$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft File: 5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft (raw, json) Hash identifier: BlGrDzx3L0zGhut2AhKnBnGnxblyrNIAyV8MuKiL74Y= Subject key identifier: DE:31:BE:4F:A6:76:AF:AD:25:D5:6C:EC:50:A0:EB:A9:DF:6E:83:04 Authority key identifier: E4:5F:61:EF:BC:B2:E7:B1:E4:14:B2:CB:DC:34:50:F7:F8:46:18:9D Certificate issuer: /CN=A91E4ED1/serialNumber=E45F61EFBCB2E7B1E414B2CBDC3450F7F846189D Certificate serial: 0C72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5F9h77yy57HkFLLL3DRQ9_hGGJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft Manifest number: 0C70 Signing time: Tue 04 Nov 2025 18:35:31 +0000 Manifest this update: Tue 04 Nov 2025 18:35:30 +0000 Manifest next update: Tue 11 Nov 2025 18:35:30 +0000 Files and hashes: 1: 5F9h77yy57HkFLLL3DRQ9_hGGJ0.crl (hash: rMD5d2b+5rLxzZpQigwNzpRCutGAkG1UEhdXPtTeiOI=) 2: D77C5AC003E611F0A9F5535FC4F9AE02.roa (hash: C3dI3f47oUkTpODJD7lPzsLlPec49Cck1X3kjiuVXDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.crl rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5F9h77yy57HkFLLL3DRQ9_hGGJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3186 (0xc72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4ED1, serialNumber=E45F61EFBCB2E7B1E414B2CBDC3450F7F846189D Validity Not Before: Nov 4 18:35:30 2025 GMT Not After : Nov 11 18:35:30 2025 GMT Subject: CN=690a4772-b2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:27:94:2f:c9:11:bb:d6:f7:32:bd:1d:f0:36: be:29:c4:7c:03:2d:bb:6c:c8:de:26:23:e4:b8:4b: 2e:5e:02:da:61:7c:79:25:c3:9f:77:78:a6:e0:b7: 31:a2:d7:ff:85:88:b1:83:78:cb:a0:31:f8:56:9f: cb:84:d5:42:b4:3e:5e:76:f1:30:fb:15:e4:d8:6f: 4a:e0:e5:fc:0e:9c:0a:d0:2e:a2:ad:95:5b:4b:1b: 1e:ed:51:93:51:49:52:a9:65:6f:29:2b:60:00:c0: cf:48:2e:b9:17:ff:15:c0:95:c4:43:66:a0:a9:d0: 91:ce:17:58:ec:77:fe:31:02:a2:72:9b:98:04:fc: 92:fe:18:e2:f5:ae:3d:31:6b:17:e6:b9:fd:c4:e1: 3e:b2:c0:57:d0:18:94:7d:c9:d8:a5:79:34:b4:ab: 75:b8:42:53:bc:5a:cf:31:52:28:aa:94:e0:c8:f8: f5:82:47:59:e0:b5:3a:5d:18:e2:1d:dc:e0:1a:54: 24:a7:f9:0f:a7:4f:d8:63:1c:2e:83:a2:9e:2e:99: 8b:af:d6:99:5d:a8:45:f5:47:7c:27:41:cf:fa:a7: 03:73:b9:a1:03:57:59:29:ad:3b:e6:0a:01:1a:e7: 14:c7:c8:a1:9d:99:a2:68:a6:e3:b9:5f:74:d8:35: 11:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:31:BE:4F:A6:76:AF:AD:25:D5:6C:EC:50:A0:EB:A9:DF:6E:83:04 X509v3 Authority Key Identifier: keyid:E4:5F:61:EF:BC:B2:E7:B1:E4:14:B2:CB:DC:34:50:F7:F8:46:18:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5F9h77yy57HkFLLL3DRQ9_hGGJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:4f:63:8c:3c:26:9b:c8:e8:aa:ff:68:86:90:20:b0:a9:78: a0:99:c7:2a:13:75:b9:fc:81:a7:9f:34:f5:bf:52:13:5a:c0: 5c:70:09:e2:ad:66:a9:14:68:77:0e:24:82:24:42:06:a9:77: 65:bb:31:b0:d3:bd:0d:be:e6:45:af:49:08:37:1d:34:c3:05: 22:33:e3:ba:bf:e1:7b:dd:90:2b:cb:13:31:97:1a:18:17:50: b0:3a:33:30:c9:06:2b:91:ee:12:5f:00:d2:52:5d:da:67:39: ba:8e:5b:4f:ff:1a:ae:2e:76:7e:74:27:e7:e2:af:85:29:3b: 11:78:0b:e1:fc:b8:f0:0b:75:a8:75:6c:26:b4:36:91:1a:13: 19:b8:3c:6f:f4:49:a1:da:e1:2f:31:c9:4a:98:be:e2:bc:fc: 86:d0:da:30:8f:51:36:f6:aa:1e:ef:68:c3:dd:6a:0e:70:ee: fe:f6:88:1a:cc:c4:98:aa:2b:99:14:32:b3:64:ba:b5:89:e7: 2b:2f:7c:3d:1c:4a:86:93:8d:49:6b:1f:e6:3a:6f:3f:18:f4: c3:88:8f:58:a8:dd:5e:9b:74:0a:2e:c3:c6:3f:cb:d3:d6:d9: 08:97:12:f7:90:31:70:da:7a:91:78:ab:60:1b:55:72:fd:52: bc:16:d6:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRDExMTAvBgNVBAUTKEU0NUY2MUVGQkNCMkU3QjFFNDE0QjJDQkRDMzQ1MEY3 Rjg0NjE4OUQwHhcNMjUxMTA0MTgzNTMwWhcNMjUxMTExMTgzNTMwWjAYMRYwFAYD VQQDEw02OTBhNDc3Mi1iMmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsieUL8kRu9b3Mr0d8Da+KcR8Ay27bMjeJiPkuEsuXgLaYXx5JcOfd3im4Lcx otf/hYixg3jLoDH4Vp/LhNVCtD5edvEw+xXk2G9K4OX8DpwK0C6irZVbSxse7VGT UUlSqWVvKStgAMDPSC65F/8VwJXEQ2agqdCRzhdY7Hf+MQKicpuYBPyS/hji9a49 MWsX5rn9xOE+ssBX0BiUfcnYpXk0tKt1uEJTvFrPMVIoqpTgyPj1gkdZ4LU6XRji HdzgGlQkp/kPp0/YYxwug6KeLpmLr9aZXahF9Ud8J0HP+qcDc7mhA1dZKa075goB GucUx8ihnZmiaKbjuV902DURTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4xvk+m dq+tJdVs7FCg66nfboMEMB8GA1UdIwQYMBaAFORfYe+8suex5BSyy9w0UPf4Rhid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVEMS81RkRENzhCMjBC NjQxMUVBOTA5MjMwNjZDNEY5QUUwMi81RjloNzd5eTU3SGtGTExMM0RSUTlfaEdH SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVGOWg3N3l5NTdIa0ZMTEwzRFJROV9oR0dKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVEMS81RkRENzhCMjBCNjQxMUVBOTA5MjMwNjZDNEY5QUUwMi81RjloNzd5eTU3 SGtGTExMM0RSUTlfaEdHSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLT2OMPCabyOiq/2iGkCCwqXigmccqE3W5/IGnnzT1v1ITWsBccAni rWapFGh3DiSCJEIGqXdluzGw070NvuZFr0kINx00wwUiM+O6v+F73ZAryxMxlxoY F1CwOjMwyQYrke4SXwDSUl3aZzm6jltP/xquLnZ+dCfn4q+FKTsReAvh/LjwC3Wo dWwmtDaRGhMZuDxv9Emh2uEvMclKmL7ivPyG0Nowj1E29qoe72jD3WoOcO7+9oga zMSYqiuZFDKzZLq1iecrL3w9HEqGk41Jax/mOm8/GPTDiI9YqN1em3QKLsPGP8vT 1tkIlxL3kDFw2nqReKtgG1Vy/VK8Fta/ -----END CERTIFICATE-----Generated at Wed Nov 5 12:28:35 2025 by rpki-client