$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft File: P5liYas9HvBBZhs6732JMrVwJjc.mft (raw, json) Hash identifier: uW8tWAugz2uagkbXCu5IMFA5X9wNaG8eDHyuHr6txXw= Subject key identifier: FE:0F:3C:89:C2:C7:69:7C:CC:D1:00:98:55:D9:32:92:FA:5D:20:CF Authority key identifier: 3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 Certificate issuer: /CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft Manifest number: 01A9 Signing time: Sun 19 Oct 2025 05:54:00 +0000 Manifest this update: Sun 19 Oct 2025 05:53:59 +0000 Manifest next update: Sun 26 Oct 2025 05:53:59 +0000 Files and hashes: 1: P5liYas9HvBBZhs6732JMrVwJjc.crl (hash: b9kL6iANLUr1luwmjbmfRuj1Yg4vjHGRxlmJi3PyKHQ=) 2: 9908BDDE1CAA11EF80E3BB87C4F9AE02.roa (hash: 0UTp5Ayv/ftDBInci/moVW1XbBA3xfvlEMb4Bw4foQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC2A9, serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Validity Not Before: Oct 19 05:53:59 2025 GMT Not After : Oct 26 05:53:59 2025 GMT Subject: CN=68f47cf7-8bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ac:9d:b5:4d:7b:30:f2:40:7c:c6:83:7b:3a: 1b:0f:13:72:0f:89:69:fa:f7:de:7f:a0:e9:a0:f3: ad:c3:7a:f7:1f:26:fe:3c:63:54:73:1e:d9:62:7c: b7:0f:3f:07:e0:bc:65:70:6f:00:92:f3:bc:7d:11: 15:95:47:13:69:48:18:7c:27:d4:c1:70:a9:6e:4f: 58:51:ed:6a:2c:0a:44:53:3c:54:78:b6:f4:7e:a8: 3d:d9:7b:b0:66:30:52:22:5d:73:15:ae:1c:74:47: 93:06:11:7e:31:3d:8e:23:24:8d:79:1e:25:00:f3: a3:a3:ef:de:28:48:82:f9:d7:ea:9e:80:15:b3:93: 13:f8:f5:4e:65:5d:a7:f2:85:99:cd:3a:7e:f7:e6: 8f:af:fb:0f:4f:1b:19:15:fd:39:96:5b:08:8d:ae: e3:0e:6e:07:07:5d:bf:47:f1:4f:07:16:84:f5:84: ff:f1:4c:a3:a7:27:97:9f:45:41:2a:cc:92:c1:a3: 78:29:b4:82:17:86:db:f7:4a:44:81:a7:3c:34:16: 17:d5:9d:09:7a:78:c4:30:53:c4:27:71:67:0c:65: 35:f7:b6:22:5c:24:0b:ba:f2:5c:e1:4e:dd:7c:cd: b7:b8:c1:d6:3a:a8:4f:d2:6e:e2:99:0e:6d:19:b9: be:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0F:3C:89:C2:C7:69:7C:CC:D1:00:98:55:D9:32:92:FA:5D:20:CF X509v3 Authority Key Identifier: keyid:3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:d8:f0:16:e8:fe:4a:f0:70:e7:26:c0:1e:41:c6:dc:02:97: f2:e9:53:26:b9:6c:36:a4:3c:a8:47:78:4f:60:5b:e0:22:75: 20:1a:25:ce:d6:10:34:b8:a1:8f:1e:27:4f:60:75:ff:a4:2d: 7c:32:10:3f:cc:69:c8:e0:e8:0b:19:93:c2:9c:ac:22:e8:fb: 93:bf:cc:3e:33:0a:8f:0d:33:b0:f3:8e:6b:18:ed:29:de:e2: 03:14:92:28:d0:66:0b:19:8c:13:f5:7d:ac:fe:6f:e5:49:fd: 83:84:fb:59:4a:73:3e:24:86:a2:0a:4e:22:cf:da:d0:c8:7f: 77:11:6c:19:c1:3a:89:0e:26:63:d3:e9:e1:6a:fc:cb:e8:5a: cd:17:65:6b:28:ef:72:9d:fc:d6:2b:d2:1b:98:ad:2a:9c:3f: a4:d6:18:fe:78:67:73:88:c4:2b:a4:a9:4c:18:bb:fd:f3:c1: 5e:8f:da:26:9d:c7:13:5f:9e:72:e7:09:e5:5b:9f:9f:62:e6: 5c:8c:38:4d:9a:d9:c0:02:e6:73:ee:02:7c:6e:73:01:67:41: 68:56:09:7d:7f:c2:c6:56:d9:59:e6:d8:98:de:f2:23:cd:d6: e9:13:04:66:39:ef:b9:15:11:cc:da:44:97:0b:15:f8:ec:4f: b3:98:ef:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMyQTkxMTAvBgNVBAUTKDNGOTk2MjYxQUIzRDFFRjA0MTY2MUIzQUVGN0Q4OTMy QjU3MDI2MzcwHhcNMjUxMDE5MDU1MzU5WhcNMjUxMDI2MDU1MzU5WjAYMRYwFAYD VQQDEw02OGY0N2NmNy04YmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzKydtU17MPJAfMaDezobDxNyD4lp+vfef6DpoPOtw3r3Hyb+PGNUcx7ZYny3 Dz8H4LxlcG8AkvO8fREVlUcTaUgYfCfUwXCpbk9YUe1qLApEUzxUeLb0fqg92Xuw ZjBSIl1zFa4cdEeTBhF+MT2OIySNeR4lAPOjo+/eKEiC+dfqnoAVs5MT+PVOZV2n 8oWZzTp+9+aPr/sPTxsZFf05llsIja7jDm4HB12/R/FPBxaE9YT/8UyjpyeXn0VB KsySwaN4KbSCF4bb90pEgac8NBYX1Z0JenjEMFPEJ3FnDGU197YiXCQLuvJc4U7d fM23uMHWOqhP0m7imQ5tGbm+1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4PPInC x2l8zNEAmFXZMpL6XSDPMB8GA1UdIwQYMBaAFD+ZYmGrPR7wQWYbOu99iTK1cCY3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzJBOS9EOEREQzFBNjM0 QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2QkJaaHM2NzMySk1yVndK amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A1bGlZYXM5SHZCQlpoczY3MzJKTXJWd0pqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzJBOS9EOEREQzFBNjM0QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2 QkJaaHM2NzMySk1yVndKamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB42PAW6P5K8HDnJsAeQcbcApfy6VMmuWw2pDyoR3hPYFvgInUgGiXO 1hA0uKGPHidPYHX/pC18MhA/zGnI4OgLGZPCnKwi6PuTv8w+MwqPDTOw845rGO0p 3uIDFJIo0GYLGYwT9X2s/m/lSf2DhPtZSnM+JIaiCk4iz9rQyH93EWwZwTqJDiZj 0+nhavzL6FrNF2VrKO9ynfzWK9IbmK0qnD+k1hj+eGdziMQrpKlMGLv988Fej9om nccTX55y5wnlW5+fYuZcjDhNmtnAAuZz7gJ8bnMBZ0FoVgl9f8LGVtlZ5tiY3vIj zdbpEwRmOe+5FRHM2kSXCxX47E+zmO+r -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:18 2025 by rpki-client