$ rpki-client -vvf rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft File: c5FNFBChzT-FrR4bClD_P4vWDBA.mft (raw, json) Hash identifier: N3VrtnGn7/cr2T8QAWN3rvsVpHwduBAtprxQF1hC8bo= Subject key identifier: FE:4A:83:D6:D7:7A:3D:42:C7:8A:6A:F8:F5:1E:BC:09:D2:EC:E6:15 Authority key identifier: 73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10 Certificate issuer: /CN=A91366F8/serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10 Certificate serial: 039B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft Manifest number: 0396 Signing time: Mon 03 Nov 2025 00:43:51 +0000 Manifest this update: Mon 03 Nov 2025 00:43:50 +0000 Manifest next update: Mon 10 Nov 2025 00:43:50 +0000 Files and hashes: 1: c5FNFBChzT-FrR4bClD_P4vWDBA.crl (hash: NySDCs4xGWYtDLqWQH17WoU/VDS4bhsg91zvKtpExy0=) 2: 591A8C06BE4D11EC8DADB22CC4F9AE02.roa (hash: OdJBHfeW2Re+5Y2fi/VDd9mvhSQUJ11CYcf0wDjfUuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 923 (0x39b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91366F8, serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10 Validity Not Before: Nov 3 00:43:50 2025 GMT Not After : Nov 10 00:43:50 2025 GMT Subject: CN=6907fac6-4393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e0:50:ce:3b:1e:ed:a6:43:df:58:31:cd:73: f4:d7:ad:87:31:27:ce:1d:4e:10:df:27:0b:92:74: 8a:49:25:cb:52:f2:28:c4:b1:37:18:f9:4d:5b:d3: 50:62:6b:60:ae:63:14:14:5c:bb:15:62:7d:3c:c9: e8:9b:cd:12:ed:30:8d:96:90:c7:dd:cf:4a:44:c6: 77:d8:82:bf:77:47:91:1a:c6:ab:30:6e:03:7b:2d: f0:b7:74:0b:8a:f4:08:b3:a9:dc:7b:b7:46:fd:8d: 7c:0b:c2:60:33:5a:a8:4f:0a:4b:7d:28:ad:37:e9: ce:48:37:ce:29:ae:76:f5:7a:6f:cd:0a:16:30:39: 91:0d:34:84:dd:e7:87:f9:19:a8:c3:cc:08:7b:b5: 4d:7b:28:b9:db:0c:00:63:ac:f8:75:57:42:33:2b: 3d:2f:c7:8c:92:b4:96:d8:e6:42:13:80:5f:aa:18: eb:06:70:8a:de:88:be:a6:c5:93:27:cf:75:60:77: d2:fb:d3:35:77:83:29:c0:4c:12:96:82:11:05:81: 87:57:05:3a:34:fd:a4:cf:57:2e:c9:b6:aa:f2:28: 12:62:42:80:e9:57:b0:35:ee:6c:5c:79:5f:a0:89: 3c:d4:af:5a:41:c4:8a:51:c8:d3:c5:2b:74:12:9c: d5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4A:83:D6:D7:7A:3D:42:C7:8A:6A:F8:F5:1E:BC:09:D2:EC:E6:15 X509v3 Authority Key Identifier: keyid:73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:3e:f3:20:e8:90:34:92:c9:56:c9:dd:fd:1f:9d:5b:5c:76: 6c:84:b6:4e:69:41:b4:81:75:30:d2:4e:e3:78:17:87:2c:66: ab:65:d0:4f:41:23:f0:75:12:ff:10:fc:0d:47:8d:9c:d3:95: 6b:88:62:cb:4d:c6:b9:e2:c0:49:7d:1d:84:36:18:ce:ca:4f: a6:f7:d9:f2:f6:ee:24:b1:01:8f:b8:2d:cd:8a:31:eb:8c:a5: 5e:f9:87:d3:3e:46:47:ed:13:5e:a8:75:ec:d2:46:41:f9:0f: c6:0b:80:9e:80:2e:55:d8:59:08:f5:f4:10:fd:0e:ca:b6:75: 70:a7:a6:0a:99:0c:35:7c:a9:c0:5c:a9:b7:fd:26:7e:30:30: e2:f4:1c:a9:8d:b4:61:98:aa:99:68:2c:d6:67:90:6e:40:5b: 62:bb:26:bc:52:f3:cf:c6:ca:fc:12:35:0f:75:ff:3d:59:3f: 5d:9e:12:3a:1d:44:c0:f9:ad:78:e9:c6:c2:2e:27:ae:45:57: 82:b9:a7:b8:03:35:18:03:5d:3e:b4:83:3b:02:98:bd:24:75: b3:3f:56:c8:5e:67:da:d8:13:88:35:4d:d9:bb:7c:7a:7b:4a: fa:23:ce:7b:5d:d8:5e:d7:2e:f8:d5:e0:49:8a:3f:a9:ca:61: d3:1a:d5:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2RjgxMTAvBgNVBAUTKDczOTE0RDE0MTBBMUNEM0Y4NUFEMUUxQjBBNTBGRjNG OEJENjBDMTAwHhcNMjUxMTAzMDA0MzUwWhcNMjUxMTEwMDA0MzUwWjAYMRYwFAYD VQQDEw02OTA3ZmFjNi00MzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+BQzjse7aZD31gxzXP0162HMSfOHU4Q3ycLknSKSSXLUvIoxLE3GPlNW9NQ YmtgrmMUFFy7FWJ9PMnom80S7TCNlpDH3c9KRMZ32IK/d0eRGsarMG4Dey3wt3QL ivQIs6nce7dG/Y18C8JgM1qoTwpLfSitN+nOSDfOKa529XpvzQoWMDmRDTSE3eeH +Rmow8wIe7VNeyi52wwAY6z4dVdCMys9L8eMkrSW2OZCE4BfqhjrBnCK3oi+psWT J891YHfS+9M1d4MpwEwSloIRBYGHVwU6NP2kz1cuybaq8igSYkKA6VewNe5sXHlf oIk81K9aQcSKUcjTxSt0EpzVZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5Kg9bX ej1Cx4pq+PUevAnS7OYVMB8GA1UdIwQYMBaAFHORTRQQoc0/ha0eGwpQ/z+L1gwQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjZGOC9BNDI0Mzk3MEJF NEExMUVDQjI3OTU1MkFDNEY5QUUwMi9jNUZORkJDaHpULUZyUjRiQ2xEX1A0dldE QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1Rk5GQkNoelQtRnJSNGJDbERfUDR2V0RCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjZGOC9BNDI0Mzk3MEJFNEExMUVDQjI3OTU1MkFDNEY5QUUwMi9jNUZORkJDaHpU LUZyUjRiQ2xEX1A0dldEQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpPvMg6JA0kslWyd39H51bXHZshLZOaUG0gXUw0k7jeBeHLGarZdBP QSPwdRL/EPwNR42c05VriGLLTca54sBJfR2ENhjOyk+m99ny9u4ksQGPuC3NijHr jKVe+YfTPkZH7RNeqHXs0kZB+Q/GC4CegC5V2FkI9fQQ/Q7KtnVwp6YKmQw1fKnA XKm3/SZ+MDDi9BypjbRhmKqZaCzWZ5BuQFtiuya8UvPPxsr8EjUPdf89WT9dnhI6 HUTA+a146cbCLieuRVeCuae4AzUYA10+tIM7Api9JHWzP1bIXmfa2BOINU3Zu3x6 e0r6I857Xdhe1y741eBJij+pymHTGtVx -----END CERTIFICATE-----Generated at Tue Nov 4 01:03:51 2025 by rpki-client