$ rpki-client -vvf rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft File: 5v6wYDITaH99TA3YxdHl8ycflmo.mft (raw, json) Hash identifier: pt/kQQhH7XT3UASNzHeCJMQIjk++KA7gXpM5ILz5I/0= Subject key identifier: 9D:75:02:38:95:81:30:A1:9E:DB:F8:68:D9:B6:57:1F:11:99:36:39 Authority key identifier: E6:FE:B0:60:32:13:68:7F:7D:4C:0D:D8:C5:D1:E5:F3:27:1F:96:6A Certificate issuer: /CN=A9117602/serialNumber=E6FEB0603213687F7D4C0DD8C5D1E5F3271F966A Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft Manifest number: 0138 Signing time: Sun 19 Oct 2025 07:16:53 +0000 Manifest this update: Sun 19 Oct 2025 07:16:52 +0000 Manifest next update: Sun 26 Oct 2025 07:16:52 +0000 Files and hashes: 1: 5v6wYDITaH99TA3YxdHl8ycflmo.crl (hash: gYADhaa9ql26/PJdb9Rb1u96KaoF98T2GI1lMuUmVGw=) 2: 1EF0CB38CEFB11EE9D1FB686C4F9AE02.roa (hash: YSxv9P+ceb+T4PK5zL4uHyyDeIGTbdqAUVG/7oe35WE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.crl rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117602, serialNumber=E6FEB0603213687F7D4C0DD8C5D1E5F3271F966A Validity Not Before: Oct 19 07:16:52 2025 GMT Not After : Oct 26 07:16:52 2025 GMT Subject: CN=68f49064-f2b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0f:b9:4e:14:82:b0:ea:33:fe:2f:85:6d:aa: a7:06:fe:66:01:66:c0:49:a3:a1:da:c5:9e:54:06: 4c:18:00:06:fd:f2:58:88:7e:91:fa:eb:ae:ac:69: e3:d7:e2:be:79:67:79:88:51:cd:6f:9d:91:22:e5: ee:f5:7e:cd:05:ca:e7:5c:10:e4:a6:52:ad:b3:c2: 21:08:16:99:1e:88:1b:f5:fa:9b:e9:2b:fa:37:e9: d4:a9:41:52:6b:a6:8d:de:a9:1a:d1:cb:30:da:ff: 00:e5:8f:b0:36:12:62:f6:d1:75:2f:f9:86:4a:f8: 87:3e:96:6b:d6:f8:87:03:e0:8b:28:83:4e:d0:a6: 01:d2:e0:47:82:6c:b8:9f:d0:a3:17:3f:7e:f8:e1: 4e:10:da:c1:ff:0b:ef:bc:6b:e9:62:5c:f8:17:5e: 46:80:6f:f4:fd:83:5f:ff:f1:f4:a4:94:77:f3:d5: b1:19:3e:1c:3a:b0:4b:19:d7:1e:df:7e:cf:e8:f2: 53:70:1c:5e:5b:b7:b9:6e:8a:c1:ec:19:00:ab:cd: f7:c0:3c:7c:2a:95:4a:21:d0:28:71:ab:7f:d1:fe: ac:87:ec:6e:7c:05:e7:34:cf:ab:5c:39:bf:47:e5: 70:32:65:46:96:4c:f3:30:fc:84:c3:43:8d:69:85: 72:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:75:02:38:95:81:30:A1:9E:DB:F8:68:D9:B6:57:1F:11:99:36:39 X509v3 Authority Key Identifier: keyid:E6:FE:B0:60:32:13:68:7F:7D:4C:0D:D8:C5:D1:E5:F3:27:1F:96:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:a6:a0:e1:0a:67:00:c7:7c:31:1c:fc:5e:6d:b3:ed:96:8a: b2:0a:74:0a:32:16:22:ae:8a:23:63:8c:fb:25:c2:1a:69:36: 3b:e4:35:ce:33:7c:3e:a9:9c:8d:35:b8:19:9b:e8:33:ab:ac: f7:18:35:fe:21:11:47:e8:7a:d2:a9:80:18:bd:3a:2a:c5:1b: ca:50:c9:a1:9c:06:11:4b:16:92:61:f5:4a:2d:cd:89:36:f4: 0f:e1:a9:1a:fc:42:60:c4:5b:95:bf:1f:42:23:b3:b5:ea:33: 11:1e:1a:77:d0:dd:65:21:86:9b:71:55:c5:cc:c8:73:83:31: 23:78:c8:0d:fb:f1:7c:78:12:44:4f:fd:28:f6:03:c2:59:73: 3f:bc:59:9e:40:3c:6c:66:c3:a0:74:f7:58:2f:ce:57:ea:53: 41:28:ef:4c:24:3c:a4:12:76:03:0d:6d:4a:73:b3:70:9e:e8: e1:ac:e4:56:7f:be:79:86:f0:9a:8b:4e:aa:fd:23:c7:60:ff: 9b:5f:d2:8b:39:0f:32:b2:43:61:e9:5b:6d:45:4a:15:70:bf: ea:8e:c3:8b:b7:4f:38:71:45:22:fa:69:0a:d9:56:56:4e:33: 33:0e:1f:e0:3a:d2:1c:94:ef:b7:5f:52:0f:bf:33:ee:13:fb: 5b:e4:3e:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc2MDIxMTAvBgNVBAUTKEU2RkVCMDYwMzIxMzY4N0Y3RDRDMEREOEM1RDFFNUYz MjcxRjk2NkEwHhcNMjUxMDE5MDcxNjUyWhcNMjUxMDI2MDcxNjUyWjAYMRYwFAYD VQQDEw02OGY0OTA2NC1mMmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQ+5ThSCsOoz/i+FbaqnBv5mAWbASaOh2sWeVAZMGAAG/fJYiH6R+uuurGnj 1+K+eWd5iFHNb52RIuXu9X7NBcrnXBDkplKts8IhCBaZHogb9fqb6Sv6N+nUqUFS a6aN3qka0csw2v8A5Y+wNhJi9tF1L/mGSviHPpZr1viHA+CLKINO0KYB0uBHgmy4 n9CjFz9++OFOENrB/wvvvGvpYlz4F15GgG/0/YNf//H0pJR389WxGT4cOrBLGdce 337P6PJTcBxeW7e5borB7BkAq833wDx8KpVKIdAocat/0f6sh+xufAXnNM+rXDm/ R+VwMmVGlkzzMPyEw0ONaYVyNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ11AjiV gTChntv4aNm2Vx8RmTY5MB8GA1UdIwQYMBaAFOb+sGAyE2h/fUwN2MXR5fMnH5Zq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzYwMi9BRUJDNUNGNkNF RkExMUVFOTdGODhDODVDNEY5QUUwMi81djZ3WURJVGFIOTlUQTNZeGRIbDh5Y2Zs bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2NndZRElUYUg5OVRBM1l4ZEhsOHljZmxtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzYwMi9BRUJDNUNGNkNFRkExMUVFOTdGODhDODVDNEY5QUUwMi81djZ3WURJVGFI OTlUQTNZeGRIbDh5Y2ZsbW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUpqDhCmcAx3wxHPxebbPtloqyCnQKMhYiroojY4z7JcIaaTY75DXO M3w+qZyNNbgZm+gzq6z3GDX+IRFH6HrSqYAYvToqxRvKUMmhnAYRSxaSYfVKLc2J NvQP4aka/EJgxFuVvx9CI7O16jMRHhp30N1lIYabcVXFzMhzgzEjeMgN+/F8eBJE T/0o9gPCWXM/vFmeQDxsZsOgdPdYL85X6lNBKO9MJDykEnYDDW1Kc7NwnujhrORW f755hvCai06q/SPHYP+bX9KLOQ8yskNh6VttRUoVcL/qjsOLt084cUUi+mkK2VZW TjMzDh/gOtIclO+3X1IPvzPuE/tb5D5L -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:57 2025 by rpki-client