$ rpki-client -vvf rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft File: 5r9G5TDfkimPrAMq-8mECcRDBDk.mft (raw, json) Hash identifier: Exa1b2jH4D/R9ItyNb7jJOABLsJ2K2egNDvD4ZaixKA= Subject key identifier: 98:46:D3:41:72:24:A8:1E:2A:7C:15:21:1C:5C:21:EE:6B:BC:F6:C6 Authority key identifier: E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 Certificate issuer: /CN=A91527F9/serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Certificate serial: 34FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft Manifest number: 34E7 Signing time: Sun 02 Nov 2025 14:55:48 +0000 Manifest this update: Sun 02 Nov 2025 14:55:47 +0000 Manifest next update: Sun 09 Nov 2025 14:55:47 +0000 Files and hashes: 1: 5r9G5TDfkimPrAMq-8mECcRDBDk.crl (hash: y9nQcfzuSzkexzu4LwKFd7qn4SyLtAoUH7F08LM0HYw=) 2: 909C5126F0A711EEA6150174C4F9AE02.roa (hash: HW9R1Ep56SryGIz4W6P5CqXSgSxlXz4KavtGaF387a4=) 3: AD5BA998D85D11EB8E31070BC4F9AE02.roa (hash: AqcTvl3JE8iQmp2mHhzhnxH+2xnTnNkhAQ8gJbtZg+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13563 (0x34fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91527F9, serialNumber=E6BF46E530DF92298FAC032AFBC98409C4430439 Validity Not Before: Nov 2 14:55:47 2025 GMT Not After : Nov 9 14:55:47 2025 GMT Subject: CN=690770f4-86c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:39:ca:6e:a7:1d:09:fc:6c:05:96:f2:6e:e5: c2:0a:3a:4a:cf:ff:01:ea:84:1b:eb:76:0e:51:27: 66:2d:b9:d6:f8:bb:eb:a7:e8:d3:5a:f4:ee:ba:6d: c6:9d:1d:76:10:da:16:85:03:67:f6:d9:b9:74:5a: 89:8e:9b:77:0e:59:5b:66:d8:ef:06:ee:e6:79:24: 03:30:b5:71:0d:ed:cc:2e:6e:26:e5:b7:09:d3:3f: 82:ca:e3:3b:e8:6a:ce:b9:96:80:98:fb:c4:14:aa: 91:30:a4:58:d9:c4:ce:b0:63:c6:ea:28:f9:71:eb: 08:a5:d4:bd:0e:59:c1:83:8d:bd:ca:47:9c:26:eb: b4:d3:b7:00:27:87:28:c8:4a:f1:9b:6b:9d:f7:13: dc:d4:f8:bc:b2:ed:4e:0c:48:88:56:0f:b7:a3:bd: 60:88:33:23:09:59:4a:eb:f5:f8:b7:5a:5b:e1:9d: 04:8b:2e:9b:a8:52:5e:4b:f0:7c:c1:67:88:ed:94: 5b:d5:62:59:fa:59:1a:52:06:81:f3:d5:72:9f:3f: 02:76:39:fd:e9:fc:cf:61:aa:29:71:fe:13:e6:d3: c9:00:2c:e9:ab:63:7e:a2:a8:95:29:f9:2a:7d:25: 4a:2d:40:72:53:c5:33:4d:02:8b:cd:02:03:64:6a: 5e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:46:D3:41:72:24:A8:1E:2A:7C:15:21:1C:5C:21:EE:6B:BC:F6:C6 X509v3 Authority Key Identifier: keyid:E6:BF:46:E5:30:DF:92:29:8F:AC:03:2A:FB:C9:84:09:C4:43:04:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5r9G5TDfkimPrAMq-8mECcRDBDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91527F9/6ED2EBAA1D9A11E2AE93AD8708B02CD2/5r9G5TDfkimPrAMq-8mECcRDBDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:8f:ad:3b:3c:b6:2d:ca:39:60:c6:31:2e:73:d6:72:08:38: 