$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft File: 5EZZ6m_c00PGwef_0BSlsHgYlos.mft (raw, json) Hash identifier: sDVapSoROZOHcDTxupgBqqrcielhg8lfF+XwH5x87dY= Subject key identifier: A8:67:9D:64:8C:7F:FE:14:64:F3:DE:5B:CD:D2:61:07:8C:FB:46:23 Authority key identifier: E4:46:59:EA:6F:DC:D3:43:C6:C1:E7:FF:D0:14:A5:B0:78:18:96:8B Certificate issuer: /CN=A91B3062/serialNumber=E44659EA6FDCD343C6C1E7FFD014A5B07818968B Certificate serial: 0704 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft Manifest number: 06FE Signing time: Sat 18 Oct 2025 23:21:43 +0000 Manifest this update: Sat 18 Oct 2025 23:21:42 +0000 Manifest next update: Sat 25 Oct 2025 23:21:42 +0000 Files and hashes: 1: 5EZZ6m_c00PGwef_0BSlsHgYlos.crl (hash: /4CDqdc7sxXJsvzPzmYs10y3e7HEoEvI4EoU9x3z6Yw=) 2: C8FB0DB8616D11EB928F0250C4F9AE02.roa (hash: lKS3o3ulScSFpZae2wNxVd1Zi3XsGitxWFugMmnXO+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.crl rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1796 (0x704) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3062, serialNumber=E44659EA6FDCD343C6C1E7FFD014A5B07818968B Validity Not Before: Oct 18 23:21:42 2025 GMT Not After : Oct 25 23:21:42 2025 GMT Subject: CN=68f42106-8059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:02:8a:1a:b7:07:9d:df:33:17:2c:6b:14:da: 07:80:ab:e6:db:34:67:de:04:03:a9:cc:9f:d9:5d: 20:18:85:78:e0:46:e5:2a:fc:34:c6:dd:3f:e2:82: 98:71:76:36:2d:53:66:0d:48:55:64:b5:9a:f4:81: e5:69:d8:ef:9d:bd:d1:9d:46:83:f3:a1:6e:01:95: 48:3d:46:2a:f9:26:52:f5:e3:d5:26:7c:fc:ad:d9: cd:4a:23:cd:c7:1f:8d:da:5a:90:43:6d:bf:23:19: bc:9e:e3:ba:f2:6b:b8:18:57:b1:9e:35:e0:3c:32: 8e:02:28:ea:20:9c:92:60:90:1c:0d:19:e8:71:ff: 10:d5:e0:7c:28:a6:e2:86:d7:4a:29:a7:3e:9d:e8: 0c:f4:c0:f7:d2:99:28:a7:d7:64:81:21:a7:63:b2: b2:ad:ff:fc:d8:dc:db:33:02:5f:77:8f:2a:2c:fe: 1c:80:42:69:2f:e1:53:ce:2c:cd:c1:5f:5d:91:f7: b8:ce:37:ab:9f:8c:dc:25:66:11:5b:15:c4:55:5c: ff:21:8a:54:36:b8:a1:21:67:e0:2e:27:6f:50:b3: 6b:0e:dc:ad:e0:b8:c1:08:94:c8:db:e9:9c:9e:5d: e0:0e:f3:4f:77:e9:5b:24:6b:be:81:bd:f1:b5:2f: 4f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:67:9D:64:8C:7F:FE:14:64:F3:DE:5B:CD:D2:61:07:8C:FB:46:23 X509v3 Authority Key Identifier: keyid:E4:46:59:EA:6F:DC:D3:43:C6:C1:E7:FF:D0:14:A5:B0:78:18:96:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EZZ6m_c00PGwef_0BSlsHgYlos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3062/988089E4616B11EBA647874AC4F9AE02/5EZZ6m_c00PGwef_0BSlsHgYlos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:4f:08:f6:16:0a:69:50:32:b4:65:81:cf:5b:80:d2:bd:58: a8:0e:3e:20:05:69:44:36:d2:9d:74:9d:23:4d:76:9f:8e:64: 7a:88:6b:11:73:60:b8:0d:58:4c:6b:8c:31:b6:17:d3:3c:03: f1:c8:3e:c8:45:04:07:e7:83:f2:75:8e:7f:aa:88:03:c1:bd: 60:a2:ba:8d:bf:9e:8c:fb:1f:a2:7c:7a:a7:94:22:dc:6f:23: 93:e1:f0:af:98:89:7b:a2:54:cc:27:d2:ab:a9:cb:d8:c5:e5: dd:b2:14:0c:99:57:44:e5:60:78:28:60:f6:c1:d6:dd:8a:38: 22:a7:8f:81:d5:e4:35:0a:5d:65:e1:90:d1:b8:01:02:ea:b3: 57:77:5a:a0:23:09:35:7f:04:00:bc:d4:aa:2f:ae:1c:9d:c9: 92:a9:38:e0:cd:69:06:2a:de:26:7c:2a:35:72:e2:b7:c8:ce: 9e:37:51:39:38:b6:31:5a:77:a6:81:e1:4a:91:b7:22:ec:cf: 17:1c:fe:e3:ee:23:5e:8a:b9:20:13:a6:db:d3:25:e2:1e:37: 0e:9d:b3:76:53:8b:54:8f:20:4c:b4:61:59:de:af:f2:b5:87: 3f:73:e6:c0:ee:18:7a:7d:6a:63:67:b6:85:77:21:7f:c7:ae: 83:df:cd:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMwNjIxMTAvBgNVBAUTKEU0NDY1OUVBNkZEQ0QzNDNDNkMxRTdGRkQwMTRBNUIw NzgxODk2OEIwHhcNMjUxMDE4MjMyMTQyWhcNMjUxMDI1MjMyMTQyWjAYMRYwFAYD VQQDEw02OGY0MjEwNi04MDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1wKKGrcHnd8zFyxrFNoHgKvm2zRn3gQDqcyf2V0gGIV44EblKvw0xt0/4oKY cXY2LVNmDUhVZLWa9IHladjvnb3RnUaD86FuAZVIPUYq+SZS9ePVJnz8rdnNSiPN xx+N2lqQQ22/Ixm8nuO68mu4GFexnjXgPDKOAijqIJySYJAcDRnocf8Q1eB8KKbi htdKKac+negM9MD30pkop9dkgSGnY7Kyrf/82NzbMwJfd48qLP4cgEJpL+FTzizN wV9dkfe4zjern4zcJWYRWxXEVVz/IYpUNrihIWfgLidvULNrDtyt4LjBCJTI2+mc nl3gDvNPd+lbJGu+gb3xtS9PCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhnnWSM f/4UZPPeW83SYQeM+0YjMB8GA1UdIwQYMBaAFORGWepv3NNDxsHn/9AUpbB4GJaL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzA2Mi85ODgwODlFNDYx NkIxMUVCQTY0Nzg3NEFDNEY5QUUwMi81RVpaNm1fYzAwUEd3ZWZfMEJTbHNIZ1ls b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVFWlo2bV9jMDBQR3dlZl8wQlNsc0hnWWxvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzA2Mi85ODgwODlFNDYxNkIxMUVCQTY0Nzg3NEFDNEY5QUUwMi81RVpaNm1fYzAw UEd3ZWZfMEJTbHNIZ1lsb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByTwj2FgppUDK0ZYHPW4DSvVioDj4gBWlENtKddJ0jTXafjmR6iGsR c2C4DVhMa4wxthfTPAPxyD7IRQQH54PydY5/qogDwb1gorqNv56M+x+ifHqnlCLc byOT4fCvmIl7olTMJ9KrqcvYxeXdshQMmVdE5WB4KGD2wdbdijgip4+B1eQ1Cl1l 4ZDRuAEC6rNXd1qgIwk1fwQAvNSqL64cncmSqTjgzWkGKt4mfCo1cuK3yM6eN1E5 OLYxWnemgeFKkbci7M8XHP7j7iNeirkgE6bb0yXiHjcOnbN2U4tUjyBMtGFZ3q/y tYc/c+bA7hh6fWpjZ7aFdyF/x66D382g -----END CERTIFICATE-----Generated at Mon Oct 20 09:31:39 2025 by rpki-client