$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft File: 5yN2M529XTAqWcz6d6wJzRcjlU0.mft (raw, json) Hash identifier: 6rztG3xd7l+AYn++MdOj5GeIAT3iHRUNsjacg9dbkME= Subject key identifier: 94:1A:6E:8E:F9:87:13:FA:42:F6:A8:C7:56:08:A4:76:2B:FA:38:50 Authority key identifier: E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D Certificate issuer: /CN=A91CD60C/serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft Manifest number: C5 Signing time: Wed 05 Nov 2025 06:06:56 +0000 Manifest this update: Wed 05 Nov 2025 06:06:56 +0000 Manifest next update: Wed 12 Nov 2025 06:06:56 +0000 Files and hashes: 1: 5yN2M529XTAqWcz6d6wJzRcjlU0.crl (hash: a8VHIvSHm0I/UnxTozw88UsqsrulKDDJdPvePdj6iek=) 2: AC8EE79E975B11EFB1D18E82C4F9AE02.roa (hash: sqDKPZ1qrocmicYcNGEqHeOR7eFUFOhb8W65lVkqel0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD60C, serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D Validity Not Before: Nov 5 06:06:56 2025 GMT Not After : Nov 12 06:06:56 2025 GMT Subject: CN=690ae980-3a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:be:f2:2a:c0:3e:0c:75:9f:20:70:71:64: ca:6e:52:ed:f1:fc:99:97:df:33:b4:b1:aa:be:d6: a5:ad:25:c9:8a:3b:cc:36:e4:d5:d9:8a:50:d2:09: 90:db:aa:2e:5d:40:ef:bf:17:cb:c9:b1:5c:3a:de: af:30:29:bd:29:48:ad:7f:ab:f4:96:b3:8d:70:bc: 66:90:7f:b3:dc:fb:43:9d:a5:b1:61:86:a8:b1:8d: d2:56:3b:9d:85:e2:bb:e2:ee:4e:11:ea:ac:8f:26: 34:94:f2:66:32:ad:93:0c:00:a4:1b:3f:93:ec:37: 52:8b:81:23:e7:2b:2e:eb:86:91:25:bb:92:2b:fb: dd:91:a9:3f:da:bb:b4:7f:d0:8a:a5:c7:9a:d1:fa: a8:3f:cb:b3:a0:66:67:ce:ca:c9:f9:70:3c:80:9f: 93:10:4c:0e:b4:83:36:5e:bb:a0:f5:70:49:ab:83: b4:b9:ab:c5:58:3d:22:c6:d0:97:22:71:77:0c:f3: b5:4a:df:7b:21:13:79:22:0a:37:ae:53:4b:ff:6f: da:b8:34:a3:a4:2e:00:ab:ef:32:71:8a:29:f0:f6: e4:b4:36:76:3d:1d:c2:2f:92:d3:db:b9:01:ac:82: 7b:6f:05:1c:14:00:d0:b1:ba:74:16:f6:43:c9:32: a5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1A:6E:8E:F9:87:13:FA:42:F6:A8:C7:56:08:A4:76:2B:FA:38:50 X509v3 Authority Key Identifier: keyid:E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:58:58:d0:88:6c:14:d6:83:e0:52:68:da:7e:d2:79:83:6e: 9d:59:ea:ce:65:bf:f3:8e:99:f2:f2:e6:ff:cd:73:71:1c:dc: 63:b9:78:c6:dd:2b:4f:dc:3b:da:2b:61:4c:2e:d2:78:da:e2: 59:d3:7a:6e:84:b9:c9:21:a5:0e:39:09:b7:85:0c:1b:08:7f: 19:6d:c6:b1:b4:69:f4:15:01:9c:dd:75:1e:e2:0a:e8:79:ba: 8e:ee:57:d3:29:e9:b9:00:09:59:ff:e6:a9:48:00:60:f7:f2: 8b:80:0f:80:03:f4:55:11:5c:8e:47:a5:bc:80:c3:16:68:4d: e8:64:e7:07:aa:51:e9:87:2a:c8:89:cb:6e:41:15:84:b6:35: 0f:13:a0:a4:64:ec:45:1c:15:7f:b9:29:63:ad:96:63:00:4a: 37:a0:f0:85:83:96:f9:0e:25:ac:f9:f8:57:ba:63:a7:f1:6b: 8c:6b:67:72:a5:72:0c:49:e7:e4:6f:22:80:47:ee:3c:3f:75: 67:2e:69:d3:4e:f4:ce:98:3a:7d:ab:d1:d0:a3:ca:79:38:d7: 87:4a:ce:ac:d2:62:43:2f:b6:59:ca:32:d5:c3:8f:7d:5d:94: c5:d8:9b:d7:6d:db:5e:20:1a:ea:ea:e9:33:4b:d6:c9:e7:64: f4:b0:3c:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q2MEMxMTAvBgNVBAUTKEU3MjM3NjMzOURCRDVEMzAyQTU5Q0NGQTc3QUMwOUNE MTcyMzk1NEQwHhcNMjUxMTA1MDYwNjU2WhcNMjUxMTEyMDYwNjU2WjAYMRYwFAYD VQQDEw02OTBhZTk4MC0zYTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoi+8irAPgx1nyBwcWTKblLt8fyZl98ztLGqvtalrSXJijvMNuTV2YpQ0gmQ 26ouXUDvvxfLybFcOt6vMCm9KUitf6v0lrONcLxmkH+z3PtDnaWxYYaosY3SVjud heK74u5OEeqsjyY0lPJmMq2TDACkGz+T7DdSi4Ej5ysu64aRJbuSK/vdkak/2ru0 f9CKpcea0fqoP8uzoGZnzsrJ+XA8gJ+TEEwOtIM2Xrug9XBJq4O0uavFWD0ixtCX InF3DPO1St97IRN5Igo3rlNL/2/auDSjpC4Aq+8ycYop8PbktDZ2PR3CL5LT27kB rIJ7bwUcFADQsbp0FvZDyTKlaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQabo75 hxP6Qvaox1YIpHYr+jhQMB8GA1UdIwQYMBaAFOcjdjOdvV0wKlnM+nesCc0XI5VN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDYwQy8xODhGMTE3Mjk3 M0QxMUVGQTUxOTYwNThDNEY5QUUwMi81eU4yTTUyOVhUQXFXY3o2ZDZ3SnpSY2ps VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV5TjJNNTI5WFRBcVdjejZkNndKelJjamxVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDYwQy8xODhGMTE3Mjk3M0QxMUVGQTUxOTYwNThDNEY5QUUwMi81eU4yTTUyOVhU QXFXY3o2ZDZ3SnpSY2psVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5WFjQiGwU1oPgUmjaftJ5g26dWerOZb/zjpny8ub/zXNxHNxjuXjG 3StP3DvaK2FMLtJ42uJZ03puhLnJIaUOOQm3hQwbCH8ZbcaxtGn0FQGc3XUe4gro ebqO7lfTKem5AAlZ/+apSABg9/KLgA+AA/RVEVyOR6W8gMMWaE3oZOcHqlHphyrI ictuQRWEtjUPE6CkZOxFHBV/uSljrZZjAEo3oPCFg5b5DiWs+fhXumOn8WuMa2dy pXIMSefkbyKAR+48P3VnLmnTTvTOmDp9q9HQo8p5ONeHSs6s0mJDL7ZZyjLVw499 XZTF2JvXbdteIBrq6ukzS9bJ52T0sDy5 -----END CERTIFICATE-----Generated at Wed Nov 5 16:42:30 2025 by rpki-client