$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft File: rg5L7FaP5v7kkvcuTTrLko2cHk8.mft (raw, json) Hash identifier: ncu/NhZNbzPNeeQ9CEpR81kijSncVH+hOEL+PCbCAuw= Subject key identifier: 3F:34:61:C5:BC:A5:BF:70:FB:A9:23:BF:0D:46:82:B3:DF:83:BE:77 Authority key identifier: AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F Certificate issuer: /CN=A91DBF0C/serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft Manifest number: C7 Signing time: Mon 03 Nov 2025 05:50:38 +0000 Manifest this update: Mon 03 Nov 2025 05:50:38 +0000 Manifest next update: Mon 10 Nov 2025 05:50:38 +0000 Files and hashes: 1: rg5L7FaP5v7kkvcuTTrLko2cHk8.crl (hash: Kxl/ik2k+wKWQwR6BU5fnLPoUY6VDTFOqYkUdWbdU20=) 2: 9E4987668C7F11EFB4290976C4F9AE02.roa (hash: cHJy1BLtElHS3p1bo+4QsrHmfc/col4vczERE1sjyMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBF0C, serialNumber=AE0E4BEC568FE6FEE492F72E4D3ACB928D9C1E4F Validity Not Before: Nov 3 05:50:38 2025 GMT Not After : Nov 10 05:50:38 2025 GMT Subject: CN=690842ae-ade8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c7:ba:db:14:43:d4:a8:0b:0c:84:e9:52:12: 16:b3:7b:d6:24:f7:9f:7d:e6:1a:e2:ab:f1:64:99: a6:9e:48:95:a2:7b:cf:d7:4e:d7:ca:01:54:1a:5c: 65:e2:c0:1c:22:d3:bf:99:92:2c:87:dc:1a:2f:e1: 4a:50:01:b8:b7:ed:39:c5:6b:eb:ea:1e:a6:b8:9b: a8:35:84:85:76:7b:10:ff:9f:63:a8:a6:ee:42:91: b7:15:a3:ba:6f:45:fa:df:5e:4e:83:d5:60:df:5c: 5a:f1:b9:cf:e0:21:9a:29:aa:b5:99:55:db:eb:eb: b0:9c:a9:90:09:0c:4f:8c:00:33:13:7d:d1:57:1a: 32:41:df:49:5b:05:af:76:4e:be:d7:16:a1:37:cc: 67:33:38:d0:ad:f6:44:a9:fe:bc:15:40:ff:95:14: 27:98:85:4e:f6:83:4e:c8:c6:d3:0a:9d:22:d7:5b: 53:e5:1c:9a:2c:3d:92:85:22:cc:34:63:e2:9c:fd: eb:f3:fa:f1:f2:06:b5:be:d3:4d:c0:ab:70:c1:2d: ff:dd:79:c6:bd:3e:78:60:7c:25:bb:4f:e4:c3:9d: 80:d7:62:c3:4e:20:11:56:56:4b:9f:d3:d7:1d:02: 90:44:df:d9:1c:c6:27:8f:73:d9:3f:36:94:ca:c9: 2a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:34:61:C5:BC:A5:BF:70:FB:A9:23:BF:0D:46:82:B3:DF:83:BE:77 X509v3 Authority Key Identifier: keyid:AE:0E:4B:EC:56:8F:E6:FE:E4:92:F7:2E:4D:3A:CB:92:8D:9C:1E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rg5L7FaP5v7kkvcuTTrLko2cHk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/414850708C5B11EFA706757FC4F9AE02/rg5L7FaP5v7kkvcuTTrLko2cHk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:b8:e7:0c:1d:ce:a0:4d:94:b2:60:b0:2a:30:72:f5:d2:5a: