$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft File: 5_fdQJKCmOyeymRGoYSjWaPtXf4.mft (raw, json) Hash identifier: JtEbQu09LLsJlQ2DVfFeGgCujyGrg0IGCCvW/nIFnjk= Subject key identifier: B3:14:41:C9:57:CB:A9:A6:70:C4:E2:5C:83:01:75:83:3C:78:48:2C Authority key identifier: E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE Certificate issuer: /CN=A91FE7DF/serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft Manifest number: 028E Signing time: Mon 03 Nov 2025 01:33:35 +0000 Manifest this update: Mon 03 Nov 2025 01:33:35 +0000 Manifest next update: Mon 10 Nov 2025 01:33:35 +0000 Files and hashes: 1: 5_fdQJKCmOyeymRGoYSjWaPtXf4.crl (hash: rUe0AhMktleOUr36i2gBvvZkEq2DEOrQFW8azg2i2cI=) 2: 81087EBA66EE11F0B7640387C4F9AE02.roa (hash: QFoEv4EUPu7ZByEo2FPWmM0j6Axf46LzGtXSA8Ozj4E=) 3: D455E69C623511F0B0F5155FC4F9AE02.roa (hash: FJRdymd8wZbvTsi6HMqdNDE91aX5F6UwCVSReU3zMAo=) 4: 7B9AF6D818F111F0A3CFBB17C4F9AE02.roa (hash: noXWIw2uCpk5qYLhf+pn+IMp6jTiBvJiADwyhYAjo2I=) 5: AAF361C0D18B11EF810E8B66C4F9AE02.roa (hash: w12orzg2QI/DnMwGWqRtnSkszoQETfTmbyGE/vvJi2w=) 6: 3CFFB50C8E0E11F0BA4BBC76C4F9AE02.roa (hash: ob6LTMrD+JVfoIQ/uSt3zi99wEqn+nvTyjd+ajn1nEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE7DF, serialNumber=E7F7DD40928298EC9ECA6446A184A359A3ED5DFE Validity Not Before: Nov 3 01:33:35 2025 GMT Not After : Nov 10 01:33:35 2025 GMT Subject: CN=6908066f-9fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0e:cc:36:ed:31:88:19:0b:7e:6e:4a:76:52: 35:60:46:09:b4:70:80:be:cf:8c:6e:f8:16:76:8f: 37:f0:73:ce:f6:cb:d6:aa:b1:ef:8b:f3:61:fe:6b: 13:d0:d0:80:26:af:e8:92:43:f8:39:8a:b5:64:25: 49:24:97:6d:16:86:59:4f:bb:c1:6e:78:5d:60:34: bf:89:04:80:05:ae:5d:1d:9a:97:e5:9f:b4:ec:62: 5c:1d:b5:cf:19:9a:57:d2:c3:89:0a:34:02:ae:2a: 40:cc:2b:74:8b:e1:93:40:0f:02:d1:16:18:3c:52: 6c:d7:08:c2:be:72:2a:87:3d:9c:89:19:b0:2b:9c: 0c:06:2a:b3:1d:e9:07:8b:22:73:7e:49:ab:b1:3e: 21:95:61:e1:ab:1e:df:51:dc:88:01:d1:dd:1f:e2: 15:db:cb:32:b9:60:a9:1a:5b:36:7e:ea:a5:57:61: 1f:b6:37:65:18:f5:89:d1:b8:4a:18:e1:2a:86:9d: a1:85:f6:d9:20:79:c5:66:2a:66:4e:14:76:f7:0a: 09:cc:b5:74:f9:7d:6f:7c:04:98:af:92:30:61:d6: 6b:16:7c:8e:9c:ac:da:f1:55:2e:06:7c:90:47:fe: 52:49:11:8d:f2:a7:30:ec:30:3e:2b:24:70:ef:e6: 82:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:14:41:C9:57:CB:A9:A6:70:C4:E2:5C:83:01:75:83:3C:78:48:2C X509v3 Authority Key Identifier: