$ rpki-client -vvf rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft File: s5m0raB1Aagp1W8h2o613DIDSlY.mft (raw, json) Hash identifier: rXf8QLASY0Iwl3GdlWiN0fSjlvoOOEcyFy9wY+zUeLQ= Subject key identifier: D9:C2:32:2C:89:96:27:D7:B8:8C:40:DC:18:A5:2E:46:72:A1:7D:78 Authority key identifier: B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56 Certificate issuer: /CN=A91D98FC/serialNumber=B399B4ADA07501A829D56F21DA8EB5DC32034A56 Certificate serial: 0CF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft Manifest number: 0CE8 Signing time: Sat 18 Oct 2025 18:49:19 +0000 Manifest this update: Sat 18 Oct 2025 18:49:18 +0000 Manifest next update: Sat 25 Oct 2025 18:49:18 +0000 Files and hashes: 1: s5m0raB1Aagp1W8h2o613DIDSlY.crl (hash: v/gmliy+gMBW4XAs2xBSvFgok0pkrJ5ug2JZuMI0lCI=) 2: 238AAE04B3CD11EF82D5B34FC4F9AE02.roa (hash: Vh7yMYlqWkmmCVoJUzEKALaYDnLO+UKuaoILrbL+tGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.crl rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3318 (0xcf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D98FC, serialNumber=B399B4ADA07501A829D56F21DA8EB5DC32034A56 Validity Not Before: Oct 18 18:49:18 2025 GMT Not After : Oct 25 18:49:18 2025 GMT Subject: CN=68f3e12e-a542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2d:af:b5:01:95:80:ad:37:51:5f:e8:77:a6: 17:1a:8d:27:c6:70:ef:8b:b8:f8:10:64:04:75:ec: 70:87:92:76:04:1e:36:1f:7a:6c:c6:29:89:9a:ed: 2a:ef:6c:f7:1c:68:e0:0b:b1:41:11:95:7c:86:e5: 89:16:24:13:15:98:66:30:a3:d3:a0:c8:b1:f2:06: 64:34:57:a1:62:b4:d7:91:3a:89:70:d5:50:c5:53: 07:85:d3:98:61:48:e9:5e:22:f2:69:3f:ae:57:7e: 10:5d:23:b6:96:3c:be:30:92:a4:26:3b:9a:fa:5f: 3a:83:c3:2e:96:e7:5f:43:3b:6d:df:6a:f2:4d:63: 0f:e6:fd:44:b0:32:10:01:fb:f0:cd:54:1d:95:e2: db:91:03:af:20:de:a9:60:53:8b:13:73:d2:5d:15: b2:d3:31:f1:48:1b:31:9b:89:0b:73:78:c9:e5:b9: 72:12:bb:88:66:1b:a5:e3:0f:26:d7:50:f1:63:54: 98:23:ac:ca:14:74:d4:79:2b:8e:3a:19:18:ca:c8: 37:7b:99:aa:3d:83:21:69:12:4a:1a:10:34:3f:f0: 01:0e:e1:bf:16:fa:6e:3a:e3:b4:08:7e:d3:c3:c0: ae:f3:b9:71:4d:60:6f:9e:38:03:0e:1f:8f:f5:b6: 51:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C2:32:2C:89:96:27:D7:B8:8C:40:DC:18:A5:2E:46:72:A1:7D:78 X509v3 Authority Key Identifier: keyid:B3:99:B4:AD:A0:75:01:A8:29:D5:6F:21:DA:8E:B5:DC:32:03:4A:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5m0raB1Aagp1W8h2o613DIDSlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D98FC/1C899E26F4EC11E98FBE9B0FC4F9AE02/s5m0raB1Aagp1W8h2o613DIDSlY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:a8:bc:33:6a:ed:b9:50:b0:6a:80:65:3f:62:c6:f5:be:43: 