$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft File: 5CANRK2dbstocvZTqVhD-yfYR6Q.mft (raw, json) Hash identifier: 9bBeLmf4PR6IRWij+Ejo/cxz0yASXNlpDPntA+W+Ipk= Subject key identifier: FC:0D:F2:4C:DD:F7:C3:43:DA:7B:87:73:46:64:CF:1F:F3:F8:7C:A0 Authority key identifier: E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 Certificate issuer: /CN=A91C0D37/serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft Manifest number: 0189 Signing time: Sun 19 Oct 2025 06:09:40 +0000 Manifest this update: Sun 19 Oct 2025 06:09:39 +0000 Manifest next update: Sun 26 Oct 2025 06:09:39 +0000 Files and hashes: 1: 5CANRK2dbstocvZTqVhD-yfYR6Q.crl (hash: QK6jgVBpRHNCS7aZNVSQZcHEfVrKVWutwzCLcuJTTPk=) 2: 0099AE56536911EE8594503BC4F9AE02.roa (hash: AOPC9WbNcZUf3rw4IBXy2gFnwozs8jTrPTS3eOn6dJw=) 3: C7C45DD643F611EF84151D6FC4F9AE02.roa (hash: SfS9ZnMJ4K7BL+m5tPbXXtGeAg5+tE+/js3vJ/6kex8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=E4200D44AD9D6ECB6872F653A95843FB27D847A4 Validity Not Before: Oct 19 06:09:39 2025 GMT Not After : Oct 26 06:09:39 2025 GMT Subject: CN=68f480a4-ccdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d7:e9:3e:97:a9:7d:1e:b7:6f:ee:3c:67:58: 2e:dd:8e:b0:95:05:d3:f5:7e:f6:b7:8f:eb:99:6e: 74:bf:42:ff:09:3a:8c:f3:7b:da:bd:48:01:4f:5e: b3:ff:b6:01:74:2d:9d:de:40:37:2f:2e:5d:88:43: e2:ae:fb:fe:01:36:cb:1a:e2:ce:a7:8e:c2:48:45: 7e:e0:c5:95:78:2d:c0:8f:0d:28:a1:5c:ae:48:bb: 2e:38:44:f9:bc:45:9b:cd:9c:0c:b8:ac:97:a1:53: a9:0c:42:0b:b6:16:57:d5:a3:c8:13:66:b8:e0:75: b8:a7:ec:c3:77:d9:b8:97:f5:9e:bb:29:1e:22:cc: c9:f3:72:57:2b:24:95:ac:bb:dd:ba:f7:3c:7a:3a: 4a:38:93:09:8e:ef:61:33:ed:75:db:27:3a:51:98: 46:28:5c:da:4e:15:8a:64:c9:d4:62:50:fa:7b:66: 6a:b3:19:66:02:a2:07:e7:c5:c7:5d:f5:a9:e3:be: df:f7:6a:86:43:7a:58:98:1a:a2:70:ac:27:8b:df: c2:d6:1a:6b:08:76:1c:31:7d:c4:f1:e5:ac:c1:1e: 86:e5:64:6a:34:1a:0a:64:cc:0e:03:7c:e7:4b:41: 64:be:56:4d:10:2d:ed:95:62:95:49:23:2f:e0:a7: 2a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0D:F2:4C:DD:F7:C3:43:DA:7B:87:73:46:64:CF:1F:F3:F8:7C:A0 X509v3 Authority Key Identifier: keyid:E4:20:0D:44:AD:9D:6E:CB:68:72:F6:53:A9:58:43:FB:27:D8:47:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5CANRK2dbstocvZTqVhD-yfYR6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/05EECD86535B11EE9BF20A6BC4F9AE02/5CANRK2dbstocvZTqVhD-yfYR6Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:dc:6c:61:20:94:69:f6:8b:09:c6:98:fc:75:de:55:2f:94: 