$ rpki-client -vvf rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft File: _5I0f11UaIEf0lOki_xp_lcKpFA.mft (raw, json) Hash identifier: vFDB+Hpn74TmWow9IKcUZJiLQMsT6HnL83aOBPcbzxU= Subject key identifier: 89:4C:1B:4C:33:41:16:BB:E4:1A:A5:C3:FC:B0:F2:F9:10:C1:F3:F6 Authority key identifier: FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50 Certificate issuer: /CN=A9191769/serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft Manifest number: D3 Signing time: Mon 03 Nov 2025 05:39:37 +0000 Manifest this update: Mon 03 Nov 2025 05:39:36 +0000 Manifest next update: Mon 10 Nov 2025 05:39:36 +0000 Files and hashes: 1: _5I0f11UaIEf0lOki_xp_lcKpFA.crl (hash: dBv5KEoW23km6XJHKhMt6M6T16jLVDg5yfPXu5hJWUs=) 2: 4D36C07677C311EF84D38A3BC4F9AE02.roa (hash: JXSolNPYFIreOexnYnb4A7e51oAbg28HPMtSTeakZI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191769, serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450 Validity Not Before: Nov 3 05:39:36 2025 GMT Not After : Nov 10 05:39:36 2025 GMT Subject: CN=69084019-e476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:13:85:c3:52:ae:ac:18:b4:35:52:29:44: 76:5b:7e:b3:42:40:2e:3f:47:36:fa:2b:a4:3d:1d: d5:1f:78:7a:7f:d1:71:44:0e:7e:a8:8f:67:88:42: 7f:97:b5:49:af:13:8a:03:2e:7a:73:68:cf:57:ce: 2e:68:4e:52:c6:24:60:08:5c:00:8c:81:0a:4c:f6: 21:83:24:a2:52:83:cd:df:ed:ec:ac:5f:7f:af:95: 14:3a:69:b2:82:9e:04:2b:60:66:bf:fa:f1:09:ca: 3c:3d:c3:c6:14:bd:1b:2d:84:77:cb:a7:bb:a0:bb: 65:3c:ce:cf:85:d5:a1:3b:2e:6d:49:3a:06:32:17: 68:69:b2:bd:14:9b:99:3a:a0:1c:a2:f4:38:02:dc: d9:a1:71:01:51:19:04:8a:4e:57:1e:af:fd:60:4c: f4:47:47:e0:40:91:d4:e7:33:bf:d1:85:1b:f3:d3: 95:ac:cc:6d:f1:d4:77:4f:bb:3b:e9:30:ef:ba:7e: da:bc:21:28:c6:78:4e:34:63:14:12:bf:ac:c9:c3: b7:c2:bc:e5:2a:45:0d:b2:88:d0:90:7f:46:83:6c: 39:47:eb:2d:5e:69:1f:1e:63:16:48:17:ac:e5:ae: 5c:1e:30:24:5f:50:f2:cd:e4:16:46:d4:62:cd:e4: bd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4C:1B:4C:33:41:16:BB:E4:1A:A5:C3:FC:B0:F2:F9:10:C1:F3:F6 X509v3 Authority Key Identifier: keyid:FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:9a:75:0e:fd:10:03:51:d2:75:52:8a:78:3f:9e:7e:48:08: d4:3f:9d:14:02:31:10:a4:f2:11:7b:bb:d2:fe:ee:0a:ad:37: 73:6e:23:a1:ba:ee:75:7d:46:65:7c:34:16:9b:67:b5:20:bf: 9a:b2:f1:48:76:b5:d4:c8:b2:bb:b6:46:de:56:cd:9a:c0:4f: e3:7e:7e:1b:af:f5:ce:49:1d:2d:6c:83:e2:eb:6b:a6:df:0c: 30:7f:a4:67:05:7b:82:56:76:a2:db:bf:9e:88:3e:e1:80:3b: 29:ec:85:fd:82:d3:cc:7e:1e:6d:ff:eb:09:ef:30:d5:2f:d0: d3:c8:56:3e:79:6f:77:36:5c:4a:f2:93:f4:9b:da:28:bc:10: d4:92:f1:3d:c0:a3:ef:6c:0f:75:0e:1b:7a:84:4d:b2:37:45: b6:8b:69:0b:c7:79:39:03:74:2c:8e:bc:de:05:2e:d7:6c:40: 5b:63:5a:53:2c:2d:d1:4a:b7:bc:66:fa:9d:4b:cf:d3:32:2d: 29:a3:2d:aa:d5:da:33:9d:3d:80:13:6c:d2:7a:1b:a5:c9:0d: a5:fa:76:e5:80:86:52:42:ca:4a:1a:c2:5b:af:72:e7:f0:f1: c2:48:ad:c8:1d:49:6e:67:52:fb:e2:e6:f1:0e:00:11:3f:5a: 8a:35:6f:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE3NjkxMTAvBgNVBAUTKEZGOTIzNDdGNUQ1NDY4ODExRkQyNTNBNDhCRkM2OUZF NTcwQUE0NTAwHhcNMjUxMTAzMDUzOTM2WhcNMjUxMTEwMDUzOTM2WjAYMRYwFAYD VQQDEw02OTA4NDAxOS1lNDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAto8ThcNSrqwYtDVSKUR2W36zQkAuP0c2+iukPR3VH3h6f9FxRA5+qI9niEJ/ l7VJrxOKAy56c2jPV84uaE5SxiRgCFwAjIEKTPYhgySiUoPN3+3srF9/r5UUOmmy gp4EK2Bmv/rxCco8PcPGFL0bLYR3y6e7oLtlPM7PhdWhOy5tSToGMhdoabK9FJuZ OqAcovQ4AtzZoXEBURkEik5XHq/9YEz0R0fgQJHU5zO/0YUb89OVrMxt8dR3T7s7 6TDvun7avCEoxnhONGMUEr+sycO3wrzlKkUNsojQkH9Gg2w5R+stXmkfHmMWSBes 5a5cHjAkX1DyzeQWRtRizeS97wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlMG0wz QRa75Bqlw/yw8vkQwfP2MB8GA1UdIwQYMBaAFP+SNH9dVGiBH9JTpIv8af5XCqRQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTc2OS9EMjZERERCMDc3 QkUxMUVGOUYyQTQ1NDdDNEY5QUUwMi9fNUkwZjExVWFJRWYwbE9raV94cF9sY0tw RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL181STBmMTFVYUlFZjBsT2tpX3hwX2xjS3BGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTc2OS9EMjZERERCMDc3QkUxMUVGOUYyQTQ1NDdDNEY5QUUwMi9fNUkwZjExVWFJ RWYwbE9raV94cF9sY0twRkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtmnUO/RADUdJ1Uop4P55+SAjUP50UAjEQpPIRe7vS/u4KrTdzbiOh uu51fUZlfDQWm2e1IL+asvFIdrXUyLK7tkbeVs2awE/jfn4br/XOSR0tbIPi62um 3wwwf6RnBXuCVnai27+eiD7hgDsp7IX9gtPMfh5t/+sJ7zDVL9DTyFY+eW93NlxK 8pP0m9oovBDUkvE9wKPvbA91Dht6hE2yN0W2i2kLx3k5A3QsjrzeBS7XbEBbY1pT LC3RSre8ZvqdS8/TMi0poy2q1doznT2AE2zSehulyQ2l+nblgIZSQspKGsJbr3Ln 8PHCSK3IHUluZ1L74ubxDgARP1qKNW9y -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:09 2025 by rpki-client