2a:48:ed:07:f7:5f:90:80:d9:1a:48:e3:3d:95:6b:40:59:33: 2f:f8:0d:a9:ac:53:c8:7f:46:d9:df:b5:11:d3:25:ab:13:da: cd:b5:4a:0c:60:ca:be:39:5f:68:84:d7:97:81:a7:de:49:a1: ce:6e:1a:13:25:d2:8c:bb:b7:83:17:f9:a8:e0:29:82:b5:86: b1:f8:d6:36:80:fd:79:b6:9f:0e:bd:77:c8:88:bb:de:6a:09: 37:9d:5d:81:f9:c5:36:a6:ee:69:1d:5f:c6:5a:ad:28:20:e8: 75:4d:8d:be:6d:ce:46:de:d1:98:26:b5:86:23:a8:3a:3c:b8: 8d:7a:f6:32:f9:de:fc:d2:28:aa:1a:22:c2:a3:6b:94:ae:d8: a7:24:6c:da:ec:09:64:cc:dc:b5:ac:0e:c8:0d:d4:d0:48:ac: a7:f1:d6:47:f6:de:4c:07:0e:c6:ab:b3:b8:c3:a1:76:70:ff: 5c:e5:aa:52:07:90:7d:a2:59:55:43:54:4b:11:35:d8:6d:4f: ca:ab:68:92:c7:64:0c:73:c9:a6:c6:10:99:47:93:e5:47:81: 85:72:01:6a:9c:0c:86:85:cf:ca:7f:45:94:4c:1d:d6:be:97: ba:ed:9a:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk4RkMxMTAvBgNVBAUTKEIzOTlCNEFEQTA3NTAxQTgyOUQ1NkYyMURBOEVCNURD MzIwMzRBNTYwHhcNMjUxMDE4MTg0OTE4WhcNMjUxMDI1MTg0OTE4WjAYMRYwFAYD VQQDEw02OGYzZTEyZS1hNTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvS2vtQGVgK03UV/od6YXGo0nxnDvi7j4EGQEdexwh5J2BB42H3psximJmu0q 72z3HGjgC7FBEZV8huWJFiQTFZhmMKPToMix8gZkNFehYrTXkTqJcNVQxVMHhdOY YUjpXiLyaT+uV34QXSO2ljy+MJKkJjua+l86g8MuludfQztt32ryTWMP5v1EsDIQ AfvwzVQdleLbkQOvIN6pYFOLE3PSXRWy0zHxSBsxm4kLc3jJ5blyEruIZhul4w8m 11DxY1SYI6zKFHTUeSuOOhkYysg3e5mqPYMhaRJKGhA0P/ABDuG/FvpuOuO0CH7T w8Cu87lxTWBvnjgDDh+P9bZRSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnCMiyJ lifXuIxA3BilLkZyoX14MB8GA1UdIwQYMBaAFLOZtK2gdQGoKdVvIdqOtdwyA0pW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOThGQy8xQzg5OUUyNkY0 RUMxMUU5OEZCRTlCMEZDNEY5QUUwMi9zNW0wcmFCMUFhZ3AxVzhoMm82MTNESURT bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1bTByYUIxQWFncDFXOGgybzYxM0RJRFNsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OThGQy8xQzg5OUUyNkY0RUMxMUU5OEZCRTlCMEZDNEY5QUUwMi9zNW0wcmFCMUFh Z3AxVzhoMm82MTNESURTbFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRqLwzau25ULBqgGU/Ysb1vkMqSO0H91+QgNkaSOM9lWtAWTMv+A2p rFPIf0bZ37UR0yWrE9rNtUoMYMq+OV9ohNeXgafeSaHObhoTJdKMu7eDF/mo4CmC tYax+NY2gP15tp8OvXfIiLveagk3nV2B+cU2pu5pHV/GWq0oIOh1TY2+bc5G3tGY JrWGI6g6PLiNevYy+d780iiqGiLCo2uUrtinJGza7AlkzNy1rA7IDdTQSKyn8dZH 9t5MBw7Gq7O4w6F2cP9c5apSB5B9ollVQ1RLETXYbU/Kq2iSx2QMc8mmxhCZR5Pl R4GFcgFqnAyGhc/Kf0WUTB3Wvpe67Zqo -----END CERTIFICATE-----Generated at Mon Oct 20 11:35:37 2025 by rpki-client