFQTMzNjMzMTlDNEY5QUUwMi9jeDVYc05fZXA1RzZUVjF4bHkyb0VGM0pQ b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4NVhzTl9lcDVHNlRWMXhseTJvRUYzSlBvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTQ0NC84RENFMjc0QUIxMUQxMUVFQTMzNjMzMTlDNEY5QUUwMi9jeDVYc05fZXA1 RzZUVjF4bHkyb0VGM0pQb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyWX9xQAKzwNBcwlKFjGpXEkb/dyIt5kPmUkJt82tMDSnzTIrKORMw 8tK8DxbVZx6HfJzvd/+deZTwNG2JPMFEvkAaOUAndZRdEniFvC+4cKXICP+iJia0 4j9ZBCrUIXLzVrDGUVExOvrrCOSiuSZuSjFao3aW2lIwElZ6gCt2A1xJSk7q6YLV 5tK8eFdxcj8PF1XQMDtoAxPyjRB7gVHVKCtaZxBIGapXw4ql6Who7jv6P/pfFqw/ oRQknB6io6WWprgtJ+Ksk1q2sj4IEg6NQ9dJPEQFIHsVEY0uqFybOkMjW5Cs75F3 vGG+LzRqpemrSHSvAhkxu/rsGq6giWJZ -----END CERTIFICATE-----Generated at Wed Nov 5 15:33:44 2025 by rpki-client