$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft File: 5wYBKhBr0JRljmBMVgMFDxTcP0w.mft (raw, json) Hash identifier: nZydrEoxNZh1E4YtQmTKoMhUS1WN9KhnddmgWr8c1Qo= Subject key identifier: EC:12:3A:15:E6:2E:4C:B2:F8:99:D2:5A:32:9F:28:DB:A5:59:3A:B9 Authority key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C Certificate issuer: /CN=A91D94CD/serialNumber=E706012A106BD094658E604C5603050F14DC3F4C Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft Manifest number: 0C Signing time: Sun 19 Oct 2025 11:36:53 +0000 Manifest this update: Sun 19 Oct 2025 11:36:52 +0000 Manifest next update: Sun 26 Oct 2025 11:36:52 +0000 Files and hashes: 1: 5wYBKhBr0JRljmBMVgMFDxTcP0w.crl (hash: 3L0EQZFV9/R3/YXelkHTB5tRxJk6aH12yll/BzPQlfQ=) 2: 67D535ACA32311F0A8D9D520C4F9AE02.roa (hash: ZY5NmPmVYKYD8Ao1eKkQAecn1eXKiXTVvX4cp2N0VAQ=) 3: 6767E894A32311F0A8D9D520C4F9AE02.roa (hash: qcRG/dop8kZF9v/2SljCJ8so+bQR2vG4pDOzpAMHKg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C Validity Not Before: Oct 19 11:36:52 2025 GMT Not After : Oct 26 11:36:52 2025 GMT Subject: CN=68f4cd54-42fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3b:bd:ee:0c:46:0c:d1:64:34:59:63:ec:97: c0:18:fb:98:df:4e:9a:6a:fc:76:d4:0c:f8:89:e6: 03:3f:e3:5a:38:92:b6:2f:65:b1:66:34:10:86:56: 2c:fe:ee:a5:ed:09:8f:15:10:a0:52:a2:96:7b:01: 15:21:f4:1f:4e:f8:be:06:a9:0f:04:60:85:fd:dc: 41:da:11:03:30:03:fe:82:25:3c:0b:f3:01:19:88: 6a:7e:56:6e:0e:94:87:36:ed:3d:ff:25:f6:2f:c7: 9e:ae:92:fd:6b:00:74:71:93:fb:ee:f4:97:8f:bf: 6a:27:72:97:6e:04:44:18:80:06:a3:27:ac:80:90: c5:e5:08:84:81:fb:fd:4a:17:32:bd:38:08:00:d1: 81:26:5b:ab:5f:38:2d:e6:cd:57:dd:ac:66:29:f0: c3:57:ac:c7:70:9f:83:f1:32:19:f7:73:a8:31:ac: 81:8e:5a:07:ce:45:ac:3f:8e:2c:d4:09:a2:4e:f0: e4:c6:cf:e7:e3:e2:d6:98:31:79:59:ba:5e:2b:5d: 2e:c1:a8:31:b7:4d:73:62:c2:d1:3a:a6:58:59:5c: 99:69:03:c9:dc:43:3f:5a:ce:6e:3d:36:a5:3b:bb: 0e:32:05:95:de:94:5e:6a:c7:a6:bd:90:e6:6c:e5: 35:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:12:3A:15:E6:2E:4C:B2:F8:99:D2:5A:32:9F:28:DB:A5:59:3A:B9 X509v3 Authority Key Identifier: keyid:E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:5c:41:46:8a:94:d3:2c:f2:6a:48:a9:d4:75:f8:30:41:25: 95:a7:80:92:c0:76:e3:45:62:8d:ed:cc:52:de:e4:bc:7b:29: 