ad:86:79:b6:5e:36:aa:1b:a3:f0:27:d8:cb:ae:5f:9c:ff:d3: 56:de:36:85:21:75:32:26:1d:65:1f:8f:50:ea:f5:81:74:a1: 68:6c:9d:ae:f4:4b:f0:f1:7b:f3:d8:fa:ab:08:61:eb:2c:f6: 93:4c:4f:48:94:3b:24:a0:b5:bc:d0:89:f6:6d:3a:c4:9e:5a: 18:c9:e7:3f:4e:30:66:93:d7:6e:e3:1a:fd:08:88:34:bd:c4: 3e:8a:4f:a4:32:5c:c2:bc:7d:f7:7d:a3:bd:d1:14:3c:ec:52: 83:9e:15:7d:4f:70:c5:98:ad:51:dc:c1:86:7c:8f:33:4d:81: 57:9b:54:9e:79:5a:69:70:96:c1:53:04:a0:60:30:90:83:c7: cf:16:5f:91:e6:24:33:c1:7c:1c:ac:d3:1c:54:ed:65:b0:6a: 2a:18:cc:2d:f2:9e:5f:b5:5e:c4:35:b2:17:9e:99:8f:68:07: b9:8c:83:f5:1e:61:83:52:b4:2c:63:ce:a3:e5:61:68:51:0e: a4:39:f6:a9:ac:0c:48:b7:d5:9f:45:6c:60:18:3b:cd:76:3c: 15:9d:be:f5:6d:48:dd:80:38:ef:d1:67:12:ef:10:4b:df:a8: 3c:38:fb:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJGMEMxMTAvBgNVBAUTKEFFMEU0QkVDNTY4RkU2RkVFNDkyRjcyRTREM0FDQjky OEQ5QzFFNEYwHhcNMjUxMTAzMDU1MDM4WhcNMjUxMTEwMDU1MDM4WjAYMRYwFAYD VQQDEw02OTA4NDJhZS1hZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMe62xRD1KgLDITpUhIWs3vWJPeffeYa4qvxZJmmnkiVonvP107XygFUGlxl 4sAcItO/mZIsh9waL+FKUAG4t+05xWvr6h6muJuoNYSFdnsQ/59jqKbuQpG3FaO6 b0X6315Og9Vg31xa8bnP4CGaKaq1mVXb6+uwnKmQCQxPjAAzE33RVxoyQd9JWwWv dk6+1xahN8xnMzjQrfZEqf68FUD/lRQnmIVO9oNOyMbTCp0i11tT5RyaLD2ShSLM NGPinP3r8/rx8ga1vtNNwKtwwS3/3XnGvT54YHwlu0/kw52A12LDTiARVlZLn9PX HQKQRN/ZHMYnj3PZPzaUyskqhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD80YcW8 pb9w+6kjvw1GgrPfg753MB8GA1UdIwQYMBaAFK4OS+xWj+b+5JL3Lk06y5KNnB5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkYwQy80MTQ4NTA3MDhD NUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9yZzVMN0ZhUDV2N2trdmN1VFRyTGtvMmNI azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JnNUw3RmFQNXY3a2t2Y3VUVHJMa28yY0hrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkYwQy80MTQ4NTA3MDhDNUIxMUVGQTcwNjc1N0ZDNEY5QUUwMi9yZzVMN0ZhUDV2 N2trdmN1VFRyTGtvMmNIazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDuOcMHc6gTZSyYLAqMHL10lqthnm2XjaqG6PwJ9jLrl+c/9NW3jaF IXUyJh1lH49Q6vWBdKFobJ2u9Evw8Xvz2PqrCGHrLPaTTE9IlDskoLW80In2bTrE nloYyec/TjBmk9du4xr9CIg0vcQ+ik+kMlzCvH33faO90RQ87FKDnhV9T3DFmK1R 3MGGfI8zTYFXm1SeeVppcJbBUwSgYDCQg8fPFl+R5iQzwXwcrNMcVO1lsGoqGMwt 8p5ftV7ENbIXnpmPaAe5jIP1HmGDUrQsY86j5WFoUQ6kOfaprAxIt9WfRWxgGDvN djwVnb71bUjdgDjv0WcS7xBL36g8OPvV -----END CERTIFICATE-----Generated at Tue Nov 4 21:33:28 2025 by rpki-client