$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft File: -5w6kNDNa5K-MWAyXafCbH9OWQA.mft (raw, json) Hash identifier: +K1q5InbNjpGIOL5Lo9Jv6KmtSypVI1tghGq360Jle4= Subject key identifier: 0B:D2:E0:E6:3D:8F:13:89:CD:87:FF:F4:FC:92:25:11:3C:55:8D:7E Authority key identifier: FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00 Certificate issuer: /CN=A91DE1A3/serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft Manifest number: 0220 Signing time: Sun 19 Oct 2025 04:18:38 +0000 Manifest this update: Sun 19 Oct 2025 04:18:37 +0000 Manifest next update: Sun 26 Oct 2025 04:18:37 +0000 Files and hashes: 1: -5w6kNDNa5K-MWAyXafCbH9OWQA.crl (hash: oZy5yKlm1jazubEW5DBH7IyZ7w4AsZ0RZ7VPR0xgEl8=) 2: F396DA1468A211ED9525A86CC4F9AE02.roa (hash: mfCo7xBHkX9UIyrOsrP0XEhPqQke0cTzgybKkz4msYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE1A3, serialNumber=FB9C3A90D0CD6B92BE3160325DA7C26C7F4E5900 Validity Not Before: Oct 19 04:18:37 2025 GMT Not After : Oct 26 04:18:37 2025 GMT Subject: CN=68f4669d-7947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2d:15:28:16:43:73:94:0b:04:22:89:6d:64: c1:35:06:b2:91:60:ac:a2:8f:1c:5b:e1:10:7d:af: 04:9b:07:aa:80:2f:9e:e3:17:6d:55:7e:a9:3f:3f: c0:cb:a4:aa:74:bd:4a:0f:ab:67:e5:70:e9:4a:43: ea:62:68:d6:e8:ac:f4:41:cd:58:d5:93:01:43:01: af:9d:9b:7a:48:78:1f:3f:35:a0:f2:8e:75:cd:87: eb:4d:ba:a5:a6:ed:92:ed:16:cb:01:19:ec:e9:95: 9d:b7:f8:a7:f3:78:09:4b:0f:cd:81:6b:4d:24:52: 8b:aa:18:4f:51:c9:e3:6f:a6:7f:5d:3c:2b:3d:b3: 93:da:5c:8b:1b:08:b8:e4:4b:4f:92:7f:01:25:38: 44:69:3f:4e:65:27:9b:c4:f3:5c:f2:58:cf:54:1c: 06:09:ce:0e:f1:04:ed:4f:f8:86:c5:79:96:75:07: 24:e6:7b:3e:d9:bf:bf:97:70:9f:5f:a0:4f:d6:e7: b9:14:ec:56:2c:a8:10:80:c2:3f:ce:fa:9f:b9:3b: 3c:33:b4:5a:77:49:57:df:ac:2a:5f:0d:ae:c8:21: 1c:6c:a2:36:a3:2d:2d:74:0f:b1:fe:c9:23:56:f9: 69:de:62:15:e0:3e:1c:c7:5d:ab:b3:98:0c:b8:6d: f4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D2:E0:E6:3D:8F:13:89:CD:87:FF:F4:FC:92:25:11:3C:55:8D:7E X509v3 Authority Key Identifier: keyid:FB:9C:3A:90:D0:CD:6B:92:BE:31:60:32:5D:A7:C2:6C:7F:4E:59:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-5w6kNDNa5K-MWAyXafCbH9OWQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE1A3/8B9DBBCE689F11EDAD177667C4F9AE02/-5w6kNDNa5K-MWAyXafCbH9OWQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:e9:24:52:88:84:3a:77:b5:b0:7c:11:b4:06:9c:5d:ed:00: 