$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json) Hash identifier: aYiqCKObfeiTn7o/DkIVkSI8V+VzTiU3dbsIUIyVi4c= Subject key identifier: D0:05:5B:17:FD:F4:EB:EB:5E:0E:78:29:4B:54:E3:49:09:58:5D:B3 Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 0991 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft Manifest number: 0989 Signing time: Tue 04 Nov 2025 20:10:01 +0000 Manifest this update: Tue 04 Nov 2025 20:10:01 +0000 Manifest next update: Tue 11 Nov 2025 20:10:01 +0000 Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: VPy+AK9sPoBasA2bRBkXhO5uSyVu+Bl10jWl9+o7Nv8=) 2: 156CEB62DC6011ECB2698C14C4F9AE02.roa (hash: reuaGLtn1xD8mIcBhpyoMRgE/LzBHNExqumLX0mZnsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2449 (0x991) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: Nov 4 20:10:01 2025 GMT Not After : Nov 11 20:10:01 2025 GMT Subject: CN=690a5d99-d059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4a:d9:6e:ad:a7:f6:de:d6:18:55:fa:d8:e8: 59:4f:83:8e:eb:92:2e:22:12:7d:ea:0e:5d:84:31: 18:be:fe:b8:dd:67:88:71:78:c2:2b:17:ea:6a:e3: 71:5a:a1:2f:58:0f:ba:73:a4:be:6c:d2:c9:f0:12: 9d:79:b4:2f:39:c4:0d:4c:bb:d8:0b:fc:4c:ee:07: 1f:22:10:1f:78:02:89:38:e6:20:88:48:05:ce:db: 6d:2d:bb:9c:b0:63:d3:69:66:de:21:7c:ac:e1:7a: c1:de:4d:85:aa:cf:17:25:b6:99:0f:18:1a:26:98: e1:c0:47:1b:77:90:cf:6c:5a:c1:e5:c1:d5:f1:7e: 3c:18:0e:61:d9:aa:15:aa:a6:cc:82:e2:68:c7:93: 43:cd:b9:09:5e:e9:e2:f0:a4:b0:26:5c:4b:c6:a5: 82:6e:43:57:dd:ac:35:74:9a:93:90:9e:5e:87:b5: b9:7d:ea:19:a4:d5:cf:63:00:dc:42:18:c9:9b:c5: da:08:1b:1a:6c:48:65:63:c3:65:bd:db:52:5d:88: 49:f6:b3:98:a7:c2:79:17:08:97:4b:ea:e3:0e:dc: 47:65:39:19:27:46:07:f7:3d:21:1a:66:7a:26:bd: b1:0d:0d:dc:22:28:f9:7d:63:a0:8b:96:a8:63:83: 85:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:05:5B:17:FD:F4:EB:EB:5E:0E:78:29:4B:54:E3:49:09:58:5D:B3 X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:68:35:a2:cd:27:ff:c6:c3:6b:55:fa:26:9e:fe:39:34:9b: 35:42:11:bd:4b:c8:ce:45:5f:36:38:ab:d0:a9:ca:c6:bd:72: f9:5e:20:e6:d2:cf:2e:83:25:83:a2:11:b9:60:0c:77:05:29: 59:2c:ed:9e:de:08:43:3d:78:40:f5:1a:e1:8a:6d:84:61:9e: b3:18:69:ed:13:43:b4:d2:c6:52:c3:44:07:63:9d:8f:25:49: 11:54:0a:43:3a:5a:a7:60:50:12:01:40:fe:64:11:17:20:13: aa:66:e8:1c:76:97:c2:fb:86:fa:6e:0c:e3:49:91:f0:35:66: 80:94:a0:9d:74:a0:82:2a:30:69:60:b1:20:8b:be:5d:c2:64: f4:d0:ca:f3:79:a3:8e:18:fd:81:55:0f:ce:75:f4:9c:88:00: a4:d2:3c:c9:ec:e4:42:e4:23:b9:db:42:41:e4:7b:e4:1e:f9: 86:09:ec:e5:f9:16:73:28:f0:73:2d:e7:a9:6c:51:c6:3b:66: 55:be:67:f1:fb:6d:3d:eb:9d:87:a8:51:f3:16:9b:cf:47:70: 89:1f:0e:a1:d5:12:82:96:e3:74:38:17:6c:52:07:70:c7:84: 66:f2:0e:c8:e4:84:b8:0f:8f:22:db:42:6b:93:47:74:95:dc: d4:52:3b:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjUxMTA0MjAxMDAxWhcNMjUxMTExMjAxMDAxWjAYMRYwFAYD VQQDEw02OTBhNWQ5OS1kMDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskrZbq2n9t7WGFX62OhZT4OO65IuIhJ96g5dhDEYvv643WeIcXjCKxfqauNx WqEvWA+6c6S+bNLJ8BKdebQvOcQNTLvYC/xM7gcfIhAfeAKJOOYgiEgFztttLbuc sGPTaWbeIXys4XrB3k2Fqs8XJbaZDxgaJpjhwEcbd5DPbFrB5cHV8X48GA5h2aoV qqbMguJox5NDzbkJXuni8KSwJlxLxqWCbkNX3aw1dJqTkJ5eh7W5feoZpNXPYwDc QhjJm8XaCBsabEhlY8NlvdtSXYhJ9rOYp8J5FwiXS+rjDtxHZTkZJ0YH9z0hGmZ6 Jr2xDQ3cIij5fWOgi5aoY4OFOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAFWxf9 9OvrXg54KUtU40kJWF2zMB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU1NC9FQjFDQkJFMjlFNUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZy Y0ZxRkZzYWh6MEwwbG43MVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCraDWizSf/xsNrVfomnv45NJs1QhG9S8jORV82OKvQqcrGvXL5XiDm 0s8ugyWDohG5YAx3BSlZLO2e3ghDPXhA9Rrhim2EYZ6zGGntE0O00sZSw0QHY52P JUkRVApDOlqnYFASAUD+ZBEXIBOqZugcdpfC+4b6bgzjSZHwNWaAlKCddKCCKjBp YLEgi75dwmT00MrzeaOOGP2BVQ/OdfSciACk0jzJ7ORC5CO520JB5HvkHvmGCezl +RZzKPBzLeepbFHGO2ZVvmfx+209652HqFHzFpvPR3CJHw6h1RKCluN0OBdsUgdw x4Rm8g7I5IS4D48i20Jrk0d0ldzUUjvu -----END CERTIFICATE-----Generated at Wed Nov 5 15:34:17 2025 by rpki-client