$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft File: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft (raw, json) Hash identifier: 4Ajz1dfDsC8WuvAkMpgUlTFdZOp6G8A+EcrZq9LlKUk= Subject key identifier: CA:0A:33:0E:1F:E8:D3:4D:13:8D:DA:26:FF:31:B3:F4:3B:55:B5:46 Authority key identifier: E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2 Certificate issuer: /CN=A91DE5E8/serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2 Certificate serial: 0201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft Manifest number: 01FB Signing time: Sun 19 Oct 2025 04:46:59 +0000 Manifest this update: Sun 19 Oct 2025 04:46:59 +0000 Manifest next update: Sun 26 Oct 2025 04:46:58 +0000 Files and hashes: 1: 5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl (hash: YEjuyMrgfr1vKE/wQbXHg9CoeQEv1LKJO1eJ/cCZW7U=) 2: 785B44D6F2AF11EF97443030C4F9AE02.roa (hash: 3X8JQRJ56NXF/A25OQxe1Q8xkJiOt4/FMaPtZ+BwKik=) 3: B264EB66A30911ED99A82087C4F9AE02.roa (hash: tZEzhiKfHDteKh17cCbwci/tZYnVymPaW90yd5ZJ1q4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 513 (0x201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE5E8, serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2 Validity Not Before: Oct 19 04:46:59 2025 GMT Not After : Oct 26 04:46:58 2025 GMT Subject: CN=68f46d43-980a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1e:e3:e7:36:51:60:7a:35:d7:4d:7e:2f:6a: f7:93:09:31:2a:2b:b0:3d:7c:8b:a4:5b:24:00:67: 33:7a:43:58:41:4c:f3:db:11:e3:19:45:19:1f:ce: e4:ae:04:08:cd:f1:74:d2:64:39:29:b9:d5:d9:5e: 05:4d:73:a8:ec:3c:32:12:64:1a:86:e9:87:c8:ad: 17:f4:29:b6:8c:00:23:5e:32:74:56:28:67:d7:65: 8d:6d:41:02:ce:a5:0a:c6:2c:48:d0:17:ef:bb:71: db:55:1e:ef:96:26:36:c4:9e:a5:2e:b7:df:2b:db: f9:38:14:3c:14:82:74:d5:e8:e2:50:22:a2:69:bc: 36:99:35:d9:fb:91:6c:08:5b:79:76:50:50:d4:73: 21:70:84:b4:c6:13:f7:26:62:22:64:1a:c6:cb:01: 9c:e6:05:97:5a:ca:3c:ef:86:ce:2f:66:a7:5e:26: 7b:2e:d4:db:f9:fe:d9:d1:75:90:23:f7:b7:30:a5: ae:36:b8:4d:b0:14:82:d3:85:4a:ff:e5:ab:e4:8a: e8:3e:fa:72:69:5c:88:d4:cc:5e:60:11:33:e4:8a: fc:d9:0f:86:b2:c3:3f:5c:2d:c8:c8:6e:1a:60:6f: df:6c:71:42:cf:19:82:f6:1b:3a:69:32:e3:bf:ac: 8e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:0A:33:0E:1F:E8:D3:4D:13:8D:DA:26:FF:31:B3:F4:3B:55:B5:46 X509v3 Authority Key Identifier: keyid:E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:12:3f:7f:83:75:49:b5:55:ee:5b:5d:64:09:c3:f6:4a:e3: b5:48:dc:86:e6:f2:a0:17:f0:f1:e4:67:68:eb:43:19:8a:85: b3:14:2d:88:92:b6:03:80:16:0b:c0:4f:4d:62:a5:9d:bb:4d: 8b:d4:d2:3f:d0:3c:b8:90:88:ad:6b:9f:ab:68:dc:96:d2:4f: 98:6e:f2:34:ff:cc:30:6a:ff:47:ac:c1:4b:97:b8:a3:ae:41: 92:4f:fc:9c:1f:06:0e:ea:47:ff:66:28:46:33:aa:3c:ca:aa: f8:3a:46:1a:d9:98:b9:38:3f:fe:68:a4:59:e0:b4:37:49:5b: 8b:1f:17:5e:e1:fb:0d:2a:ee:04:eb:cd:80:65:d9:94:60:a4: 37:06:81:a0:15:bd:28:38:eb:bb:c9:51:42:55:dd:19:0d:d1: e2:07:a2:fa:b3:0d:2d:dd:ee:d0:21:ec:72:00:ec:f5:11:5e: 13:bc:f4:eb:0f:1c:98:40:8c:2b:38:e7:54:97:e9:0a:d1:78: 59:6a:19:f8:dc:ab:fc:cb:c5:2f:e4:bb:66:48:72:5c:4f:64: d6:85:1a:bf:d1:f0:91:2c:e5:10:3a:dd:37:e1:6c:e1:39:29: 1f:83:dd:1d:80:11:d2:37:71:9d:25:59:b5:bf:ec:93:f6:89: fa:bd:5a:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1RTgxMTAvBgNVBAUTKEU1QjFDRTFENDUzOTE4MTk1QkVCNUNEOTBGNkQ4NzlF RkU5OTEwQTIwHhcNMjUxMDE5MDQ0NjU5WhcNMjUxMDI2MDQ0NjU4WjAYMRYwFAYD VQQDEw02OGY0NmQ0My05ODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2R7j5zZRYHo1101+L2r3kwkxKiuwPXyLpFskAGczekNYQUzz2xHjGUUZH87k rgQIzfF00mQ5KbnV2V4FTXOo7DwyEmQahumHyK0X9Cm2jAAjXjJ0Vihn12WNbUEC zqUKxixI0Bfvu3HbVR7vliY2xJ6lLrffK9v5OBQ8FIJ01ejiUCKiabw2mTXZ+5Fs CFt5dlBQ1HMhcIS0xhP3JmIiZBrGywGc5gWXWso874bOL2anXiZ7LtTb+f7Z0XWQ I/e3MKWuNrhNsBSC04VK/+Wr5IroPvpyaVyI1MxeYBEz5Ir82Q+GssM/XC3IyG4a YG/fbHFCzxmC9hs6aTLjv6yOZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoKMw4f 6NNNE43aJv8xs/Q7VbVGMB8GA1UdIwQYMBaAFOWxzh1FORgZW+tc2Q9th57+mRCi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTVFOC9FOUUxQkYyOEEz MDUxMUVEQUMxNEVFNkNDNEY5QUUwMi81YkhPSFVVNUdCbGI2MXpaRDIySG52NlpF S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzViSE9IVVU1R0JsYjYxelpEMjJIbnY2WkVLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTVFOC9FOUUxQkYyOEEzMDUxMUVEQUMxNEVFNkNDNEY5QUUwMi81YkhPSFVVNUdC bGI2MXpaRDIySG52NlpFS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIEj9/g3VJtVXuW11kCcP2SuO1SNyG5vKgF/Dx5Gdo60MZioWzFC2I krYDgBYLwE9NYqWdu02L1NI/0Dy4kIita5+raNyW0k+YbvI0/8wwav9HrMFLl7ij rkGST/ycHwYO6kf/ZihGM6o8yqr4OkYa2Zi5OD/+aKRZ4LQ3SVuLHxde4fsNKu4E 682AZdmUYKQ3BoGgFb0oOOu7yVFCVd0ZDdHiB6L6sw0t3e7QIexyAOz1EV4TvPTr DxyYQIwrOOdUl+kK0XhZahn43Kv8y8Uv5LtmSHJcT2TWhRq/0fCRLOUQOt034Wzh OSkfg90dgBHSN3GdJVm1v+yT9on6vVrk -----END CERTIFICATE-----Generated at Mon Oct 20 16:16:24 2025 by rpki-client