$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft File: -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json) Hash identifier: WqiEFb86QuaHX8yKS9bwCulJCQFSO/KPuti1Hg1IZfc= Subject key identifier: 58:18:1D:0C:B5:DC:D7:B8:77:25:E7:A2:11:27:F2:EC:48:19:59:69 Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 Certificate issuer: /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Certificate serial: 350E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft Manifest number: 34F5 Signing time: Sun 02 Nov 2025 14:16:08 +0000 Manifest this update: Sun 02 Nov 2025 14:16:07 +0000 Manifest next update: Sun 09 Nov 2025 14:16:07 +0000 Files and hashes: 1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: cTYKpt4e69mOa1kovMinf3WeNucwBarLXI+GTQ+TUAs=) 2: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: jPHSUiUkbozR5N6j9xgdL/cbld0Q8j3JedxabqO04KM=) 3: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: eRpbjrs7GTwfzhpVzYBrg6AgI/qzL8mQbPqmgl8ihsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13582 (0x350e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Validity Not Before: Nov 2 14:16:07 2025 GMT Not After : Nov 9 14:16:07 2025 GMT Subject: CN=690767a8-5c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1f:2b:b4:fd:e3:e6:2b:c3:ce:3e:03:8a:c8: e1:a3:9c:9d:e8:8d:af:a0:ef:dc:91:a7:1b:56:71: 2a:64:9f:46:d2:d9:19:fc:94:09:31:f1:47:c0:32: a6:77:d1:5c:1d:7f:fe:e5:73:e2:35:89:c1:c9:68: b0:0c:60:26:3d:40:42:70:9f:37:d5:fe:cd:05:a3: da:ad:65:41:40:30:38:51:e9:b8:bd:f2:d3:f7:47: d6:da:4d:91:47:08:ad:42:bf:04:0f:fc:0b:6c:b6: d6:a6:8b:68:54:ab:cb:03:8a:88:e0:a0:f9:79:de: fc:43:56:f6:d6:f6:cd:0d:63:99:ed:61:43:49:8d: b6:30:12:a1:05:65:23:ad:c5:4b:23:b9:c7:68:c3: a3:56:e1:da:e9:42:fb:4d:14:f9:6a:e2:b6:c0:6c: 5e:45:b3:38:82:de:35:1e:09:9d:09:0a:f0:2a:3d: 87:03:4c:b4:d6:f9:37:d4:43:ff:8a:01:ad:5e:e2: b9:83:46:f6:02:5e:99:7d:cc:95:65:ad:22:4e:06: 8b:cf:ee:93:3c:0e:7c:09:a6:4a:98:6c:f0:00:90: 30:5a:3e:6d:c0:22:b7:b8:42:65:98:64:76:32:76: 26:b9:f3:d4:c7:0e:82:53:be:f0:cd:7a:b5:ef:a1: f1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:18:1D:0C:B5:DC:D7:B8:77:25:E7:A2:11:27:F2:EC:48:19:59:69 X509v3 Authority Key Identifier: keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:09:df:59:4f:74:54:de:ea:d5:2d:96:74:8f:08:84:82:61: 17:1e:e7:bc:57:5f:fa:e3:aa:62:b6:b4:1a:4d:4e:bc:53:fe: 37:00:05:cd:5e:e8:07:8e:e2:d2:e9:5a:5b:f3:db:f9:37:73: 51:de:9b:88:49:de:d2:01:c8:a6:24:0c:bc:64:87:6b:ec:8e: 90:31:98:e7:a4:0b:6c:d6:a6:c2:7b:8d:1c:0c:2b:84:6e:53: f4:c0:bf:ea:aa:0b:31:8f:d8:f2:32:5f:a3:75:fd:28:77:b6: 03:16:c4:a5:f2:72:52:66:c8:17:6a:59:a3:77:91:9c:86:b7: c3:60:c8:f4:9a:b1:c8:82:89:9a:a8:86:86:4b:6b:21:d5:1f: 53:1e:d9:1b:bb:6a:66:b5:fc:c4:53:af:78:3f:2b:8b:b7:dd: 5e:eb:60:52:7a:70:78:f0:cb:e5:76:98:14:6c:91:75:d5:8f: 6e:f4:d3:a3:3a:54:93:8a:03:a1:9a:6d:79:ab:3f:33:a1:e3: cb:d1:dc:c1:ed:d4:03:55:35:97:85:2f:e3:7a:8a:bb:a8:af: c6:4f:c8:8a:2c:6d:cb:ee:c3:af:09:bf:c1:c8:d6:c6:ab:a0: 8e:56:fe:95:b2:6f:9d:fd:5c:4a:52:5a:42:89:a8:81:71:43: 21:51:84:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MjExMTAvBgNVBAUTKEZBNDE3OTYyN0Y1QjI2NTk0RTU2MzAzNTNBMEI3Nzg1 RTBENjkyQzUwHhcNMjUxMTAyMTQxNjA3WhcNMjUxMTA5MTQxNjA3WjAYMRYwFAYD VQQDEw02OTA3NjdhOC01YzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5x8rtP3j5ivDzj4Disjho5yd6I2voO/ckacbVnEqZJ9G0tkZ/JQJMfFHwDKm d9FcHX/+5XPiNYnByWiwDGAmPUBCcJ831f7NBaParWVBQDA4Uem4vfLT90fW2k2R RwitQr8ED/wLbLbWpotoVKvLA4qI4KD5ed78Q1b21vbNDWOZ7WFDSY22MBKhBWUj rcVLI7nHaMOjVuHa6UL7TRT5auK2wGxeRbM4gt41HgmdCQrwKj2HA0y01vk31EP/ igGtXuK5g0b2Al6ZfcyVZa0iTgaLz+6TPA58CaZKmGzwAJAwWj5twCK3uEJlmGR2 MnYmufPUxw6CU77wzXq176HxmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgYHQy1 3Ne4dyXnohEn8uxIGVlpMB8GA1UdIwQYMBaAFPpBeWJ/WyZZTlYwNToLd4Xg1pLF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS85OUQ2OERDRTFE NjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45YkpsbE9WakExT2d0M2hlRFdr c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1rRjVZbjliSmxsT1ZqQTFPZ3QzaGVEV2tzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTYyMS85OUQ2OERDRTFENjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45Ykps bE9WakExT2d0M2hlRFdrc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrCd9ZT3RU3urVLZZ0jwiEgmEXHue8V1/646pitrQaTU68U/43AAXN XugHjuLS6Vpb89v5N3NR3puISd7SAcimJAy8ZIdr7I6QMZjnpAts1qbCe40cDCuE blP0wL/qqgsxj9jyMl+jdf0od7YDFsSl8nJSZsgXalmjd5GchrfDYMj0mrHIgoma qIaGS2sh1R9THtkbu2pmtfzEU694PyuLt91e62BSenB48MvldpgUbJF11Y9u9NOj OlSTigOhmm15qz8zoePL0dzB7dQDVTWXhS/jeoq7qK/GT8iKLG3L7sOvCb/ByNbG q6COVv6Vsm+d/VxKUlpCiaiBcUMhUYTh -----END CERTIFICATE-----Generated at Tue Nov 4 12:34:56 2025 by rpki-client