$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft File: K5XY2CKKiRR9gBk9l3DrUK7du2s.mft (raw, json) Hash identifier: UpF4Ydd5cleOjn+nlmlMOWdlJUwJJMWhKsTpF5JJ9Dg= Subject key identifier: EA:7A:74:EA:7B:03:63:AF:53:78:A2:04:53:1D:7E:E4:ED:33:63:E7 Authority key identifier: 2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B Certificate issuer: /CN=A91FF5A9/serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Certificate serial: 1708 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft Manifest number: 16EF Signing time: Sat 18 Oct 2025 17:02:17 +0000 Manifest this update: Sat 18 Oct 2025 17:02:16 +0000 Manifest next update: Sat 25 Oct 2025 17:02:16 +0000 Files and hashes: 1: K5XY2CKKiRR9gBk9l3DrUK7du2s.crl (hash: 4ThNC//AqPk14GlC2fhsewp4/0mRX5PoWBf80nIeJmk=) 2: 07D665E0862711EBAC147872C4F9AE02.roa (hash: h1jWRhCaXCGscugt7m7NPkJTh1NUHltfWypGJXiPwZw=) 3: F9E21144D90F11EDB2DBEA49C4F9AE02.roa (hash: fP45NGSHNvdQShMBiD1rePe2Esz9p+VlDQo2vfi2cz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5896 (0x1708) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF5A9, serialNumber=2B95D8D8228A89147D80193D9770EB50AEDDBB6B Validity Not Before: Oct 18 17:02:16 2025 GMT Not After : Oct 25 17:02:16 2025 GMT Subject: CN=68f3c818-49e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8d:bb:d6:9a:6c:ea:d9:35:8d:48:13:12:26: a7:7d:7e:5d:42:45:b9:63:7a:fb:50:2b:4e:74:02: 72:81:6b:51:d0:fd:c6:39:7c:0b:05:9a:e8:3e:25: eb:83:91:56:98:4e:bd:43:97:1a:9d:4e:28:b9:32: 43:27:ea:11:b6:e3:23:95:46:9a:54:ef:ea:c8:c2: da:4e:18:ab:7f:dc:88:cf:78:6b:b6:04:ad:96:20: ba:c5:eb:40:66:2c:f5:a0:3b:00:59:d4:6f:aa:05: 92:1a:6f:de:88:f6:ed:56:ea:00:9a:82:4f:ce:0c: 55:1f:32:05:e1:45:8e:e6:31:c7:25:89:b9:ac:e5: e5:f8:73:38:41:88:e3:62:ae:90:98:52:cc:6f:d5: 1e:53:55:b6:35:1b:65:9d:70:5b:f6:23:9b:b0:89: 71:83:f6:ee:37:39:fc:dc:a4:ba:72:76:1b:5a:10: 01:04:f0:46:94:eb:9f:0e:32:ce:2f:d4:5e:e2:1a: 93:77:32:4c:ce:e8:97:1b:3f:b8:e8:e5:3f:2e:5c: ef:c5:b2:ca:62:86:35:a4:1f:d3:e2:2c:ec:5d:35: 88:48:07:4a:4b:c2:89:03:11:ca:df:0d:75:7b:80: 40:a6:e5:64:c0:9e:c9:8f:a5:95:ef:d1:4d:8e:74: 86:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7A:74:EA:7B:03:63:AF:53:78:A2:04:53:1D:7E:E4:ED:33:63:E7 X509v3 Authority Key Identifier: keyid:2B:95:D8:D8:22:8A:89:14:7D:80:19:3D:97:70:EB:50:AE:DD:BB:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K5XY2CKKiRR9gBk9l3DrUK7du2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5A9/00B7151CFD0811E7A428FF0FC4F9AE02/K5XY2CKKiRR9gBk9l3DrUK7du2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:27:ff:91:32:a0:f7:2d:57:d6:d3:13:22:e2:57:58:b1:f9: 