$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft File: 5cOmhsg97m0zv-xUHqy0pKCJknk.mft (raw, json) Hash identifier: mrxQqr/Q4JUAdRT1VYnTh0k+pDE6yCIJVwbOZZZfTzM= Subject key identifier: 33:96:17:95:62:67:E5:42:A0:28:26:3F:83:A5:47:23:4E:A0:DE:F2 Authority key identifier: E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79 Certificate issuer: /CN=A9153AA6/serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279 Certificate serial: 1720 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft Manifest number: 1716 Signing time: Sun 02 Nov 2025 16:37:55 +0000 Manifest this update: Sun 02 Nov 2025 16:37:55 +0000 Manifest next update: Sun 09 Nov 2025 16:37:55 +0000 Files and hashes: 1: 5cOmhsg97m0zv-xUHqy0pKCJknk.crl (hash: PGNVNJfwri/2U45u0LrSH3CW4Vtn8fDoNvgumcBCTMg=) 2: 99C6F94CF52511E7948D5A0BC4F9AE02.roa (hash: aM0yH97r/h3xu615cUuk5zwsCFMLHVQ8whXpoG1e1kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5920 (0x1720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AA6, serialNumber=E5C3A686C83DEE6D33BFEC541EACB4A4A0899279 Validity Not Before: Nov 2 16:37:55 2025 GMT Not After : Nov 9 16:37:55 2025 GMT Subject: CN=690788e3-0c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ba:e9:ad:7f:d8:e6:43:95:5f:be:23:d7:98: e4:f1:22:e4:d1:8c:c4:0f:6f:e9:28:b5:1d:31:45: 37:d1:c1:ab:63:a6:02:ea:11:ac:88:ee:0f:5f:c5: b0:53:3f:39:4f:93:8d:dd:3c:ab:bd:3f:2d:5f:99: 45:37:d0:93:1a:24:40:92:6e:12:2a:6c:17:05:9b: 6d:0e:72:2e:20:db:d3:76:d7:0a:34:31:6b:56:bd: 2d:0b:66:3c:b8:de:e1:92:d4:d9:f1:dc:0f:2e:c3: 9c:85:df:f7:b6:cc:bb:f7:a5:40:53:21:f9:d6:d5: 50:49:a6:aa:6e:a2:33:dc:6a:ec:20:82:34:d8:68: 60:9e:73:a0:21:cb:70:6f:d9:cb:05:3c:3d:d6:e7: dd:80:94:1f:10:73:86:eb:81:ed:35:ae:80:9f:e7: 58:f0:13:e7:32:4e:8e:3a:e8:80:2b:7b:e7:52:40: 19:68:46:55:7f:15:d2:0b:1f:7b:a6:66:89:77:d9: 6f:ae:4d:4e:61:b7:b4:15:7f:c9:0e:fb:11:53:e8: 7d:3a:ed:54:79:4b:40:82:33:5a:01:54:a8:71:70: 45:e8:f2:97:de:53:3d:38:37:7d:d2:c2:f1:b8:eb: 9a:d7:91:f8:10:6d:12:d1:6a:45:f3:c6:a5:f2:af: e8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:96:17:95:62:67:E5:42:A0:28:26:3F:83:A5:47:23:4E:A0:DE:F2 X509v3 Authority Key Identifier: keyid:E5:C3:A6:86:C8:3D:EE:6D:33:BF:EC:54:1E:AC:B4:A4:A0:89:92:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5cOmhsg97m0zv-xUHqy0pKCJknk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AA6/9C3D87E6F52411E79644B009C4F9AE02/5cOmhsg97m0zv-xUHqy0pKCJknk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:47:a0:d1:43:37:ea:33:42:67:75:fa:fd:74:ef:f1:cf:86: 