69:45:64:1d:2d:a0:be:8e:0f:26:bc:2a:04:59:55:a4:8a:11: 41:d2:a9:a1:9b:f3:fa:b6:87:f4:5a:01:2a:a1:b9:1e:be:08: f2:46:c8:5a:08:64:e5:ca:48:7a:37:b5:0f:56:56:a8:96:8f: 56:f4:74:90:b0:09:cd:14:22:56:25:d0:de:2a:f8:bf:58:e8: 9a:55:ec:96:37:bc:c6:38:e5:2d:67:66:ec:ae:5f:a4:ab:87: 43:dd:b8:fb:3e:b5:86:a4:b6:b4:ee:de:b4:e6:6c:ea:64:10: e2:9f:84:d4:df:1c:59:9a:23:78:57:93:8b:66:a4:be:a1:33: 36:ca:72:92:c1:1a:4e:c1:ae:67:80:6c:e7:5f:f8:88:ff:56: 70:d2:1b:7f:13:f3:3b:0c:7b:12:e0:64:32:7b:b2:b6:8d:d3: c6:ba:b9:a5:f1:34:e6:c8:38:19:a7:bf:b4:de:86:6c:bc:86: 20:0c:42:9e:dc:f7:ef:0c:77:70:22:97:b5:1d:33:26:0b:4c: 95:ea:93:e1:c3:eb:51:86:83:4a:fb:ef:f8:86:32:69:98:78: 06:dc:a6:f1:67:e9:cf:52:e2:39:04:37:7e:93:42:e4:ae:71: e3:e2:14:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUxQTMxMTAvBgNVBAUTKEZCOUMzQTkwRDBDRDZCOTJCRTMxNjAzMjVEQTdDMjZD N0Y0RTU5MDAwHhcNMjUxMDE5MDQxODM3WhcNMjUxMDI2MDQxODM3WjAYMRYwFAYD VQQDEw02OGY0NjY5ZC03OTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyy0VKBZDc5QLBCKJbWTBNQaykWCsoo8cW+EQfa8EmweqgC+e4xdtVX6pPz/A y6SqdL1KD6tn5XDpSkPqYmjW6Kz0Qc1Y1ZMBQwGvnZt6SHgfPzWg8o51zYfrTbql pu2S7RbLARns6ZWdt/in83gJSw/NgWtNJFKLqhhPUcnjb6Z/XTwrPbOT2lyLGwi4 5EtPkn8BJThEaT9OZSebxPNc8ljPVBwGCc4O8QTtT/iGxXmWdQck5ns+2b+/l3Cf X6BP1ue5FOxWLKgQgMI/zvqfuTs8M7Rad0lX36wqXw2uyCEcbKI2oy0tdA+x/skj Vvlp3mIV4D4cx12rs5gMuG30qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvS4OY9 jxOJzYf/9PySJRE8VY1+MB8GA1UdIwQYMBaAFPucOpDQzWuSvjFgMl2nwmx/TlkA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTFBMy84QjlEQkJDRTY4 OUYxMUVEQUQxNzc2NjdDNEY5QUUwMi8tNXc2a05ETmE1Sy1NV0F5WGFmQ2JIOU9X UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy01dzZrTkROYTVLLU1XQXlYYWZDYkg5T1dRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTFBMy84QjlEQkJDRTY4OUYxMUVEQUQxNzc2NjdDNEY5QUUwMi8tNXc2a05ETmE1 Sy1NV0F5WGFmQ2JIOU9XUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA36SRSiIQ6d7WwfBG0Bpxd7QBpRWQdLaC+jg8mvCoEWVWkihFB0qmh m/P6tof0WgEqobkevgjyRshaCGTlykh6N7UPVlaolo9W9HSQsAnNFCJWJdDeKvi/ WOiaVeyWN7zGOOUtZ2bsrl+kq4dD3bj7PrWGpLa07t605mzqZBDin4TU3xxZmiN4 V5OLZqS+oTM2ynKSwRpOwa5ngGznX/iI/1Zw0ht/E/M7DHsS4GQye7K2jdPGurml 8TTmyDgZp7+03oZsvIYgDEKe3PfvDHdwIpe1HTMmC0yV6pPhw+tRhoNK++/4hjJp mHgG3KbxZ+nPUuI5BDd+k0LkrnHj4hQE -----END CERTIFICATE-----Generated at Mon Oct 20 19:31:25 2025 by rpki-client