$ rpki-client -vvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft File: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json) Hash identifier: EV9X9w1QWs5IuqAY1gO7JlqGUdBWXibW9ciIpFQbtqo= Subject key identifier: 24:71:D9:38:22:8C:DE:C8:F6:25:AA:98:D0:FA:E0:7C:28:A3:EC:03 Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 Certificate issuer: /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft Manifest number: BA Signing time: Sun 19 Oct 2025 09:07:41 +0000 Manifest this update: Sun 19 Oct 2025 09:07:41 +0000 Manifest next update: Sun 26 Oct 2025 09:07:41 +0000 Files and hashes: 1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: DglI0HcWhPU0JK3DbVUCsDN5QhqRHVEgXp+QZbDJMv4=) 2: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: JjgqoANmsusAqQnFWaBmauCJuNgw+HQl/ZcBjvaDkfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E554A, serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680 Validity Not Before: Oct 19 09:07:41 2025 GMT Not After : Oct 26 09:07:41 2025 GMT Subject: CN=68f4aa5d-094c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0f:ff:7d:47:cc:cf:81:4c:8b:47:22:8e:ff: 75:ed:bf:b9:a1:81:97:26:89:7a:ec:f3:8a:1a:93: 01:4f:76:fe:8b:c2:b0:16:a7:ab:a0:35:86:c2:2c: fe:14:0c:61:85:3f:76:4b:58:b2:c4:2e:27:81:39: 52:98:61:92:e0:5f:84:dd:b7:93:f9:d1:63:9a:fc: 6e:e8:89:ed:24:2b:70:27:1f:46:42:95:72:57:55: 08:ed:43:4b:a2:af:d3:32:aa:87:df:d3:89:13:b4: 8e:46:30:85:b4:7b:5d:09:28:8a:5f:83:dd:da:52: 45:2d:db:c6:a3:d9:a5:ee:95:fc:66:f6:5f:b1:1f: 62:ae:50:fa:c1:d7:5a:32:04:58:26:9f:a3:51:69: 87:c1:72:0c:8d:8d:64:c5:d9:3e:73:99:6b:61:0d: c6:a9:ba:17:ba:6a:d2:07:15:4f:cc:8f:5d:52:7d: 16:e2:df:a3:ba:3e:09:64:0b:da:88:54:b2:c3:21: 20:90:a4:e1:4f:ab:6c:bf:67:75:db:14:31:ea:b5: c8:9e:67:c6:c2:80:95:99:fd:9d:48:05:b4:51:11: 3a:2a:f2:35:01:c9:e4:cc:b7:32:f4:f4:98:07:9e: f1:c1:97:07:69:5f:bd:63:59:5d:7e:60:92:7b:94: 45:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:71:D9:38:22:8C:DE:C8:F6:25:AA:98:D0:FA:E0:7C:28:A3:EC:03 X509v3 Authority Key Identifier: keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:5f:47:c2:21:d2:10:69:3c:1c:ca:1d:35:4d:a4:bb:9c:00: e0:7a:51:8f:31:73:1d:28:35:7a:76:c7:d7:b4:ad:d6:73:73: 7e:58:6f:8a:06:70:a1:03:18:ab:e6:42:27:76:61:7f:31:b8: 16:0f:8b:5e:5e:84:9c:39:c0:16:16:21:46:23:d0:39:dc:f2: 3b:79:41:0a:54:52:21:85:20:4e:7c:e8:d8:df:73:70:3f:23: e7:6b:cf:0f:b0:9f:58:f4:f0:7c:cc:72:39:31:e4:19:7f:02: c0:70:6c:8f:29:91:10:9f:ac:2f:10:f3:bd:7b:39:6c:f4:de: 04:0c:86:ce:1a:a9:c2:46:68:71:04:d5:f4:e8:b5:89:97:29: 3a:94:41:7a:21:e6:d2:c6:4f:2f:6d:ad:e5:69:d9:0e:80:07: 4d:4d:e0:87:4e:03:97:5f:6d:75:e7:d7:02:d9:c6:92:04:d1: ad:b3:41:8c:b6:d3:93:ae:79:37:78:33:42:6f:90:80:86:04: 1a:2c:3e:ca:77:fc:a7:af:ca:0e:15:ac:a6:83:f8:b2:bb:92: 03:e2:73:5e:17:b7:50:5c:76:c5:b0:ef:15:a5:b3:82:e7:76: 5d:89:65:b8:98:af:0a:26:da:63:33:58:e2:5c:93:d6:71:e7: 35:98:11:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU1NEExMTAvBgNVBAUTKEU2NzU4QjlBMzc1OTgyQzJDNEQxQzc2NDlBMzFFNENG MjdENUE2ODAwHhcNMjUxMDE5MDkwNzQxWhcNMjUxMDI2MDkwNzQxWjAYMRYwFAYD VQQDEw02OGY0YWE1ZC0wOTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuA//fUfMz4FMi0cijv917b+5oYGXJol67POKGpMBT3b+i8KwFqeroDWGwiz+ FAxhhT92S1iyxC4ngTlSmGGS4F+E3beT+dFjmvxu6IntJCtwJx9GQpVyV1UI7UNL oq/TMqqH39OJE7SORjCFtHtdCSiKX4Pd2lJFLdvGo9ml7pX8ZvZfsR9irlD6wdda MgRYJp+jUWmHwXIMjY1kxdk+c5lrYQ3GqboXumrSBxVPzI9dUn0W4t+juj4JZAva iFSywyEgkKThT6tsv2d12xQx6rXInmfGwoCVmf2dSAW0URE6KvI1AcnkzLcy9PSY B57xwZcHaV+9Y1ldfmCSe5RF2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRx2Tgi jN7I9iWqmND64Hwoo+wDMB8GA1UdIwQYMBaAFOZ1i5o3WYLCxNHHZJox5M8n1aaA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTU0QS84MjJGQzIyMDkx RjcxMUVGQURFMTEyNjZDNEY5QUUwMi81bldMbWpkWmdzTEUwY2RrbWpIa3p5ZlZw b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVuV0xtamRaZ3NMRTBjZGttakhrenlmVnBvQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTU0QS84MjJGQzIyMDkxRjcxMUVGQURFMTEyNjZDNEY5QUUwMi81bldMbWpkWmdz TEUwY2RrbWpIa3p5ZlZwb0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJX0fCIdIQaTwcyh01TaS7nADgelGPMXMdKDV6dsfXtK3Wc3N+WG+K BnChAxir5kIndmF/MbgWD4teXoScOcAWFiFGI9A53PI7eUEKVFIhhSBOfOjY33Nw PyPna88PsJ9Y9PB8zHI5MeQZfwLAcGyPKZEQn6wvEPO9ezls9N4EDIbOGqnCRmhx BNX06LWJlyk6lEF6IebSxk8vba3ladkOgAdNTeCHTgOXX21159cC2caSBNGts0GM ttOTrnk3eDNCb5CAhgQaLD7Kd/ynr8oOFaymg/iyu5ID4nNeF7dQXHbFsO8VpbOC 53ZdiWW4mK8KJtpjM1jiXJPWcec1mBFI -----END CERTIFICATE-----Generated at Mon Oct 20 04:48:51 2025 by rpki-client