$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft File: 5HfTiqrEo3zG3xZlvxyICvmbe08.mft (raw, json) Hash identifier: TnzxT72+6dwpgoJEtKYne1fEWkNEQdA5xy/kxhVqCgg= Subject key identifier: E0:7B:F0:5D:AD:51:B6:EC:18:2A:4A:21:39:98:FA:AE:86:E4:90:AE Authority key identifier: E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F Certificate issuer: /CN=A91E504E/serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F Certificate serial: 040B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft Manifest number: 03FD Signing time: Sun 19 Oct 2025 02:26:43 +0000 Manifest this update: Sun 19 Oct 2025 02:26:43 +0000 Manifest next update: Sun 26 Oct 2025 02:26:42 +0000 Files and hashes: 1: 5HfTiqrEo3zG3xZlvxyICvmbe08.crl (hash: A07lalzbOp2gyxLevCVx/7btz13ovxtTiI3cy+9rrEQ=) 2: 5F9FA12E0CA411ED96936D79C4F9AE02.roa (hash: 1kY42j3eWLAd8yp1AvznjQwJBoHaBnQrkaPK6EtSCdQ=) 3: 06820D08961011ECA540626AC4F9AE02.roa (hash: XbxtLk1+2CfWndcMlMOnwCxgbfEchquqUDJGfTWj61E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1035 (0x40b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=E477D38AAAC4A37CC6DF1665BF1C880AF99B7B4F Validity Not Before: Oct 19 02:26:43 2025 GMT Not After : Oct 26 02:26:42 2025 GMT Subject: CN=68f44c63-7a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7d:83:b5:3b:fc:22:da:dc:35:78:6f:92:35: 22:1b:19:8b:c9:e0:3b:ec:4e:51:c3:85:38:34:33: 6b:b9:84:b6:ff:bb:ff:fe:23:45:e2:85:05:f9:1e: 65:1a:2e:ea:8f:d1:48:e2:6d:a9:10:fe:8e:65:de: 37:fb:99:d2:6d:41:42:5e:49:bc:6b:f6:13:66:86: 0b:0c:10:1c:f8:2f:c0:e1:7d:11:c8:1c:b0:b1:8b: 19:87:8a:3b:b2:c6:f5:e7:48:e8:80:b7:a8:ec:f6: 8c:24:7d:5a:75:d0:11:2e:25:02:76:c2:8c:99:dd: d4:f9:0d:ec:82:23:b4:fa:5f:73:f8:08:75:6e:c5: 40:1b:9a:bd:35:45:4c:fb:b1:c4:5c:dc:22:cb:ba: f4:2b:32:97:81:b2:e2:61:b8:04:c7:cf:0b:68:c0: a3:4f:70:44:28:10:1a:a8:90:5f:26:b0:c6:3b:01: 4c:a4:46:85:93:8b:d6:45:b6:1e:c7:db:90:62:48: 1f:39:14:7b:7a:9a:17:5c:ae:e6:71:4d:30:a1:3e: 79:7a:03:99:c5:b1:18:96:e0:d0:96:2b:8d:a8:0d: 6d:c5:46:7a:b2:70:15:02:df:d3:64:20:8a:2b:aa: 76:ed:8e:4c:b6:99:b5:25:3a:c1:42:9f:3a:79:26: 2c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7B:F0:5D:AD:51:B6:EC:18:2A:4A:21:39:98:FA:AE:86:E4:90:AE X509v3 Authority Key Identifier: keyid:E4:77:D3:8A:AA:C4:A3:7C:C6:DF:16:65:BF:1C:88:0A:F9:9B:7B:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5HfTiqrEo3zG3xZlvxyICvmbe08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/4E3E367E960811ECA04A0086C4F9AE02/5HfTiqrEo3zG3xZlvxyICvmbe08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:bc:86:d0:33:7a:c4:25:b1:09:73:04:65:19:f4:11:5e:4b: 