03:fe:9d:f9:77:2c:98:c2:95:ef:6d:13:a9:fb:3b:4c:5b:d3: 10:26:27:70:58:a8:b7:fd:2c:2f:22:78:de:c8:c7:95:d9:97: fa:a0:30:7c:d4:fb:9c:4f:18:b9:30:85:fe:8f:7e:b2:1e:a8: 33:1e:65:bb:a0:2d:6a:b2:eb:02:d7:2c:13:36:15:c8:72:09: 22:31:30:23:48:03:01:f6:c6:68:42:69:77:91:28:cb:5c:f5: f8:49:7a:80:45:bf:d5:59:2a:f0:f0:62:77:b4:03:9c:0b:67: 70:62:03:12:f6:0a:9e:2a:f3:7c:96:5e:a2:8c:b6:2e:98:dc: 78:8e:18:9f:3f:e2:97:6b:ea:97:17:cc:49:68:39:29:49:3e: 87:88:f8:4e:bb:75:01:e2:e4:bb:3f:a2:8c:b9:87:b3:48:31: 0a:0f:e4:24:58:45:ff:b3:b7:3c:8e:6d:60:d3:13:b5:7b:45: 51:64:3e:b6:9a:7e:ff:c1:73:27:b9:72:c0:b9:c9:2b:e5:55: f4:3b:16:05:d0:f3:a9:c2:fc:e5:87:9c:12:5c:51:95:6d:c5: bc:7d:87:71:39:58:8e:40:4c:ee:76:52:d5:0a:bc:73:d4:43: 9f:f3:21:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBQTYxMTAvBgNVBAUTKEU1QzNBNjg2QzgzREVFNkQzM0JGRUM1NDFFQUNCNEE0 QTA4OTkyNzkwHhcNMjUxMTAyMTYzNzU1WhcNMjUxMTA5MTYzNzU1WjAYMRYwFAYD VQQDEw02OTA3ODhlMy0wYzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7rprX/Y5kOVX74j15jk8SLk0YzED2/pKLUdMUU30cGrY6YC6hGsiO4PX8Ww Uz85T5ON3TyrvT8tX5lFN9CTGiRAkm4SKmwXBZttDnIuINvTdtcKNDFrVr0tC2Y8 uN7hktTZ8dwPLsOchd/3tsy796VAUyH51tVQSaaqbqIz3GrsIII02GhgnnOgIctw b9nLBTw91ufdgJQfEHOG64HtNa6An+dY8BPnMk6OOuiAK3vnUkAZaEZVfxXSCx97 pmaJd9lvrk1OYbe0FX/JDvsRU+h9Ou1UeUtAgjNaAVSocXBF6PKX3lM9ODd90sLx uOua15H4EG0S0WpF88al8q/o0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOWF5Vi Z+VCoCgmP4OlRyNOoN7yMB8GA1UdIwQYMBaAFOXDpobIPe5tM7/sVB6stKSgiZJ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FBNi85QzNEODdFNkY1 MjQxMUU3OTY0NEIwMDlDNEY5QUUwMi81Y09taHNnOTdtMHp2LXhVSHF5MHBLQ0pr bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVjT21oc2c5N20wenYteFVIcXkwcEtDSmtuay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0FBNi85QzNEODdFNkY1MjQxMUU3OTY0NEIwMDlDNEY5QUUwMi81Y09taHNnOTdt MHp2LXhVSHF5MHBLQ0prbmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuR6DRQzfqM0Jndfr9dO/xz4YD/p35dyyYwpXvbROp+ztMW9MQJidw WKi3/SwvInjeyMeV2Zf6oDB81PucTxi5MIX+j36yHqgzHmW7oC1qsusC1ywTNhXI cgkiMTAjSAMB9sZoQml3kSjLXPX4SXqARb/VWSrw8GJ3tAOcC2dwYgMS9gqeKvN8 ll6ijLYumNx4jhifP+KXa+qXF8xJaDkpST6HiPhOu3UB4uS7P6KMuYezSDEKD+Qk WEX/s7c8jm1g0xO1e0VRZD62mn7/wXMnuXLAuckr5VX0OxYF0POpwvzlh5wSXFGV bcW8fYdxOViOQEzudlLVCrxz1EOf8yGy -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:39 2025 by rpki-client