$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft File: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft (raw, json) Hash identifier: jHgEp7soEdbu24dCoPmvIHZ+YSaSZ5l6tESEu0kiEfE= Subject key identifier: 6F:5E:85:84:AA:D3:1C:89:DF:F7:D4:8E:29:18:15:E4:60:D7:B0:BA Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D Certificate issuer: /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D Certificate serial: 06C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft Manifest number: 06BB Signing time: Sat 18 Oct 2025 23:37:27 +0000 Manifest this update: Sat 18 Oct 2025 23:37:26 +0000 Manifest next update: Sat 25 Oct 2025 23:37:26 +0000 Files and hashes: 1: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl (hash: K4rMVr2BywJTotkzO0L4F8eWDxfr+jeydE8crl0En6U=) 2: 54F537EC32CD11EFA6C5320EC4F9AE02.roa (hash: S4JJ7jAyBRSnbNqlDJcNsJ3iSBBNhU/Ff59dfcwJJB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1732 (0x6c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91801A5, serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D Validity Not Before: Oct 18 23:37:26 2025 GMT Not After : Oct 25 23:37:26 2025 GMT Subject: CN=68f424b7-a54f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e9:00:44:a6:5d:95:0f:c0:2e:d7:9d:fe:3f: 09:70:d2:72:6c:ff:cd:27:29:e4:c0:0f:88:e2:2e: 53:ed:49:68:1a:5c:c5:9d:3a:45:eb:c1:99:d0:7f: 6e:0c:ae:e6:47:42:2f:57:a2:20:b5:be:7a:9d:da: ef:cd:95:63:76:79:df:56:c3:d9:09:eb:80:b9:02: 44:ca:56:e5:12:bb:1c:42:df:ec:65:c5:a9:2c:c4: 49:d5:16:96:d2:f6:0c:c2:e8:b6:2d:57:d2:77:35: d1:d3:5e:fe:81:a3:ad:47:a8:58:32:b2:5f:c2:9c: 1a:b8:8a:bf:a9:61:18:27:f3:64:b6:c6:44:b9:8f: 57:68:b2:ab:39:7d:8b:56:15:2c:91:80:7d:39:d7: ff:db:fd:ee:37:63:9d:7c:99:ee:12:43:ec:32:7d: d3:09:af:1e:8f:25:ee:71:2d:1f:f5:9e:e2:63:24: 03:30:b0:46:fa:ea:2a:76:83:29:a8:a6:a6:4a:f4: c2:97:35:b9:68:1b:73:21:b2:fa:36:88:1a:5e:ef: 4c:49:40:85:40:a7:f8:b2:ac:de:85:00:08:25:9c: 82:5d:b9:72:60:fb:26:b6:44:99:30:b0:a4:5a:9d: d1:16:57:24:5f:a2:ee:5d:aa:9b:39:08:cf:dc:13: 9f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5E:85:84:AA:D3:1C:89:DF:F7:D4:8E:29:18:15:E4:60:D7:B0:BA X509v3 Authority Key Identifier: keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:2b:26:d0:ce:e4:a6:89:33:4b:79:93:f4:fe:c4:0d:20:f1: 0a:c0:39:83:9c:57:12:d3:7e:82:c0:5c:06:30:b0:45:49:6d: 70:2e:63:76:ec:70:b9:fa:92:2d:4a:33:22:32:dd:62:b1:c0: 02:75:01:19:9d:ae:50:c3:f3:99:06:8d:82:a0:ba:52:d8:2b: b7:c6:b5:a6:7c:cc:17:e7:95:c9:57:83:f8:8a:37:99:21:8c: 4b:42:1a:29:5b:51:6d:c4:8b:a8:64:8b:6f:9d:51:4a:43:cf: 43:63:f5:c0:e1:a7:c4:75:d7:18:7c:e6:28:db:38:e3:3c:22: 57:a5:70:ef:c3:e8:49:2f:10:bd:ce:da:98:94:66:7a:ea:df: ae:39:a1:85:43:20:15:b4:39:90:39:67:ff:db:35:ce:3d:ca: f6:5c:0d:11:af:0c:d0:81:bf:34:35:00:c1:3d:cc:ae:ce:ad: 4e:45:c7:60:27:da:33:d4:5f:18:a8:55:6d:4c:d6:e1:e7:ec: 8f:53:61:de:76:a1:34:0a:30:06:09:ee:a2:64:7a:ad:ac:80: 71:8d:2b:cf:32:73:d3:3f:e2:f4:b2:14:e8:cb:3a:7a:ec:08: 89:b9:58:7e:fb:49:5e:99:02:17:8f:09:5d:a2:8d:9e:e5:e2: 10:e3:ab:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxQTUxMTAvBgNVBAUTKEU1RTFDRkNBRTFGOUU2RjEyMUNBMTM1NTFCNDBGNjk4 OTg0QjlEOUQwHhcNMjUxMDE4MjMzNzI2WhcNMjUxMDI1MjMzNzI2WjAYMRYwFAYD VQQDEw02OGY0MjRiNy1hNTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ukARKZdlQ/ALted/j8JcNJybP/NJynkwA+I4i5T7UloGlzFnTpF68GZ0H9u DK7mR0IvV6Igtb56ndrvzZVjdnnfVsPZCeuAuQJEylblErscQt/sZcWpLMRJ1RaW 0vYMwui2LVfSdzXR017+gaOtR6hYMrJfwpwauIq/qWEYJ/NktsZEuY9XaLKrOX2L VhUskYB9Odf/2/3uN2OdfJnuEkPsMn3TCa8ejyXucS0f9Z7iYyQDMLBG+uoqdoMp qKamSvTClzW5aBtzIbL6NogaXu9MSUCFQKf4sqzehQAIJZyCXblyYPsmtkSZMLCk Wp3RFlckX6LuXaqbOQjP3BOf1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9ehYSq 0xyJ3/fUjikYFeRg17C6MB8GA1UdIwQYMBaAFOXhz8rh+ebxIcoTVRtA9piYS52d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDFBNS84NEI1RDYxQzdE NkQxMUVCQTZBNEE4MTdDNEY5QUUwMi81ZUhQeXVINTV2RWh5aE5WRzBEMm1KaExu WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlSFB5dUg1NXZFaHloTlZHMEQybUpoTG5aMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDFBNS84NEI1RDYxQzdENkQxMUVCQTZBNEE4MTdDNEY5QUUwMi81ZUhQeXVINTV2 RWh5aE5WRzBEMm1KaExuWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdKybQzuSmiTNLeZP0/sQNIPEKwDmDnFcS036CwFwGMLBFSW1wLmN2 7HC5+pItSjMiMt1iscACdQEZna5Qw/OZBo2CoLpS2Cu3xrWmfMwX55XJV4P4ijeZ IYxLQhopW1FtxIuoZItvnVFKQ89DY/XA4afEddcYfOYo2zjjPCJXpXDvw+hJLxC9 ztqYlGZ66t+uOaGFQyAVtDmQOWf/2zXOPcr2XA0RrwzQgb80NQDBPcyuzq1ORcdg J9oz1F8YqFVtTNbh5+yPU2HedqE0CjAGCe6iZHqtrIBxjSvPMnPTP+L0shToyzp6 7AiJuVh++0lemQIXjwldoo2e5eIQ46u8 -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:58 2025 by rpki-client