$ rpki-client -vvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft File: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json) Hash identifier: 29Im3Ga5Ye09fQBbe8xv/SQZRXeb2P+IClLUWJqJUZw= Subject key identifier: 98:24:0F:77:C1:83:38:07:7E:BB:CD:08:D8:4F:20:72:92:19:64:DE Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14 Certificate issuer: /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft Manifest number: B7 Signing time: Mon 03 Nov 2025 06:00:23 +0000 Manifest this update: Mon 03 Nov 2025 06:00:23 +0000 Manifest next update: Mon 10 Nov 2025 06:00:23 +0000 Files and hashes: 1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: x3t1I206T7axhd23xnXmKJQJB76xf+I3poyjJm0oM48=) 2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: uGGRc65Ma65DEa8FpOK6rAJO4fZNCGwB4590o1lrFu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214 Validity Not Before: Nov 3 06:00:23 2025 GMT Not After : Nov 10 06:00:23 2025 GMT Subject: CN=690844f7-a7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ae:2d:25:65:9f:1b:a6:56:d5:50:f7:cb:5c: 38:38:6b:0f:63:00:d0:11:24:6c:07:ef:eb:2b:85: 6d:c0:9c:ad:3c:2b:69:13:02:a3:1e:7c:6e:c5:31: 05:21:3e:fe:b9:07:11:1c:1a:fc:12:3b:24:b0:d2: b3:79:5c:73:58:7c:b3:d8:e6:a4:2b:ce:79:1e:ae: a4:f4:c2:ca:f4:2b:c7:2e:37:01:b6:6f:92:24:94: c3:96:f6:18:fd:6c:4f:d0:5d:f2:b7:3b:56:a6:20: 9a:26:95:cf:01:c4:d3:a7:d1:1c:91:07:a4:db:6d: 92:b0:87:b0:b1:6c:19:55:65:1d:5e:9b:10:e9:33: f0:81:e2:db:48:92:09:db:8d:04:60:bc:dc:17:29: a9:67:de:b6:4a:3b:d7:3e:8d:a4:f5:e7:1b:9b:ac: 37:85:14:be:d3:03:4a:4e:40:f4:b3:c5:a3:25:cb: c3:42:58:63:12:1f:a2:0f:83:eb:6a:af:7d:ec:8f: d4:49:67:90:14:02:be:03:a0:f8:fa:c8:fd:ec:a4: b9:72:02:17:7a:b0:ea:5e:12:bd:17:a2:f2:33:56: b8:1c:01:a2:cd:47:3a:1a:ee:d9:a2:b9:dd:5d:a2: 52:f4:8c:ae:00:18:07:82:3b:9f:76:c3:80:4a:f6: d3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:24:0F:77:C1:83:38:07:7E:BB:CD:08:D8:4F:20:72:92:19:64:DE X509v3 Authority Key Identifier: keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:29:9c:94:4d:52:f4:3f:b8:f9:63:7b:d9:ae:b9:0f:8e:a6: ed:de:87:09:93:c7:8c:a6:31:7e:33:32:04:5f:e1:fe:66:55: a4:c8:1b:d7:34:fa:59:c2:85:d5:ce:8c:05:60:e5:50:3c:c1: c0:5a:e1:02:b4:50:e7:44:52:53:64:00:19:9c:8d:95:e6:b1: d1:43:db:8d:eb:34:4b:2b:08:35:a6:db:c7:a8:f2:a5:c2:08: a0:e4:3b:88:dc:d9:32:2e:76:25:c2:95:ce:f7:20:4a:3c:c2: f9:16:e3:a9:b1:27:46:fe:34:ae:f6:b4:b2:a2:54:41:e3:7c: 80:a1:ff:87:52:a7:26:bf:a0:e4:a8:75:78:35:37:55:17:28: 55:e3:75:aa:05:82:4e:16:4f:63:2a:36:1c:ad:81:3d:9f:76: f9:0c:d8:7c:1c:79:0e:d4:2a:63:54:a1:3f:65:ca:30:c5:9b: 3d:0c:23:89:60:2d:2a:05:99:be:8d:6c:34:23:19:a9:bf:a0: 0b:28:17:9d:21:3e:84:99:be:66:85:9a:55:bd:06:76:0d:ce: eb:bc:a1:ff:f6:cf:85:56:b5:3b:b8:34:c7:37:77:86:39:bb: bb:2e:70:ad:fe:37:0f:c4:2e:40:d3:de:2a:6f:78:86:4b:46: 82:d6:69:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3RkQxMTAvBgNVBAUTKDBBQ0U2RjZBQTZBM0ZBRTI3QTA4NUM3QTEyN0Y5QkM5 OTQyNDUyMTQwHhcNMjUxMTAzMDYwMDIzWhcNMjUxMTEwMDYwMDIzWjAYMRYwFAYD VQQDEw02OTA4NDRmNy1hN2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApa4tJWWfG6ZW1VD3y1w4OGsPYwDQESRsB+/rK4VtwJytPCtpEwKjHnxuxTEF IT7+uQcRHBr8EjsksNKzeVxzWHyz2OakK855Hq6k9MLK9CvHLjcBtm+SJJTDlvYY /WxP0F3ytztWpiCaJpXPAcTTp9EckQek222SsIewsWwZVWUdXpsQ6TPwgeLbSJIJ 240EYLzcFympZ962SjvXPo2k9ecbm6w3hRS+0wNKTkD0s8WjJcvDQlhjEh+iD4Pr aq997I/USWeQFAK+A6D4+sj97KS5cgIXerDqXhK9F6LyM1a4HAGizUc6Gu7Zornd XaJS9IyuABgHgjufdsOASvbT2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgkD3fB gzgHfrvNCNhPIHKSGWTeMB8GA1UdIwQYMBaAFArOb2qmo/rieghcehJ/m8mUJFIU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzdGRC9FMjQ1QjVCMkEx NUExMUVGQTFFQzJCNUZDNEY5QUUwMi9DczV2YXFhai11SjZDRng2RW4tYnlaUWtV aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NzNXZhcWFqLXVKNkNGeDZFbi1ieVpRa1VoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzdGRC9FMjQ1QjVCMkExNUExMUVGQTFFQzJCNUZDNEY5QUUwMi9DczV2YXFhai11 SjZDRng2RW4tYnlaUWtVaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2KZyUTVL0P7j5Y3vZrrkPjqbt3ocJk8eMpjF+MzIEX+H+ZlWkyBvX NPpZwoXVzowFYOVQPMHAWuECtFDnRFJTZAAZnI2V5rHRQ9uN6zRLKwg1ptvHqPKl wgig5DuI3NkyLnYlwpXO9yBKPML5FuOpsSdG/jSu9rSyolRB43yAof+HUqcmv6Dk qHV4NTdVFyhV43WqBYJOFk9jKjYcrYE9n3b5DNh8HHkO1CpjVKE/ZcowxZs9DCOJ YC0qBZm+jWw0Ixmpv6ALKBedIT6Emb5mhZpVvQZ2Dc7rvKH/9s+FVrU7uDTHN3eG Obu7LnCt/jcPxC5A094qb3iGS0aC1mmM -----END CERTIFICATE-----Generated at Tue Nov 4 08:29:04 2025 by rpki-client