$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft File: 5MWJuJPSconPhG3wWt-1lgNkKP0.mft (raw, json) Hash identifier: E9fAcTtZGctV4j0WG2tXImhtTyVfcGeGGJGyIiYglY0= Subject key identifier: C9:6F:99:80:17:6B:71:3E:21:2A:4D:23:99:F1:5E:09:4A:FF:8E:47 Authority key identifier: E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD Certificate issuer: /CN=A91B8AC8/serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft Manifest number: A9 Signing time: Sun 19 Oct 2025 09:28:04 +0000 Manifest this update: Sun 19 Oct 2025 09:28:04 +0000 Manifest next update: Sun 26 Oct 2025 09:28:04 +0000 Files and hashes: 1: 5MWJuJPSconPhG3wWt-1lgNkKP0.crl (hash: TLuGj0mxK7/vWi30ZqQyZTlLtXYfztHJHA1UjwxBklU=) 2: 8FFA61D4B13D11EF9EFDE433C4F9AE02.roa (hash: EhNDnWOJJGSPSxGl0lercQlAl3yvPmyKkzL2DPkH1sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8AC8, serialNumber=E4C589B893D27289CF846DF05ADFB596036428FD Validity Not Before: Oct 19 09:28:04 2025 GMT Not After : Oct 26 09:28:04 2025 GMT Subject: CN=68f4af24-1eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f7:0b:02:fc:8d:19:27:d1:65:bd:ae:f8:73: 4b:c7:2f:89:03:0d:c0:56:e3:34:2a:23:a2:cf:c2: 6f:95:4c:0c:b1:e0:14:8e:18:2b:2c:c3:6b:be:96: 41:00:c4:b7:a0:51:27:cc:87:5d:61:25:2f:9e:de: b7:a7:39:a0:6e:80:48:56:59:19:8a:cd:49:ca:a4: d3:f3:6d:e9:28:aa:9f:a8:a9:af:48:bc:5f:65:16: 0c:e7:79:a5:31:de:72:bc:19:98:39:90:16:76:e1: e8:31:c1:cc:d5:72:fe:71:6d:72:5f:ca:85:df:9d: 19:33:4f:1a:ff:ff:34:20:d9:ee:79:a6:78:d8:ac: 54:a2:92:35:41:e1:d1:e2:c2:41:1e:80:f2:e4:2a: f6:5b:b0:39:c0:26:eb:d9:4e:c7:bd:a5:d7:13:73: 0e:ed:0b:bf:57:ea:72:ea:64:22:d2:aa:b5:b5:e8: f1:1f:2f:4f:f0:d3:76:03:3b:5e:7c:1f:dc:b0:29: 8c:70:84:ae:cb:18:e0:7f:3d:61:f7:4c:25:94:c7: 09:46:09:14:d1:85:74:60:ff:33:3a:11:6f:c8:f3: 0e:50:5a:1a:4e:08:ea:26:05:f1:15:4f:b5:a4:a7: 98:2b:e6:51:57:da:92:04:cc:04:31:f0:99:32:a3: 85:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6F:99:80:17:6B:71:3E:21:2A:4D:23:99:F1:5E:09:4A:FF:8E:47 X509v3 Authority Key Identifier: keyid:E4:C5:89:B8:93:D2:72:89:CF:84:6D:F0:5A:DF:B5:96:03:64:28:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5MWJuJPSconPhG3wWt-1lgNkKP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E12D1052B13C11EFAAF9D731C4F9AE02/5MWJuJPSconPhG3wWt-1lgNkKP0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:43:e1:e7:65:c0:5e:cc:95:9c:c0:8c:16:ba:23:88:47:99: c2:b2:0e:70:d2:c6:c9:87:44:6c:c5:e6:38:b4:4d:26:4f:fc: 16:47:b4:20:bf:68:02:9c:d7:45:29:a4:4b:bc:02:0c:f5:04: bd:3f:fa:24:2d:ae:12:16:3c:68:3e:db:d8:c6:57:d0:64:28: 88:6d:93:a4:1f:dd:12:20:37:63:55:68:5e:71:79:4e:43:86: ca:fb:f1:e4:c8:56:d6:21:e6:ff:ee:b0:60:07:7c:21:8e:03: de:42:3e:a2:30:36:16:95:5f:b0:a8:5a:a8:64:0c:c1:f7:54: d9:a9:12:d8:72:9a:09:ea:7d:a1:db:20:ba:ae:2a:22:0c:b4: 5b:57:40:4f:c8:6b:d7:c9:1c:37:72:8a:62:b0:88:16:08:b0: 41:fa:10:4e:7d:7a:b7:8d:95:59:02:22:72:ee:b5:75:1b:ad: d6:c6:40:f9:47:2e:92:43:98:58:33:88:0b:5e:61:c6:9a:12: 9f:9e:54:06:0d:b5:17:4a:4e:9d:f8:63:bd:c7:86:8b:e9:21: b4:55:83:4b:6d:06:9c:cb:79:ba:1a:d4:e2:3b:5d:ad:18:66: 21:a3:c8:e5:5e:5c:c9:69:d6:e8:6d:74:f7:c9:8b:c6:7d:75: 4f:8d:fc:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBQzgxMTAvBgNVBAUTKEU0QzU4OUI4OTNEMjcyODlDRjg0NkRGMDVBREZCNTk2 MDM2NDI4RkQwHhcNMjUxMDE5MDkyODA0WhcNMjUxMDI2MDkyODA0WjAYMRYwFAYD VQQDEw02OGY0YWYyNC0xZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6PcLAvyNGSfRZb2u+HNLxy+JAw3AVuM0KiOiz8JvlUwMseAUjhgrLMNrvpZB AMS3oFEnzIddYSUvnt63pzmgboBIVlkZis1JyqTT823pKKqfqKmvSLxfZRYM53ml Md5yvBmYOZAWduHoMcHM1XL+cW1yX8qF350ZM08a//80INnueaZ42KxUopI1QeHR 4sJBHoDy5Cr2W7A5wCbr2U7HvaXXE3MO7Qu/V+py6mQi0qq1tejxHy9P8NN2Azte fB/csCmMcISuyxjgfz1h90wllMcJRgkU0YV0YP8zOhFvyPMOUFoaTgjqJgXxFU+1 pKeYK+ZRV9qSBMwEMfCZMqOFNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlvmYAX a3E+ISpNI5nxXglK/45HMB8GA1UdIwQYMBaAFOTFibiT0nKJz4Rt8FrftZYDZCj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEFDOC9FMTJEMTA1MkIx M0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi81TVdKdUpQU2NvblBoRzN3V3QtMWxnTmtL UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVNV0p1SlBTY29uUGhHM3dXdC0xbGdOa0tQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEFDOC9FMTJEMTA1MkIxM0MxMUVGQUFGOUQ3MzFDNEY5QUUwMi81TVdKdUpQU2Nv blBoRzN3V3QtMWxnTmtLUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAQ+HnZcBezJWcwIwWuiOIR5nCsg5w0sbJh0RsxeY4tE0mT/wWR7Qg v2gCnNdFKaRLvAIM9QS9P/okLa4SFjxoPtvYxlfQZCiIbZOkH90SIDdjVWhecXlO Q4bK+/HkyFbWIeb/7rBgB3whjgPeQj6iMDYWlV+wqFqoZAzB91TZqRLYcpoJ6n2h 2yC6rioiDLRbV0BPyGvXyRw3copisIgWCLBB+hBOfXq3jZVZAiJy7rV1G63WxkD5 Ry6SQ5hYM4gLXmHGmhKfnlQGDbUXSk6d+GO9x4aL6SG0VYNLbQacy3m6GtTiO12t GGYho8jlXlzJadbobXT3yYvGfXVPjfzc -----END CERTIFICATE-----Generated at Tue Oct 21 08:08:58 2025 by rpki-client