$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft File: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft (raw, json) Hash identifier: 8igBm4VHks6E15KzRl/EdM7hXi/UwHdmaH+7IO/t6P4= Subject key identifier: 9F:9D:A6:49:4C:76:4E:66:00:0B:A7:01:F4:AE:BE:23:49:B9:63:CB Authority key identifier: E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 Certificate issuer: /CN=A91698EC/serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft Manifest number: 0112 Signing time: Mon 03 Nov 2025 04:56:45 +0000 Manifest this update: Mon 03 Nov 2025 04:56:44 +0000 Manifest next update: Mon 10 Nov 2025 04:56:44 +0000 Files and hashes: 1: 5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl (hash: 2NHRota3UzMcr+Yd5FWacL+DBydoQSYhwuQi6l5Pa9o=) 2: 1FCE5CE0214F11EFAB245D49C4F9AE02.roa (hash: CpFFYzKvaiG5h+2sUf464A2//gzHqQgpH0EvUR1TKwU=) 3: 02BCE50286AF11EF9EFFD52FC4F9AE02.roa (hash: 51G/atnUP8WE3vN2KzPoIXBsyS6vS2RXr0QbqdKbjAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91698EC, serialNumber=E58F0F52A4D2D1DE44675ACA17557BF982EC7D79 Validity Not Before: Nov 3 04:56:44 2025 GMT Not After : Nov 10 04:56:44 2025 GMT Subject: CN=6908360d-0cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:e0:5d:33:01:27:6b:40:16:d7:7d:3c:b5: b2:07:fe:9c:1c:de:9a:65:27:f4:1e:ba:20:0f:82: 76:d6:d4:07:97:65:11:c3:0c:b5:36:5f:ea:e2:9b: bf:0c:ed:1f:26:43:93:d9:c5:58:0a:4e:8c:f3:22: d3:e3:57:96:c3:7f:58:67:fc:15:98:f4:0c:b8:6d: c2:e7:11:c6:29:8e:dc:03:8d:07:41:3b:9f:a9:37: d9:b4:1d:a8:2c:a3:21:a7:64:49:b7:7a:08:1f:f0: 62:31:f2:1a:5b:73:18:8b:be:9a:04:ac:de:99:69: 5b:70:20:00:81:55:fd:6a:88:c1:20:40:f9:5e:ab: 9d:ee:c2:46:5f:40:f9:13:11:70:4e:02:35:fa:3b: d2:9f:b6:88:13:5f:6a:79:7d:3b:19:41:9b:7b:e8: 22:fa:94:0c:2a:91:c8:8d:28:ef:01:16:26:ed:30: 04:6c:40:93:ef:03:cd:cb:30:86:1e:11:29:32:99: c2:ec:ce:1e:05:d8:b8:05:f9:27:ab:64:ca:5c:d0: 6c:1a:05:a3:98:63:14:c1:b5:a7:9b:de:41:78:96: c5:7b:0a:05:01:ff:91:cc:74:7d:f1:e6:6d:08:27: 38:c1:f9:6f:fd:4f:f9:4a:71:38:90:80:90:5e:c6: 6d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9D:A6:49:4C:76:4E:66:00:0B:A7:01:F4:AE:BE:23:49:B9:63:CB X509v3 Authority Key Identifier: keyid:E5:8F:0F:52:A4:D2:D1:DE:44:67:5A:CA:17:55:7B:F9:82:EC:7D:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/21E5A30A1EE111EF93F9853DC4F9AE02/5Y8PUqTS0d5EZ1rKF1V7-YLsfXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:83:09:8d:0d:75:a7:1f:98:ac:81:d6:a6:75:cd:eb:26:0a: