$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft File: 5Ux-FlPQE0JCIsO5NoohO6URXOM.mft (raw, json) Hash identifier: fPRY/DSiW4B25ysEjWNbrdDSrYr0Q42Ixn41NklylvE= Subject key identifier: 3F:26:55:8C:3C:18:06:35:F0:E2:AE:DE:85:9A:E8:4A:CE:CC:45:63 Authority key identifier: E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3 Certificate issuer: /CN=A91877A6/serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft Manifest number: 3E Signing time: Mon 03 Nov 2025 07:27:24 +0000 Manifest this update: Mon 03 Nov 2025 07:27:23 +0000 Manifest next update: Mon 10 Nov 2025 07:27:23 +0000 Files and hashes: 1: 5Ux-FlPQE0JCIsO5NoohO6URXOM.crl (hash: Ng3HMYMmlrDaF6XvK8bF2qeKeHU86/R3y7yUMFV2xgA=) 2: 49FB21A25C8011F0ABC6993DC4F9AE02.roa (hash: DMOnnBq0pchJxrIKNQnVPVkuYus9e6uopvVvEwbY84Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.crl rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91877A6, serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3 Validity Not Before: Nov 3 07:27:23 2025 GMT Not After : Nov 10 07:27:23 2025 GMT Subject: CN=6908595c-18fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f2:2a:2a:53:1e:90:de:15:31:40:56:41:cb: 3e:b9:bd:e9:89:13:6a:4b:8f:61:af:91:19:9c:9b: 48:12:2a:d8:80:53:c8:00:72:77:9d:eb:86:28:a6: aa:2c:4c:9b:f6:63:24:17:7e:27:5d:5c:a6:a5:86: 3b:51:5a:d5:53:78:db:e3:b9:dd:05:ea:a6:a0:ae: fd:c8:b7:de:9a:b0:44:8d:9a:40:dd:db:5b:39:4f: f0:e8:d5:24:0a:04:3d:58:81:9f:06:40:ae:3d:73: ba:81:f9:cd:1e:01:bf:12:22:19:80:d6:b1:29:ac: 66:28:4a:bf:fb:d4:5a:cb:7d:da:75:55:d3:d9:29: 58:93:29:60:7b:15:9b:04:63:29:e3:16:16:5a:27: 70:f9:a4:fb:a8:ac:55:21:5e:9f:c9:e3:4e:6d:91: 5f:0e:cd:29:0d:38:e9:5a:bc:87:2c:8e:fb:2e:97: c2:df:d4:c5:e7:9a:8c:89:8d:65:3a:7f:52:5c:f8: 8f:5b:f3:6c:bc:6e:ba:52:e0:15:3b:40:0f:72:64: 3b:05:bc:9a:e0:11:db:a6:5c:07:ca:7d:47:d8:31: a3:2a:e5:21:dc:fb:db:70:f3:f5:1d:a2:fe:2a:b2: 66:88:53:ed:f1:a4:fd:f9:6d:fb:36:ce:ab:f9:41: 8a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:26:55:8C:3C:18:06:35:F0:E2:AE:DE:85:9A:E8:4A:CE:CC:45:63 X509v3 Authority Key Identifier: keyid:E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:1e:18:66:79:6d:8a:ef:e5:4d:95:ae:b5:6f:57:e9:ff:c1: 2e:06:b5:1b:2c:62:1a:9c:a8:d2:1d:d9:86:d1:ae:26:58:b3: 74:11:9b:a3:0b:b0:af:62:62:36:3c:24:63:97:17:a9:a0:ef: c4:cc:78:a7:44:a2:e0:13:c8:40:9a:73:35:d5:63:5e:e7:45: 28:77:b2:37:d2:73:00:a0:04:5b:4c:4b:a2:28:0b:58:c5:0a: ab:83:4e:e1:75:fe:f0:78:3c:45:f2:9e:06:1f:86:bc:ce:de: b4:08:c5:34:19:83:56:0f:5b:79:29:11:f0:cb:f7:3c:e4:6f: 2b:c4:71:7c:0d:45:fa:62:2e:6b:45:8e:eb:7a:e2:41:02:8e: a1:b8:7e:b2:db:90:d4:b0:c4:5d:10:f0:b7:4b:bf:85:e7:75: a2:67:3b:f4:d6:47:0c:08:42:f0:fc:e7:0c:e6:8b:f7:fb:32: 6a:24:f6:6e:c3:c0:89:88:79:d0:e8:fe:ce:e1:ea:3c:d4:7d: 32:4b:88:86:a9:4c:38:d6:36:91:a5:48:5c:d0:15:70:2c:61: cc:e4:aa:26:0f:83:5c:45:f2:d4:98:25:05:f7:5b:e5:da:33: 21:cb:1f:2b:0e:b6:3e:9c:c9:dd:14:28:e1:9a:23:da:cc:08: 0c:a9:d6:0b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzdBNjExMC8GA1UEBRMoRTU0QzdFMTY1M0QwMTM0MjQyMjJDM0I5MzY4QTIxM0JB NTExNUNFMzAeFw0yNTExMDMwNzI3MjNaFw0yNTExMTAwNzI3MjNaMBgxFjAUBgNV BAMTDTY5MDg1OTVjLTE4ZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy8ioqUx6Q3hUxQFZByz65vemJE2pLj2GvkRmcm0gSKtiAU8gAcned64Yopqos TJv2YyQXfiddXKalhjtRWtVTeNvjud0F6qagrv3It96asESNmkDd21s5T/Do1SQK BD1YgZ8GQK49c7qB+c0eAb8SIhmA1rEprGYoSr/71FrLfdp1VdPZKViTKWB7FZsE YynjFhZaJ3D5pPuorFUhXp/J405tkV8OzSkNOOlavIcsjvsul8Lf1MXnmoyJjWU6 f1Jc+I9b82y8brpS4BU7QA9yZDsFvJrgEdumXAfKfUfYMaMq5SHc+9tw8/Udov4q smaIU+3xpP35bfs2zqv5QYqdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPyZVjDwY BjXw4q7ehZroSs7MRWMwHwYDVR0jBBgwFoAU5Ux+FlPQE0JCIsO5NoohO6URXOMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3N0E2L0M5MkMzOUFFNUM3 RTExRjBBNUMzNjAzNkM0RjlBRTAyLzVVeC1GbFBRRTBKQ0lzTzVOb29oTzZVUlhP TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNVV4LUZsUFFFMEpDSXNPNU5vb2hPNlVSWE9NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 N0E2L0M5MkMzOUFFNUM3RTExRjBBNUMzNjAzNkM0RjlBRTAyLzVVeC1GbFBRRTBK Q0lzTzVOb29oTzZVUlhPTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACweGGZ5bYrv5U2VrrVvV+n/wS4GtRssYhqcqNId2YbRriZYs3QRm6ML sK9iYjY8JGOXF6mg78TMeKdEouATyECaczXVY17nRSh3sjfScwCgBFtMS6IoC1jF CquDTuF1/vB4PEXyngYfhrzO3rQIxTQZg1YPW3kpEfDL9zzkbyvEcXwNRfpiLmtF jut64kECjqG4frLbkNSwxF0Q8LdLv4XndaJnO/TWRwwIQvD85wzmi/f7Mmok9m7D wImIedDo/s7h6jzUfTJLiIapTDjWNpGlSFzQFXAsYczkqiYPg1xF8tSYJQX3W+Xa MyHLHysOtj6cyd0UKOGaI9rMCAyp1gs= -----END CERTIFICATE-----Generated at Mon Nov 3 18:15:01 2025 by rpki-client