$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft File: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft (raw, json) Hash identifier: NDwj2TE2jmuBz699NVJAj8ubuXSGUfEosUvT3R7Ko2E= Subject key identifier: 13:F9:0A:3F:EA:4D:E0:15:FE:B3:94:23:DF:B8:E8:EE:DF:58:3F:12 Authority key identifier: E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C Certificate issuer: /CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Certificate serial: 04EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft Manifest number: 04E9 Signing time: Sun 19 Oct 2025 01:31:54 +0000 Manifest this update: Sun 19 Oct 2025 01:31:53 +0000 Manifest next update: Sun 26 Oct 2025 01:31:53 +0000 Files and hashes: 1: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl (hash: +MgGtr8w5Lz5JtWJ5Hh7eGfzcHxpBeFErq4tdbxz6/o=) 2: 4B9F1AA6354F11EC8531C34DC4F9AE02.roa (hash: +rLDpG6E4AF0Dcxf7o8iMswR6KeKAMAGKwbYTVWTRnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1262 (0x4ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ABA, serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Validity Not Before: Oct 19 01:31:53 2025 GMT Not After : Oct 26 01:31:53 2025 GMT Subject: CN=68f43f8a-7e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:67:e1:77:1e:7e:8a:0a:cb:44:1d:99:45:a5: 19:f4:be:7b:1f:af:6f:70:73:00:67:4f:7a:e6:76: f1:9c:e3:ac:58:d8:bf:77:36:56:7d:a8:ba:af:c2: 18:a1:be:22:0b:19:a4:27:01:2b:23:d2:22:10:5f: d9:0f:0f:23:af:2a:e4:e1:c5:c5:83:81:0a:55:f3: c2:91:aa:fd:41:da:30:ce:34:6f:c2:1a:31:23:c1: bb:be:ab:e8:12:74:ca:2f:1a:3f:fe:17:2d:1d:1d: eb:2e:b3:2e:7c:b9:50:32:43:72:7d:3a:55:49:92: f6:5d:3f:5b:e0:56:7e:95:d4:b9:6a:e3:88:89:8e: a0:40:8b:ff:a3:0d:1a:ef:57:05:17:13:3a:be:f3: 8d:62:a2:df:f5:4a:f4:06:16:8f:4c:ad:63:9b:55: 90:61:43:65:17:0d:64:c7:d0:38:4c:7d:b8:c6:a1: ce:18:4a:1f:7c:fb:7e:f7:76:c5:1a:80:f0:1f:b6: cc:dc:04:7d:f5:35:95:d6:be:01:f5:fc:c6:21:85: 78:ef:a3:4d:2d:39:7d:a0:be:ce:67:86:01:84:14: 8d:d9:06:7b:ad:1b:9a:2e:c8:8a:0f:6b:c4:67:a2: be:8f:a4:c7:de:df:df:8f:1f:c8:13:52:a9:6b:10: 4b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F9:0A:3F:EA:4D:E0:15:FE:B3:94:23:DF:B8:E8:EE:DF:58:3F:12 X509v3 Authority Key Identifier: keyid:E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:db:5f:a4:ab:a0:22:14:c3:e6:c7:4e:13:71:ff:ac:87:e4: 92:97:48:89:79:db:a3:46:b2:17:a5:39:60:0c:73:36:2f:f5: e3:20:fe:f1:b8:9f:c9:fb:bb:5e:f4:ce:bb:e5:d6:d2:2d:34: 32:1a:5f:35:cd:0c:fa:41:1e:ed:da:53:1a:b2:48:89:07:3f: 10:72:2a:67:2f:2c:7a:31:3c:83:a7:f4:17:09:4c:94:8c:c0: fd:71:d2:50:3d:99:7e:b3:1f:96:70:7a:e4:f9:f3:bb:f5:cf: 11:11:b3:7d:9a:50:88:e6:6d:df:04:46:e6:a0:bb:75:05:f0: df:e9:10:06:2c:e4:74:fb:c4:74:65:4d:61:a6:f0:3f:ee:37: b1:df:5e:4b:85:8c:a0:d3:67:b3:53:03:af:66:7a:7f:2b:13: 2c:f1:a6:43:42:f8:1b:00:9e:97:b6:8e:19:fc:94:fc:7c:aa: 44:53:58:ad:d4:90:44:4e:d2:db:73:e4:ca:6d:a9:d3:b0:2f: c3:f9:7a:9b:77:31:50:73:b4:53:0f:47:5a:17:38:c3:ee:51: dd:a1:35:a3:26:60:b9:1a:52:d5:d9:8c:38:49:8b:90:e9:0a: 68:e8:c2:a7:ff:fb:94:e2:42:13:2c:9a:60:6e:e5:a8:72:0a: 1b:ff:ce:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBQkExMTAvBgNVBAUTKEU1OTkzMTU1QzQ0NDNBMkU1NkMwREUyMzMzQTQ0QjU2 Q0FENDkxOUMwHhcNMjUxMDE5MDEzMTUzWhcNMjUxMDI2MDEzMTUzWjAYMRYwFAYD VQQDEw02OGY0M2Y4YS03ZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmfhdx5+igrLRB2ZRaUZ9L57H69vcHMAZ0965nbxnOOsWNi/dzZWfai6r8IY ob4iCxmkJwErI9IiEF/ZDw8jryrk4cXFg4EKVfPCkar9QdowzjRvwhoxI8G7vqvo EnTKLxo//hctHR3rLrMufLlQMkNyfTpVSZL2XT9b4FZ+ldS5auOIiY6gQIv/ow0a 71cFFxM6vvONYqLf9Ur0BhaPTK1jm1WQYUNlFw1kx9A4TH24xqHOGEoffPt+93bF GoDwH7bM3AR99TWV1r4B9fzGIYV476NNLTl9oL7OZ4YBhBSN2QZ7rRuaLsiKD2vE Z6K+j6TH3t/fjx/IE1KpaxBLRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBP5Cj/q TeAV/rOUI9+46O7fWD8SMB8GA1UdIwQYMBaAFOWZMVXERDouVsDeIzOkS1bK1JGc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0FCQS85ODVGMDkyMjM1 NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9pNVd3TjRqTTZSTFZzclVr WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaa3hWY1JFT2k1V3dONGpNNlJMVnNyVWtady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0FCQS85ODVGMDkyMjM1NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9p NVd3TjRqTTZSTFZzclVrWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA121+kq6AiFMPmx04Tcf+sh+SSl0iJedujRrIXpTlgDHM2L/XjIP7x uJ/J+7te9M675dbSLTQyGl81zQz6QR7t2lMaskiJBz8QcipnLyx6MTyDp/QXCUyU jMD9cdJQPZl+sx+WcHrk+fO79c8REbN9mlCI5m3fBEbmoLt1BfDf6RAGLOR0+8R0 ZU1hpvA/7jex315LhYyg02ezUwOvZnp/KxMs8aZDQvgbAJ6Xto4Z/JT8fKpEU1it 1JBETtLbc+TKbanTsC/D+XqbdzFQc7RTD0daFzjD7lHdoTWjJmC5GlLV2Yw4SYuQ 6Qpo6MKn//uU4kITLJpgbuWocgob/87E -----END CERTIFICATE-----Generated at Mon Oct 20 21:37:58 2025 by rpki-client