$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft File: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft (raw, json) Hash identifier: fYpVF7JK5PJczZXEDxyJT3s006dOY+NARlLrdF7aiaI= Subject key identifier: F0:48:EA:F3:9F:2E:83:20:F7:9F:C5:84:6E:70:4E:D3:30:06:63:19 Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 Certificate issuer: /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Certificate serial: 351B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft Manifest number: 34F2 Signing time: Tue 04 Nov 2025 15:08:26 +0000 Manifest this update: Tue 04 Nov 2025 15:08:26 +0000 Manifest next update: Tue 11 Nov 2025 15:08:26 +0000 Files and hashes: 1: 5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl (hash: fnbQV5xERjE3T8gWXtk9aDCaYYis1uQV/4RB12viZL8=) 2: 32DFCCDCEB8011EAAB806163C4F9AE02.roa (hash: Vy0S41quK2iU71kwrTbOz/KoqscmH6wvDknm9n/QiBc=) 3: 9A4EE834EB8111EA87E2C165C4F9AE02.roa (hash: On/rjCt9+U6JtyKYuk47jkAjsn+YkzbVWBGb7O5oGfQ=) 4: FC75A532DBAC11EA9FF2FA1FC4F9AE02.roa (hash: Krev2+NvsTp5k57xzDaCtVpjuL2qov8uoa3n5krWGr0=) 5: 60DA0694D9E111EA82120960C4F9AE02.roa (hash: SQf0F6/ovS4nuhxwCqP0bzz663+tFfshESdr8FqByA0=) 6: 70B22B22950D11F0ACB76B28C4F9AE02.roa (hash: rEXx1IeVQBnFO7DidP5CAzoHoXBLOcJ2lUWGfIOm15E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13595 (0x351b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEEB8, serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Validity Not Before: Nov 4 15:08:26 2025 GMT Not After : Nov 11 15:08:26 2025 GMT Subject: CN=690a16ea-2abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:53:82:46:d5:71:04:46:b0:8d:2f:84:f6:ac: f9:7d:80:f7:a7:d3:cd:af:54:b6:8a:84:b0:94:7c: bd:e3:0f:4b:6a:86:d8:f9:1e:83:95:a6:e1:4c:de: ad:9f:4a:fc:97:ee:b9:79:a5:57:81:11:bf:24:c4: 0e:d0:3e:ca:fd:a6:ee:84:8f:99:a0:9b:33:cb:c3: ff:7f:37:bc:bd:1a:69:ea:6e:0c:3e:f6:eb:19:88: 78:cf:66:c1:92:84:ec:ce:53:13:80:bf:82:e4:02: 9e:66:47:1c:0f:94:77:49:85:78:cf:b4:9a:53:5c: 64:21:df:a2:54:72:cd:f9:f4:77:ad:3e:70:92:60: 5b:fc:c2:d3:4e:12:7b:75:e5:c4:27:81:b3:50:8c: 06:12:5c:45:52:06:8c:b2:9e:00:7a:a1:38:d3:98: 77:c1:f6:1a:fe:a7:fe:57:77:5f:b0:13:07:1e:cd: fd:c9:02:2f:2d:75:ae:3e:37:86:02:c7:fe:4c:4f: fc:37:6a:ec:82:5a:82:4d:79:43:3b:7f:10:24:c8: e2:62:fa:db:8f:90:91:a0:e2:e5:26:b5:15:2c:ba: 8d:16:ee:b5:a4:8a:79:c6:55:1d:29:71:ae:22:39: 15:3e:9e:dd:84:d2:bc:60:0a:b8:46:15:0c:e1:91: 03:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:48:EA:F3:9F:2E:83:20:F7:9F:C5:84:6E:70:4E:D3:30:06:63:19 