$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft File: 5EZZ6m_c00PGwef_0BSlsHgYlos.mft (raw, json) Hash identifier: JGe2annqsXN8n1xLE7fFPE57cL+MrLGpmUTeCk+AmRE= Subject key identifier: BD:97:F4:48:48:80:7D:94:B6:75:20:41:18:C6:4F:92:60:92:D0:18 Authority key identifier: E4:46:59:EA:6F:DC:D3:43:C6:C1:E7:FF:D0:14:A5:B0:78:18:96:8B Certificate issuer: /CN=A91B3062/serialNumber=E44659EA6FDCD343C6C1E7FFD014A5B07818968B Certificate serial: 070B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft Manifest number: 0705 Signing time: Sun 02 Nov 2025 21:53:20 +0000 Manifest this update: Sun 02 Nov 2025 21:53:19 +0000 Manifest next update: Sun 09 Nov 2025 21:53:19 +0000 Files and hashes: 1: 5EZZ6m_c00PGwef_0BSlsHgYlos.crl (hash: exoYIvWwMGwiZMMXCkv+SA0C3t9Qr4ZWBl9NOVPw0Yk=) 2: C8FB0DB8616D11EB928F0250C4F9AE02.roa (hash: lKS3o3ulScSFpZae2wNxVd1Zi3XsGitxWFugMmnXO+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.crl rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1803 (0x70b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3062, serialNumber=E44659EA6FDCD343C6C1E7FFD014A5B07818968B Validity Not Before: Nov 2 21:53:19 2025 GMT Not After : Nov 9 21:53:19 2025 GMT Subject: CN=6907d2cf-1cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b7:32:c8:b7:82:04:d2:ff:f4:01:6c:b8:f2: 2f:34:4d:35:0e:b3:c3:f9:7f:e6:3e:16:3f:11:5b: 1b:96:c5:e8:0a:98:48:f1:45:0c:ad:49:3a:58:c8: b8:ad:af:4a:10:fc:28:c4:0d:8c:a1:17:31:d3:8d: e1:1f:4c:5b:91:cf:96:b7:58:3d:9d:4e:09:11:3e: 47:cc:0e:d9:b1:c7:92:76:d5:e7:66:03:3d:0c:ef: b9:10:7c:30:6c:3e:e0:b1:4f:ee:d9:de:bf:6b:00: 79:f6:28:d0:2b:41:b6:dd:91:f2:13:d0:9d:12:ac: 15:ef:cd:91:37:17:de:05:94:ca:fd:40:79:7b:91: 5f:2f:6c:e2:6b:ac:3c:8b:8e:1d:aa:fb:1c:94:53: 7c:c7:38:60:34:cf:83:e4:5c:bf:a9:76:ea:be:2c: 29:ee:94:a5:48:b0:91:6a:f2:a8:e6:cc:7a:5e:c2: ac:25:e3:e2:45:f5:fc:85:1e:ed:0c:8b:15:62:be: fa:86:3e:64:f9:84:6f:f2:cb:53:7b:32:8d:e9:c6: 88:fd:e8:c0:69:9b:1d:dd:45:6b:3a:2a:f2:6b:54: b7:1c:65:d1:e8:b5:80:73:68:c4:2e:64:7d:82:8b: a7:db:45:f6:f8:7d:75:a6:3e:34:ca:fa:33:3b:70: dc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:97:F4:48:48:80:7D:94:B6:75:20:41:18:C6:4F:92:60:92:D0:18 X509v3 Authority Key Identifier: keyid:E4:46:59:EA:6F:DC:D3:43:C6:C1:E7:FF:D0:14:A5:B0:78:18:96:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:64:65:4f:59:14:e2:a8:d2:79:9f:df:a3:c3:3a:e2:ec:30: 