$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft File: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft (raw, json) Hash identifier: z7gGnSsohQwBwfGkSbu5o6V3dx7YCj3/cs3tOYHdNb4= Subject key identifier: C2:5B:FB:2A:17:01:EC:26:CB:FA:31:09:AF:16:D0:2A:BA:61:75:7C Authority key identifier: E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20 Certificate issuer: /CN=A91D2B62/serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft Manifest number: E0 Signing time: Sun 19 Oct 2025 08:29:18 +0000 Manifest this update: Sun 19 Oct 2025 08:29:17 +0000 Manifest next update: Sun 26 Oct 2025 08:29:17 +0000 Files and hashes: 1: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl (hash: hk/bCAz5LwbByJd8pxQfYJjTnuMgCJSflD+IXZ1Njjk=) 2: E9BDEF2CABD011F0B868ED11C4F9AE02.roa (hash: WrRhZ+VcPHGC3dqSfUQV3PGRsqcEeVFs0llndXVdriQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2B62, serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720 Validity Not Before: Oct 19 08:29:17 2025 GMT Not After : Oct 26 08:29:17 2025 GMT Subject: CN=68f4a15e-f657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:01:8c:9c:f6:cb:b5:1e:f6:04:0b:c1:ed:92: 02:e4:0b:81:ed:95:7b:34:63:76:f0:1e:07:7c:2a: 76:c5:e6:68:14:99:12:bb:53:b8:4f:8d:d3:d3:58: b4:09:7c:5f:ed:38:6a:e5:73:5d:24:c4:a6:13:4a: 53:d4:9b:7d:b9:3f:44:18:5d:18:80:09:4a:62:82: cd:5b:fd:ac:c5:61:0b:26:31:0d:9e:b8:e4:17:70: cb:e3:ad:de:7a:48:f6:83:93:83:8e:3a:f6:a3:94: 88:2a:e1:d8:bd:e9:71:66:a0:3e:04:19:01:65:31: e9:a0:18:ef:96:5c:79:d8:2d:58:54:d6:fb:ef:7b: 51:a8:90:f2:c3:de:a4:b2:0b:3c:26:bd:a8:9a:70: b2:60:2e:6f:37:64:fd:f4:89:40:4b:4b:d5:60:03: be:81:90:17:fe:06:e0:c1:b5:0c:85:83:e6:5f:4f: 83:7a:2c:21:e0:35:cb:d9:f6:fb:ab:0b:8d:b0:e3: c2:06:d6:9e:45:49:03:df:35:84:09:28:34:69:4e: 0d:4d:1d:28:86:d2:9f:27:8c:fb:aa:76:1a:6c:3a: f7:d0:00:8f:c2:55:1e:d7:6d:cb:5b:c8:b8:d9:b2: 31:86:27:dd:a9:b6:09:56:86:50:eb:1b:d1:09:69: 4b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5B:FB:2A:17:01:EC:26:CB:FA:31:09:AF:16:D0:2A:BA:61:75:7C X509v3 Authority Key Identifier: keyid:E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:c1:9f:a5:50:0a:fd:d6:34:76:53:55:bf:59:ff:bd:b0:e0: fe:c3:15:eb:25:48:94:0e:9e:14:f1:b3:05:48:20:38:52:e6: 37:b6:f1:2e:d1:5d:8f:b1:ee:e5:4c:c2:ab:c8:81:12:77:c9: 7e:1f:b4:41:8d:40:ce:7f:bf:5b:35:d1:c1:2e:7e:b1:8e:e5: 5d:d6:37:5d:57:df:c1:78:d8:9b:51:fe:fe:4c:9a:7b:70:1c: 8b:84:4d:72:4c:13:b2:d9:66:7d:2f:9f:92:29:4f:04:03:38: d8:82:0e:16:9c:d9:7c:d4:1b:88:f2:13:d9:77:48:13:c2:c1: 5b:cc:79:db:85:29:4c:28:0b:f5:2f:5c:4a:0a:4e:03:38:53: 2d:a9:cf:af:bc:aa:42:c8:2f:08:ed:f0:17:da:60:85:a1:3c: 74:55:74:07:ad:17:c6:2b:46:1d:4e:d2:11:a3:01:b5:64:ff: 90:cf:a5:74:b5:52:ce:fc:21:2a:95:fc:5c:b1:a9:25:36:bb: 1b:18:ef:88:d5:dd:71:45:1e:55:2c:ae:72:6f:f4:cd:8c:74: 9a:a6:a7:53:d4:25:e4:28:59:48:51:5a:2f:9a:db:1b:a6:f0: b6:85:79:b8:37:fa:96:c0:7d:64:84:98:92:43:9f:a1:44:ba: ff:e4:d2:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJCNjIxMTAvBgNVBAUTKEU2RjY1RDIyMUI1OTVGNkJBMTNFQjMxNERFRTMzOENB MjQxRTI3MjAwHhcNMjUxMDE5MDgyOTE3WhcNMjUxMDI2MDgyOTE3WjAYMRYwFAYD VQQDEw02OGY0YTE1ZS1mNjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQGMnPbLtR72BAvB7ZIC5AuB7ZV7NGN28B4HfCp2xeZoFJkSu1O4T43T01i0 CXxf7Thq5XNdJMSmE0pT1Jt9uT9EGF0YgAlKYoLNW/2sxWELJjENnrjkF3DL463e ekj2g5ODjjr2o5SIKuHYvelxZqA+BBkBZTHpoBjvllx52C1YVNb773tRqJDyw96k sgs8Jr2omnCyYC5vN2T99IlAS0vVYAO+gZAX/gbgwbUMhYPmX0+Deiwh4DXL2fb7 qwuNsOPCBtaeRUkD3zWECSg0aU4NTR0ohtKfJ4z7qnYabDr30ACPwlUe123LW8i4 2bIxhifdqbYJVoZQ6xvRCWlLMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJb+yoX Aewmy/oxCa8W0Cq6YXV8MB8GA1UdIwQYMBaAFOb2XSIbWV9roT6zFN7jOMokHicg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkI2Mi9CRDI5QjgxNjVB RTAxMUVGODY1MUI2MUJDNEY5QUUwMi81dlpkSWh0WlgydWhQck1VM3VNNHlpUWVK eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV2WmRJaHRaWDJ1aFByTVUzdU00eWlRZUp5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkI2Mi9CRDI5QjgxNjVBRTAxMUVGODY1MUI2MUJDNEY5QUUwMi81dlpkSWh0Wlgy dWhQck1VM3VNNHlpUWVKeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADwZ+lUAr91jR2U1W/Wf+9sOD+wxXrJUiUDp4U8bMFSCA4UuY3tvEu 0V2Pse7lTMKryIESd8l+H7RBjUDOf79bNdHBLn6xjuVd1jddV9/BeNibUf7+TJp7 cByLhE1yTBOy2WZ9L5+SKU8EAzjYgg4WnNl81BuI8hPZd0gTwsFbzHnbhSlMKAv1 L1xKCk4DOFMtqc+vvKpCyC8I7fAX2mCFoTx0VXQHrRfGK0YdTtIRowG1ZP+Qz6V0 tVLO/CEqlfxcsaklNrsbGO+I1d1xRR5VLK5yb/TNjHSapqdT1CXkKFlIUVovmtsb pvC2hXm4N/qWwH1khJiSQ5+hRLr/5NLb -----END CERTIFICATE-----Generated at Mon Oct 20 19:47:59 2025 by rpki-client