$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft File: 5yN2M529XTAqWcz6d6wJzRcjlU0.mft (raw, json) Hash identifier: Uh/anjdacsjnH7KNPBJ5q0NEvb+XQrKVKU41MkGaDZM= Subject key identifier: 2B:86:0A:08:0F:D0:68:87:A4:1D:10:71:4C:22:26:03:FC:74:EB:F3 Authority key identifier: E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D Certificate issuer: /CN=A91CD60C/serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft Manifest number: BD Signing time: Sun 19 Oct 2025 09:10:29 +0000 Manifest this update: Sun 19 Oct 2025 09:10:28 +0000 Manifest next update: Sun 26 Oct 2025 09:10:28 +0000 Files and hashes: 1: 5yN2M529XTAqWcz6d6wJzRcjlU0.crl (hash: kXX4p19JSJFLA4pepV09VbrFwmA2/dzZ3PMBd1nbdz4=) 2: AC8EE79E975B11EFB1D18E82C4F9AE02.roa (hash: sqDKPZ1qrocmicYcNGEqHeOR7eFUFOhb8W65lVkqel0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD60C, serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D Validity Not Before: Oct 19 09:10:28 2025 GMT Not After : Oct 26 09:10:28 2025 GMT Subject: CN=68f4ab05-968b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:21:39:1b:23:0c:5a:da:5b:3c:21:ad:1d:f6: ad:8c:d1:71:e3:49:b7:0a:b8:12:e0:af:69:f0:1a: ea:0c:a4:06:50:47:c5:18:e0:32:c8:c0:9c:f2:ed: 7e:aa:56:1d:85:73:b6:6b:73:80:d2:c4:09:26:58: ef:ff:5a:95:26:4c:9a:45:18:d4:e1:76:60:12:26: 67:ad:98:6e:0c:e4:69:6a:d1:ed:4c:90:7b:3a:86: 27:58:be:94:3b:6f:4c:5f:91:e9:6e:c3:79:1e:8d: d7:f3:64:6f:67:65:5b:ed:94:57:15:78:38:d1:98: f7:94:91:88:f9:10:c1:55:eb:94:94:e6:e9:39:2b: ed:33:fa:2d:9f:3e:c6:db:75:4e:dd:00:b9:f8:f9: 5c:ec:51:37:10:4c:63:79:1a:07:f9:09:03:57:24: 81:f1:7d:45:56:52:c3:80:b6:5f:9d:a0:dc:da:ff: bb:d9:f0:5e:dd:f1:73:07:6c:c7:cd:4e:5d:2b:29: 72:d8:a9:50:a5:73:ac:4d:9d:75:be:f9:87:c2:35: 9e:1a:c0:fe:8d:12:11:e3:68:66:82:05:a0:9b:68: c6:83:a1:ab:ad:47:4c:9a:6d:9b:63:11:54:d7:ba: 0d:d0:78:4a:87:01:0a:42:06:fe:30:70:17:af:8c: 0c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:86:0A:08:0F:D0:68:87:A4:1D:10:71:4C:22:26:03:FC:74:EB:F3 X509v3 Authority Key Identifier: keyid:E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:80:0c:74:9f:db:2f:c5:a2:27:74:66:fa:e0:ad:a8:ab:44: 8c:f9:18:a8:a3:77:74:00:33:8a:d8:27:d5:db:6a:b1:da:57: 8c:3a:7c:b5:b9:88:b7:b8:8d:06:b4:8c:dc:0c:e3:e9:9d:83: 07:c5:1c:11:42:c8:12:e4:23:f8:88:2d:06:00:96:b1:4a:94: cd:e1:9d:01:96:15:5f:2c:f8:7d:6f:27:57:20:90:35:0c:f6: 3d:ce:38:9d:54:a4:40:53:e3:9a:2e:c5:7c:ee:c1:ae:24:f9: 6e:2d:cf:a6:b7:c1:8a:8c:5a:82:c3:b4:6a:d9:8e:3e:7b:4d: be:99:b0:2f:40:e5:49:e3:95:6e:9a:61:91:45:83:d0:de:16: 38:3d:79:62:a1:1c:f3:12:61:62:ed:71:26:05:c3:a1:8c:f8: 4b:29:71:ec:d8:72:d2:c4:76:b9:57:3e:1d:bd:b9:92:65:fe: 71:d0:6b:48:be:c3:14:21:af:92:5e:e5:89:c0:50:33:b3:60: dc:c7:4b:22:a4:d1:f9:ee:6d:79:e2:10:e5:51:9b:80:da:ef: 7d:2a:42:ee:60:82:36:41:64:9c:a7:9e:5a:6e:42:bf:40:fc: e2:16:20:4d:3f:1b:52:c6:64:c9:22:32:1e:ee:ea:dc:77:d2: b2:43:eb:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q2MEMxMTAvBgNVBAUTKEU3MjM3NjMzOURCRDVEMzAyQTU5Q0NGQTc3QUMwOUNE MTcyMzk1NEQwHhcNMjUxMDE5MDkxMDI4WhcNMjUxMDI2MDkxMDI4WjAYMRYwFAYD VQQDEw02OGY0YWIwNS05NjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7iE5GyMMWtpbPCGtHfatjNFx40m3CrgS4K9p8BrqDKQGUEfFGOAyyMCc8u1+ qlYdhXO2a3OA0sQJJljv/1qVJkyaRRjU4XZgEiZnrZhuDORpatHtTJB7OoYnWL6U O29MX5HpbsN5Ho3X82RvZ2Vb7ZRXFXg40Zj3lJGI+RDBVeuUlObpOSvtM/otnz7G 23VO3QC5+Plc7FE3EExjeRoH+QkDVySB8X1FVlLDgLZfnaDc2v+72fBe3fFzB2zH zU5dKyly2KlQpXOsTZ11vvmHwjWeGsD+jRIR42hmggWgm2jGg6GrrUdMmm2bYxFU 17oN0HhKhwEKQgb+MHAXr4wMAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuGCggP 0GiHpB0QcUwiJgP8dOvzMB8GA1UdIwQYMBaAFOcjdjOdvV0wKlnM+nesCc0XI5VN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDYwQy8xODhGMTE3Mjk3 M0QxMUVGQTUxOTYwNThDNEY5QUUwMi81eU4yTTUyOVhUQXFXY3o2ZDZ3SnpSY2ps VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV5TjJNNTI5WFRBcVdjejZkNndKelJjamxVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDYwQy8xODhGMTE3Mjk3M0QxMUVGQTUxOTYwNThDNEY5QUUwMi81eU4yTTUyOVhU QXFXY3o2ZDZ3SnpSY2psVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIgAx0n9svxaIndGb64K2oq0SM+Rioo3d0ADOK2CfV22qx2leMOny1 uYi3uI0GtIzcDOPpnYMHxRwRQsgS5CP4iC0GAJaxSpTN4Z0BlhVfLPh9bydXIJA1 DPY9zjidVKRAU+OaLsV87sGuJPluLc+mt8GKjFqCw7Rq2Y4+e02+mbAvQOVJ45Vu mmGRRYPQ3hY4PXlioRzzEmFi7XEmBcOhjPhLKXHs2HLSxHa5Vz4dvbmSZf5x0GtI vsMUIa+SXuWJwFAzs2Dcx0sipNH57m154hDlUZuA2u99KkLuYII2QWScp55abkK/ QPziFiBNPxtSxmTJIjIe7urcd9KyQ+uB -----END CERTIFICATE-----Generated at Mon Oct 20 09:36:32 2025 by rpki-client