$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft File: 5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json) Hash identifier: 4gIAtEDT1UjczP4e6CUb5lfmc9sBKnbgP71diTs3s/Q= Subject key identifier: 20:5B:B9:35:B9:09:4A:D0:42:87:05:03:70:40:93:EE:63:97:C3:E3 Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 Certificate issuer: /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Certificate serial: 090F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft Manifest number: 08EE Signing time: Sat 18 Oct 2025 21:27:45 +0000 Manifest this update: Sat 18 Oct 2025 21:27:44 +0000 Manifest next update: Sat 25 Oct 2025 21:27:44 +0000 Files and hashes: 1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: PYdrO779VgSHuJsoCquzSFTECTbr/0eDo+vhkaR9IiU=) 2: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: DP8lG9el46NF03CMOLzrMzttp6pe74xkZuZziqnxmJ4=) 3: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: mYMneOcMzVSjWOSfz2l4H7HMRndq3Nml1V+jd7+ZSu8=) 4: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: EeEFahw1S1xzRQMqYweCJnCU9S+/LW0T/PuPJ3E+UWM=) 5: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: LdDw24/Or3M92peybKBWsStvdJIFCX02q7LqBzB3QW8=) 6: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: 1QX8DyT1A4CiikAaWBicwaY94hYcJgWNUoKN7UlLwiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2319 (0x90f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3 Validity Not Before: Oct 18 21:27:44 2025 GMT Not After : Oct 25 21:27:44 2025 GMT Subject: CN=68f40650-6be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e0:d5:7d:7f:dc:89:64:cf:c3:ba:f6:74:79: 1b:25:42:12:91:2d:0c:0f:56:dd:1e:fc:29:e1:ed: 6b:a2:0f:2d:3a:2e:e8:f8:d2:c5:39:90:81:b9:12: df:77:bb:ec:e2:0b:cb:25:43:b4:80:aa:8d:d5:8d: eb:92:d0:71:94:7f:50:76:56:52:f8:ce:c5:4e:33: 1a:35:23:08:76:fa:e1:f3:84:46:dc:0b:44:02:82: 17:6a:00:8a:93:10:4f:26:95:19:95:60:2a:32:e0: c6:26:26:b8:e8:f0:66:7c:de:af:8a:02:e2:32:bd: 78:ff:27:57:1f:06:49:4c:26:b2:21:72:df:f3:f2: f7:61:01:84:31:85:1e:e9:93:ce:d2:66:44:de:01: 0e:cc:2f:78:9d:b2:b1:30:24:16:e8:32:de:62:c9: f5:5e:df:62:a2:f8:02:ea:c8:c7:b4:ea:50:61:14: cf:ba:c3:b7:99:cc:69:12:43:ad:87:83:7e:a2:35: 9f:33:6f:ff:ad:e1:97:5c:5c:c3:ba:70:a6:24:0e: fb:a3:eb:c1:23:3e:2d:8e:b1:d3:39:00:84:f8:42: 23:86:67:73:e0:08:0f:b5:9c:d2:b6:d0:b8:db:7a: bd:4b:43:92:38:d0:11:a9:9f:9b:b8:13:7d:0f:eb: 6a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5B:B9:35:B9:09:4A:D0:42:87:05:03:70:40:93:EE:63:97:C3:E3 X509v3 Authority Key Identifier: keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:a8:4b:44:99:20:6c:f8:e5:86:1e:ad:17:74:d0:78:98:0b: d1:fb:44:97:49:ac:4a:b3:c6:6c:c4:41:9c:62:ed:9f:74:93: 83:78:6d:cc:6c:8a:84:21:64:c8:51:ce:2d:36:4b:f1:f1:b5: ce:69:0d:ff:a6:77:f0:90:70:19:4b:7c:e9:1d:bc:d9:a2:f2: 88:d6:24:ef:9f:93:25:8c:37:4e:bb:b6:ec:ce:ad:ba:7f:d7: a8:ed:aa:58:a8:a6:2e:29:54:e1:f5:2f:24:df:67:41:1a:f3: 2e:ab:ee:74:99:91:22:a3:31:70:46:dd:d6:e3:10:b5:de:17: 0b:ab:33:d2:18:21:74:6e:52:fb:bb:a9:c1:15:9e:09:fb:4c: 72:2e:e8:2e:f4:85:b5:28:8d:03:3a:44:25:8d:cb:3c:ef:1c: 7b:f7:3e:0d:ec:f4:5a:e1:4d:81:75:d4:7c:c6:7e:48:95:c2: 52:bd:cc:75:c9:5b:70:1e:97:db:2c:22:c3:4d:ca:d6:ea:1f: bc:9b:3d:50:09:d1:2c:a0:cd:31:ab:f3:37:47:6b:6a:c0:7b: 81:06:0c:4c:07:27:9f:58:9d:5d:24:11:f0:d5:4d:28:9b:5a: 01:86:c7:da:e1:61:0c:32:ca:95:a6:36:33:93:52:bf:7d:4e: 0c:d0:65:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJGRDkxMTAvBgNVBAUTKEU1RUIxODBDRDZEQzUxNkM2NkQzNTJCMDQ3QjlFOUM1 QTUwMjcwRTMwHhcNMjUxMDE4MjEyNzQ0WhcNMjUxMDI1MjEyNzQ0WjAYMRYwFAYD VQQDEw02OGY0MDY1MC02YmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweDVfX/ciWTPw7r2dHkbJUISkS0MD1bdHvwp4e1rog8tOi7o+NLFOZCBuRLf d7vs4gvLJUO0gKqN1Y3rktBxlH9QdlZS+M7FTjMaNSMIdvrh84RG3AtEAoIXagCK kxBPJpUZlWAqMuDGJia46PBmfN6vigLiMr14/ydXHwZJTCayIXLf8/L3YQGEMYUe 6ZPO0mZE3gEOzC94nbKxMCQW6DLeYsn1Xt9iovgC6sjHtOpQYRTPusO3mcxpEkOt h4N+ojWfM2//reGXXFzDunCmJA77o+vBIz4tjrHTOQCE+EIjhmdz4AgPtZzSttC4 23q9S0OSONARqZ+buBN9D+tqlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBbuTW5 CUrQQocFA3BAk+5jl8PjMB8GA1UdIwQYMBaAFOXrGAzW3FFsZtNSsEe56cWlAnDj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkZEOS80QUU4MDQxRUI5 RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VXeG0wMUt3UjducHhhVUNj T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVlc1lETmJjVVd4bTAxS3dSN25weGFVQ2NPTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkZEOS80QUU4MDQxRUI5RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VX eG0wMUt3UjducHhhVUNjT00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzqEtEmSBs+OWGHq0XdNB4mAvR+0SXSaxKs8ZsxEGcYu2fdJODeG3M bIqEIWTIUc4tNkvx8bXOaQ3/pnfwkHAZS3zpHbzZovKI1iTvn5MljDdOu7bszq26 f9eo7apYqKYuKVTh9S8k32dBGvMuq+50mZEiozFwRt3W4xC13hcLqzPSGCF0blL7 u6nBFZ4J+0xyLugu9IW1KI0DOkQljcs87xx79z4N7PRa4U2BddR8xn5IlcJSvcx1 yVtwHpfbLCLDTcrW6h+8mz1QCdEsoM0xq/M3R2tqwHuBBgxMByefWJ1dJBHw1U0o m1oBhsfa4WEMMsqVpjYzk1K/fU4M0GV5 -----END CERTIFICATE-----Generated at Mon Oct 20 12:40:32 2025 by rpki-client