$ rpki-client -vvf rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft File: V5NDbSKpagYTaFEgO7clmE1wsBc.mft (raw, json) Hash identifier: 5vIOvKUZfg8QHOq7vE8ceHceMxqfYhV6VtCjnRVyV94= Subject key identifier: 02:E3:30:DC:8A:F4:F2:D4:2E:84:C7:EF:93:A4:3B:6D:21:C1:25:53 Authority key identifier: 57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17 Certificate issuer: /CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft Manifest number: 01AC Signing time: Wed 05 Nov 2025 03:19:03 +0000 Manifest this update: Wed 05 Nov 2025 03:19:03 +0000 Manifest next update: Wed 12 Nov 2025 03:19:03 +0000 Files and hashes: 1: V5NDbSKpagYTaFEgO7clmE1wsBc.crl (hash: xtcpEAsB/g3uggzeHtpNiTiOUtTsBcR2xkRUxG11psk=) 2: 29D600062C3311EEBFF69B6CC4F9AE02.roa (hash: hskv6e7Ag+5HAqH/N4O5ItTvOGPOLGR+/yJDzJO0d+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159DCD, serialNumber=5793436D22A96A06136851203BB725984D70B017 Validity Not Before: Nov 5 03:19:03 2025 GMT Not After : Nov 12 03:19:03 2025 GMT Subject: CN=690ac227-e1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:19:66:a5:2c:3a:4a:0f:20:24:8d:aa:fd:15: 79:bc:ad:52:eb:6a:05:30:fc:d4:1f:47:f4:d4:2c: 7f:b7:00:22:a9:82:65:b0:a5:c8:84:43:e1:eb:3a: 6b:22:9f:3c:8c:ee:4c:e9:2d:fb:3d:e5:bf:05:ca: ef:ad:61:b2:78:b7:1f:c8:b8:9e:34:1a:17:1c:96: c8:0f:00:e8:47:73:65:45:3f:2c:ea:9c:57:55:8b: 47:41:96:2d:b0:f6:eb:9c:0a:c6:fd:fe:d0:0c:f4: e4:da:c7:0b:74:83:8a:cc:d4:1a:80:6b:0f:e5:2d: b1:e0:8f:e6:03:5e:35:89:d7:25:8e:80:4a:5c:b4: 95:45:f3:bd:44:25:dc:bc:c4:0d:bb:cf:45:3f:1e: bb:fa:47:66:ba:1d:be:fd:2f:b2:41:fe:c4:b9:8d: 3a:17:04:74:19:0c:cb:12:d9:bd:58:4b:b3:89:64: a9:d3:40:c2:b2:c1:44:2b:09:68:f6:f4:37:99:1e: e6:a1:b1:75:66:86:cb:38:b2:7e:07:6c:1b:50:34: 7b:df:d4:ab:5e:83:d9:d7:b9:0a:48:6e:27:9a:45: 34:0b:02:a1:d9:97:97:95:60:33:ab:5e:bd:a4:59: 8c:bf:96:fc:4b:86:c2:9c:ed:c1:25:e2:8a:a6:43: 7c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E3:30:DC:8A:F4:F2:D4:2E:84:C7:EF:93:A4:3B:6D:21:C1:25:53 X509v3 Authority Key Identifier: keyid:57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b7:f9:49:61:f2:e9:63:09:9f:45:70:74:c5:ec:2b:4e:92: 24:2e:1c:c6:8b:06:ef:0d:7e:37:67:fd:97:ef:fa:98:09:26: ce:5e:df:5a:19:47:23:9d:40:f5:3d:c1:4a:66:b4:4d:62:01: 1e:20:dd:0a:c7:1b:1d:62:50:1d:ec:79:5e:42:0e:0b:e7:47: ec:48:0d:47:40:8b:f9:cf:37:59:ea:82:a3:e1:80:71:91:bf: 26:33:88:eb:0e:48:29:4a:00:7b:21:ae:7c:a0:52:1d:c2:a0: 72:97:5e:9b:cd:9d:1c:90:30:1f:86:40:74:29:d1:21:1e:4b: 65:5a:86:eb:5b:07:a1:7f:b4:a2:cc:11:3f:7c:5d:e6:35:81: 88:27:80:b5:e4:fe:ec:2b:3d:a1:7f:b2:ff:cf:db:9c:56:aa: 87:41:52:f1:6c:4c:16:d4:fa:2f:81:41:25:2b:ac:70:2b:7d: 3c:c8:a8:a3:dd:aa:5d:12:25:47:55:fc:87:0d:83:04:e6:a9: 8a:36:e8:26:ec:10:52:13:a2:09:62:27:9f:17:2b:36:93:9d: 68:46:8b:67:01:70:97:d7:fe:ad:3b:36:ed:8c:a8:36:95:ab: 2b:aa:85:8c:16:e5:21:94:ec:0f:c8:4f:3f:6f:d1:55:5c:7d: f3:59:a0:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlEQ0QxMTAvBgNVBAUTKDU3OTM0MzZEMjJBOTZBMDYxMzY4NTEyMDNCQjcyNTk4 NEQ3MEIwMTcwHhcNMjUxMTA1MDMxOTAzWhcNMjUxMTEyMDMxOTAzWjAYMRYwFAYD VQQDEw02OTBhYzIyNy1lMWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3BlmpSw6Sg8gJI2q/RV5vK1S62oFMPzUH0f01Cx/twAiqYJlsKXIhEPh6zpr Ip88jO5M6S37PeW/BcrvrWGyeLcfyLieNBoXHJbIDwDoR3NlRT8s6pxXVYtHQZYt sPbrnArG/f7QDPTk2scLdIOKzNQagGsP5S2x4I/mA141idcljoBKXLSVRfO9RCXc vMQNu89FPx67+kdmuh2+/S+yQf7EuY06FwR0GQzLEtm9WEuziWSp00DCssFEKwlo 9vQ3mR7mobF1ZobLOLJ+B2wbUDR739SrXoPZ17kKSG4nmkU0CwKh2ZeXlWAzq169 pFmMv5b8S4bCnO3BJeKKpkN8jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFALjMNyK 9PLULoTH75OkO20hwSVTMB8GA1UdIwQYMBaAFFeTQ20iqWoGE2hRIDu3JZhNcLAX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OURDRC9BMDBENzAwNjJD MjQxMUVFQUI5NzhGMEZDNEY5QUUwMi9WNU5EYlNLcGFnWVRhRkVnTzdjbG1FMXdz QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y1TkRiU0twYWdZVGFGRWdPN2NsbUUxd3NCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OURDRC9BMDBENzAwNjJDMjQxMUVFQUI5NzhGMEZDNEY5QUUwMi9WNU5EYlNLcGFn WVRhRkVnTzdjbG1FMXdzQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANt/lJYfLpYwmfRXB0xewrTpIkLhzGiwbvDX43Z/2X7/qYCSbOXt9a GUcjnUD1PcFKZrRNYgEeIN0KxxsdYlAd7HleQg4L50fsSA1HQIv5zzdZ6oKj4YBx kb8mM4jrDkgpSgB7Ia58oFIdwqByl16bzZ0ckDAfhkB0KdEhHktlWobrWwehf7Si zBE/fF3mNYGIJ4C15P7sKz2hf7L/z9ucVqqHQVLxbEwW1PovgUElK6xwK308yKij 3apdEiVHVfyHDYME5qmKNugm7BBSE6IJYiefFys2k51oRotnAXCX1/6tOzbtjKg2 lasrqoWMFuUhlOwPyE8/b9FVXH3zWaC1 -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:25 2025 by rpki-client