$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft File: 5dmsjXWxbbnyPICt2LO72OWLaHg.mft (raw, json) Hash identifier: lX7LB1ydEtodjYwRsHxfvUk2R36+mFlbhd4X24g8UjE= Subject key identifier: DA:BE:2C:29:1B:0C:31:39:8A:47:68:71:BC:43:4A:C5:D1:ED:C0:7D Authority key identifier: E5:D9:AC:8D:75:B1:6D:B9:F2:3C:80:AD:D8:B3:BB:D8:E5:8B:68:78 Certificate issuer: /CN=A91D8400/serialNumber=E5D9AC8D75B16DB9F23C80ADD8B3BBD8E58B6878 Certificate serial: 044C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft Manifest number: 0447 Signing time: Wed 05 Nov 2025 00:19:12 +0000 Manifest this update: Wed 05 Nov 2025 00:19:11 +0000 Manifest next update: Wed 12 Nov 2025 00:19:11 +0000 Files and hashes: 1: 5dmsjXWxbbnyPICt2LO72OWLaHg.crl (hash: iNlqI1nPJlqhEeXR2U52Sl9jXeh/e8jzfR6OHACMIjI=) 2: 46C1646C781611ECADCDAB0EC4F9AE02.roa (hash: X0bJVDOuH3hxzxDqtFhaGE8zyPysnrk6jtT4gfdw6QQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.crl rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1100 (0x44c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8400, serialNumber=E5D9AC8D75B16DB9F23C80ADD8B3BBD8E58B6878 Validity Not Before: Nov 5 00:19:11 2025 GMT Not After : Nov 12 00:19:11 2025 GMT Subject: CN=690a9800-0fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4a:98:f1:d4:93:2a:5a:a2:e1:6f:e9:a4:30: 81:d8:26:74:25:93:02:3c:9b:52:96:dc:2c:9f:f3: e1:d8:26:2c:68:f8:a0:b5:dc:4e:d2:ac:52:db:f7: ac:ce:3b:5e:1f:ab:91:16:f7:66:e4:e0:b0:d4:dc: 16:c0:64:22:e6:a3:9a:e2:62:e0:53:db:3a:c2:ae: 6c:86:c6:2e:ee:51:d7:1c:8b:78:a7:6f:cc:fa:1c: 06:5d:61:89:d5:df:c9:f9:35:52:26:d5:52:47:a2: cc:cd:fa:8a:b0:a5:7e:d7:1c:bc:04:24:2e:cb:da: 42:0c:1e:b9:70:0a:c6:ca:2d:ba:47:d4:f2:06:ef: 5a:82:ea:e1:1a:5a:06:de:17:f9:ef:d1:48:97:4c: f6:e4:e0:cf:b9:c0:04:e8:83:b2:59:0a:8c:9a:19: 6a:98:1e:24:64:bf:aa:8a:94:cb:d2:1f:77:a3:5a: e5:5d:cc:03:2e:1f:ab:28:dd:15:63:9c:a4:1b:33: 60:45:48:35:9d:c2:6d:8e:0a:ac:51:c7:e9:ee:ba: 3e:c0:10:78:04:b3:fd:09:34:b2:94:07:39:21:dc: f5:f3:12:94:75:54:4c:24:37:44:fb:24:99:ca:d5: 25:61:f2:98:a0:09:d2:33:73:07:1c:00:90:57:f1: af:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BE:2C:29:1B:0C:31:39:8A:47:68:71:BC:43:4A:C5:D1:ED:C0:7D X509v3 Authority Key Identifier: keyid:E5:D9:AC:8D:75:B1:6D:B9:F2:3C:80:AD:D8:B3:BB:D8:E5:8B:68:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7d:bd:e7:67:fb:47:93:c4:f4:a2:38:c2:f3:2e:d3:5e:a2: 