keyid:E7:F7:DD:40:92:82:98:EC:9E:CA:64:46:A1:84:A3:59:A3:ED:5D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5_fdQJKCmOyeymRGoYSjWaPtXf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE7DF/6D552D70277A11EDA6B1A826C4F9AE02/5_fdQJKCmOyeymRGoYSjWaPtXf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:9f:ca:43:6d:2f:4f:99:1f:2f:06:cd:ae:3f:70:3e:0a:7e: cf:a8:fe:f5:7d:0a:c1:0d:79:bd:6f:0f:0d:f0:ec:4e:ca:ff: 75:d2:79:80:15:a7:04:5e:7f:8c:62:f1:e1:eb:22:67:ea:33: f0:30:1d:c1:6e:25:11:82:27:4f:5c:7c:29:fb:49:0d:5f:91: 3d:47:b7:e7:23:a9:9a:2a:e0:3b:3d:3f:ca:c0:81:18:3e:34: c1:9a:dd:42:27:54:9d:91:6c:33:fa:c9:b6:f9:49:4d:7c:74: e6:c4:64:61:94:cf:1f:16:60:f6:89:7d:8e:6d:64:2e:43:09: c7:8e:46:d1:7a:1f:e1:0d:7d:70:24:ef:9c:a2:9c:76:78:32: 47:80:55:c6:f7:e0:02:6d:80:0c:3f:fd:f9:5a:52:06:5c:6a: 89:b4:21:6e:4c:c0:bd:9d:80:3f:a1:18:eb:b0:e2:87:ce:c4: e1:35:61:d0:a4:b5:71:9f:60:c2:51:af:30:57:04:a9:d2:3e: 54:ba:30:07:dd:b7:02:e9:1c:02:b0:94:bf:09:4e:e5:22:fc: cb:f4:72:ac:5f:90:d3:41:d4:00:e4:1d:61:94:63:29:60:03: ed:01:4c:14:bd:38:9d:a7:83:45:8e:61:e9:4b:8a:30:0d:88: 1c:10:a1:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU3REYxMTAvBgNVBAUTKEU3RjdERDQwOTI4Mjk4RUM5RUNBNjQ0NkExODRBMzU5 QTNFRDVERkUwHhcNMjUxMTAzMDEzMzM1WhcNMjUxMTEwMDEzMzM1WjAYMRYwFAYD VQQDEw02OTA4MDY2Zi05ZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3w7MNu0xiBkLfm5KdlI1YEYJtHCAvs+MbvgWdo838HPO9svWqrHvi/Nh/msT 0NCAJq/okkP4OYq1ZCVJJJdtFoZZT7vBbnhdYDS/iQSABa5dHZqX5Z+07GJcHbXP GZpX0sOJCjQCripAzCt0i+GTQA8C0RYYPFJs1wjCvnIqhz2ciRmwK5wMBiqzHekH iyJzfkmrsT4hlWHhqx7fUdyIAdHdH+IV28syuWCpGls2fuqlV2EftjdlGPWJ0bhK GOEqhp2hhfbZIHnFZipmThR29woJzLV0+X1vfASYr5IwYdZrFnyOnKza8VUuBnyQ R/5SSRGN8qcw7DA+KyRw7+aCFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMUQclX y6mmcMTiXIMBdYM8eEgsMB8GA1UdIwQYMBaAFOf33UCSgpjsnspkRqGEo1mj7V3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTdERi82RDU1MkQ3MDI3 N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21PeWV5bVJHb1lTaldhUHRY ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVfZmRRSktDbU95ZXltUkdvWVNqV2FQdFhmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTdERi82RDU1MkQ3MDI3N0ExMUVEQTZCMUE4MjZDNEY5QUUwMi81X2ZkUUpLQ21P eWV5bVJHb1lTaldhUHRYZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAn8pDbS9PmR8vBs2uP3A+Cn7PqP71fQrBDXm9bw8N8OxOyv910nmA FacEXn+MYvHh6yJn6jPwMB3BbiURgidPXHwp+0kNX5E9R7fnI6maKuA7PT/KwIEY PjTBmt1CJ1SdkWwz+sm2+UlNfHTmxGRhlM8fFmD2iX2ObWQuQwnHjkbReh/hDX1w JO+copx2eDJHgFXG9+ACbYAMP/35WlIGXGqJtCFuTMC9nYA/oRjrsOKHzsThNWHQ pLVxn2DCUa8wVwSp0j5UujAH3bcC6RwCsJS/CU7lIvzL9HKsX5DTQdQA5B1hlGMp YAPtAUwUvTidp4NFjmHpS4owDYgcEKGa -----END CERTIFICATE-----Generated at Tue Nov 4 08:13:54 2025 by rpki-client