$ rpki-client -vvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft File: _5APJL-aiYLZX4RHqnubtPesRjk.mft (raw, json) Hash identifier: yZD30024Mxc5aosVvJhqHgM2lAtDd15c/k55lFwEurI= Subject key identifier: 77:AD:36:F0:AE:5F:0D:77:F0:5C:00:52:75:F1:16:E1:97:D0:1A:46 Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 Certificate issuer: /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Certificate serial: 0A08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft Manifest number: 09F8 Signing time: Tue 04 Nov 2025 19:58:42 +0000 Manifest this update: Tue 04 Nov 2025 19:58:41 +0000 Manifest next update: Tue 11 Nov 2025 19:58:41 +0000 Files and hashes: 1: _5APJL-aiYLZX4RHqnubtPesRjk.crl (hash: sit9m/Dbo57bFJcwWNBWL7dofWpTkHD91o/bCs6stLs=) 2: D3037D06738E11ED8283FF53C4F9AE02.roa (hash: oKxH1slQnBcxxB/Xh/Duy/VUqwWP+wlSdyJOsRinTcw=) 3: D1A6B6D0738E11ED8283FF53C4F9AE02.roa (hash: oEOFUnEt8M3b87Re+i1Xzb3Xnn+XVIaIOLo4ivZ01FI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2568 (0xa08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91221EF, serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639 Validity Not Before: Nov 4 19:58:41 2025 GMT Not After : Nov 11 19:58:41 2025 GMT Subject: CN=690a5af2-15b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fe:76:31:f9:f2:9d:ed:bc:65:b5:15:aa:40: ab:e5:53:95:da:47:e8:7d:4e:5a:39:d0:d0:20:41: b7:1b:9c:9f:20:c0:be:15:1e:2f:19:0b:19:05:68: fb:0c:21:b8:70:c3:d8:97:e5:07:91:10:e3:db:b1: 44:38:67:0d:e3:06:dc:a7:2b:b1:df:fa:04:ea:11: 1d:05:62:cb:f5:fd:89:27:2f:56:cb:08:ac:01:89: 30:af:de:f6:f1:38:e3:d1:72:b9:68:73:57:f6:62: 2a:b5:e5:d4:32:4d:05:08:02:00:fc:f0:d7:12:5b: 43:49:2f:71:8f:12:a5:ef:a0:35:1c:9b:a0:e1:44: 74:49:12:0b:55:30:3e:3b:48:31:46:ac:35:56:52: 61:01:bc:07:b2:89:08:5b:2a:3d:15:90:a6:49:1e: c9:b9:ce:13:d2:8b:74:d8:02:e9:43:80:09:be:57: 21:16:86:71:14:82:75:e7:80:00:ac:96:ca:9c:75: bd:98:5f:d8:71:72:4d:67:81:c6:af:2d:53:d8:9e: a7:c7:2f:bd:56:8e:71:34:e0:47:ca:b8:0a:52:d3: 26:30:0f:a9:19:7f:26:e4:35:6a:51:2d:5b:76:d5: 91:75:37:96:7b:b0:c2:e8:02:ff:5c:74:79:d1:1c: 8d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AD:36:F0:AE:5F:0D:77:F0:5C:00:52:75:F1:16:E1:97:D0:1A:46 X509v3 Authority Key Identifier: keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:c6:57:85:b1:43:30:c5:3c:a4:14:f0:90:a0:6d:ad:f3:61: df:b7:5d:fd:1e:4f:b9:a3:a5:86:61:9e:da:b1:26:d3:86:4c: 99:14:0c:ac:4a:10:2b:e2:84:04:c1:6f:c6:e9:64:19:95:db: ba:a5:f3:08:0a:12:2b:81:f3:08:26:50:1d:d1:f5:88:84:a0: 55:bb:02:9f:6c:20:ec:0d:f2:81:9f:5a:a3:5d:2d:f2:40:7d: 3c:36:40:f0:dc:27:54:fe:c8:69:7f:d5:c5:40:03:1d:6c:33: 4d:f3:9e:d9:d5:c2:66:ee:6e:8c:99:04:fe:a9:1d:ab:3a:ad: 3b:03:e8:88:e8:85:32:8b:dc:f0:76:ff:b6:b9:94:3f:43:51: 05:e8:66:26:92:b1:df:d9:e5:fc:55:c5:56:88:6e:4a:6c:fe: 53:e9:97:47:c4:8b:80:24:c7:02:58:9f:a3:de:c5:3a:a1:bd: 1f:6f:ab:e6:1b:10:c4:94:47:fe:0d:cb:3a:d3:ab:ca:f8:7c: 38:69:a7:04:2a:33:3f:19:d4:06:4e:88:f2:26:c4:28:a4:27: b1:da:cb:fd:48:1d:72:b0:72:8c:55:f7:5f:a2:37:9a:77:da: 81:a1:33:04:16:fc:ae:57:bb:76:1a:b4:4c:dd:22:fa:4f:b3: a8:6a:bd:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIxRUYxMTAvBgNVBAUTKEZGOTAwRjI0QkY5QTg5ODJEOTVGODQ0N0FBN0I5QkI0 RjdBQzQ2MzkwHhcNMjUxMTA0MTk1ODQxWhcNMjUxMTExMTk1ODQxWjAYMRYwFAYD VQQDEw02OTBhNWFmMi0xNWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/52Mfnyne28ZbUVqkCr5VOV2kfofU5aOdDQIEG3G5yfIMC+FR4vGQsZBWj7 DCG4cMPYl+UHkRDj27FEOGcN4wbcpyux3/oE6hEdBWLL9f2JJy9WywisAYkwr972 8Tjj0XK5aHNX9mIqteXUMk0FCAIA/PDXEltDSS9xjxKl76A1HJug4UR0SRILVTA+ O0gxRqw1VlJhAbwHsokIWyo9FZCmSR7Juc4T0ot02ALpQ4AJvlchFoZxFIJ154AA rJbKnHW9mF/YcXJNZ4HGry1T2J6nxy+9Vo5xNOBHyrgKUtMmMA+pGX8m5DVqUS1b dtWRdTeWe7DC6AL/XHR50RyNnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHetNvCu Xw138FwAUnXxFuGX0BpGMB8GA1UdIwQYMBaAFP+QDyS/momC2V+ER6p7m7T3rEY5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjFFRi82RjJGRUJENjg5 MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZTFpYNFJIcW51YnRQZXNS amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL181QVBKTC1haVlMWlg0UkhxbnVidFBlc1Jqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjFFRi82RjJGRUJENjg5MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZ TFpYNFJIcW51YnRQZXNSamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZxleFsUMwxTykFPCQoG2t82Hft139Hk+5o6WGYZ7asSbThkyZFAys ShAr4oQEwW/G6WQZldu6pfMIChIrgfMIJlAd0fWIhKBVuwKfbCDsDfKBn1qjXS3y QH08NkDw3CdU/shpf9XFQAMdbDNN857Z1cJm7m6MmQT+qR2rOq07A+iI6IUyi9zw dv+2uZQ/Q1EF6GYmkrHf2eX8VcVWiG5KbP5T6ZdHxIuAJMcCWJ+j3sU6ob0fb6vm GxDElEf+Dcs606vK+Hw4aacEKjM/GdQGTojyJsQopCex2sv9SB1ysHKMVfdfojea d9qBoTMEFvyuV7t2GrRM3SL6T7Ooar3z -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:28 2025 by rpki-client