$ rpki-client -vvf rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft File: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft (raw, json) Hash identifier: Puaw0DgMy2hx0oOSdTzO6x/UibpxiqI1MoPdJDPtRvQ= Subject key identifier: 6D:0F:68:E3:33:D6:5A:B6:FC:23:A3:1D:47:D2:CB:AF:58:87:86:32 Authority key identifier: E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 Certificate issuer: /CN=A91F35BB/serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Certificate serial: 050C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft Manifest number: 050C Signing time: Sun 02 Nov 2025 23:33:58 +0000 Manifest this update: Sun 02 Nov 2025 23:33:57 +0000 Manifest next update: Sun 09 Nov 2025 23:33:57 +0000 Files and hashes: 1: 5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl (hash: /18STaPmtujRWHhVyBONC9Y0CJCZ+aU6Ff/QCgu7R1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1292 (0x50c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F35BB, serialNumber=E61FA124A618E25667CC31CCFC4916CE076FDA57 Validity Not Before: Nov 2 23:33:57 2025 GMT Not After : Nov 9 23:33:57 2025 GMT Subject: CN=6907ea65-92ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5e:17:5d:59:6e:41:9b:85:98:4e:76:dc:36: 0b:9d:f0:ff:fc:5d:c5:c6:b0:9a:33:da:d1:6a:91: 19:e7:df:2d:5e:b7:3c:a9:ce:92:b4:fc:5f:88:4b: 30:6c:97:65:1b:b5:54:0c:0f:f0:69:bb:1b:2c:aa: 81:20:4c:5b:42:2a:00:fe:a9:aa:1a:65:3b:64:df: 12:8d:3d:24:b8:e6:0a:cf:42:d0:22:cb:be:51:3d: 54:b7:2e:c9:43:96:3a:bc:c0:cc:bc:92:f4:65:73: 49:2d:a3:4a:09:09:51:1a:e8:48:ef:b3:d3:b8:dc: 39:d2:c6:7e:9b:10:4d:49:3f:36:d2:a0:29:c8:4f: 5b:c8:d2:0a:63:ae:1a:2b:74:00:8b:1a:76:66:af: 96:fd:6c:d0:9c:d7:44:da:6d:b7:54:71:10:da:2c: 37:46:18:71:61:d2:2e:36:52:9a:85:5f:f1:60:2d: 37:55:a0:be:2c:ad:2d:42:9b:77:17:e1:3e:7e:10: e9:c1:f4:46:a6:c1:50:5b:40:37:34:a9:53:47:af: 85:cd:a8:fe:7d:3f:5c:d7:4c:f5:3e:61:75:ce:b0: 2c:88:ba:0c:18:26:98:46:87:09:ae:13:29:1b:79: 00:01:b8:c5:07:cb:77:b5:6b:3e:7e:ca:53:0b:54: b2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:0F:68:E3:33:D6:5A:B6:FC:23:A3:1D:47:D2:CB:AF:58:87:86:32 X509v3 Authority Key Identifier: keyid:E6:1F:A1:24:A6:18:E2:56:67:CC:31:CC:FC:49:16:CE:07:6F:DA:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5h-hJKYY4lZnzDHM_EkWzgdv2lc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F35BB/07637D0227FB11EC8880D170C4F9AE02/5h-hJKYY4lZnzDHM_EkWzgdv2lc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:36:c3:7a:d2:3a:95:66:b0:0c:34:f5:a3:7a:cb:8f:71:88: 30:1b:52:f8:78:bd:0c:82:62:df:01:41:d9:d1:d8:2b:d7:b8: 83:e9:7c:60:55:93:9d:50:8e:87:5f:27:ae:a8:66:91:59:8d: 45:f5:ad:60:28:5e:ac:e9:fa:f1:b5:44:48:ff:2c:21:59:88: 83:d0:cd:bd:9e:a5:28:d7:0c:76:38:8d:ab:05:d3:ec:26:fc: 97:39:dc:b6:db:e8:14:68:46:f6:4f:f5:08:11:82:3e:f4:a1: ff:f4:7a:55:dd:bb:c8:99:71:06:f7:6c:85:a9:ad:38:bc:54: 4c:e3:08:60:e3:0f:27:5e:e4:a9:5c:d6:e2:17:4c:48:e8:a0: 60:4e:b5:72:a0:bd:82:cc:ff:59:11:27:14:4f:83:47:ef:3d: 50:e4:d7:90:9a:66:35:c0:54:bd:4f:0b:46:fb:0c:d0:df:75: 84:13:f1:7b:5b:f1:d0:3e:9f:bf:62:83:8c:ae:2f:88:fc:23: 60:ff:ab:74:b0:20:5c:bf:db:fa:27:6d:93:06:5a:82:77:81: c8:91:8b:1a:2c:61:62:7e:20:6b:b6:ec:8e:f2:a1:07:91:30: 59:98:e2:76:ab:6e:8a:3b:11:7a:a8:9b:97:21:70:24:81:15: a5:28:b9:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM1QkIxMTAvBgNVBAUTKEU2MUZBMTI0QTYxOEUyNTY2N0NDMzFDQ0ZDNDkxNkNF MDc2RkRBNTcwHhcNMjUxMTAyMjMzMzU3WhcNMjUxMTA5MjMzMzU3WjAYMRYwFAYD VQQDEw02OTA3ZWE2NS05MmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxl4XXVluQZuFmE523DYLnfD//F3FxrCaM9rRapEZ598tXrc8qc6StPxfiEsw bJdlG7VUDA/wabsbLKqBIExbQioA/qmqGmU7ZN8SjT0kuOYKz0LQIsu+UT1Uty7J Q5Y6vMDMvJL0ZXNJLaNKCQlRGuhI77PTuNw50sZ+mxBNST820qApyE9byNIKY64a K3QAixp2Zq+W/WzQnNdE2m23VHEQ2iw3RhhxYdIuNlKahV/xYC03VaC+LK0tQpt3 F+E+fhDpwfRGpsFQW0A3NKlTR6+Fzaj+fT9c10z1PmF1zrAsiLoMGCaYRocJrhMp G3kAAbjFB8t3tWs+fspTC1SynwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0PaOMz 1lq2/COjHUfSy69Yh4YyMB8GA1UdIwQYMBaAFOYfoSSmGOJWZ8wxzPxJFs4Hb9pX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzVCQi8wNzYzN0QwMjI3 RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRsWm56REhNX0VrV3pnZHYy bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoLWhKS1lZNGxabnpESE1fRWtXemdkdjJsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzVCQi8wNzYzN0QwMjI3RkIxMUVDODg4MEQxNzBDNEY5QUUwMi81aC1oSktZWTRs Wm56REhNX0VrV3pnZHYybGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8NsN60jqVZrAMNPWjesuPcYgwG1L4eL0MgmLfAUHZ0dgr17iD6Xxg VZOdUI6HXyeuqGaRWY1F9a1gKF6s6frxtURI/ywhWYiD0M29nqUo1wx2OI2rBdPs JvyXOdy22+gUaEb2T/UIEYI+9KH/9HpV3bvImXEG92yFqa04vFRM4whg4w8nXuSp XNbiF0xI6KBgTrVyoL2CzP9ZEScUT4NH7z1Q5NeQmmY1wFS9TwtG+wzQ33WEE/F7 W/HQPp+/YoOMri+I/CNg/6t0sCBcv9v6J22TBlqCd4HIkYsaLGFifiBrtuyO8qEH kTBZmOJ2q26KOxF6qJuXIXAkgRWlKLmk -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:20 2025 by rpki-client