$ rpki-client -vvf rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft File: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft (raw, json) Hash identifier: kE847llUxFExZ1cAJwdgxIfyujEsYEQ4mbcIzzo1vs4= Subject key identifier: E5:CC:E3:EB:74:99:57:63:6C:E3:A5:EC:3C:0F:8F:AB:D1:A4:D2:FD Authority key identifier: B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E Certificate issuer: /CN=A917F8F2/serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E Certificate serial: 087B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft Manifest number: 086C Signing time: Sat 18 Oct 2025 21:47:51 +0000 Manifest this update: Sat 18 Oct 2025 21:47:50 +0000 Manifest next update: Sat 25 Oct 2025 21:47:50 +0000 Files and hashes: 1: t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl (hash: 8KRipeFsTELPhBQ5Q1yRFR4NQHvODlzx1TGmoY6dLLM=) 2: B78B5CB6D65F11EA8B30486EC4F9AE02.roa (hash: MyNq7pYsfXRPiYwbL0q3/Dn2sx3QYfe2KkNfFn5PXS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2171 (0x87b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F8F2, serialNumber=B791BD1C9E2081AA84F8078066C0C7F60A63790E Validity Not Before: Oct 18 21:47:50 2025 GMT Not After : Oct 25 21:47:50 2025 GMT Subject: CN=68f40b07-4a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5e:6e:ef:cc:20:e9:49:af:71:a4:88:af:3a: d6:fa:46:be:cb:a3:e6:a6:b8:06:d7:09:3b:f5:09: f0:39:4b:64:5d:f6:cf:4a:03:f4:7d:81:f3:4f:1b: 4f:89:24:38:4f:01:c6:82:d6:d8:e6:64:93:70:ab: 1d:37:4d:18:46:4d:fb:af:fa:25:cd:be:99:17:af: 72:10:40:4c:4a:6f:4c:03:a2:b1:f0:52:80:bd:49: 67:71:71:1b:d3:2d:5f:30:c7:1c:44:17:fc:89:40: 3e:e9:8d:be:e2:ce:7c:56:fb:9a:0c:73:0b:a2:f4: fc:c3:1d:28:f4:76:43:5b:4b:65:37:25:72:64:24: c5:bb:24:a3:ea:83:91:f2:cc:65:83:ee:ce:e7:19: fb:ae:5d:16:8d:8d:0d:43:08:4d:1f:7f:a5:33:81: 92:7e:17:b9:e8:66:62:2d:2f:97:c5:3a:76:ac:b4: 60:01:61:38:26:f9:02:28:b2:32:70:99:9b:d2:ab: 8d:6a:6d:c5:cc:64:84:88:e3:dc:52:4f:82:7f:49: c8:70:71:77:6e:a9:da:31:4d:52:5b:83:50:63:72: 06:c5:32:99:2a:e3:fc:c0:5c:22:74:c9:67:60:fb: 8d:93:de:96:c4:81:36:c8:94:4b:69:25:85:89:c7: 1f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CC:E3:EB:74:99:57:63:6C:E3:A5:EC:3C:0F:8F:AB:D1:A4:D2:FD X509v3 Authority Key Identifier: keyid:B7:91:BD:1C:9E:20:81:AA:84:F8:07:80:66:C0:C7:F6:0A:63:79:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F8F2/022D571CD65E11EAB60CA36BC4F9AE02/t5G9HJ4ggaqE-AeAZsDH9gpjeQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0f:d1:0e:20:51:b6:fc:05:e9:05:87:84:99:ee:bf:97:30: 