$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft File: x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft (raw, json) Hash identifier: V13AIytaawK5CwXGA9zn1AopXRlWZ49xT8Q2U/PHNF0= Subject key identifier: C8:49:B9:32:7A:8D:24:AC:A2:74:1D:FE:38:7F:84:A0:95:7F:E7:83 Authority key identifier: C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9 Certificate issuer: /CN=A91E01B2/serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9 Certificate serial: 03AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft Manifest number: 03A2 Signing time: Sun 19 Oct 2025 02:44:57 +0000 Manifest this update: Sun 19 Oct 2025 02:44:56 +0000 Manifest next update: Sun 26 Oct 2025 02:44:56 +0000 Files and hashes: 1: x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl (hash: d1+JhAdEdJeW4FeuQxb+WaomTmvYFGxGgjBWewVr7jg=) 2: A8E34E9CB66611ECAF76DA4CC4F9AE02.roa (hash: U+TSb4gwFFQAjrhJgD02yjkinWTnlvFp6oUJxouw0Y4=) 3: A9906244B66611ECAF76DA4CC4F9AE02.roa (hash: +CW3v5l7R9gMqeCZZxElin+bWDGaYeldrsVB5lTI+Bw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 942 (0x3ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01B2, serialNumber=C7E5790B05E0D4D209DB43DC680FB788279814A9 Validity Not Before: Oct 19 02:44:56 2025 GMT Not After : Oct 26 02:44:56 2025 GMT Subject: CN=68f450a8-7348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f5:3f:dc:98:b2:a8:98:03:e0:7f:0f:96:f6: d9:4d:ca:f4:80:7e:e1:d7:b8:ae:de:4b:4f:f9:35: 22:03:85:35:4a:12:3c:8f:c8:83:da:41:92:dc:f8: f4:22:a7:05:64:95:c3:0a:16:10:47:7b:0e:ba:80: e0:b2:c8:5a:c1:9b:0c:fd:40:8c:d9:10:9e:1b:3a: 29:8f:d7:ff:ef:39:02:f4:f7:79:1d:5a:0b:77:6f: 79:9d:38:02:3a:03:20:84:96:3c:b2:67:1a:91:ba: 11:54:79:cb:c2:96:8a:59:24:96:6b:c9:f0:fe:1d: fa:92:cc:11:b0:9f:d3:09:8f:e3:e6:4e:a3:30:6e: 25:ac:4b:27:4d:58:9a:21:04:e0:7f:0a:3c:e0:35: 33:73:f9:e6:5e:fe:6d:29:1d:65:0f:a6:b9:12:0a: 4f:74:48:29:04:60:fb:fc:d4:b4:be:2b:cb:57:25: 9a:74:dc:bf:8f:dd:e2:8c:76:8f:4e:38:f1:c9:fd: a4:a7:30:15:4f:ec:3e:8e:16:2f:1a:73:18:25:48: 09:a6:eb:71:28:4d:8e:57:94:66:2f:da:b5:e3:c7: 50:81:3c:61:93:5a:b6:10:3a:d5:f5:74:9a:43:e9: 5b:b8:50:22:ae:94:5b:c1:b2:d0:63:d0:0a:94:1a: a1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:49:B9:32:7A:8D:24:AC:A2:74:1D:FE:38:7F:84:A0:95:7F:E7:83 X509v3 Authority Key Identifier: keyid:C7:E5:79:0B:05:E0:D4:D2:09:DB:43:DC:68:0F:B7:88:27:98:14:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-V5CwXg1NIJ20PcaA-3iCeYFKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01B2/6DE9F410B66311EC8D54A449C4F9AE02/x-V5CwXg1NIJ20PcaA-3iCeYFKk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:ed:37:44:75:a7:dd:01:0b:b3:27:ea:5c:5e:dd:09:22:7a: 