$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft File: 5C9d7yZZtef6JwN2jpSH79xZW7A.mft (raw, json) Hash identifier: GLXjm3CR0LeVRbNOz9JZNZP5/7O9E2v1rBHTxfr9jKc= Subject key identifier: CE:5E:4C:0F:3E:9C:9D:66:65:33:BB:9F:4C:BF:29:38:FC:30:3F:1C Authority key identifier: E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 Certificate issuer: /CN=A91CC4A7/serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft Manifest number: 0A Signing time: Mon 03 Nov 2025 08:00:02 +0000 Manifest this update: Mon 03 Nov 2025 08:00:01 +0000 Manifest next update: Mon 10 Nov 2025 08:00:01 +0000 Files and hashes: 1: 5C9d7yZZtef6JwN2jpSH79xZW7A.crl (hash: AHe97nxXnApZE6QYn2P1uUy04dJTWIN6WEryvwdb46U=) 2: 944C9A24AB4511F09AA0C458C4F9AE02.roa (hash: Vrxbp4tg7Ch8ynxq67uyQgBvWF4QcT0YiwQ07xaqChg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC4A7, serialNumber=E42F5DEF2659B5E7FA2703768E9487EFDC595BB0 Validity Not Before: Nov 3 08:00:01 2025 GMT Not After : Nov 10 08:00:01 2025 GMT Subject: CN=69086102-72b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:08:87:7f:bd:db:5c:a7:d1:4f:d6:85:8f:1c: 85:d3:46:b4:05:7b:e1:73:2b:87:89:59:ff:ae:b4: 30:cb:4a:d9:2b:d2:57:cf:fb:a7:dc:57:b5:10:78: 9a:cf:6b:8e:9e:5d:da:64:c4:22:6e:27:dd:75:78: d1:08:35:2a:9d:0a:cc:88:bb:0e:9b:82:b7:5f:47: 08:9a:c6:a1:c7:ea:c8:0c:c2:78:a8:b4:c0:c5:ab: 72:c8:29:2e:80:e1:58:af:1c:7d:99:bb:45:ba:28: 5e:7b:8c:f3:0c:6a:b1:c7:9a:66:e4:84:43:1d:7b: 79:09:61:44:a7:b2:dc:60:51:3c:8c:88:e8:ab:c3: b0:09:cb:de:b4:2e:88:5e:cb:86:95:ec:e3:7d:7e: 81:71:79:60:06:b1:2e:d3:2c:0c:db:a4:47:4e:66: 5b:f9:42:aa:86:7c:35:ea:30:a9:cb:8c:47:77:c0: 75:ab:a4:8d:01:a6:e5:b4:64:37:f5:b0:c3:a7:e4: b2:61:a2:44:ec:44:65:02:59:21:e4:c1:0b:4e:b4: f1:26:33:18:80:25:25:2f:94:ca:dd:96:47:2b:26: d6:4d:03:6c:b0:55:f2:9f:e7:f3:c4:46:e3:8d:b3: 45:25:ad:ae:65:10:6f:41:d4:91:a8:7b:00:4a:3c: 23:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5E:4C:0F:3E:9C:9D:66:65:33:BB:9F:4C:BF:29:38:FC:30:3F:1C X509v3 Authority Key Identifier: keyid:E4:2F:5D:EF:26:59:B5:E7:FA:27:03:76:8E:94:87:EF:DC:59:5B:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5C9d7yZZtef6JwN2jpSH79xZW7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC4A7/FA98FB3EAB4411F0843D0657C4F9AE02/5C9d7yZZtef6JwN2jpSH79xZW7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:83:10:14:14:f9:51:87:f6:38:58:4d:c7:9c:e9:64:2f:24: dc:2a:f6:10:fa:36:53:ef:80:e9:68:f0:51:39:b7:8f:b3:72: 1f:37:41:fb:3f:ad:03:41:e1:56:96:0f:58:e1:ef:b1:e2:d9: 44:d5:95:fb:33:40:ee:f1:89:d9:21:f4:93:c6:20:cd:08:95: 78:87:75:f6:d4:70:14:99:90:cc:8e:ea:68:28:1f:d5:27:d1: 04:6b:8c:77:8b:af:eb:04:e4:9b:48:a0:33:7f:d5:ce:df:30: b6:ab:0b:9e:57:56:cf:b4:f5:85:9f:01:a8:26:0b:08:ee:00: 6a:5d:6f:2b:84:08:01:a4:6a:8d:d5:82:a2:1e:91:32:e5:08: 2b:d2:da:41:7b:fb:3e:cd:d9:b0:51:a8:23:ba:63:59:b9:13: c4:53:99:ea:17:ce:58:16:13:5f:3c:bb:92:79:73:ca:88:48: e7:af:ee:43:2b:3d:6c:83:b3:ed:3a:32:c8:9d:da:09:79:a4: 2e:fe:0c:3e:f4:6b:ae:c3:b3:cd:b7:f6:68:4c:77:b5:7b:d8: 5c:2d:35:0b:84:1d:04:07:35:82:a1:4c:77:09:7a:4b:12:ab: 27:bd:54:7a:44:81:1e:e3:e1:bd:78:65:fc:56:9a:f4:0b:1e: c4:c2:bd:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzRBNzExMC8GA1UEBRMoRTQyRjVERUYyNjU5QjVFN0ZBMjcwMzc2OEU5NDg3RUZE QzU5NUJCMDAeFw0yNTExMDMwODAwMDFaFw0yNTExMTAwODAwMDFaMBgxFjAUBgNV BAMTDTY5MDg2MTAyLTcyYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzCId/vdtcp9FP1oWPHIXTRrQFe+FzK4eJWf+utDDLStkr0lfP+6fcV7UQeJrP a46eXdpkxCJuJ911eNEINSqdCsyIuw6bgrdfRwiaxqHH6sgMwniotMDFq3LIKS6A 4VivHH2Zu0W6KF57jPMMarHHmmbkhEMde3kJYUSnstxgUTyMiOirw7AJy960Lohe y4aV7ON9foFxeWAGsS7TLAzbpEdOZlv5QqqGfDXqMKnLjEd3wHWrpI0BpuW0ZDf1 sMOn5LJhokTsRGUCWSHkwQtOtPEmMxiAJSUvlMrdlkcrJtZNA2ywVfKf5/PERuON s0Ulra5lEG9B1JGoewBKPCNzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzl5MDz6c nWZlM7ufTL8pOPwwPxwwHwYDVR0jBBgwFoAU5C9d7yZZtef6JwN2jpSH79xZW7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDNEE3L0ZBOThGQjNFQUI0 NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVmNkp3TjJqcFNINzl4Wlc3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNUM5ZDd5Wlp0ZWY2SndOMmpwU0g3OXhaVzdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND NEE3L0ZBOThGQjNFQUI0NDExRjA4NDNEMDY1N0M0RjlBRTAyLzVDOWQ3eVpadGVm Nkp3TjJqcFNINzl4Wlc3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHuDEBQU+VGH9jhYTcec6WQvJNwq9hD6NlPvgOlo8FE5t4+zch83Qfs/ rQNB4VaWD1jh77Hi2UTVlfszQO7xidkh9JPGIM0IlXiHdfbUcBSZkMyO6mgoH9Un 0QRrjHeLr+sE5JtIoDN/1c7fMLarC55XVs+09YWfAagmCwjuAGpdbyuECAGkao3V gqIekTLlCCvS2kF7+z7N2bBRqCO6Y1m5E8RTmeoXzlgWE188u5J5c8qISOev7kMr PWyDs+06Msid2gl5pC7+DD70a67Ds8239mhMd7V72FwtNQuEHQQHNYKhTHcJeksS qye9VHpEgR7j4b14ZfxWmvQLHsTCvTo= -----END CERTIFICATE-----Generated at Tue Nov 4 19:13:55 2025 by rpki-client