1d:d8:6c:63:2d:c9:2e:71:29:a8:06:b6:a4:f5:28:eb:86:16: d3:7e:97:74:ba:61:4f:a3:78:85:66:4a:7a:ef:7f:2a:e5:a0: fe:9c:e9:10:60:76:44:84:b8:4c:fa:2c:7d:2d:0b:02:56:d7: 9c:f3:69:b4:ec:2d:fe:5b:79:a7:ba:13:64:26:52:d0:04:53: df:6c:59:7b:52:cd:52:54:74:a0:c8:c0:4c:f4:fa:f8:52:fb: de:b4:9f:2f:20:a4:60:70:5a:f7:2d:fd:8b:5a:8e:73:33:c1: f1:26:c2:9a:d2:d5:8e:ca:c4:ea:ad:f2:d3:b7:92:a1:be:d3: b4:c7:18:56:ba:d4:7b:67:00:5b:9e:be:10:50:b1:0b:bd:c8: 9e:f8:91:eb:e3:e4:55:ee:4e:b0:80:af:b0:23:b0:f0:9c:59: f3:01:9d:6b:d2:8f:03:a5:a6:91:fb:b3:46:19:6b:f1:1b:4b: ca:a6:b0:3c:f4:bc:ca:a2:74:af:f7:0d:1f:34:56:25:22:ec: f2:7c:62:c4:3f:27:4b:0d:b9:68:45:e1:f1:19:b6:42:80:8c: 5a:23:4f:32:77:b9:e3:2c:b8:72:2f:42:e5:de:67:84:7a:2b: b9:9d:55:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY1QTkxMTAvBgNVBAUTKDJCOTVEOEQ4MjI4QTg5MTQ3RDgwMTkzRDk3NzBFQjUw QUVEREJCNkIwHhcNMjUxMDE4MTcwMjE2WhcNMjUxMDI1MTcwMjE2WjAYMRYwFAYD VQQDEw02OGYzYzgxOC00OWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4271pps6tk1jUgTEianfX5dQkW5Y3r7UCtOdAJygWtR0P3GOXwLBZroPiXr g5FWmE69Q5canU4ouTJDJ+oRtuMjlUaaVO/qyMLaThirf9yIz3hrtgStliC6xetA Ziz1oDsAWdRvqgWSGm/eiPbtVuoAmoJPzgxVHzIF4UWO5jHHJYm5rOXl+HM4QYjj Yq6QmFLMb9UeU1W2NRtlnXBb9iObsIlxg/buNzn83KS6cnYbWhABBPBGlOufDjLO L9Re4hqTdzJMzuiXGz+46OU/LlzvxbLKYoY1pB/T4izsXTWISAdKS8KJAxHK3w11 e4BApuVkwJ7Jj6WV79FNjnSG8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOp6dOp7 A2OvU3iiBFMdfuTtM2PnMB8GA1UdIwQYMBaAFCuV2NgiiokUfYAZPZdw61Cu3btr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjVBOS8wMEI3MTUxQ0ZE MDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lSUjlnQms5bDNEclVLN2R1 MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s1WFkyQ0tLaVJSOWdCazlsM0RyVUs3ZHUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjVBOS8wMEI3MTUxQ0ZEMDgxMUU3QTQyOEZGMEZDNEY5QUUwMi9LNVhZMkNLS2lS UjlnQms5bDNEclVLN2R1MnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXJ/+RMqD3LVfW0xMi4ldYsfkd2GxjLckucSmoBrak9SjrhhbTfpd0 umFPo3iFZkp6738q5aD+nOkQYHZEhLhM+ix9LQsCVtec82m07C3+W3mnuhNkJlLQ BFPfbFl7Us1SVHSgyMBM9Pr4UvvetJ8vIKRgcFr3Lf2LWo5zM8HxJsKa0tWOysTq rfLTt5KhvtO0xxhWutR7ZwBbnr4QULELvcie+JHr4+RV7k6wgK+wI7DwnFnzAZ1r 0o8DpaaR+7NGGWvxG0vKprA89LzKonSv9w0fNFYlIuzyfGLEPydLDbloReHxGbZC gIxaI08yd7njLLhyL0Ll3meEeiu5nVXN -----END CERTIFICATE-----Generated at Mon Oct 20 16:25:02 2025 by rpki-client