$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft File: r5ACm-EBySLPz0vRRdevHcZA5eA.mft (raw, json) Hash identifier: EhqYTPyShBak+jhDkSNUSIW+ucoNdo4fgn2mmQJZZbw= Subject key identifier: A4:1C:DF:68:F8:CB:81:57:FA:8E:88:70:BF:5F:4D:8F:F3:BD:C4:FA Authority key identifier: AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 Certificate issuer: /CN=A91D2646/serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Certificate serial: 0A39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft Manifest number: 0A2F Signing time: Sat 18 Oct 2025 20:45:21 +0000 Manifest this update: Sat 18 Oct 2025 20:45:20 +0000 Manifest next update: Sat 25 Oct 2025 20:45:20 +0000 Files and hashes: 1: r5ACm-EBySLPz0vRRdevHcZA5eA.crl (hash: cUR3oxoCe/cMWLiW8NUHYca0USIcn7jJJxoZT9BiknE=) 2: EE675FC27BED11EABD4A3A27C4F9AE02.roa (hash: qJ4Xg9nEOiVPnUmULztNOTN0r580BUywYygdp4on9WI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2617 (0xa39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2646, serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Validity Not Before: Oct 18 20:45:20 2025 GMT Not After : Oct 25 20:45:20 2025 GMT Subject: CN=68f3fc60-8866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:ce:4d:61:66:8f:01:44:6a:12:0a:18:fd: 1e:e3:56:72:0c:54:c7:72:39:fa:9e:a1:14:47:54: 5c:8d:4b:a4:3c:b1:b2:bd:98:a8:b5:4e:2d:54:6b: 6d:1c:09:8f:db:f2:1d:08:64:3c:e0:76:2a:28:28: b4:dc:a6:60:a5:44:74:eb:a0:0d:e6:32:d5:5c:bf: 52:71:1e:5c:aa:a0:f8:77:6c:43:c1:78:49:96:8e: 83:69:fd:f6:d1:2e:38:9e:16:79:8e:64:9f:17:62: 80:aa:b9:14:ec:6d:33:bc:d3:17:d7:ac:73:7b:28: a8:f5:4f:43:44:aa:91:3d:06:2a:32:8a:8d:e2:58: b5:a1:b0:1c:82:3b:bc:de:83:69:1e:8e:35:08:4d: dc:76:1d:49:3f:02:00:43:b7:a7:f0:18:14:ad:57: 2b:80:66:f6:da:c6:b0:d1:89:61:05:8c:2a:91:cc: 66:75:2c:a4:7b:3c:c9:a9:41:d4:c7:fa:6e:ac:32: 2f:6c:eb:9d:84:e4:44:8b:cb:5a:7c:c4:5d:7f:f0: 40:66:cb:39:58:d5:5f:45:19:a2:50:18:cd:00:9b: ae:5f:f6:a7:bb:ae:d7:72:a2:f8:12:2c:c6:31:45: 25:18:53:db:e6:2e:c1:f8:d4:b7:71:53:26:81:73: 7b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1C:DF:68:F8:CB:81:57:FA:8E:88:70:BF:5F:4D:8F:F3:BD:C4:FA X509v3 Authority Key Identifier: keyid:AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:eb:7f:07:be:0a:2c:21:ef:5b:ea:33:d6:29:87:1b:ba:3c: 0f:bf:9b:14:6e:9d:42:ad:26:bd:b0:ee:4e:f3:42:ce:17:a0: 44:4d:b6:c2:ba:7b:25:43:2f:dd:e5:43:35:66:c2:ac:6c:ed: d1:1f:f9:8e:6d:bb:d6:2b:98:26:a1:7c:0c:dc:c7:a1:3e:56: 3c:7e:fd:a0:e3:0f:71:65:18:e9:8a:4f:8e:4c:a9:1e:1a:d7: 47:be:19:40:da:49:53:5f:e7:9d:da:3e:a6:32:74:df:27:e3: da:9a:40:82:9d:9c:f3:73:21:10:d1:cc:6a:4b:85:73:f1:7c: 55:4c:52:22:a3:74:55:60:1f:b9:69:44:e2:ba:c5:cb:e1:89: c0:d8:d8:bd:16:e4:86:fe:73:dc:95:56:6f:cd:b1:89:ad:20: 82:51:e7:8f:9f:8e:55:4c:0d:04:23:21:95:87:1e:c1:08:e0: a2:25:af:54:5f:73:37:8a:e4:63:8e:ea:b9:b3:35:97:58:9e: 49:c9:c2:a8:34:af:09:a7:34:7f:59:09:33:20:ae:e1:e8:2d: b0:37:83:04:25:47:00:4c:1b:55:dd:b3:2a:c2:30:50:33:89: 25:db:a6:5d:47:4c:ac:fd:35:f1:98:ae:06:1c:c0:99:21:33: 66:ab:a7:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NDYxMTAvBgNVBAUTKEFGOTAwMjlCRTEwMUM5MjJDRkNGNEJEMTQ1RDdBRjFE QzY0MEU1RTAwHhcNMjUxMDE4MjA0NTIwWhcNMjUxMDI1MjA0NTIwWjAYMRYwFAYD VQQDEw02OGYzZmM2MC04ODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjzOTWFmjwFEahIKGP0e41ZyDFTHcjn6nqEUR1RcjUukPLGyvZiotU4tVGtt HAmP2/IdCGQ84HYqKCi03KZgpUR066AN5jLVXL9ScR5cqqD4d2xDwXhJlo6Daf32 0S44nhZ5jmSfF2KAqrkU7G0zvNMX16xzeyio9U9DRKqRPQYqMoqN4li1obAcgju8 3oNpHo41CE3cdh1JPwIAQ7en8BgUrVcrgGb22saw0YlhBYwqkcxmdSykezzJqUHU x/purDIvbOudhOREi8tafMRdf/BAZss5WNVfRRmiUBjNAJuuX/anu67XcqL4EizG MUUlGFPb5i7B+NS3cVMmgXN75wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQc32j4 y4FX+o6IcL9fTY/zvcT6MB8GA1UdIwQYMBaAFK+QApvhAckiz89L0UXXrx3GQOXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY0Ni9EMjAzN0QxMjdC RUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlTTFB6MHZSUmRldkhjWkE1 ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I1QUNtLUVCeVNMUHowdlJSZGV2SGNaQTVlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjY0Ni9EMjAzN0QxMjdCRUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlT TFB6MHZSUmRldkhjWkE1ZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP638HvgosIe9b6jPWKYcbujwPv5sUbp1CrSa9sO5O80LOF6BETbbC unslQy/d5UM1ZsKsbO3RH/mObbvWK5gmoXwM3MehPlY8fv2g4w9xZRjpik+OTKke GtdHvhlA2klTX+ed2j6mMnTfJ+PamkCCnZzzcyEQ0cxqS4Vz8XxVTFIio3RVYB+5 aUTiusXL4YnA2Ni9FuSG/nPclVZvzbGJrSCCUeePn45VTA0EIyGVhx7BCOCiJa9U X3M3iuRjjuq5szWXWJ5JycKoNK8JpzR/WQkzIK7h6C2wN4MEJUcATBtV3bMqwjBQ M4kl26ZdR0ys/TXxmK4GHMCZITNmq6eV -----END CERTIFICATE-----Generated at Mon Oct 20 10:44:28 2025 by rpki-client