$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft File: 5pLFtgs-8cIERDn8OQrVbcPLzWM.mft (raw, json) Hash identifier: VmeyNduaHTcBj+EODsrU1B9cs6DhUbNmFYWsbSZnTxA= Subject key identifier: 68:71:CC:EE:F8:3E:00:CB:C3:48:C1:63:AD:8B:0B:3D:A3:D8:F2:3E Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Certificate serial: 08E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft Manifest number: 0860 Signing time: Fri 24 Oct 2025 22:12:02 +0000 Manifest this update: Fri 24 Oct 2025 22:12:01 +0000 Manifest next update: Fri 31 Oct 2025 22:12:01 +0000 Files and hashes: 1: 5pLFtgs-8cIERDn8OQrVbcPLzWM.crl (hash: LueDMir9YnF0VGuYeU2Sqrfch0/TOI0TrAdSHHmZ90Q=) 2: 311C494286CC11F09348D16BC4F9AE02.roa (hash: flTVo7K226bog1Y8dVWo1/2xVgRqz4F3RPcgIxDvRO8=) 3: C34D8010A7D311F0A3E6E75EC4F9AE02.roa (hash: koBtWqn1bZoyVDkjEcHYJmp4hqdltBCltRI0qaZwUIs=) 4: 244B9D1874CB11EEB3C0267DC4F9AE02.roa (hash: 58z0sDsYRtdYBAtwDhNvP7kyEQJboZJS4GpwJLh2ing=) 5: 9765FB988A5D11EE9E6AA223C4F9AE02.roa (hash: gdVUdTDJS2HzCLE0SH5abxwvNMrpuz9i+05KM/O5dKM=) 6: F3643AD6089C11F09BB44535C4F9AE02.roa (hash: d4eF712UMcuWBXICMHSbDq1rVUXEx57Lk10/0qmDX9M=) 7: 79986EE8FE3D11EFB763F62EC4F9AE02.roa (hash: oPWHOSVVHxMTlEOgiAm0tO2SzI3zA9mMs78DXNw+B34=) 8: 215A8FDE4B9E11EEBF766C7FC4F9AE02.roa (hash: ewzgLIZLx9Y5nPTQhL+AITVEb8oh3TwTplFpZhdDOMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 22:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2273 (0x8e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Validity Not Before: Oct 24 22:12:01 2025 GMT Not After : Oct 31 22:12:01 2025 GMT Subject: CN=68fbf9b1-1004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6a:1a:95:f6:f0:48:9f:8c:45:f6:58:34:cb: 37:35:74:61:ef:d6:14:19:b0:24:70:27:0e:60:65: 9f:97:36:7f:5b:60:bf:70:92:49:bb:7a:b2:fe:42: aa:1c:18:42:69:27:f8:d2:ec:77:ca:ba:f4:74:87: 56:f9:fb:80:61:f2:cd:84:16:00:ef:60:df:ab:5b: 48:73:dd:73:ac:ff:8a:87:fb:e6:52:e7:ca:26:82: d9:2d:58:9c:b4:0b:4b:4c:6f:6f:b2:87:21:8b:e3: be:6a:9b:14:d5:9c:70:88:5c:f6:9a:05:fd:eb:05: 63:81:f4:e9:9f:a7:c3:31:e4:12:d1:f7:8c:ab:46: 19:78:5a:d5:2e:e8:0f:07:5e:cc:fa:ae:6e:a0:2a: 31:46:fd:6f:91:00:b1:bd:e9:f3:ae:55:2f:1a:b6: f8:45:7e:52:df:36:ae:bf:bd:c7:49:2b:1b:54:f3: c4:44:a5:91:64:9e:9d:0b:31:0e:07:90:d4:fa:67: f1:e1:d3:1f:ff:32:c1:7d:51:11:e8:10:3e:df:1a: ca:b4:2a:48:fc:3d:0d:39:7d:3c:70:ef:de:8c:3b: aa:c3:39:0a:2e:70:06:b2:b0:bc:7b:62:c9:c7:ab: e6:44:50:9f:28:fe:81:72:5c:37:03:ab:e9:51:3f: e9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:71:CC:EE:F8:3E:00:CB:C3:48:C1:63:AD:8B:0B:3D:A3:D8:F2:3E X509v3 Authority Key Identifier: keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ff:99:67:7d:6f:64:23:cc:87:e7:9d:fe:54:0b:b4:de:f2: e2:15:80:ca:1f:bd:4e:7b:87:3c:fa:63:19:c9:c9:44:ee:fb: 77:c6:1e:f9:2c:6b:f4:fa:4b:09:05:7b:67:46:dd:14:d5:15: ec:dd:5b:ca:3e:bc:6b:8e:6b:4d:a2:ba:7a:c2:7d:dc:f2:16: 6f:27:7b:0c:1c:70:45:5f:56:54:1e:55:1c:5d:09:59:57:3a: 4e:ca:88:67:4e:a8:ee:b3:63:67:59:37:9a:7d:dc:66:6c:a6: 4b:14:71:62:93:8d:ae:1f:e2:8d:2d:72:2a:e3:46:9a:42:8d: 94:4f:11:b7:23:ef:13:63:73:a9:1f:7c:13:26:0a:ef:70:cf: 3d:f6:10:44:af:cd:c4:f6:5e:ef:0b:43:d8:28:04:52:eb:75: ac:9b:0b:4d:d5:0d:85:50:13:f3:11:e5:10:95:f1:fd:58:84: fe:06:b2:c2:36:29:eb:a0:d0:27:ae:2b:c0:a8:26:46:f7:32: 47:34:d6:9f:d7:9b:db:5b:21:29:92:af:09:e5:93:d4:fb:f0: 1e:d7:3c:84:98:fb:c7:70:cc:d9:42:ca:08:1e:0f:50:ef:30: 1c:d0:61:c7:6f:5b:9f:a4:b3:d1:d5:45:a1:2e:15:01:39:2d: 03:bd:a1:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE QzNDQkNENjMwHhcNMjUxMDI0MjIxMjAxWhcNMjUxMDMxMjIxMjAxWjAYMRYwFAYD VQQDEw02OGZiZjliMS0xMDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWoalfbwSJ+MRfZYNMs3NXRh79YUGbAkcCcOYGWflzZ/W2C/cJJJu3qy/kKq HBhCaSf40ux3yrr0dIdW+fuAYfLNhBYA72Dfq1tIc91zrP+Kh/vmUufKJoLZLVic tAtLTG9vsochi+O+apsU1ZxwiFz2mgX96wVjgfTpn6fDMeQS0feMq0YZeFrVLugP B17M+q5uoCoxRv1vkQCxvenzrlUvGrb4RX5S3zauv73HSSsbVPPERKWRZJ6dCzEO B5DU+mfx4dMf/zLBfVER6BA+3xrKtCpI/D0NOX08cO/ejDuqwzkKLnAGsrC8e2LJ x6vmRFCfKP6Bclw3A6vpUT/pVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhxzO74 PgDLw0jBY62LCz2j2PI+MB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3 M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDFFQS85QzkzMkI0ODE3M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThj SUVSRG44T1FyVmJjUEx6V00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN/5lnfW9kI8yH553+VAu03vLiFYDKH71Oe4c8+mMZyclE7vt3xh75 LGv0+ksJBXtnRt0U1RXs3VvKPrxrjmtNorp6wn3c8hZvJ3sMHHBFX1ZUHlUcXQlZ VzpOyohnTqjus2NnWTeafdxmbKZLFHFik42uH+KNLXIq40aaQo2UTxG3I+8TY3Op H3wTJgrvcM899hBEr83E9l7vC0PYKARS63WsmwtN1Q2FUBPzEeUQlfH9WIT+BrLC NinroNAnrivAqCZG9zJHNNaf15vbWyEpkq8J5ZPU+/Ae1zyEmPvHcMzZQsoIHg9Q 7zAc0GHHb1ufpLPR1UWhLhUBOS0DvaHn -----END CERTIFICATE-----Generated at Sat Oct 25 17:42:03 2025 by rpki-client