X509v3 Authority Key Identifier: keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:24:a8:81:bb:20:bb:a0:e2:0e:66:38:d9:50:55:df:23:c2: 59:16:3b:3e:5a:bd:fb:9d:42:39:52:e7:08:f9:cb:b4:93:b6: 60:6a:46:fe:53:87:fd:cf:89:fa:13:af:7e:66:6d:36:1e:55: 59:ff:b4:cb:50:ce:13:7e:5b:ea:f6:68:cb:f8:f3:23:f2:82: a4:ec:80:7a:73:6b:15:e4:24:ef:97:73:4f:76:4c:db:71:ad: 76:a8:09:8f:8f:22:dc:19:ad:55:e0:36:cb:05:f3:8b:c2:22: de:0c:cb:6c:11:ef:28:72:fe:15:1d:4a:e6:99:b3:73:9d:ce: ce:41:79:27:5b:af:49:4f:7e:10:fd:9b:f8:ba:3f:fe:2c:01: 17:76:fd:ca:f7:55:f2:b3:6a:5a:3c:45:ff:fd:ec:e6:91:dc: 8d:b6:41:9a:dc:ca:45:72:9d:7c:c0:e3:97:4d:3f:64:ed:b7: 3d:77:6a:e5:38:a5:6e:54:d2:8c:3a:98:1a:b5:0f:95:89:1a: 4e:1e:46:ae:4e:33:c4:90:34:c4:e7:67:63:fd:db:4f:9b:bb: 1a:d3:d2:46:71:89:20:01:2a:a7:06:e4:a3:89:1d:97:d0:14: c2:c3:bf:e7:f0:f7:48:13:86:fa:50:fb:d5:f7:ae:d1:fa:d0: 03:38:b4:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFQjgxMTAvBgNVBAUTKEU2MjJDODExNEYzRjI0QUE2QTgwN0M4MTQxRTM5NjRC NTUxQkI5MzAwHhcNMjUxMTA0MTUwODI2WhcNMjUxMTExMTUwODI2WjAYMRYwFAYD VQQDEw02OTBhMTZlYS0yYWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1OCRtVxBEawjS+E9qz5fYD3p9PNr1S2ioSwlHy94w9LaobY+R6DlabhTN6t n0r8l+65eaVXgRG/JMQO0D7K/abuhI+ZoJszy8P/fze8vRpp6m4MPvbrGYh4z2bB koTszlMTgL+C5AKeZkccD5R3SYV4z7SaU1xkId+iVHLN+fR3rT5wkmBb/MLTThJ7 deXEJ4GzUIwGElxFUgaMsp4AeqE405h3wfYa/qf+V3dfsBMHHs39yQIvLXWuPjeG Asf+TE/8N2rsglqCTXlDO38QJMjiYvrbj5CRoOLlJrUVLLqNFu61pIp5xlUdKXGu IjkVPp7dhNK8YAq4RhUM4ZEDPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBI6vOf LoMg95/FhG5wTtMwBmMZMB8GA1UdIwQYMBaAFOYiyBFPPySqaoB8gUHjlktVG7kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUVCOC84RTBGMkNCNjFE QTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pLcHFnSHlCUWVPV1MxVWJ1 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpTElFVThfSktwcWdIeUJRZU9XUzFVYnVUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUVCOC84RTBGMkNCNjFEQTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pL cHFnSHlCUWVPV1MxVWJ1VEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdJKiBuyC7oOIOZjjZUFXfI8JZFjs+Wr37nUI5UucI+cu0k7Zgakb+ U4f9z4n6E69+Zm02HlVZ/7TLUM4Tflvq9mjL+PMj8oKk7IB6c2sV5CTvl3NPdkzb ca12qAmPjyLcGa1V4DbLBfOLwiLeDMtsEe8ocv4VHUrmmbNznc7OQXknW69JT34Q /Zv4uj/+LAEXdv3K91Xys2paPEX//ezmkdyNtkGa3MpFcp18wOOXTT9k7bc9d2rl OKVuVNKMOpgatQ+ViRpOHkauTjPEkDTE52dj/dtPm7sa09JGcYkgASqnBuSjiR2X 0BTCw7/n8PdIE4b6UPvV967R+tADOLTf -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:39 2025 by rpki-client