47:d3:90:53:e2:54:33:6a:00:e9:81:90:71:12:bc:ae:4f:2f: 9d:0f:13:c4:9d:4d:23:12:fc:be:01:57:f7:03:5d:2d:ea:f0: 5e:6f:c5:96:d9:ae:19:9f:3f:77:9f:56:62:bb:ba:21:79:d0: 1c:67:36:f7:22:03:a5:e9:4a:cd:fd:5c:9c:7f:23:5a:63:39: 80:1f:35:21:b9:84:df:e7:84:84:0b:12:01:a9:cc:71:62:05: 36:1a:59:48:ff:f1:ab:22:60:f6:2f:6b:b6:0e:68:b0:2e:c5: 27:44:54:aa:de:de:e2:cc:81:31:96:51:6d:14:c5:31:cf:22: b4:e7:d8:4d:24:40:d2:97:0b:11:ee:70:4e:92:95:4f:80:17: 15:77:1d:e2:90:e0:0d:63:d0:ad:ff:a0:61:20:12:2a:83:04: 3a:ce:27:06:92:b2:d5:4b:db:bd:d5:f1:a6:fa:fd:6d:5c:ee: a3:37:a5:b3:2b:f5:b8:60:61:bc:69:89:7f:ef:42:0c:99:89: 74:16:70:7d:08:9f:38:09:e7:d9:93:d7:33:10:21:4f:c9:1d: 2c:4d:5c:10:d1:78:e1:0f:5d:72:9e:3c:e2:bd:ff:74:1a:6f: 5e:d9:92:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg0MDAxMTAvBgNVBAUTKEU1RDlBQzhENzVCMTZEQjlGMjNDODBBREQ4QjNCQkQ4 RTU4QjY4NzgwHhcNMjUxMTA1MDAxOTExWhcNMjUxMTEyMDAxOTExWjAYMRYwFAYD VQQDEw02OTBhOTgwMC0wZmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0qY8dSTKlqi4W/ppDCB2CZ0JZMCPJtSltwsn/Ph2CYsaPigtdxO0qxS2/es zjteH6uRFvdm5OCw1NwWwGQi5qOa4mLgU9s6wq5shsYu7lHXHIt4p2/M+hwGXWGJ 1d/J+TVSJtVSR6LMzfqKsKV+1xy8BCQuy9pCDB65cArGyi26R9TyBu9agurhGloG 3hf579FIl0z25ODPucAE6IOyWQqMmhlqmB4kZL+qipTL0h93o1rlXcwDLh+rKN0V Y5ykGzNgRUg1ncJtjgqsUcfp7ro+wBB4BLP9CTSylAc5Idz18xKUdVRMJDdE+ySZ ytUlYfKYoAnSM3MHHACQV/GvCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNq+LCkb DDE5ikdocbxDSsXR7cB9MB8GA1UdIwQYMBaAFOXZrI11sW258jyArdizu9jli2h4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODQwMC9GNjgxQkJBNDc4 MTExMUVDQTM5N0QwMzRDNEY5QUUwMi81ZG1zalhXeGJibnlQSUN0MkxPNzJPV0xh SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVkbXNqWFd4YmJueVBJQ3QyTE83Mk9XTGFIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODQwMC9GNjgxQkJBNDc4MTExMUVDQTM5N0QwMzRDNEY5QUUwMi81ZG1zalhXeGJi bnlQSUN0MkxPNzJPV0xhSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOfb3nZ/tHk8T0ojjC8y7TXqJH05BT4lQzagDpgZBxEryuTy+dDxPE nU0jEvy+AVf3A10t6vBeb8WW2a4Znz93n1Ziu7ohedAcZzb3IgOl6UrN/VycfyNa YzmAHzUhuYTf54SECxIBqcxxYgU2GllI//GrImD2L2u2DmiwLsUnRFSq3t7izIEx llFtFMUxzyK059hNJEDSlwsR7nBOkpVPgBcVdx3ikOANY9Ct/6BhIBIqgwQ6zicG krLVS9u91fGm+v1tXO6jN6WzK/W4YGG8aYl/70IMmYl0FnB9CJ84CefZk9czECFP yR0sTVwQ0XjhD11ynjzivf90Gm9e2ZL6 -----END CERTIFICATE-----Generated at Wed Nov 5 10:01:38 2025 by rpki-client