$ rpki-client -vvf rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft File: D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft (raw, json) Hash identifier: 2hNFGuwtFxAthtTt57XpFk/LfU1/2AHhjagGj3v3hlw= Subject key identifier: 19:EB:64:3A:5A:85:7A:F3:20:CB:42:7F:75:D5:7F:E2:80:D2:E2:CB Authority key identifier: 0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93 Certificate issuer: /CN=A91456CF/serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft Manifest number: 5A Signing time: Wed 05 Nov 2025 07:20:46 +0000 Manifest this update: Wed 05 Nov 2025 07:20:46 +0000 Manifest next update: Wed 12 Nov 2025 07:20:46 +0000 Files and hashes: 1: D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl (hash: MKcHtbYYZvGQEoUqlkjPgZA34PXoow3UyHnLnjJtfjM=) 2: 6EBD9348315C11F0B4470733C4F9AE02.roa (hash: C2osSUSGXaoVQWIdcbrfsnLCIsFQre/GUrWQUTRuHn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456CF, serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093 Validity Not Before: Nov 5 07:20:46 2025 GMT Not After : Nov 12 07:20:46 2025 GMT Subject: CN=690aface-0e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:eb:bf:5f:40:77:78:c3:4f:14:51:42:17:19: cc:30:f5:9d:f9:d9:42:ab:21:44:e9:4e:10:0b:f3: c8:65:e0:95:fa:08:fa:e9:39:05:f1:db:bc:55:3f: 23:5f:28:4e:c0:f2:1a:8d:db:de:67:e3:7a:02:37: 4f:7f:6c:45:3b:d4:d6:76:ab:8e:74:69:6f:bd:e5: b4:44:9a:38:e9:9a:83:d4:53:a6:56:67:8f:6a:b6: c2:a6:3b:9e:28:ae:dc:6f:4f:4c:b8:6b:a8:61:85: 7a:7c:28:24:c8:3c:ba:ab:34:b2:1b:15:3f:1b:5a: c7:4b:10:ef:b9:62:f9:6d:d1:ed:9e:d3:03:77:8f: 6b:60:17:fa:b3:24:13:45:bf:fe:39:88:ba:2c:4e: 60:16:65:18:5e:2f:53:c5:56:60:75:cb:19:48:75: 10:76:20:e1:70:d6:22:ea:ad:58:34:4c:d5:ad:f8: 8f:af:c3:6e:51:b3:bd:14:0c:1b:8d:2b:1b:ea:d0: 31:01:a8:93:5b:e9:3d:fe:af:9f:a9:88:3d:bf:84: e7:25:da:5a:c5:8a:b7:25:60:6d:cf:8a:1a:f1:f0: 56:71:b0:b9:70:3c:a5:5d:46:1f:f7:a5:80:c8:9c: 07:02:44:52:db:94:c5:dd:ab:86:e2:96:82:a3:81: 33:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EB:64:3A:5A:85:7A:F3:20:CB:42:7F:75:D5:7F:E2:80:D2:E2:CB X509v3 Authority Key Identifier: keyid:0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:90:59:30:7b:fe:9c:e8:c4:08:a5:a3:ea:9f:5d:66:73:bf: b6:51:e0:3c:60:d8:18:d5:17:46:9f:83:5b:54:33:66:7d:ec: 06:ec:4c:47:f7:41:1c:fb:ec:9c:a8:05:da:ee:7e:e7:55:3b: e0:46:1a:31:ab:30:52:c1:7b:05:c6:20:07:f6:bb:65:15:60: ae:06:53:83:7a:6c:51:4b:71:b5:d6:a9:8f:db:13:be:68:70: 3c:42:15:cf:38:5f:c1:18:33:36:38:cf:e4:ae:2e:22:99:19: 30:93:82:32:a9:21:c7:3f:01:67:a9:7b:dd:e7:3b:31:1f:c1: 11:cf:6a:48:ed:01:87:45:de:30:e1:cb:83:90:09:e7:3b:28: 7c:96:42:a3:5b:eb:02:14:07:af:78:db:0e:03:41:43:fc:e3: 25:cb:2b:3a:6f:65:8f:6b:22:11:a8:d4:86:64:4d:43:37:26: de:57:38:68:ad:dd:44:98:cd:5e:97:00:a5:e6:c7:f4:91:7f: ba:75:12:b6:43:e4:a0:0d:e0:16:8c:01:6e:a3:11:ab:b5:87: 41:da:bf:c5:18:5d:01:63:6c:26:0a:d0:4b:87:9a:e9:47:b8: 52:df:e7:32:27:9c:42:72:30:a2:84:b5:7c:fc:32:38:b1:dd: 1a:ab:22:68 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NTZDRjExMC8GA1UEBRMoMEZGRjcxNzk4MkQ5RTFEOTZGNEQ3RkM1MzExRUQzMjMy MzZCQTA5MzAeFw0yNTExMDUwNzIwNDZaFw0yNTExMTIwNzIwNDZaMBgxFjAUBgNV BAMTDTY5MGFmYWNlLTBlNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCo679fQHd4w08UUUIXGcww9Z352UKrIUTpThAL88hl4JX6CPrpOQXx27xVPyNf KE7A8hqN295n43oCN09/bEU71NZ2q450aW+95bREmjjpmoPUU6ZWZ49qtsKmO54o rtxvT0y4a6hhhXp8KCTIPLqrNLIbFT8bWsdLEO+5Yvlt0e2e0wN3j2tgF/qzJBNF v/45iLosTmAWZRheL1PFVmB1yxlIdRB2IOFw1iLqrVg0TNWt+I+vw25Rs70UDBuN Kxvq0DEBqJNb6T3+r5+piD2/hOcl2lrFirclYG3Pihrx8FZxsLlwPKVdRh/3pYDI nAcCRFLblMXdq4biloKjgTNVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGetkOlqF evMgy0J/ddV/4oDS4sswHwYDVR0jBBgwFoAUD/9xeYLZ4dlvTX/FMR7TIyNroJMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1NkNGLzAxMzkzNDk2MzEy RDExRjA5NkNFRUE1RUM0RjlBRTAyL0RfOXhlWUxaNGRsdlRYX0ZNUjdUSXlOcm9K TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRF85eGVZTFo0ZGx2VFhfRk1SN1RJeU5yb0pNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 NkNGLzAxMzkzNDk2MzEyRDExRjA5NkNFRUE1RUM0RjlBRTAyL0RfOXhlWUxaNGRs dlRYX0ZNUjdUSXlOcm9KTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGiQWTB7/pzoxAilo+qfXWZzv7ZR4Dxg2BjVF0afg1tUM2Z97AbsTEf3 QRz77JyoBdrufudVO+BGGjGrMFLBewXGIAf2u2UVYK4GU4N6bFFLcbXWqY/bE75o cDxCFc84X8EYMzY4z+SuLiKZGTCTgjKpIcc/AWepe93nOzEfwRHPakjtAYdF3jDh y4OQCec7KHyWQqNb6wIUB6942w4DQUP84yXLKzpvZY9rIhGo1IZkTUM3Jt5XOGit 3USYzV6XAKXmx/SRf7p1ErZD5KAN4BaMAW6jEau1h0Hav8UYXQFjbCYK0EuHmulH uFLf5zInnEJyMKKEtXz8Mjix3RqrImg= -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:23 2025 by rpki-client