3c:c4:75:7a:00:4c:01:c1:58:39:4d:b1:5b:ed:90:bb:4e:96: 31:32:f6:7f:ac:51:6b:75:9a:e4:cc:aa:28:b2:af:10:79:85: 58:12:4d:1a:4d:24:00:c0:79:67:26:44:ad:cb:35:a2:cd:f9: 13:07:f3:94:34:df:4a:eb:66:d8:61:a9:be:e7:5e:11:c8:69: 87:82:cb:e1:d8:3d:51:d4:c7:6e:b4:cc:d7:61:66:6a:c6:55: 25:33:20:9e:3a:23:4f:5e:fa:62:a3:e2:af:c2:bd:94:6f:e6: c1:03:c2:14:dc:2f:2b:c2:f6:ee:f3:bd:54:74:f4:fb:d8:9e: 35:bb:77:35:e5:17:55:92:22:1c:37:70:78:e1:5b:5a:be:f3: f7:db:15:6c:52:b8:2f:c5:d1:59:8b:05:06:ce:47:b2:3a:81: c6:94:02:da:ce:46:af:98:58:a0:68:b0:f3:16:04:ac:21:01: a3:17:18:be:ce:e8:82:9b:67:55:e0:46:f9:74:f9:ee:85:33: 91:b1:0a:2b:e3:8e:c3:f1:1d:66:96:29:e8:48:c0:8d:d7:00: 5e:bc:fa:20:88:00:fa:ed:32:04:3f:67:54:62:d6:1f:3c:69: 95:0b:7b:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKEU0MjAwRDQ0QUQ5RDZFQ0I2ODcyRjY1M0E5NTg0M0ZC MjdEODQ3QTQwHhcNMjUxMDE5MDYwOTM5WhcNMjUxMDI2MDYwOTM5WjAYMRYwFAYD VQQDEw02OGY0ODBhNC1jY2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9fpPpepfR63b+48Z1gu3Y6wlQXT9X72t4/rmW50v0L/CTqM83vavUgBT16z /7YBdC2d3kA3Ly5diEPirvv+ATbLGuLOp47CSEV+4MWVeC3Ajw0ooVyuSLsuOET5 vEWbzZwMuKyXoVOpDEILthZX1aPIE2a44HW4p+zDd9m4l/WeuykeIszJ83JXKySV rLvduvc8ejpKOJMJju9hM+112yc6UZhGKFzaThWKZMnUYlD6e2ZqsxlmAqIH58XH XfWp477f92qGQ3pYmBqicKwni9/C1hprCHYcMX3E8eWswR6G5WRqNBoKZMwOA3zn S0FkvlZNEC3tlWKVSSMv4Kcq5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwN8kzd 98ND2nuHc0Zkzx/z+HygMB8GA1UdIwQYMBaAFOQgDUStnW7LaHL2U6lYQ/sn2Eek MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wNUVFQ0Q4NjUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJzdG9jdlpUcVZoRC15ZllS NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVDQU5SSzJkYnN0b2N2WlRxVmhELXlmWVI2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wNUVFQ0Q4NjUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi81Q0FOUksyZGJz dG9jdlpUcVZoRC15ZllSNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk3GxhIJRp9osJxpj8dd5VL5Q8xHV6AEwBwVg5TbFb7ZC7TpYxMvZ/ rFFrdZrkzKoosq8QeYVYEk0aTSQAwHlnJkStyzWizfkTB/OUNN9K62bYYam+514R yGmHgsvh2D1R1MdutMzXYWZqxlUlMyCeOiNPXvpio+Kvwr2Ub+bBA8IU3C8rwvbu 871UdPT72J41u3c15RdVkiIcN3B44VtavvP32xVsUrgvxdFZiwUGzkeyOoHGlALa zkavmFigaLDzFgSsIQGjFxi+zuiCm2dV4Eb5dPnuhTORsQor447D8R1mlinoSMCN 1wBevPogiAD67TIEP2dUYtYfPGmVC3tV -----END CERTIFICATE-----Generated at Mon Oct 20 17:00:23 2025 by rpki-client