$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft File: 5cOmhsg97m0zv-xUHqy0pKCJknk.mft (raw, json) Hash identifier: xhXAbzF0FKS70pUQ3YADhdnflqIwmh/bM7E5he7G+gg= Subject key identifier: E4:14:E3:DC:CA:C9:B2:44:1F:2F:6F:B7:6D:B8:F8:F5:0F:CA:61:F0 Authority key identifier: E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79 Certificate issuer: /CN=A9153AA6/serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279 Certificate serial: 1719 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft Manifest number: 170F Signing time: Mon 20 Oct 2025 16:59:23 +0000 Manifest this update: Mon 20 Oct 2025 16:59:23 +0000 Manifest next update: Mon 27 Oct 2025 16:59:23 +0000 Files and hashes: 1: 5cOmhsg97m0zv-xUHqy0pKCJknk.crl (hash: JVdtWe/ZyJxHBQJw+MrcvMVz62ho4gnvtRDYo2zbJkk=) 2: 99C6F94CF52511E7948D5A0BC4F9AE02.roa (hash: aM0yH97r/h3xu615cUuk5zwsCFMLHVQ8whXpoG1e1kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5913 (0x1719) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AA6, serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279 Validity Not Before: Oct 20 16:59:23 2025 GMT Not After : Oct 27 16:59:23 2025 GMT Subject: CN=68f66a6b-1e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c3:fd:da:d2:a8:45:0d:fc:ae:a1:83:ce:a0: cf:28:54:ca:be:7d:ce:ea:e5:8b:e0:26:de:24:4a: 8e:e4:2d:21:b2:f5:6d:25:32:4a:9a:1d:7b:f0:2e: 0c:da:77:21:b5:6d:33:67:3f:3e:72:1b:a8:5f:e7: e9:5d:b4:4b:45:a3:68:c4:d4:f5:36:39:0b:96:ef: df:13:17:05:2e:27:8d:10:96:89:11:43:41:3c:09: 66:da:94:02:fc:23:f1:91:35:e6:47:1e:29:a2:39: 85:90:1c:bf:a7:c1:8a:f8:c4:11:8a:38:a0:dd:c0: 6b:a8:65:e7:49:86:25:e6:da:47:6c:36:19:2f:25: b9:46:00:ad:d0:0c:08:6d:f3:ee:98:97:c8:e2:a7: 0f:af:4a:11:7e:bf:de:7b:93:83:ba:6e:37:54:52: 20:1f:1c:6e:bc:73:93:a0:52:fd:1c:77:be:78:86: 03:6e:67:b9:6f:00:48:40:18:99:3c:b6:5a:3c:30: 37:67:6b:f9:8e:03:83:a9:5d:c4:e5:a4:ee:26:ac: bf:b8:b0:b2:05:f4:c5:5e:0d:c7:33:8a:23:2d:57: fb:52:46:fb:6c:3c:b3:a2:c5:38:19:05:2b:30:34: 3b:3b:78:bb:58:73:3b:13:b6:e3:e1:49:7d:a2:10: c0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:14:E3:DC:CA:C9:B2:44:1F:2F:6F:B7:6D:B8:F8:F5:0F:CA:61:F0 X509v3 Authority Key Identifier: keyid:E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:74:8b:b8:26:36:33:80:b2:78:07:37:75:a4:40:ff:b3:f7: 34:f2:af:4e:f1:82:b8:6e:6a:2f:e5:d7:8b:3e:20:58:ed:c6: 72:49:55:ba:c5:fc:bd:ee:0e:78:df:c6:74:64:af:f5:f7:f4: 4f:f0:c1:b4:2c:40:5e:05:2b:de:24:87:14:20:16:08:cb:7a: 10:2d:75:57:47:e8:3e:be:a1:44:98:ee:80:a0:26:af:30:d1: 0d:ce:fe:60:b8:51:ba:46:35:6b:1a:21:01:0e:d3:99:45:5a: 04:91:de:b5:52:31:df:b2:b3:75:9f:cf:5b:94:3e:f7:30:30: 8f:02:be:aa:6c:be:36:33:b0:04:1c:c5:d7:d6:6c:7f:d6:74: ab:b8:f4:88:b1:73:98:48:61:d5:6b:a5:89:37:30:14:1f:9d: a7:78:d4:4c:86:80:08:f6:4d:78:d5:e1:0d:01:7a:2a:c7:cf: a7:6f:a8:0e:d9:23:dc:95:d5:73:01:91:1f:d5:78:13:24:84: 16:a1:3a:db:54:8d:25:b1:0f:10:12:e1:0b:af:5d:ef:24:42: 0b:a0:26:8b:76:c1:7e:35:ec:39:cf:72:de:50:71:81:f9:24: 09:6c:31:90:3a:3f:48:7c:00:24:23:91:bf:14:13:06:71:21: d7:17:6d:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBQTYxMTAvBgNVBAUTKEU1QzNBNjg2QzgzREVFNkQzM0JGRUM1NDFFQUNCNEE0 QTA4OTkyNzkwHhcNMjUxMDIwMTY1OTIzWhcNMjUxMDI3MTY1OTIzWjAYMRYwFAYD VQQDEw02OGY2NmE2Yi0xZThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8P92tKoRQ38rqGDzqDPKFTKvn3O6uWL4CbeJEqO5C0hsvVtJTJKmh178C4M 2nchtW0zZz8+chuoX+fpXbRLRaNoxNT1NjkLlu/fExcFLieNEJaJEUNBPAlm2pQC /CPxkTXmRx4pojmFkBy/p8GK+MQRijig3cBrqGXnSYYl5tpHbDYZLyW5RgCt0AwI bfPumJfI4qcPr0oRfr/ee5ODum43VFIgHxxuvHOToFL9HHe+eIYDbme5bwBIQBiZ PLZaPDA3Z2v5jgODqV3E5aTuJqy/uLCyBfTFXg3HM4ojLVf7Ukb7bDyzosU4GQUr MDQ7O3i7WHM7E7bj4Ul9ohDA4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQU49zK ybJEHy9vt224+PUPymHwMB8GA1UdIwQYMBaAFOXDpobIPe5tM7/sVB6stKSgiZJ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FBNi85QzNEODdFNkY1 MjQxMUU3OTY0NEIwMDlDNEY5QUUwMi81Y09taHNnOTdtMHp2LXhVSHF5MHBLQ0pr bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVjT21oc2c5N20wenYteFVIcXkwcEtDSmtuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0FBNi85QzNEODdFNkY1MjQxMUU3OTY0NEIwMDlDNEY5QUUwMi81Y09taHNnOTdt MHp2LXhVSHF5MHBLQ0prbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCidIu4JjYzgLJ4Bzd1pED/s/c08q9O8YK4bmov5deLPiBY7cZySVW6 xfy97g5438Z0ZK/19/RP8MG0LEBeBSveJIcUIBYIy3oQLXVXR+g+vqFEmO6AoCav MNENzv5guFG6RjVrGiEBDtOZRVoEkd61UjHfsrN1n89blD73MDCPAr6qbL42M7AE HMXX1mx/1nSruPSIsXOYSGHVa6WJNzAUH52neNRMhoAI9k141eENAXoqx8+nb6gO 2SPcldVzAZEf1XgTJIQWoTrbVI0lsQ8QEuELr13vJEILoCaLdsF+New5z3LeUHGB +SQJbDGQOj9IfAAkI5G/FBMGcSHXF23M -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:08 2025 by rpki-client