4b:36:2c:cd:f1:15:2c:94:57:e1:02:df:21:f6:20:e3:af:83: f5:c2:66:73:dc:4a:1d:34:32:32:1d:6a:6f:d2:56:23:ea:b9: 2e:fa:f4:81:10:b3:78:eb:51:f5:fe:18:61:f7:7b:dd:d5:9e: 77:27:75:18:cf:99:be:6f:8d:af:d5:25:5d:c0:56:f3:9c:35: 2c:b3:65:99:8e:0a:49:9a:2e:90:7b:79:d3:2a:25:36:8e:ba: 7b:e2:e2:2e:c6:0c:54:64:21:d0:e8:b4:7a:3c:74:5b:ac:97: e6:25:b0:04:90:cc:05:51:e8:b6:fd:c8:24:cc:7e:3d:f4:44: a9:7f:62:4d:ed:45:c0:01:11:42:70:ef:de:8e:9d:f1:5e:d2: 3e:1b:af:a6:75:50:bd:bb:be:05:3a:a3:7b:11:55:d0:e5:d6: 9f:84:80:14:00:a6:82:fe:4d:20:f4:01:b4:ce:a7:53:d4:65: 55:a9:61:22:8c:8e:8a:04:e7:5b:d3:80:8d:41:8d:7c:dc:9e: fb:6e:d6:06:37:63:9b:35:7c:fa:7c:0c:da:3a:10:f6:4c:ed: e5:67:76:30:f3:88:80:c4:60:44:66:fe:31:2c:96:20:13:d6: 98:82:7a:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI3RjkxMTAvBgNVBAUTKEU2QkY0NkU1MzBERjkyMjk4RkFDMDMyQUZCQzk4NDA5 QzQ0MzA0MzkwHhcNMjUxMTAyMTQ1NTQ3WhcNMjUxMTA5MTQ1NTQ3WjAYMRYwFAYD VQQDEw02OTA3NzBmNC04NmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjnKbqcdCfxsBZbybuXCCjpKz/8B6oQb63YOUSdmLbnW+Lvrp+jTWvTuum3G nR12ENoWhQNn9tm5dFqJjpt3DllbZtjvBu7meSQDMLVxDe3MLm4m5bcJ0z+CyuM7 6GrOuZaAmPvEFKqRMKRY2cTOsGPG6ij5cesIpdS9DlnBg429ykecJuu007cAJ4co yErxm2ud9xPc1Pi8su1ODEiIVg+3o71giDMjCVlK6/X4t1pb4Z0Eiy6bqFJeS/B8 wWeI7ZRb1WJZ+lkaUgaB89Vynz8Cdjn96fzPYaopcf4T5tPJACzpq2N+oqiVKfkq fSVKLUByU8UzTQKLzQIDZGpekwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhG00Fy JKgeKnwVIRxcIe5rvPbGMB8GA1UdIwQYMBaAFOa/RuUw35Ipj6wDKvvJhAnEQwQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjdGOS82RUQyRUJBQTFE OUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtpbVByQU1xLThtRUNjUkRC RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyOUc1VERma2ltUHJBTXEtOG1FQ2NSREJEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjdGOS82RUQyRUJBQTFEOUExMUUyQUU5M0FEODcwOEIwMkNEMi81cjlHNVREZmtp bVByQU1xLThtRUNjUkRCRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByj607PLYtyjlgxjEuc9ZyCDhLNizN8RUslFfhAt8h9iDjr4P1wmZz 3EodNDIyHWpv0lYj6rku+vSBELN461H1/hhh93vd1Z53J3UYz5m+b42v1SVdwFbz nDUss2WZjgpJmi6Qe3nTKiU2jrp74uIuxgxUZCHQ6LR6PHRbrJfmJbAEkMwFUei2 /cgkzH499ESpf2JN7UXAARFCcO/ejp3xXtI+G6+mdVC9u74FOqN7EVXQ5dafhIAU AKaC/k0g9AG0zqdT1GVVqWEijI6KBOdb04CNQY183J77btYGN2ObNXz6fAzaOhD2 TO3lZ3Yw84iAxGBEZv4xLJYgE9aYgnqE -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:50 2025 by rpki-client