6c:6f:5c:4b:97:4a:70:4d:46:05:e3:2e:ae:2e:12:1a:86:f3: 38:45:2e:bc:1b:a6:2a:80:26:7a:59:18:cf:9f:15:f4:5a:68: 38:a5:72:ed:44:ec:94:11:c2:f1:8e:04:3b:60:17:33:68:8a: e6:6f:64:04:f8:08:76:85:b3:ba:eb:d9:1c:a3:bd:3a:30:eb: dc:fb:32:36:04:07:a3:60:06:07:b7:80:b3:75:90:a3:18:f0: f6:27:d5:c1:ca:0d:5b:cc:9a:f0:01:bb:6d:78:a1:65:07:f1: ee:07:2b:b7:bd:cb:96:3f:ed:24:a8:b7:32:b3:9b:e8:19:03: d0:16:a4:85:0a:9d:85:ce:20:b7:af:16:a2:77:1a:5b:78:fc: a8:0e:cf:9b:30:8b:4f:f2:a8:98:ec:03:df:49:e9:ef:67:6f: ce:ac:7d:d3:c0:e7:bf:fa:ad:6b:c9:96:ff:21:a7:d0:c1:6a: 0b:6f:21:78:8a:86:42:a7:78:cc:ed:95:4f:b4:89:42:7d:93: 50:b8:12:05:b2:23:71:36:29:1e:18:eb:54:ff:9c:e5:f4:01: 10:6f:07:34:0c:3b:58:55:08:48:70:06:a7:5b:a7:44:79:89: 7d:4c:0b:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMwNjIxMTAvBgNVBAUTKEU0NDY1OUVBNkZEQ0QzNDNDNkMxRTdGRkQwMTRBNUIw NzgxODk2OEIwHhcNMjUxMTAyMjE1MzE5WhcNMjUxMTA5MjE1MzE5WjAYMRYwFAYD VQQDEw02OTA3ZDJjZi0xY2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bcyyLeCBNL/9AFsuPIvNE01DrPD+X/mPhY/EVsblsXoCphI8UUMrUk6WMi4 ra9KEPwoxA2MoRcx043hH0xbkc+Wt1g9nU4JET5HzA7ZsceSdtXnZgM9DO+5EHww bD7gsU/u2d6/awB59ijQK0G23ZHyE9CdEqwV782RNxfeBZTK/UB5e5FfL2zia6w8 i44dqvsclFN8xzhgNM+D5Fy/qXbqviwp7pSlSLCRavKo5sx6XsKsJePiRfX8hR7t DIsVYr76hj5k+YRv8stTezKN6caI/ejAaZsd3UVrOirya1S3HGXR6LWAc2jELmR9 goun20X2+H11pj40yvozO3DcYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2X9EhI gH2UtnUgQRjGT5JgktAYMB8GA1UdIwQYMBaAFORGWepv3NNDxsHn/9AUpbB4GJaL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzA2Mi85ODgwODlFNDYx NkIxMUVCQTY0Nzg3NEFDNEY5QUUwMi81RVpaNm1fYzAwUEd3ZWZfMEJTbHNIZ1ls b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVFWlo2bV9jMDBQR3dlZl8wQlNsc0hnWWxvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzA2Mi85ODgwODlFNDYxNkIxMUVCQTY0Nzg3NEFDNEY5QUUwMi81RVpaNm1fYzAw UEd3ZWZfMEJTbHNIZ1lsb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnZGVPWRTiqNJ5n9+jwzri7DBsb1xLl0pwTUYF4y6uLhIahvM4RS68 G6YqgCZ6WRjPnxX0Wmg4pXLtROyUEcLxjgQ7YBczaIrmb2QE+Ah2hbO669kco706 MOvc+zI2BAejYAYHt4CzdZCjGPD2J9XByg1bzJrwAbtteKFlB/HuByu3vcuWP+0k qLcys5voGQPQFqSFCp2FziC3rxaidxpbePyoDs+bMItP8qiY7APfSenvZ2/OrH3T wOe/+q1ryZb/IafQwWoLbyF4ioZCp3jM7ZVPtIlCfZNQuBIFsiNxNikeGOtU/5zl 9AEQbwc0DDtYVQhIcAanW6dEeYl9TAvy -----END CERTIFICATE-----Generated at Tue Nov 4 16:33:23 2025 by rpki-client