17:b9:62:fd:d1:59:d7:f9:a7:f0:32:7b:b6:a5:07:17:e1:35: 3d:9e:1b:dd:34:7b:4b:06:cd:e7:70:ae:ed:fc:0b:b2:59:73: d5:dd:52:1f:81:ef:7c:0b:22:30:cf:1d:83:56:40:a4:a8:27: 26:6e:b1:c0:5b:56:7c:6c:16:91:62:d2:55:ed:86:86:ce:a8: c8:cd:4a:18:77:73:8f:6c:29:74:6e:24:91:7f:38:d7:75:bf: 57:f1:b4:2e:47:42:5e:74:ae:9a:5b:98:a4:3a:47:eb:aa:8d: 55:ee:26:ba:c1:2e:97:86:f6:18:29:c6:fa:35:81:33:4b:74: e1:09:2f:90:75:48:ba:43:8d:31:41:93:06:65:84:fc:f7:60: ee:86:96:2f:d6:f0:fc:a4:de:79:6e:2a:16:20:57:8a:c9:5a: af:4b:19:11:86:ed:f2:2f:60:bf:ae:6e:b2:a2:86:ba:a5:f3: 31:c9:0d:83:f9:39:87:88:01:54:47:9b:bc:42:b2:fa:ce:83: 9d:c2:f1:db:66:ab:d5:3e:ad:e8:51:6c:8a:5f:80:d7:b0:51: 2b:f1:85:2b:31:c3:17:cf:59:64:28:35:b0:ea:b2:e1:ec:43: 16:14:a8:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKEU0NzdEMzhBQUFDNEEzN0NDNkRGMTY2NUJGMUM4ODBB Rjk5QjdCNEYwHhcNMjUxMDE5MDIyNjQzWhcNMjUxMDI2MDIyNjQyWjAYMRYwFAYD VQQDEw02OGY0NGM2My03YTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxX2DtTv8ItrcNXhvkjUiGxmLyeA77E5Rw4U4NDNruYS2/7v//iNF4oUF+R5l Gi7qj9FI4m2pEP6OZd43+5nSbUFCXkm8a/YTZoYLDBAc+C/A4X0RyBywsYsZh4o7 ssb150jogLeo7PaMJH1addARLiUCdsKMmd3U+Q3sgiO0+l9z+Ah1bsVAG5q9NUVM +7HEXNwiy7r0KzKXgbLiYbgEx88LaMCjT3BEKBAaqJBfJrDGOwFMpEaFk4vWRbYe x9uQYkgfORR7epoXXK7mcU0woT55egOZxbEYluDQliuNqA1txUZ6snAVAt/TZCCK K6p27Y5Mtpm1JTrBQp86eSYsEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOB78F2t UbbsGCpKITmY+q6G5JCuMB8GA1UdIwQYMBaAFOR304qqxKN8xt8WZb8ciAr5m3tP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80RTNFMzY3RTk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi81SGZUaXFyRW8zekczeFpsdnh5SUN2bWJl MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVIZlRpcXJFbzN6RzN4Wmx2eHlJQ3ZtYmUwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS80RTNFMzY3RTk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi81SGZUaXFyRW8z ekczeFpsdnh5SUN2bWJlMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKvIbQM3rEJbEJcwRlGfQRXksXuWL90VnX+afwMnu2pQcX4TU9nhvd NHtLBs3ncK7t/AuyWXPV3VIfge98CyIwzx2DVkCkqCcmbrHAW1Z8bBaRYtJV7YaG zqjIzUoYd3OPbCl0biSRfzjXdb9X8bQuR0JedK6aW5ikOkfrqo1V7ia6wS6XhvYY Kcb6NYEzS3ThCS+QdUi6Q40xQZMGZYT892DuhpYv1vD8pN55bioWIFeKyVqvSxkR hu3yL2C/rm6yooa6pfMxyQ2D+TmHiAFUR5u8QrL6zoOdwvHbZqvVPq3oUWyKX4DX sFEr8YUrMcMXz1lkKDWw6rLh7EMWFKh5 -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:33 2025 by rpki-client