$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft File: 5wYBKhBr0JRljmBMVgMFDxTcP0w.mft (raw, json) Hash identifier: gIsi0HMAtyGL5egYn7+rSfDhmkp2KG67zoXa8xMpEmg= Subject key identifier: 9C:BD:2E:D4:C0:8D:33:D3:7A:F7:26:BA:40:3A:98:39:A1:FA:0D:72 Authority key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C Certificate issuer: /CN=A91D94CD/serialNumber=E706012A106BD094658E604C5603050F14DC3F4C Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft Manifest number: 13 Signing time: Mon 03 Nov 2025 07:55:39 +0000 Manifest this update: Mon 03 Nov 2025 07:55:38 +0000 Manifest next update: Mon 10 Nov 2025 07:55:38 +0000 Files and hashes: 1: 5wYBKhBr0JRljmBMVgMFDxTcP0w.crl (hash: fJGCpRRDhCs0onnf9nePBpwCzBsOIhLM/uxsEZtENMI=) 2: 67D535ACA32311F0A8D9D520C4F9AE02.roa (hash: ZY5NmPmVYKYD8Ao1eKkQAecn1eXKiXTVvX4cp2N0VAQ=) 3: 6767E894A32311F0A8D9D520C4F9AE02.roa (hash: qcRG/dop8kZF9v/2SljCJ8so+bQR2vG4pDOzpAMHKg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:55:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C Validity Not Before: Nov 3 07:55:38 2025 GMT Not After : Nov 10 07:55:38 2025 GMT Subject: CN=69085ffa-0522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:9b:22:49:38:85:f8:55:b3:c1:82:fc:6c:e6: 74:18:e9:12:07:5c:75:bb:a3:42:31:61:28:02:a2: c9:df:f4:ea:d8:98:b9:b6:27:0b:b1:36:a1:82:2e: 15:9d:0f:93:b7:4f:ec:f2:28:be:6d:e3:0c:ba:e0: ef:f6:14:a7:39:a9:1a:77:68:36:78:b7:0a:82:b0: 87:b6:19:ff:27:db:c7:ff:3e:43:2d:85:50:bf:1f: 88:c5:5c:d6:61:ac:fd:ee:c6:aa:a5:7a:c5:a9:d4: 40:25:7d:90:6b:46:54:0c:a1:9a:16:b1:11:ae:79: de:d4:ae:5e:68:47:b6:b2:6e:be:72:51:50:57:0b: f4:72:2d:ef:bb:76:af:ea:f5:2f:4f:28:b0:74:c6: 5c:16:7d:b6:28:7b:94:6d:d9:ed:8b:10:95:3e:9c: 0f:2b:54:5c:54:0d:ce:46:8c:1e:da:9f:52:a5:17: 68:38:12:8f:51:c9:22:28:a1:d8:a5:c4:39:fd:88: 91:7c:1d:85:d3:29:35:d7:49:ff:02:0b:83:c7:42: 54:36:52:7f:12:b5:57:7c:46:19:f8:7c:1d:55:d0: 5e:16:7d:8a:e3:95:ed:fd:96:a7:49:0d:24:aa:44: ec:5b:e5:d0:10:ae:57:17:4f:32:09:d3:37:d0:60: cd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BD:2E:D4:C0:8D:33:D3:7A:F7:26:BA:40:3A:98:39:A1:FA:0D:72 X509v3 Authority Key Identifier: keyid:E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ae:d7:7a:4a:bb:a1:ba:6e:6a:d0:8e:47:fd:68:06:43:38: e2:79:80:99:08:bf:6f:fd:c4:ab:3d:27:ae:34:86:2b:49:6c: a4:a2:34:55:77:65:26:72:30:0e:27:93:56:c5:11:35:f1:13: b2:5e:9a:5c:b0:23:e1:57:32:ff:78:b7:ef:fd:92:63:58:5c: 97:05:d6:16:78:87:21:61:32:e7:ea:68:d2:43:e9:8f:11:a5: 72:48:9f:56:54:3f:18:0a:0e:9f:2e:2f:5e:25:79:98:ed:92: c8:98:de:2b:e6:5c:66:5c:ee:db:13:30:02:9d:cd:62:15:89: 6f:b8:21:f3:2c:4d:5c:33:fb:fc:81:64:27:54:75:ec:32:a7: 1f:25:13:16:39:7c:7c:97:7c:7b:db:dd:84:9e:e8:21:16:41: 25:05:49:87:d8:59:c9:59:3e:ef:f7:91:18:b1:df:bf:97:8a: 13:cb:41:db:7f:0d:5f:e7:06:c9:c6:66:ef:98:f6:d9:8d:2d: bb:e2:17:94:9d:6e:26:92:33:ad:6b:af:b6:0c:b1:ff:8e:98: a1:f8:28:12:1a:e2:28:e8:4b:b1:34:7a:05:bf:6a:4f:3b:1a: 9b:a1:6c:ef:7c:dc:9a:e0:e5:16:4b:e7:31:86:50:9d:97:64: f4:6c:7c:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTRDRDExMC8GA1UEBRMoRTcwNjAxMkExMDZCRDA5NDY1OEU2MDRDNTYwMzA1MEYx NERDM0Y0QzAeFw0yNTExMDMwNzU1MzhaFw0yNTExMTAwNzU1MzhaMBgxFjAUBgNV BAMTDTY5MDg1ZmZhLTA1MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD7myJJOIX4VbPBgvxs5nQY6RIHXHW7o0IxYSgCosnf9OrYmLm2JwuxNqGCLhWd D5O3T+zyKL5t4wy64O/2FKc5qRp3aDZ4twqCsIe2Gf8n28f/PkMthVC/H4jFXNZh rP3uxqqlesWp1EAlfZBrRlQMoZoWsRGued7Url5oR7aybr5yUVBXC/RyLe+7dq/q 9S9PKLB0xlwWfbYoe5Rt2e2LEJU+nA8rVFxUDc5GjB7an1KlF2g4Eo9RySIoodil xDn9iJF8HYXTKTXXSf8CC4PHQlQ2Un8StVd8Rhn4fB1V0F4WfYrjle39lqdJDSSq ROxb5dAQrlcXTzIJ0zfQYM1PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnL0u1MCN M9N69ya6QDqYOaH6DXIwHwYDVR0jBBgwFoAU5wYBKhBr0JRljmBMVgMFDxTcP0ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5NENELzJDRDdGRDBFOUVD ODExRjA4Q0QyQUM3QkM0RjlBRTAyLzV3WUJLaEJyMEpSbGptQk1WZ01GRHhUY1Aw dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNXdZQktoQnIwSlJsam1CTVZnTUZEeFRjUDB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 NENELzJDRDdGRDBFOUVDODExRjA4Q0QyQUM3QkM0RjlBRTAyLzV3WUJLaEJyMEpS bGptQk1WZ01GRHhUY1Awdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHyu13pKu6G6bmrQjkf9aAZDOOJ5gJkIv2/9xKs9J640hitJbKSiNFV3 ZSZyMA4nk1bFETXxE7JemlywI+FXMv94t+/9kmNYXJcF1hZ4hyFhMufqaNJD6Y8R pXJIn1ZUPxgKDp8uL14leZjtksiY3ivmXGZc7tsTMAKdzWIViW+4IfMsTVwz+/yB ZCdUdewypx8lExY5fHyXfHvb3YSe6CEWQSUFSYfYWclZPu/3kRix37+XihPLQdt/ DV/nBsnGZu+Y9tmNLbviF5SdbiaSM61rr7YMsf+OmKH4KBIa4ijoS7E0egW/ak87 GpuhbO983Jrg5RZL5zGGUJ2XZPRsfMg= -----END CERTIFICATE-----Generated at Wed Nov 5 00:03:06 2025 by rpki-client