c9:37:d9:b4:11:9b:34:8d:9d:41:73:6c:3d:2c:b4:44:af:56: 75:25:81:e6:46:16:fd:ab:e8:36:a2:3c:45:a8:fd:2d:89:48: 27:a8:6a:75:71:fb:7b:74:e2:8b:66:6c:00:d6:d5:01:a5:55: 6b:b5:5e:ac:15:11:a2:7a:7f:42:7f:14:11:7f:a3:92:61:5a: 5c:03:e1:8c:c0:ce:6d:9a:f2:b7:ef:4b:08:1c:3e:f5:cb:dc: 6a:ab:af:8c:c4:96:4d:b1:32:ea:a1:8d:fe:4c:66:28:a5:91: 81:8c:b1:1f:5c:f2:42:61:8b:4b:58:f5:a4:58:b2:85:a9:0a: a3:4f:f3:e3:57:02:33:c2:35:6f:76:35:30:47:27:40:b3:dd: 62:3b:d0:3e:7e:85:86:ff:a3:06:2b:e5:0f:b7:59:52:dc:40: 47:4e:1f:27:90:42:95:dd:cb:13:bc:21:48:5b:eb:79:d8:d6: 4e:cf:d8:d4:57:34:05:02:70:12:27:0b:38:2a:75:3b:3f:85: 86:80:98:d5:43:d0:c6:92:2f:0b:a3:45:e3:19:4c:98:05:43: 7f:7d:a3:2c:89:68:be:56:fc:16:0e:fa:c9:18:79:8b:b1:84: 03:3e:be:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk4RUMxMTAvBgNVBAUTKEU1OEYwRjUyQTREMkQxREU0NDY3NUFDQTE3NTU3QkY5 ODJFQzdENzkwHhcNMjUxMTAzMDQ1NjQ0WhcNMjUxMTEwMDQ1NjQ0WjAYMRYwFAYD VQQDEw02OTA4MzYwZC0wY2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQ7gXTMBJ2tAFtd9PLWyB/6cHN6aZSf0HrogD4J21tQHl2URwwy1Nl/q4pu/ DO0fJkOT2cVYCk6M8yLT41eWw39YZ/wVmPQMuG3C5xHGKY7cA40HQTufqTfZtB2o LKMhp2RJt3oIH/BiMfIaW3MYi76aBKzemWlbcCAAgVX9aojBIED5Xqud7sJGX0D5 ExFwTgI1+jvSn7aIE19qeX07GUGbe+gi+pQMKpHIjSjvARYm7TAEbECT7wPNyzCG HhEpMpnC7M4eBdi4Bfknq2TKXNBsGgWjmGMUwbWnm95BeJbFewoFAf+RzHR98eZt CCc4wflv/U/5SnE4kICQXsZtqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+dpklM dk5mAAunAfSuviNJuWPLMB8GA1UdIwQYMBaAFOWPD1Kk0tHeRGdayhdVe/mC7H15 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8yMUU1QTMwQTFF RTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBkNUVaMXJLRjFWNy1ZTHNm WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVZOFBVcVRTMGQ1RVoxcktGMVY3LVlMc2ZYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OThFQy8yMUU1QTMwQTFFRTExMUVGOTNGOTg1M0RDNEY5QUUwMi81WThQVXFUUzBk NUVaMXJLRjFWNy1ZTHNmWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCgwmNDXWnH5isgdamdc3rJgrJN9m0EZs0jZ1Bc2w9LLREr1Z1JYHm Rhb9q+g2ojxFqP0tiUgnqGp1cft7dOKLZmwA1tUBpVVrtV6sFRGien9CfxQRf6OS YVpcA+GMwM5tmvK370sIHD71y9xqq6+MxJZNsTLqoY3+TGYopZGBjLEfXPJCYYtL WPWkWLKFqQqjT/PjVwIzwjVvdjUwRydAs91iO9A+foWG/6MGK+UPt1lS3EBHTh8n kEKV3csTvCFIW+t52NZOz9jUVzQFAnASJws4KnU7P4WGgJjVQ9DGki8Lo0XjGUyY BUN/faMsiWi+VvwWDvrJGHmLsYQDPr7n -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:45 2025 by rpki-client