$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft File: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json) Hash identifier: don35sga3h60ELyrHFIkMLYClFa0Ud/IfqT9SULzYVg= Subject key identifier: 14:91:4E:C9:DB:03:CE:3A:9C:AF:A0:13:42:88:3E:03:D9:5E:3F:1A Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft Manifest number: 010B Signing time: Sun 19 Oct 2025 07:56:44 +0000 Manifest this update: Sun 19 Oct 2025 07:56:43 +0000 Manifest next update: Sun 26 Oct 2025 07:56:43 +0000 Files and hashes: 1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: zFubEML8bB7fyeQQln4Bmr1co+bmLhHXY0sYHGSQ8Zc=) 2: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: CpFFYzKvaiG5h+2sUf464A2//gzHqQgpH0EvUR1TKwU=) 3: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: 51G/atnUP8WE3vN2KzPoIXBsyS6vS2RXr0QbqdKbjAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Validity Not Before: Oct 19 07:56:43 2025 GMT Not After : Oct 26 07:56:43 2025 GMT Subject: CN=68f499bc-8fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:96:07:a3:b6:99:89:12:4d:2d:e6:b6:45:85: 7a:38:a8:33:68:9a:ad:bb:9e:cc:5d:0a:95:7b:c3: 7c:a3:b9:17:d3:a9:3d:a9:b2:48:f5:7a:d7:72:f6: 09:24:df:a7:5e:e2:79:fe:6f:45:d6:60:74:4b:42: 62:de:f8:cf:27:ac:56:64:1f:1d:40:04:d3:c2:39: 13:d8:9c:ab:a3:82:f1:23:ce:36:cf:aa:80:5b:7a: 27:69:80:c2:59:1e:ea:0f:11:55:e1:9b:51:8c:cb: cf:9e:53:03:cf:78:8f:d5:b3:cf:d1:42:81:9f:3c: f1:95:aa:2a:21:bb:25:59:77:7e:5d:b0:ba:6d:8c: fd:af:77:4e:fe:11:0a:87:f2:ed:e7:5a:49:e7:b4: 89:61:34:a7:73:fd:15:9c:ed:fc:22:ba:be:2d:b4: 41:a9:a7:cd:72:68:85:90:85:d5:91:d8:ea:ee:cc: 61:4c:40:6a:bb:a8:1f:c3:c9:38:e6:8d:db:9c:b1: 05:e9:cc:82:67:3f:1b:f6:7a:21:3b:b5:9e:12:d2: 5c:67:de:61:58:a6:71:93:51:04:cf:7b:e1:af:d3: 1d:86:40:a3:76:45:75:a2:3a:e5:3b:63:a9:fc:6a: a7:7c:a9:d4:8e:d2:27:b9:fd:3a:b2:28:1f:82:4c: dc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:91:4E:C9:DB:03:CE:3A:9C:AF:A0:13:42:88:3E:03:D9:5E:3F:1A X509v3 Authority Key Identifier: keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:9e:78:7e:7d:e6:94:21:0f:9f:cb:cb:78:e8:04:29:ce:ad: 82:ff:5d:12:ac:6f:77:ce:99:be:dd:b1:2e:d0:9a:a0:e7:b1: ef:49:bf:39:9d:0f:0f:2c:be:12:fa:a9:26:73:38:c0:b7:ca: 11:db:34:70:7b:d2:9b:55:e3:ad:bc:86:64:9c:aa:90:76:12: eb:b1:bb:a6:6c:1a:17:95:a0:fa:02:5c:0f:66:9c:8b:f2:51: b4:e1:b1:7d:3d:93:02:4a:b7:92:60:76:e9:8b:c8:a7:6d:8a: 34:98:e1:ac:d8:47:2a:3a:64:4f:87:d8:64:d9:ad:e3:15:b8: b5:ce:a4:72:db:b4:87:4b:8d:19:7e:78:69:6d:d7:8a:75:bc: 6a:68:16:eb:53:1f:7f:3e:7c:81:35:0c:23:2e:24:eb:fc:ea: 85:53:5b:83:4e:80:9c:dc:12:be:fe:8c:0a:60:90:ef:c5:cd: ad:22:a1:ae:38:90:8a:93:b1:17:1c:c3:14:10:d7:22:ed:aa: 80:11:a8:86:5c:d5:75:14:6b:93:99:c3:c2:ff:22:5c:79:35: 04:e5:97:54:05:8c:5b:4e:11:68:ab:11:4d:7e:46:6f:54:f4: c0:a6:90:33:b2:4d:8e:81:3f:27:6d:79:64:fc:e0:8b:49:ea: b9:97:25:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4RUMxMTAvBgNVBAUTKEU1OEYwRjUyQTREMkQxREU0NDY3NUFDQTE3NTU3QkY5 ODJFQzdENzkwHhcNMjUxMDE5MDc1NjQzWhcNMjUxMDI2MDc1NjQzWjAYMRYwFAYD VQQDEw02OGY0OTliYy04ZmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZYHo7aZiRJNLea2RYV6OKgzaJqtu57MXQqVe8N8o7kX06k9qbJI9XrXcvYJ JN+nXuJ5/m9F1mB0S0Ji3vjPJ6xWZB8dQATTwjkT2Jyro4LxI842z6qAW3onaYDC WR7qDxFV4ZtRjMvPnlMDz3iP1bPP0UKBnzzxlaoqIbslWXd+XbC6bYz9r3dO/hEK h/Lt51pJ57SJYTSnc/0VnO38Irq+LbRBqafNcmiFkIXVkdjq7sxhTEBqu6gfw8k4 5o3bnLEF6cyCZz8b9nohO7WeEtJcZ95hWKZxk1EEz3vhr9MdhkCjdkV1ojrlO2Op /GqnfKnUjtInuf06sigfgkzc1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSRTsnb A846nK+gE0KIPgPZXj8aMB8GA1UdIwQYMBaAFOWPD1Kk0tHeRGdayhdVe/mC7H15 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8yMUU1QTMwQTFF RTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBkNUVaMXJLRjFWNy1ZTHNm WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZOFBVcVRTMGQ1RVoxcktGMVY3LVlMc2ZYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OThFQy8yMUU1QTMwQTFFRTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBk NUVaMXJLRjFWNy1ZTHNmWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFnnh+feaUIQ+fy8t46AQpzq2C/10SrG93zpm+3bEu0Jqg57HvSb85 nQ8PLL4S+qkmczjAt8oR2zRwe9KbVeOtvIZknKqQdhLrsbumbBoXlaD6AlwPZpyL 8lG04bF9PZMCSreSYHbpi8inbYo0mOGs2EcqOmRPh9hk2a3jFbi1zqRy27SHS40Z fnhpbdeKdbxqaBbrUx9/PnyBNQwjLiTr/OqFU1uDToCc3BK+/owKYJDvxc2tIqGu OJCKk7EXHMMUENci7aqAEaiGXNV1FGuTmcPC/yJceTUE5ZdUBYxbThFoqxFNfkZv VPTAppAzsk2OgT8nbXlk/OCLSeq5lyWO -----END CERTIFICATE-----Generated at Mon Oct 20 19:06:08 2025 by rpki-client