$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft File: -xEsrVYxm_qsoasoznvX9MsmjOk.mft (raw, json) Hash identifier: iDkZ/WyY1Csrf4YUBqdSyMyNmFF5q9LDHYhqtPhywds= Subject key identifier: F1:21:5B:3D:51:39:42:C1:F7:D6:FC:EE:3D:93:6F:68:5F:34:7E:B0 Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 05C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft Manifest number: 05BB Signing time: Sun 19 Oct 2025 00:47:35 +0000 Manifest this update: Sun 19 Oct 2025 00:47:35 +0000 Manifest next update: Sun 26 Oct 2025 00:47:35 +0000 Files and hashes: 1: -xEsrVYxm_qsoasoznvX9MsmjOk.crl (hash: 1+LCO7StuDQNKWHok3AIN/E8mz5KP+1My85mA+wA770=) 2: ABCDCC4EE16711EEA88FAE64C4F9AE02.roa (hash: +uMy6pf4Gt8KymBYpp9dNbF+7Zqp/sfAyxYpWwI1HYE=) 3: 128DFF02E14611EE80D6C425C4F9AE02.roa (hash: gD7R9l3u/rGhrD05ZuMK8R9HTGQM3qYyh4Dz8BqVAmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1481 (0x5c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Oct 19 00:47:35 2025 GMT Not After : Oct 26 00:47:35 2025 GMT Subject: CN=68f43527-ec66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:d2:f0:93:50:4a:66:6a:a5:c2:56:00:da: 4d:94:5d:b2:88:a8:d3:48:3a:9c:d4:4c:a7:03:33: 96:6e:40:58:e8:89:47:7d:38:bc:2e:32:52:32:06: f6:b5:3b:f3:f4:6d:79:c8:1b:41:9c:06:53:07:a1: fa:91:95:c4:28:66:72:b6:51:1c:08:51:b5:49:16: 0e:42:04:ae:1f:93:eb:89:61:0d:06:c7:34:6a:92: 32:5e:8f:18:52:78:1a:a3:b3:28:dd:51:fa:e0:0b: 52:d6:ab:50:76:b0:5f:26:59:66:3d:6f:28:a2:1e: 56:75:82:d5:89:bf:b7:26:88:e2:a8:7b:d9:1e:67: 7e:5d:9c:d7:01:d0:b1:3d:26:81:3f:de:b4:b5:5d: 9a:2e:d1:1f:a8:b8:27:8a:ed:e9:c2:53:c9:d8:dd: 28:f2:f9:02:fc:ce:8f:b2:93:bb:68:87:63:ee:fb: 01:ea:d3:70:73:5b:d5:cd:d8:c4:4a:a2:dc:3a:43: b6:a6:e0:7e:81:b3:40:d6:73:7f:60:97:43:8c:3f: 1f:5d:bb:c0:ad:46:d4:8c:3f:dd:e3:e1:13:9f:39: 89:96:9d:2f:89:41:8c:94:c8:dd:7f:87:55:4f:90: 37:25:6b:f6:81:e7:04:5b:03:fc:cc:10:89:7d:00: a2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:21:5B:3D:51:39:42:C1:F7:D6:FC:EE:3D:93:6F:68:5F:34:7E:B0 X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:1d:30:8c:06:6b:b5:74:75:a4:97:bf:71:f1:75:5f:0c:3c: 82:79:9f:b8:2e:8c:e7:10:28:05:58:c2:94:9d:43:8c:7b:ca: f8:08:59:6d:07:f4:86:5d:de:97:68:f4:f6:a4:d9:5c:d1:88: e5:05:af:f9:e3:3c:ee:b4:03:d7:74:f8:cd:5f:83:b5:14:d8: c6:bf:5c:73:fc:bf:3a:33:b3:e4:7d:c3:a2:0a:02:19:76:c3: c5:a4:23:5c:2e:ec:74:0a:9e:f9:d3:eb:87:0a:89:1f:7f:65: 44:d7:4a:fd:18:14:6a:f2:88:e7:f2:76:f1:2d:b5:53:ee:90: 4e:43:a5:ae:9c:2c:9f:81:1a:26:c7:36:35:15:e6:81:df:20: 8f:33:6f:6e:78:b4:ea:5c:75:81:3a:79:93:fe:9a:b9:34:3a: 61:0e:28:54:64:1c:7c:3d:ab:72:2b:c5:21:09:57:27:27:1b: 0d:98:91:ac:58:65:55:21:19:1a:90:1d:61:12:9a:a2:0a:20: 86:fe:a5:e5:e8:80:cd:26:28:09:9f:33:d6:39:14:ce:b2:db: 9a:d4:b5:2c:c9:af:d6:ec:20:4f:ca:df:5e:2b:7d:1e:8f:d5: 88:76:1e:14:ba:1d:0b:5b:72:89:9f:c8:45:47:c1:63:36:b4: 01:16:ca:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjUxMDE5MDA0NzM1WhcNMjUxMDI2MDA0NzM1WjAYMRYwFAYD VQQDEw02OGY0MzUyNy1lYzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqP3S8JNQSmZqpcJWANpNlF2yiKjTSDqc1EynAzOWbkBY6IlHfTi8LjJSMgb2 tTvz9G15yBtBnAZTB6H6kZXEKGZytlEcCFG1SRYOQgSuH5PriWENBsc0apIyXo8Y Ungao7Mo3VH64AtS1qtQdrBfJllmPW8ooh5WdYLVib+3JojiqHvZHmd+XZzXAdCx PSaBP960tV2aLtEfqLgniu3pwlPJ2N0o8vkC/M6PspO7aIdj7vsB6tNwc1vVzdjE SqLcOkO2puB+gbNA1nN/YJdDjD8fXbvArUbUjD/d4+ETnzmJlp0viUGMlMjdf4dV T5A3JWv2gecEWwP8zBCJfQCimQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEhWz1R OULB99b87j2Tb2hfNH6wMB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RERENS84QjBEMEZGMkUzRjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1f cXNvYXNvem52WDlNc21qT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsHTCMBmu1dHWkl79x8XVfDDyCeZ+4LoznECgFWMKUnUOMe8r4CFlt B/SGXd6XaPT2pNlc0YjlBa/54zzutAPXdPjNX4O1FNjGv1xz/L86M7PkfcOiCgIZ dsPFpCNcLux0Cp750+uHCokff2VE10r9GBRq8ojn8nbxLbVT7pBOQ6WunCyfgRom xzY1FeaB3yCPM29ueLTqXHWBOnmT/pq5NDphDihUZBx8PatyK8UhCVcnJxsNmJGs WGVVIRkakB1hEpqiCiCG/qXl6IDNJigJnzPWORTOstua1LUsya/W7CBPyt9eK30e j9WIdh4Uuh0LW3KJn8hFR8FjNrQBFspP -----END CERTIFICATE-----Generated at Mon Oct 20 04:46:35 2025 by rpki-client