$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: At9xDDYNf5zDO4j8ZacvX3Tse6jPiCvkXtN5ilVaQtU= Subject key identifier: C2:66:57:92:32:DE:D5:42:42:8A:81:02:9A:F8:6C:45:85:1C:26:1D Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 03AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 039E Signing time: Wed 29 Oct 2025 00:32:52 +0000 Manifest this update: Wed 29 Oct 2025 00:32:51 +0000 Manifest next update: Wed 05 Nov 2025 00:32:51 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: r3sUKfFsyruq/hjt03JKGpFCXsLwGC1jtfOeH6UORzM=) 2: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: OB3c0FOnO7U7Cy2O3WKkzCkZvRGF4Swy8zD33qNbalg=) 3: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: PCa5nWLR+HuKgmwdVX9BOmG2ZZvLJrtIyJd8CbPbXng=) 4: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: JCVj+AscF7hWsvaIqNJTPDabzygkqnGZEfVjCkrIsro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 00:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 942 (0x3ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Oct 29 00:32:51 2025 GMT Not After : Nov 5 00:32:51 2025 GMT Subject: CN=690160b3-9977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1c:0d:a7:be:f6:1a:7a:fd:86:f9:c5:72:ac: cb:ce:75:70:45:e7:94:19:9e:7a:24:69:64:10:36: ad:bf:7a:03:d7:d6:71:61:65:57:24:54:be:24:cb: 21:bd:28:e0:e9:21:5b:af:a2:9d:5d:fd:32:b4:f7: 1b:62:f5:02:15:8d:8d:7f:cf:c6:8f:ae:64:cf:34: 9f:c0:9e:1b:fd:00:59:af:b8:8a:3e:a8:87:f4:aa: 16:9f:f3:c0:2c:26:95:0b:58:f4:a3:05:e6:df:92: d8:12:86:99:a9:91:e3:43:6c:86:d1:c4:ea:c7:25: 54:19:8a:d8:8d:5d:d5:f3:f0:33:8c:02:dd:c2:3f: 00:71:a2:d6:3d:db:93:b9:86:e6:f2:b9:50:65:e4: 16:e4:78:db:e2:ce:f5:a3:f9:26:74:bd:7e:a1:dd: 86:f1:48:5b:ed:92:d8:64:35:ea:af:6b:f9:dd:f4: f2:bf:2c:76:9f:8e:c5:f1:a1:33:ad:b1:a2:0d:05: c8:b8:a1:b2:ef:6f:4d:0f:3a:2e:96:60:a5:ee:9b: cf:e3:ae:3e:6d:24:25:80:be:ee:5a:72:40:4b:63: c5:b2:a8:1b:e0:03:8b:20:5a:3c:2e:50:65:e0:03: ac:8d:f9:b5:13:c1:ce:9c:4a:3c:dd:d8:24:62:7c: 7d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:66:57:92:32:DE:D5:42:42:8A:81:02:9A:F8:6C:45:85:1C:26:1D X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:26:9e:64:a1:5c:cc:8a:6d:8d:3e:f3:e4:6f:83:f7:cd:d1: 6b:61:5b:79:d3:a8:d4:ad:92:ad:77:ac:47:b7:f7:f6:af:61: 3a:92:6b:52:8e:c5:19:8c:12:b8:36:88:78:d0:77:d7:83:05: 38:21:8b:f4:14:02:9f:a3:a7:8e:4a:0f:f8:29:b8:fb:19:ff: 6d:39:6a:a5:31:fe:fc:1c:26:b7:0a:1e:6b:45:bc:89:c2:08: 54:62:af:23:6d:f6:ea:c4:f4:af:e1:68:2c:b0:77:33:4c:9b: 33:f9:a5:55:37:42:3b:03:97:0e:76:3c:3f:e3:45:22:df:05: 68:6f:83:0e:ab:34:b7:36:8f:3b:ff:fc:b6:9f:7b:27:ab:36: a2:cb:83:50:70:9e:52:b6:3f:0e:ac:a9:b8:7d:d7:e2:ae:42: 01:88:a4:f8:78:d0:25:5d:b7:e5:a7:ff:a2:4c:c5:0e:4e:bf: 4a:79:d8:3b:ce:55:c8:b6:45:35:b7:db:ae:1a:42:da:a9:5a: 3c:55:09:ac:e7:a4:3b:d4:73:77:cb:69:b3:cf:d1:bf:70:c7: 7c:93:e0:1c:11:fe:5e:ad:ba:80:c5:fe:e9:19:4f:f9:98:e9: 3e:4d:ee:a1:a3:f2:5a:d5:4b:da:9f:d8:26:75:37:54:79:bf: 0f:56:ec:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjUxMDI5MDAzMjUxWhcNMjUxMTA1MDAzMjUxWjAYMRYwFAYD VQQDEw02OTAxNjBiMy05OTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RwNp772Gnr9hvnFcqzLznVwReeUGZ56JGlkEDatv3oD19ZxYWVXJFS+JMsh vSjg6SFbr6KdXf0ytPcbYvUCFY2Nf8/Gj65kzzSfwJ4b/QBZr7iKPqiH9KoWn/PA LCaVC1j0owXm35LYEoaZqZHjQ2yG0cTqxyVUGYrYjV3V8/AzjALdwj8AcaLWPduT uYbm8rlQZeQW5Hjb4s71o/kmdL1+od2G8Uhb7ZLYZDXqr2v53fTyvyx2n47F8aEz rbGiDQXIuKGy729NDzoulmCl7pvP464+bSQlgL7uWnJAS2PFsqgb4AOLIFo8LlBl 4AOsjfm1E8HOnEo83dgkYnx9KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJmV5Iy 3tVCQoqBApr4bEWFHCYdMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjJp5koVzMim2NPvPkb4P3zdFrYVt506jUrZKtd6xHt/f2r2E6kmtS jsUZjBK4Noh40HfXgwU4IYv0FAKfo6eOSg/4Kbj7Gf9tOWqlMf78HCa3Ch5rRbyJ wghUYq8jbfbqxPSv4WgssHczTJsz+aVVN0I7A5cOdjw/40Ui3wVob4MOqzS3No87 //y2n3snqzaiy4NQcJ5Stj8OrKm4fdfirkIBiKT4eNAlXbflp/+iTMUOTr9Kedg7 zlXItkU1t9uuGkLaqVo8VQms56Q71HN3y2mzz9G/cMd8k+AcEf5erbqAxf7pGU/5 mOk+Te6ho/Ja1Uvan9gmdTdUeb8PVuyD -----END CERTIFICATE-----Generated at Wed Oct 29 05:19:26 2025 by rpki-client