$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: Wvd6dLNE/hZ5B3d6XFhfrR+R+IKUT2hnBKsKmOl7D1I= Subject key identifier: 88:39:2D:8C:B9:EB:F3:69:38:BA:DB:E4:47:95:8F:09:8F:5C:15:EF Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 0191 Signing time: Wed 05 Nov 2025 03:36:21 +0000 Manifest this update: Wed 05 Nov 2025 03:36:21 +0000 Manifest next update: Wed 12 Nov 2025 03:36:21 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: yDnozEJKN2pv552kM2Gdi+phx/snyS23kPD29uLi2qE=) 2: 0099AE56536911EE8594503BC4F9AE02.roa (hash: AOPC9WbNcZUf3rw4IBXy2gFnwozs8jTrPTS3eOn6dJw=) 3: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: SfS9ZnMJ4K7BL+m5tPbXXtGeAg5+tE+/js3vJ/6kex8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Validity Not Before: Nov 5 03:36:21 2025 GMT Not After : Nov 12 03:36:21 2025 GMT Subject: CN=690ac635-bb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:34:5a:1f:21:fa:91:13:9d:0d:f0:90:cb:68: bb:4c:2a:a9:88:a2:33:ce:ca:f9:c3:04:53:d5:1b: 74:1f:ba:c7:8b:dc:63:55:ab:7c:08:65:69:19:bb: 77:6c:5f:6c:0e:bf:2b:cc:47:de:15:5c:2c:13:59: 8d:35:a0:e9:eb:11:8b:ea:f4:62:d6:72:d8:5d:43: 7c:e8:18:d6:e1:68:4f:73:b1:41:0f:c1:b2:8d:45: 7f:46:e7:f5:e5:65:d9:4a:ae:9f:6f:98:56:0d:fd: 31:76:fa:b1:5e:94:f4:a5:77:18:7f:40:57:5c:43: cb:9c:7c:69:b4:4b:f6:7f:ac:58:46:78:d0:df:aa: bf:a5:d7:bf:b5:fb:a0:de:59:3b:64:52:50:6d:2d: b1:80:f5:55:79:86:ef:65:7f:a8:d0:50:79:79:0f: 89:d4:d0:51:68:7b:d0:9f:ca:cf:13:39:56:35:be: e8:8a:3d:4a:15:f2:8f:cf:37:8f:86:2b:1b:57:26: ee:d1:5f:79:40:c6:1a:08:02:78:51:8c:60:27:fa: 5e:ff:bd:2a:96:82:ee:25:3a:3f:6c:f3:79:61:88: af:1e:72:08:6d:08:45:2f:c3:fb:55:db:f0:bd:e9: cb:c9:fc:88:aa:c1:79:37:59:14:f4:02:94:36:be: 77:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:39:2D:8C:B9:EB:F3:69:38:BA:DB:E4:47:95:8F:09:8F:5C:15:EF X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:12:a8:fd:f1:1c:62:d2:ce:55:15:3f:b4:00:7e:d1:b4:f5: 3f:27:2e:a0:44:c2:f5:b4:83:88:55:e6:07:d3:55:51:e4:fc: e5:8f:4a:b1:b4:c3:e2:56:69:d4:b1:f6:d3:df:9f:17:f9:71: 44:9e:45:b9:b4:28:fb:1b:8f:27:ae:b6:cd:26:76:da:be:69: 43:47:e0:17:d1:a3:12:ef:79:85:0f:5a:33:db:b4:05:1f:b2: d0:d8:b7:68:7f:66:1f:00:25:46:ce:66:55:2c:cf:4e:f9:5f: 9a:03:43:27:13:79:21:97:e3:b9:03:8e:7d:08:9d:2b:54:08: 6f:e4:d6:f0:99:a3:2f:8c:36:f3:93:74:80:88:aa:fa:29:32: 58:69:ba:87:8d:ea:94:ac:9e:6c:35:68:55:8d:e7:03:8e:25: 38:44:0f:fa:b8:d9:b6:a3:c3:d1:5c:f2:2a:88:49:2a:51:33: 16:04:53:48:21:af:bf:94:8e:4c:47:70:f0:a2:43:82:33:14: ca:de:b4:39:f9:17:33:ab:47:eb:9a:5a:e2:31:b5:35:ed:73: 83:02:a9:7d:66:14:a1:c8:57:46:20:7c:81:ae:23:78:65:0d: fd:9a:6c:d4:03:ae:ea:99:a4:d6:7e:0d:c2:33:67:6d:bc:d6: c7:e8:b2:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjUxMTA1MDMzNjIxWhcNMjUxMTEyMDMzNjIxWjAYMRYwFAYD VQQDEw02OTBhYzYzNS1iYjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmzRaHyH6kROdDfCQy2i7TCqpiKIzzsr5wwRT1Rt0H7rHi9xjVat8CGVpGbt3 bF9sDr8rzEfeFVwsE1mNNaDp6xGL6vRi1nLYXUN86BjW4WhPc7FBD8GyjUV/Ruf1 5WXZSq6fb5hWDf0xdvqxXpT0pXcYf0BXXEPLnHxptEv2f6xYRnjQ36q/pde/tfug 3lk7ZFJQbS2xgPVVeYbvZX+o0FB5eQ+J1NBRaHvQn8rPEzlWNb7oij1KFfKPzzeP hisbVybu0V95QMYaCAJ4UYxgJ/pe/70qloLuJTo/bPN5YYivHnIIbQhFL8P7Vdvw venLyfyIqsF5N1kU9AKUNr53CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIg5LYy5 6/NpOLrb5EeVjwmPXBXvMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtEqj98Rxi0s5VFT+0AH7RtPU/Jy6gRML1tIOIVeYH01VR5Pzlj0qx tMPiVmnUsfbT358X+XFEnkW5tCj7G48nrrbNJnbavmlDR+AX0aMS73mFD1oz27QF H7LQ2Ldof2YfACVGzmZVLM9O+V+aA0MnE3khl+O5A459CJ0rVAhv5NbwmaMvjDbz k3SAiKr6KTJYabqHjeqUrJ5sNWhVjecDjiU4RA/6uNm2o8PRXPIqiEkqUTMWBFNI Ia+/lI5MR3DwokOCMxTK3rQ5+Rczq0frmlriMbU17XODAql9ZhShyFdGIHyBriN4 ZQ39mmzUA67qmaTWfg3CM2dtvNbH6LJN -----END CERTIFICATE-----Generated at Wed Nov 5 19:17:44 2025 by rpki-client