$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft File: 5JdLhBatO5ndEfOwQFbwx5m3ocs.mft (raw, json) Hash identifier: 5q9jNzR2nuEpD0SmOnIIk7NYlZdMvltq4mg2GJUadtc= Subject key identifier: D1:28:06:1C:C9:9B:39:75:1F:14:FD:DD:48:71:14:9D:38:DB:0C:67 Authority key identifier: E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB Certificate issuer: /CN=A91D9CA8/serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft Manifest number: 82 Signing time: Sun 19 Oct 2025 09:56:15 +0000 Manifest this update: Sun 19 Oct 2025 09:56:14 +0000 Manifest next update: Sun 26 Oct 2025 09:56:14 +0000 Files and hashes: 1: 5JdLhBatO5ndEfOwQFbwx5m3ocs.crl (hash: YNz/v6Ec1k+yAPyaJLqAfif641Alh82O9N2oHImaKYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9CA8, serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB Validity Not Before: Oct 19 09:56:14 2025 GMT Not After : Oct 26 09:56:14 2025 GMT Subject: CN=68f4b5bf-9316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f4:9b:f9:9e:88:bb:98:25:1f:4f:f4:2f:b2: d3:29:69:3a:85:89:6e:9b:2a:98:4a:67:f2:b6:f9: d8:f8:fb:07:de:ba:e7:c0:37:5c:05:ce:49:bd:63: c0:c0:82:37:97:49:dc:33:12:83:4a:9c:9b:6b:5e: a7:c8:72:aa:e0:df:3a:89:7f:54:9b:ee:f0:2b:c5: ce:56:7e:9a:c3:a1:cd:9d:27:a4:b0:cc:02:93:1a: 7d:d8:fb:a8:7f:4d:69:c4:06:2e:3a:af:24:d2:68: 7f:65:4c:63:f5:87:72:c4:7e:cf:7a:53:9a:af:0b: 61:e7:a3:0e:40:ad:b3:7a:fb:72:d7:e0:68:9a:7a: d7:70:c1:ce:ae:ab:c3:b9:19:8d:44:69:db:53:29: 84:22:a0:5a:83:56:b7:66:8e:81:7b:2c:5c:34:69: cc:e3:a9:96:31:51:b5:15:61:62:0c:57:66:66:bc: 70:1b:9d:3b:90:e9:e2:b8:66:4f:8c:cb:d3:ff:e8: 63:2d:ea:b9:b6:92:1b:0d:34:dd:b7:2e:11:34:0e: 2e:01:00:66:9c:fe:02:e3:9d:08:3a:1f:c2:53:83: 1e:bf:57:6f:d8:a1:f1:c6:8d:47:5e:6c:12:7f:fb: 61:a8:77:6f:9e:73:69:8b:28:eb:b4:1d:7e:04:7a: 89:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:28:06:1C:C9:9B:39:75:1F:14:FD:DD:48:71:14:9D:38:DB:0C:67 X509v3 Authority Key Identifier: keyid:E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:09:4f:90:cb:f0:51:bc:58:c2:fb:f7:f6:40:22:72:a1:c2: c9:38:2d:d9:1f:09:98:a1:9c:6b:7e:ca:fd:b5:7e:e4:4c:88: c0:52:ef:ff:4c:f2:4c:92:29:3d:01:58:db:36:8f:64:2c:53: 2c:5f:7b:8d:39:c6:b7:38:0a:a4:e8:10:b3:e3:15:ea:ff:09: 0b:b1:65:1b:96:74:02:ab:58:8c:85:12:85:af:8d:ce:ac:cb: e0:fc:9d:8a:fa:5f:62:b3:46:1e:f3:4c:81:7a:28:fd:4f:07: d9:d7:cc:c7:2b:62:a9:ac:4d:b2:cd:1e:81:70:11:80:cf:96: 56:8c:f4:66:10:84:47:78:33:31:d4:be:28:09:c5:22:40:f7: 3d:60:f6:1b:52:ea:b5:d5:3e:1e:07:00:4f:3d:18:3f:a5:95: c3:96:65:c4:ed:45:8f:c1:ec:5a:e5:41:fe:45:72:db:b9:2a: 3a:4a:b3:64:f8:46:70:fc:4a:9a:92:46:26:42:cb:ea:0e:7d: fc:a6:c2:35:bf:7b:e6:33:8f:e5:7e:56:74:4f:3f:2b:4a:f3: 5d:5e:c6:4c:48:44:33:6a:48:dd:7e:37:a9:b7:d7:e1:fa:1d: 15:31:57:2a:4d:94:c4:9c:d6:f8:33:a8:0e:ca:32:a4:ef:4b: bf:44:45:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlDQTgxMTAvBgNVBAUTKEU0OTc0Qjg0MTZBRDNCOTlERDExRjNCMDQwNTZGMEM3 OTlCN0ExQ0IwHhcNMjUxMDE5MDk1NjE0WhcNMjUxMDI2MDk1NjE0WjAYMRYwFAYD VQQDEw02OGY0YjViZi05MzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/Sb+Z6Iu5glH0/0L7LTKWk6hYlumyqYSmfytvnY+PsH3rrnwDdcBc5JvWPA wII3l0ncMxKDSpyba16nyHKq4N86iX9Um+7wK8XOVn6aw6HNnSeksMwCkxp92Puo f01pxAYuOq8k0mh/ZUxj9YdyxH7PelOarwth56MOQK2zevty1+BomnrXcMHOrqvD uRmNRGnbUymEIqBag1a3Zo6BeyxcNGnM46mWMVG1FWFiDFdmZrxwG507kOniuGZP jMvT/+hjLeq5tpIbDTTdty4RNA4uAQBmnP4C450IOh/CU4Mev1dv2KHxxo1HXmwS f/thqHdvnnNpiyjrtB1+BHqJYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEoBhzJ mzl1HxT93UhxFJ042wxnMB8GA1UdIwQYMBaAFOSXS4QWrTuZ3RHzsEBW8MeZt6HL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUNBOC8yOTMyQzU4OEU0 RkQxMUVGQUMxQ0U2N0ZDNEY5QUUwMi81SmRMaEJhdE81bmRFZk93UUZid3g1bTNv Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVKZExoQmF0TzVuZEVmT3dRRmJ3eDVtM29jcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUNBOC8yOTMyQzU4OEU0RkQxMUVGQUMxQ0U2N0ZDNEY5QUUwMi81SmRMaEJhdE81 bmRFZk93UUZid3g1bTNvY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyCU+Qy/BRvFjC+/f2QCJyocLJOC3ZHwmYoZxrfsr9tX7kTIjAUu// TPJMkik9AVjbNo9kLFMsX3uNOca3OAqk6BCz4xXq/wkLsWUblnQCq1iMhRKFr43O rMvg/J2K+l9is0Ye80yBeij9TwfZ18zHK2KprE2yzR6BcBGAz5ZWjPRmEIRHeDMx 1L4oCcUiQPc9YPYbUuq11T4eBwBPPRg/pZXDlmXE7UWPwexa5UH+RXLbuSo6SrNk +EZw/EqakkYmQsvqDn38psI1v3vmM4/lflZ0Tz8rSvNdXsZMSEQzakjdfjept9fh +h0VMVcqTZTEnNb4M6gOyjKk70u/REW3 -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:18 2025 by rpki-client