03:da:7a:bd:60:9b:da:23:84:61:a3:bb:51:a2:b5:4e:e3:34: 03:a2:e9:d6:09:57:1a:f1:c7:e7:e6:d1:59:d6:ec:df:fa:1a: ed:c8:26:fe:7b:ad:01:df:e0:51:9c:d1:19:7b:70:cf:14:94: 46:84:39:81:ef:5d:c0:bb:e3:ac:3d:b7:63:4b:c1:db:dc:93: f8:f6:3e:06:f5:ca:01:5e:44:47:87:e0:d3:4f:1b:41:00:a3: a0:0d:98:44:98:9e:71:ab:61:d1:96:bc:b5:d2:ad:60:37:4b: 80:c3:7f:8c:60:c5:ac:a8:be:0f:e9:cf:0d:b3:71:0c:43:08: 29:92:20:84:54:77:1c:a4:0b:ad:99:07:5d:de:58:36:b6:a9: 22:e4:20:eb:d6:8c:49:d5:a8:56:ee:2f:3c:55:66:63:81:75: da:70:36:d0:5b:02:c7:11:a0:ac:11:42:27:02:78:d0:a0:0a: 9d:19:74:d4:08:e1:d9:80:f3:36:70:c1:c6:94:59:90:11:ad: 2f:30:21:13:4c:6d:3c:f3:18:4d:c4:e0:e5:eb:06:db:69:4f: 91:85:64:27 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTRDRDExMC8GA1UEBRMoRTcwNjAxMkExMDZCRDA5NDY1OEU2MDRDNTYwMzA1MEYx NERDM0Y0QzAeFw0yNTEwMTkxMTM2NTJaFw0yNTEwMjYxMTM2NTJaMBgxFjAUBgNV BAMTDTY4ZjRjZDU0LTQyZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjO73uDEYM0WQ0WWPsl8AY+5jfTppq/HbUDPiJ5gM/41o4krYvZbFmNBCGViz+ 7qXtCY8VEKBSopZ7ARUh9B9O+L4GqQ8EYIX93EHaEQMwA/6CJTwL8wEZiGp+Vm4O lIc27T3/JfYvx56ukv1rAHRxk/vu9JePv2oncpduBEQYgAajJ6yAkMXlCISB+/1K FzK9OAgA0YEmW6tfOC3mzVfdrGYp8MNXrMdwn4PxMhn3c6gxrIGOWgfORaw/jizU CaJO8OTGz+fj4taYMXlZul4rXS7BqDG3TXNiwtE6plhZXJlpA8ncQz9azm49NqU7 uw4yBZXelF5qx6a9kOZs5TVNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7BI6FeYu TLL4mdJaMp8o26VZOrkwHwYDVR0jBBgwFoAU5wYBKhBr0JRljmBMVgMFDxTcP0ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5NENELzJDRDdGRDBFOUVD ODExRjA4Q0QyQUM3QkM0RjlBRTAyLzV3WUJLaEJyMEpSbGptQk1WZ01GRHhUY1Aw dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNXdZQktoQnIwSlJsam1CTVZnTUZEeFRjUDB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5 NENELzJDRDdGRDBFOUVDODExRjA4Q0QyQUM3QkM0RjlBRTAyLzV3WUJLaEJyMEpS bGptQk1WZ01GRHhUY1Awdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHNcQUaKlNMs8mpIqdR1+DBBJZWngJLAduNFYo3tzFLe5Lx7KQPaer1g m9ojhGGju1GitU7jNAOi6dYJVxrxx+fm0VnW7N/6Gu3IJv57rQHf4FGc0Rl7cM8U lEaEOYHvXcC746w9t2NLwdvck/j2Pgb1ygFeREeH4NNPG0EAo6ANmESYnnGrYdGW vLXSrWA3S4DDf4xgxayovg/pzw2zcQxDCCmSIIRUdxykC62ZB13eWDa2qSLkIOvW jEnVqFbuLzxVZmOBddpwNtBbAscRoKwRQicCeNCgCp0ZdNQI4dmA8zZwwcaUWZAR rS8wIRNMbTzzGE3E4OXrBttpT5GFZCc= -----END CERTIFICATE-----Generated at Mon Oct 20 03:49:15 2025 by rpki-client