1d:59:a2:71:28:ad:b2:91:1a:cf:95:aa:04:87:04:c4:9f:a1: ab:0c:2d:25:2c:6a:0c:04:b8:e3:f0:23:52:e9:10:83:63:52: 62:58:ac:01:dc:f0:6a:3e:62:2c:8d:82:44:2e:b5:d2:d3:d4: 0f:ab:25:55:4b:fa:41:34:ec:79:14:22:7d:6c:76:4f:7a:a3: 76:60:59:1b:2b:15:85:ea:68:e1:91:d8:4d:b0:ee:0b:da:a9: ca:ac:12:90:f1:50:18:c5:e4:01:5e:6d:0f:59:20:1e:b2:e4: 04:24:03:f1:88:97:66:f5:d3:32:06:de:c9:c0:ad:63:2b:3b: 46:1f:9a:db:53:73:f2:7e:6c:a7:e0:76:5d:17:23:36:3a:77: da:93:52:1b:7a:4f:55:64:14:29:f9:1d:66:4d:24:2f:12:87: e5:be:88:41:03:61:6f:7a:e1:70:c2:02:66:a6:b1:39:41:4f: 91:8c:c3:05:15:7b:b3:95:09:88:b4:4c:99:af:35:fa:4e:a5: ca:35:0b:08:58:87:0b:37:94:cb:6b:9a:60:c7:6d:1a:1f:57: 90:91:6c:f2:8d:f4:0b:68:de:5e:4d:3d:84:dd:42:0c:2d:31: 12:8a:17:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxQjIxMTAvBgNVBAUTKEM3RTU3OTBCMDVFMEQ0RDIwOURCNDNEQzY4MEZCNzg4 Mjc5ODE0QTkwHhcNMjUxMDE5MDI0NDU2WhcNMjUxMDI2MDI0NDU2WjAYMRYwFAYD VQQDEw02OGY0NTBhOC03MzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPU/3JiyqJgD4H8PlvbZTcr0gH7h17iu3ktP+TUiA4U1ShI8j8iD2kGS3Pj0 IqcFZJXDChYQR3sOuoDgsshawZsM/UCM2RCeGzopj9f/7zkC9Pd5HVoLd295nTgC OgMghJY8smcakboRVHnLwpaKWSSWa8nw/h36kswRsJ/TCY/j5k6jMG4lrEsnTVia IQTgfwo84DUzc/nmXv5tKR1lD6a5EgpPdEgpBGD7/NS0vivLVyWadNy/j93ijHaP Tjjxyf2kpzAVT+w+jhYvGnMYJUgJputxKE2OV5RmL9q148dQgTxhk1q2EDrV9XSa Q+lbuFAirpRbwbLQY9AKlBqhxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhJuTJ6 jSSsonQd/jh/hKCVf+eDMB8GA1UdIwQYMBaAFMfleQsF4NTSCdtD3GgPt4gnmBSp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFCMi82REU5RjQxMEI2 NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFOSUoyMFBjYUEtM2lDZVlG S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gtVjVDd1hnMU5JSjIwUGNhQS0zaUNlWUZLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFCMi82REU5RjQxMEI2NjMxMUVDOEQ1NEE0NDlDNEY5QUUwMi94LVY1Q3dYZzFO SUoyMFBjYUEtM2lDZVlGS2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDU7TdEdafdAQuzJ+pcXt0JInodWaJxKK2ykRrPlaoEhwTEn6GrDC0l LGoMBLjj8CNS6RCDY1JiWKwB3PBqPmIsjYJELrXS09QPqyVVS/pBNOx5FCJ9bHZP eqN2YFkbKxWF6mjhkdhNsO4L2qnKrBKQ8VAYxeQBXm0PWSAesuQEJAPxiJdm9dMy Bt7JwK1jKztGH5rbU3Pyfmyn4HZdFyM2Onfak1Ibek9VZBQp+R1mTSQvEoflvohB A2FveuFwwgJmprE5QU+RjMMFFXuzlQmItEyZrzX6TqXKNQsIWIcLN5TLa5pgx20a H1eQkWzyjfQLaN5eTT2E3UIMLTESihdg -----END CERTIFICATE-----Generated at Mon Oct 20 21:24:57 2025 by rpki-client