$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft File: o5hxRib4es6-X2_QHlBwGRWqfRU.mft (raw, json) Hash identifier: X8FiqhbcbnH+J4ejKJa0PSrB8Zm+gVPSoKRiPYs6ipw= Subject key identifier: 92:CB:43:01:81:43:51:59:EC:CA:E3:29:7B:01:E9:A7:62:4A:D8:61 Authority key identifier: A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15 Certificate issuer: /CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft Manifest number: C5 Signing time: Mon 03 Nov 2025 05:49:05 +0000 Manifest this update: Mon 03 Nov 2025 05:49:04 +0000 Manifest next update: Mon 10 Nov 2025 05:49:04 +0000 Files and hashes: 1: o5hxRib4es6-X2_QHlBwGRWqfRU.crl (hash: hTTgcOuAz63FD9m1Ajq4Yhx7erlFS++F9QSX3kd1y44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91827C5, serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15 Validity Not Before: Nov 3 05:49:04 2025 GMT Not After : Nov 10 05:49:04 2025 GMT Subject: CN=69084251-a5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:d9:e6:9b:e9:d3:be:d8:c2:8d:d7:d8:d6: 47:b7:44:33:73:4b:ef:b8:c5:93:53:24:2b:b8:3d: 03:de:90:88:6f:c2:3e:57:67:9e:9b:5d:ff:b3:fe: 8c:4a:f0:3c:da:19:e9:23:9b:a2:9a:bf:c0:4b:c2: 99:d0:81:9e:53:bd:9d:7f:52:ec:17:c7:f5:40:b8: 1d:5f:0d:ad:71:8c:38:44:6b:10:54:2c:d6:d9:16: 58:06:d0:ad:74:c3:ea:2f:7a:bb:0b:6a:e4:95:cc: 32:6b:00:97:7b:06:83:1b:7d:08:b2:03:8d:91:07: dd:97:49:c1:02:93:31:dd:fd:bb:07:1b:ee:f4:ce: f5:55:56:85:d3:18:9d:6c:ab:10:92:56:5a:a6:07: 04:9d:f4:e8:ff:d4:ab:87:03:86:c4:a8:83:ed:b9: e5:74:e8:09:44:96:7b:04:8e:2b:7d:b2:ba:33:1c: b9:8e:65:89:69:92:ba:34:3f:83:2d:00:44:89:16: c8:f6:7c:39:26:24:40:20:3f:fa:09:f8:71:43:31: 37:b2:2b:77:1c:e8:2e:8e:73:73:d6:23:49:e6:9d: 02:e1:94:f5:82:5a:c4:ce:43:4f:d6:5d:75:b2:03: d9:1b:b4:aa:69:01:0f:8b:8d:04:b8:fd:52:06:2f: 6e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CB:43:01:81:43:51:59:EC:CA:E3:29:7B:01:E9:A7:62:4A:D8:61 X509v3 Authority Key Identifier: keyid:A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:f5:01:af:47:18:46:40:79:04:bd:53:c1:ef:d2:db:dc:b7: 20:81:1e:4c:d8:a7:c1:8a:f4:81:7f:75:4b:f2:63:6c:89:da: 52:32:b4:e3:d2:f5:04:e5:d9:61:22:c8:b6:ca:bc:3d:0e:20: 90:28:b3:d5:e9:a8:67:1c:94:43:0b:4c:99:07:6f:3a:84:53: 35:ab:f6:6e:72:2b:e4:b5:b8:ff:63:80:3b:6b:90:a6:35:fc: 03:6c:c6:ce:fc:ac:ed:c4:c7:9b:9b:98:4b:62:b5:bd:69:7f: 16:25:41:d2:e8:88:a7:95:30:32:f7:3e:82:41:f2:f5:82:d1: 34:d1:a2:ae:39:f7:c6:c2:de:3c:3d:50:30:4e:ec:4d:2a:3b: 98:41:64:15:71:16:74:3a:73:82:2d:a6:84:bd:d2:f9:19:b3: 17:4d:2e:cf:84:36:5f:22:fa:3b:9b:70:f8:90:e5:35:a9:4c: fe:a7:56:28:90:0a:db:7a:36:f6:d3:e7:2c:45:ec:be:2e:e5: de:d9:34:d5:9f:88:f8:90:af:76:e3:25:e1:85:54:86:30:cf: f8:5d:18:3f:64:05:e6:06:84:10:d4:03:93:1c:7f:0e:07:31: cd:b7:d9:1b:a9:59:df:a5:fe:bf:47:f6:ed:7b:d9:9b:19:59: c2:d5:51:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI3QzUxMTAvBgNVBAUTKEEzOTg3MTQ2MjZGODdBQ0VCRTVGNkZEMDFFNTA3MDE5 MTVBQTdEMTUwHhcNMjUxMTAzMDU0OTA0WhcNMjUxMTEwMDU0OTA0WjAYMRYwFAYD VQQDEw02OTA4NDI1MS1hNWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVDZ5pvp077Ywo3X2NZHt0Qzc0vvuMWTUyQruD0D3pCIb8I+V2eem13/s/6M SvA82hnpI5uimr/AS8KZ0IGeU72df1LsF8f1QLgdXw2tcYw4RGsQVCzW2RZYBtCt dMPqL3q7C2rklcwyawCXewaDG30IsgONkQfdl0nBApMx3f27Bxvu9M71VVaF0xid bKsQklZapgcEnfTo/9SrhwOGxKiD7bnldOgJRJZ7BI4rfbK6Mxy5jmWJaZK6ND+D LQBEiRbI9nw5JiRAID/6CfhxQzE3sit3HOgujnNz1iNJ5p0C4ZT1glrEzkNP1l11 sgPZG7SqaQEPi40EuP1SBi9uLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLLQwGB Q1FZ7MrjKXsB6adiSthhMB8GA1UdIwQYMBaAFKOYcUYm+HrOvl9v0B5QcBkVqn0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdDNS9EOUFBQjgyQzhB RDkxMUVGOTgxQzgyODNDNEY5QUUwMi9vNWh4UmliNGVzNi1YMl9RSGxCd0dSV3Fm UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL281aHhSaWI0ZXM2LVgyX1FIbEJ3R1JXcWZSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjdDNS9EOUFBQjgyQzhBRDkxMUVGOTgxQzgyODNDNEY5QUUwMi9vNWh4UmliNGVz Ni1YMl9RSGxCd0dSV3FmUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ9QGvRxhGQHkEvVPB79Lb3LcggR5M2KfBivSBf3VL8mNsidpSMrTj 0vUE5dlhIsi2yrw9DiCQKLPV6ahnHJRDC0yZB286hFM1q/Zucivktbj/Y4A7a5Cm NfwDbMbO/KztxMebm5hLYrW9aX8WJUHS6IinlTAy9z6CQfL1gtE00aKuOffGwt48 PVAwTuxNKjuYQWQVcRZ0OnOCLaaEvdL5GbMXTS7PhDZfIvo7m3D4kOU1qUz+p1Yo kArbejb20+csRey+LuXe2TTVn4j4kK924yXhhVSGMM/4XRg/ZAXmBoQQ1AOTHH8O BzHNt9kbqVnfpf6/R/bte9mbGVnC1VEg -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:55 2025 by rpki-client