$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft File: 5MWJuJPSconPhG3wWt-1lgNkKP0.mft (raw, json) Hash identifier: Z/i6g3gbgkd2Uf1/Ff7uSyxjiWQf4aiysK95bzm223U= Subject key identifier: 5A:2F:A7:8E:A8:02:3D:7C:AC:3D:62:58:9E:45:E7:DF:17:2E:79:E5 Authority key identifier: E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD Certificate issuer: /CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft Manifest number: B1 Signing time: Wed 05 Nov 2025 06:22:27 +0000 Manifest this update: Wed 05 Nov 2025 06:22:27 +0000 Manifest next update: Wed 12 Nov 2025 06:22:27 +0000 Files and hashes: 1: 5MWJuJPSconPhG3wWt-1lgNkKP0.crl (hash: t65zCPl4gnAPDtyvzGLYgHApzlufnRPUgP1eqpcIZVQ=) 2: 8FFA61D4B13D11EF9EFDE433C4F9AE02.roa (hash: EhNDnWOJJGSPSxGl0lercQlAl3yvPmyKkzL2DPkH1sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Validity Not Before: Nov 5 06:22:27 2025 GMT Not After : Nov 12 06:22:27 2025 GMT Subject: CN=690aed23-c853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:29:d0:53:64:c0:ac:c3:02:f2:5a:68:23:60: c9:66:fe:14:6e:aa:f1:00:4d:d7:84:60:76:28:3f: e5:6f:3b:72:19:12:08:6e:f2:23:de:88:dc:20:0e: 01:74:7e:c9:9b:3a:b2:e3:de:2f:cd:4d:b7:d0:88: 22:17:1c:b6:fb:eb:a2:c4:39:14:f6:cb:67:8c:12: 3c:e7:ca:74:aa:c5:d0:97:d3:ee:f4:22:81:4d:2d: ed:b8:7a:29:18:0e:93:88:be:99:6f:c9:5a:5d:66: ab:63:a4:8f:6f:6b:40:76:8d:5f:fc:54:07:1d:f5: 43:bc:7c:b7:ef:d5:1a:23:1c:45:7d:a5:f2:6a:8b: d6:fe:dc:54:a0:d6:9c:0b:bb:d2:48:15:d5:4f:17: 83:65:d0:2d:84:c2:fa:d0:fb:4e:86:26:3a:b2:b7: 7e:52:a6:a1:ee:82:3f:d8:bd:79:83:2b:6c:0f:49: 6c:7d:e1:e9:81:f8:33:b9:87:b8:6c:69:3d:41:54: 14:c0:f2:45:6e:39:f9:4d:90:b3:11:23:4d:3b:94: 7d:57:cb:4e:da:7b:b0:6b:ee:9d:90:f8:6c:a8:17: 0a:d6:3c:e3:be:fa:4f:d4:59:55:98:fd:e8:b6:de: a5:19:9a:8c:ad:bc:44:47:bb:ca:97:4f:eb:0e:4c: 4e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2F:A7:8E:A8:02:3D:7C:AC:3D:62:58:9E:45:E7:DF:17:2E:79:E5 X509v3 Authority Key Identifier: keyid:E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:02:5d:31:9d:53:9b:a3:f9:77:37:66:45:28:45:08:ff:60: 1f:90:6f:e9:68:fa:17:cd:5c:a2:e6:07:42:ac:d0:5e:67:0f: 9a:07:5a:20:78:71:5b:f8:b5:33:b3:23:dd:96:44:78:0b:d0: c6:f8:2e:32:e9:8e:7c:41:e1:ec:96:79:c8:43:98:0d:b0:bb: e6:b8:88:30:b5:aa:b3:98:ae:88:a1:40:15:d9:06:76:6a:18: 90:84:a3:c9:14:ae:c2:0a:91:31:99:b8:81:2c:b1:93:19:d6: 6c:fd:36:ef:66:d3:c6:05:70:65:d7:50:e8:eb:08:75:20:54: 94:9a:33:aa:82:c5:2d:6f:e9:52:bb:6d:7f:72:94:e9:f5:b1: 1c:d1:52:a5:40:d6:64:06:19:36:45:26:dd:a4:b8:a0:85:28: 23:ab:83:93:a8:79:7e:4e:a4:34:4a:97:4f:23:e8:df:2f:b0: 1a:6d:41:c8:4c:4c:88:35:73:bb:c5:3e:e2:01:1b:17:6a:0f: 38:02:9f:52:5c:31:11:df:a6:cf:5f:f4:b7:47:8a:c8:46:d7: 48:fd:65:b7:68:a3:a3:7a:8a:fc:4d:c0:48:3f:b2:9f:af:0f: e0:53:28:70:cf:0f:21:aa:15:ca:89:45:6a:00:5a:e8:76:89: 3f:17:7d:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBQzgxMTAvBgNVBAUTKEU0QzU4OUI4OTNEMjcyODlDRjg0NkRGMDVBREZCNTk2 MDM2NDI4RkQwHhcNMjUxMTA1MDYyMjI3WhcNMjUxMTEyMDYyMjI3WjAYMRYwFAYD VQQDEw02OTBhZWQyMy1jODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCnQU2TArMMC8lpoI2DJZv4UbqrxAE3XhGB2KD/lbztyGRIIbvIj3ojcIA4B dH7Jmzqy494vzU230IgiFxy2++uixDkU9stnjBI858p0qsXQl9Pu9CKBTS3tuHop GA6TiL6Zb8laXWarY6SPb2tAdo1f/FQHHfVDvHy379UaIxxFfaXyaovW/txUoNac C7vSSBXVTxeDZdAthML60PtOhiY6srd+Uqah7oI/2L15gytsD0lsfeHpgfgzuYe4 bGk9QVQUwPJFbjn5TZCzESNNO5R9V8tO2nuwa+6dkPhsqBcK1jzjvvpP1FlVmP3o tt6lGZqMrbxER7vKl0/rDkxOKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFovp46o Aj18rD1iWJ5F598XLnnlMB8GA1UdIwQYMBaAFOTFibiT0nKJz4Rt8FrftZYDZCj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEFDOC9FMTJEMTA1MkIx M0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi81TVdKdUpQU2NvblBoRzN3V3QtMWxnTmtL UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVNV0p1SlBTY29uUGhHM3dXdC0xbGdOa0tQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEFDOC9FMTJEMTA1MkIxM0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi81TVdKdUpQU2Nv blBoRzN3V3QtMWxnTmtLUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEAl0xnVObo/l3N2ZFKEUI/2AfkG/paPoXzVyi5gdCrNBeZw+aB1og eHFb+LUzsyPdlkR4C9DG+C4y6Y58QeHslnnIQ5gNsLvmuIgwtaqzmK6IoUAV2QZ2 ahiQhKPJFK7CCpExmbiBLLGTGdZs/TbvZtPGBXBl11Do6wh1IFSUmjOqgsUtb+lS u21/cpTp9bEc0VKlQNZkBhk2RSbdpLighSgjq4OTqHl+TqQ0SpdPI+jfL7AabUHI TEyINXO7xT7iARsXag84Ap9SXDER36bPX/S3R4rIRtdI/WW3aKOjeor8TcBIP7Kf rw/gUyhwzw8hqhXKiUVqAFrodok/F30l -----END CERTIFICATE-----Generated at Thu Nov 6 00:38:48 2025 by rpki-client