69:bf:84:8e:2f:ed:c5:97:f1:35:15:aa:3f:f3:c6:f4:00:5a: 70:6d:c9:40:23:08:83:df:42:78:cf:e3:94:b5:d4:62:25:ad: 7a:b3:8d:4f:5b:b7:de:eb:e2:87:15:8f:95:99:bd:53:ab:65: ab:1d:85:61:d6:7c:29:29:fe:fd:b5:18:1a:70:08:0d:52:02: ac:2a:65:e0:43:c8:48:66:20:15:85:e7:c0:dc:9e:39:f1:bd: ac:5f:20:e9:83:39:a2:0e:8e:9d:a5:e6:93:5c:94:ed:1b:82: 97:5b:04:1b:07:f3:70:b9:df:0a:c1:64:0e:d9:03:b2:a6:4c: 35:d4:c3:b5:a4:75:6c:d6:0d:7c:a0:a3:ad:3b:e9:a3:a0:bc: cf:f2:d9:62:bd:f9:13:f0:5e:34:de:a0:24:c1:bb:c5:06:cf: e1:c8:4a:ab:66:9a:3c:20:cd:b8:ff:46:cd:b0:41:4e:e8:8f: 1f:d9:2d:5a:cb:b8:f9:31:39:96:0c:3e:e7:40:af:14:f2:c6: 04:c1:03:33:bf:ea:c1:be:ca:b0:63:f5:18:4f:57:5a:63:68: cb:1d:15:a3:98:32:4d:2b:4b:97:26:37:64:0f:06:d7:ee:ae: ce:07:87:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4RjIxMTAvBgNVBAUTKEI3OTFCRDFDOUUyMDgxQUE4NEY4MDc4MDY2QzBDN0Y2 MEE2Mzc5MEUwHhcNMjUxMDE4MjE0NzUwWhcNMjUxMDI1MjE0NzUwWjAYMRYwFAYD VQQDEw02OGY0MGIwNy00YTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvl5u78wg6UmvcaSIrzrW+ka+y6PmprgG1wk79QnwOUtkXfbPSgP0fYHzTxtP iSQ4TwHGgtbY5mSTcKsdN00YRk37r/olzb6ZF69yEEBMSm9MA6Kx8FKAvUlncXEb 0y1fMMccRBf8iUA+6Y2+4s58VvuaDHMLovT8wx0o9HZDW0tlNyVyZCTFuySj6oOR 8sxlg+7O5xn7rl0WjY0NQwhNH3+lM4GSfhe56GZiLS+XxTp2rLRgAWE4JvkCKLIy cJmb0quNam3FzGSEiOPcUk+Cf0nIcHF3bqnaMU1SW4NQY3IGxTKZKuP8wFwidMln YPuNk96WxIE2yJRLaSWFiccfjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXM4+t0 mVdjbOOl7DwPj6vRpNL9MB8GA1UdIwQYMBaAFLeRvRyeIIGqhPgHgGbAx/YKY3kO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjhGMi8wMjJENTcxQ0Q2 NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dhcUUtQWVBWnNESDlncGpl UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q1RzlISjRnZ2FxRS1BZUFac0RIOWdwamVRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjhGMi8wMjJENTcxQ0Q2NUUxMUVBQjYwQ0EzNkJDNEY5QUUwMi90NUc5SEo0Z2dh cUUtQWVBWnNESDlncGplUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArD9EOIFG2/AXpBYeEme6/lzBpv4SOL+3Fl/E1Fao/88b0AFpwbclA IwiD30J4z+OUtdRiJa16s41PW7fe6+KHFY+Vmb1Tq2WrHYVh1nwpKf79tRgacAgN UgKsKmXgQ8hIZiAVhefA3J458b2sXyDpgzmiDo6dpeaTXJTtG4KXWwQbB/Nwud8K wWQO2QOypkw11MO1pHVs1g18oKOtO+mjoLzP8tlivfkT8F403qAkwbvFBs/hyEqr Zpo8IM24/0bNsEFO6I8f2S1ay7j5MTmWDD7nQK8U8sYEwQMzv+rBvsqwY/UYT1da Y2jLHRWjmDJNK0uXJjdkDwbX7q7OB4f0 -----END CERTIFICATE-----Generated at Mon Oct 20 07:55:59 2025 by rpki-client