$ rpki-client -vvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft File: 5NzsWVobtnOJciNlasY5uVNS3XM.mft (raw, json) Hash identifier: qioUXuGXgl2oR4DhzMx33NHlmZqyQWGJnlwge4gpSJI= Subject key identifier: 49:9A:D6:22:B6:1E:4C:F4:4B:8F:C6:C5:98:8C:95:0D:B9:35:B8:C1 Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 Certificate issuer: /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Certificate serial: 0CFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft Manifest number: 0CEE Signing time: Sat 18 Oct 2025 18:49:27 +0000 Manifest this update: Sat 18 Oct 2025 18:49:27 +0000 Manifest next update: Sat 25 Oct 2025 18:49:27 +0000 Files and hashes: 1: 5NzsWVobtnOJciNlasY5uVNS3XM.crl (hash: SzDPjVdjE6tX8GmO/PqqXI3phEman8VF3F8DJinOUiY=) 2: D1C40E28183411EF99FD8776C4F9AE02.roa (hash: ovp+DvhtxAcfaLvm4B/msgxFKoL594Nnc6PIvhnqZGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3325 (0xcfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D604E, serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Validity Not Before: Oct 18 18:49:27 2025 GMT Not After : Oct 25 18:49:27 2025 GMT Subject: CN=68f3e137-bb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:2b:99:ca:bb:5f:6a:2e:cb:cf:a2:e2:64: ac:a0:8d:65:fc:65:82:38:8f:5f:1e:32:66:b1:47: 6c:33:15:f1:34:a6:ef:ce:92:3d:b6:ae:39:a9:e8: e6:7e:f3:a9:3c:0d:1f:00:89:f4:d5:4e:77:e3:02: 48:b4:f5:b4:05:c9:17:a3:c9:17:e7:52:0c:f1:63: c2:c7:47:ae:5a:6d:c8:3f:be:8f:c1:0d:20:d8:0b: c5:e2:86:3b:3e:e5:3c:ad:f2:32:f7:84:e6:53:77: 43:a5:a4:d4:01:ef:ee:df:c0:b0:2f:2a:ee:60:90: d1:bb:07:c7:70:81:9a:73:5b:0d:4f:09:68:61:fb: 71:7f:a2:05:57:5e:85:83:8b:1d:76:23:61:fc:a8: 4f:3c:da:0b:04:14:06:47:0f:2a:b1:6c:ee:94:5f: ab:5d:25:78:7e:e5:be:5a:43:c6:dd:b5:dc:92:29: cf:5b:7c:a7:9f:04:0b:7c:21:32:51:14:55:75:30: f3:3e:36:00:db:a4:bb:90:ba:4f:27:81:96:4a:e7: 2b:1c:18:24:d9:d2:cd:28:6a:aa:f3:a9:dd:aa:48: db:c2:4e:c2:70:42:7c:30:a9:f0:6b:d0:86:5a:5e: 14:22:d9:28:37:c7:1f:1e:b9:9e:88:1a:08:48:3f: f4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9A:D6:22:B6:1E:4C:F4:4B:8F:C6:C5:98:8C:95:0D:B9:35:B8:C1 X509v3 Authority Key Identifier: keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:c1:d9:a7:24:92:4d:e3:7e:33:e0:7d:49:a8:2e:5c:9a:92: e6:c9:cd:c1:31:8c:9e:80:fc:eb:39:62:36:02:c7:69:2a:fb: ec:be:09:13:a6:50:ec:72:96:fd:cf:7e:8d:b2:04:eb:9c:b3: 81:c5:48:94:c5:a0:7c:2f:88:d3:e1:87:15:30:b6:06:6a:6d: bb:6a:42:15:4b:ee:7b:67:64:f3:b9:ab:a7:e7:88:8e:d5:95: 09:bb:7b:bc:64:f6:a7:23:8c:78:bd:d4:c3:70:14:4d:de:bb: 00:e4:42:e9:f1:bb:d4:7b:da:8f:72:7a:9f:55:f5:15:12:d7: 84:8f:b1:38:d6:79:ee:27:dc:45:8f:a5:6c:5f:25:df:53:d6: 35:4b:d5:ff:34:d5:a1:29:ab:f0:b3:b9:04:f1:3c:97:21:93: a2:70:3f:05:76:07:7e:f4:ee:7c:61:c0:b0:bc:e5:53:d9:48: 09:63:2b:0a:ed:2e:d9:b2:36:f0:5c:3e:ac:b0:bd:88:91:bf: ff:0b:77:fb:9f:8b:04:a9:ba:88:05:90:8d:d6:33:b6:9b:23: f3:be:bd:3e:51:94:94:69:53:40:b8:1b:3e:ee:9c:eb:33:c9: ea:1f:2f:c4:81:78:31:67:77:53:56:f5:2e:aa:bf:00:65:46: 49:75:50:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwNEUxMTAvBgNVBAUTKEU0RENFQzU5NUExQkI2NzM4OTcyMjM2NTZBQzYzOUI5 NTM1MkRENzMwHhcNMjUxMDE4MTg0OTI3WhcNMjUxMDI1MTg0OTI3WjAYMRYwFAYD VQQDEw02OGYzZTEzNy1iYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVsrmcq7X2ouy8+i4mSsoI1l/GWCOI9fHjJmsUdsMxXxNKbvzpI9tq45qejm fvOpPA0fAIn01U534wJItPW0BckXo8kX51IM8WPCx0euWm3IP76PwQ0g2AvF4oY7 PuU8rfIy94TmU3dDpaTUAe/u38CwLyruYJDRuwfHcIGac1sNTwloYftxf6IFV16F g4sddiNh/KhPPNoLBBQGRw8qsWzulF+rXSV4fuW+WkPG3bXckinPW3ynnwQLfCEy URRVdTDzPjYA26S7kLpPJ4GWSucrHBgk2dLNKGqq86ndqkjbwk7CcEJ8MKnwa9CG Wl4UItkoN8cfHrmeiBoISD/0owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEma1iK2 Hkz0S4/GxZiMlQ25NbjBMB8GA1UdIwQYMBaAFOTc7FlaG7ZziXIjZWrGOblTUt1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjA0RS85MUI1QzBDMEY0 RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRuT0pjaU5sYXNZNXVWTlMz WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVOenNXVm9idG5PSmNpTmxhc1k1dVZOUzNYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjA0RS85MUI1QzBDMEY0RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRu T0pjaU5sYXNZNXVWTlMzWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChwdmnJJJN434z4H1JqC5cmpLmyc3BMYyegPzrOWI2AsdpKvvsvgkT plDscpb9z36NsgTrnLOBxUiUxaB8L4jT4YcVMLYGam27akIVS+57Z2Tzuaun54iO 1ZUJu3u8ZPanI4x4vdTDcBRN3rsA5ELp8bvUe9qPcnqfVfUVEteEj7E41nnuJ9xF j6VsXyXfU9Y1S9X/NNWhKavws7kE8TyXIZOicD8Fdgd+9O58YcCwvOVT2UgJYysK 7S7ZsjbwXD6ssL2Ikb//C3f7n4sEqbqIBZCN1jO2myPzvr0+UZSUaVNAuBs+7pzr M8nqHy/EgXgxZ3dTVvUuqr8AZUZJdVBh -----END CERTIFICATE-----Generated at Sun Oct 19 23:28:15 2025 by rpki-client