$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft File: s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft (raw, json) Hash identifier: tulmCeCZTgnFYOq+H0b0EzeQ3/Xn8PWDdijWwwDHi7E= Subject key identifier: 3D:2E:AD:F7:E6:2F:FF:75:04:29:E4:BC:3F:FF:63:0E:C1:0A:B0:18 Authority key identifier: B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 Certificate issuer: /CN=A91964B3/serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Certificate serial: 3756 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft Manifest number: 3632 Signing time: Wed 22 Oct 2025 14:26:01 +0000 Manifest this update: Wed 22 Oct 2025 14:26:00 +0000 Manifest next update: Wed 29 Oct 2025 14:26:00 +0000 Files and hashes: 1: s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl (hash: vjLdBd5FdcxoZrk62EoVRzEutEw8lxvlY+gmz8Urbwo=) 2: B36EA83C70B111E98CFFF710C4F9AE02.roa (hash: YPxJgAFP2pm+e64iG82yJRkFHNHfja4F2rH7VSVuFpA=) 3: B81E038AAB2B11F0B1F65E12C4F9AE02.roa (hash: 3eaZx6Z9vRAe802TOzROCss3VWzUi3sLvQ3ZKDy9SF0=) 4: 160B219870BA11E99E0F6D2DC4F9AE02.roa (hash: 3QqIb/PpEMe7CSOMb9cfzIUcXW1tet3HABkiD8A3zkU=) 5: 26A143C291EB11EF8A024083C4F9AE02.roa (hash: apyNb0gzlP7QIPlzF+1SGVtUOjpAimi2EUrocnrYZRM=) 6: 18F4FD76918111EC93DCA42AC4F9AE02.roa (hash: 8JKaEfgtThOrevd/FI1wUsWQCsjDZCsWDfH4rtPvYOM=) 7: B0EB27B470B811E9B32F6726C4F9AE02.roa (hash: Yn6iyp3sOHzht7NrUVV1K95CTLrIyR+zeCU6DhPlbi0=) 8: 9538F912A09511EE9616A86EC4F9AE02.roa (hash: UIhH1UdXX1/WldxbBw/5eFdUsW8H5rv3xowCVi4x/js=) 9: 71D60BC2F6BA11EB865C4246C4F9AE02.roa (hash: E9Q0DLQxOx2PNLNxJzUPOmEekE0nfR8RNH8+NziMkYc=) 10: 9AF37E96D71B11EA9532F30CC4F9AE02.roa (hash: UB9M+LLNN3sS8I2EFsp8N9BHGeanS2Z+lbFEvYsOTeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 14:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14166 (0x3756) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=B39866A99D1CD9F4E7E8F53C88AD14DA89A18625 Validity Not Before: Oct 22 14:26:00 2025 GMT Not After : Oct 29 14:26:00 2025 GMT Subject: CN=68f8e979-ee0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b7:7e:30:f3:90:56:a1:01:8d:2d:ac:1b:20: 0e:4f:df:17:cb:0a:a5:a3:36:ef:f9:db:d6:7b:19: 73:f3:02:e6:6f:39:66:7a:64:0f:af:a1:46:60:4e: 56:fd:19:87:b0:cc:5c:4e:19:5c:33:47:32:2e:f1: 31:be:fc:2e:29:7e:3b:f6:64:c7:dd:db:e0:c8:05: d2:0b:b1:3e:b7:e6:a5:c6:0b:09:35:6e:2a:78:d8: eb:91:f5:67:f4:1b:db:a3:9e:c3:c8:cc:e2:19:a0: 60:69:53:5c:ce:93:14:7d:eb:f1:0d:9e:c8:9a:36: ab:8e:2b:e9:dc:0c:e5:ff:17:ec:9f:35:61:11:6a: 42:76:79:50:8b:a1:34:4d:44:e7:ea:be:2a:d2:30: 9f:5d:3c:aa:41:b3:29:2f:fa:75:ff:d8:02:9b:e5: a2:78:04:96:2b:8b:2b:2b:1e:94:d7:b0:70:6d:42: 91:77:e4:f9:4f:30:bf:50:5a:95:a9:33:93:b3:59: 19:d4:d7:38:69:e1:c1:3d:8e:62:cc:1e:49:62:40: da:04:9e:60:3a:35:e7:75:8f:10:16:78:ba:61:09: a4:e0:f1:eb:20:89:60:73:e0:b7:a6:4b:fc:7f:33: 33:39:39:4b:ef:cb:38:3a:2b:9a:2d:e9:e6:34:d6: 9b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2E:AD:F7:E6:2F:FF:75:04:29:E4:BC:3F:FF:63:0E:C1:0A:B0:18 X509v3 Authority Key Identifier: keyid:B3:98:66:A9:9D:1C:D9:F4:E7:E8:F5:3C:88:AD:14:DA:89:A1:86:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/E65851121D8411E2A1BA30DB08B02CD2/s5hmqZ0c2fTn6PU8iK0U2omhhiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:23:9b:bf:d7:e4:fe:c5:8a:12:df:a9:f8:d9:a9:18:12:d3: 7d:c4:bb:00:ac:9e:a1:95:b7:28:c4:71:70:96:11:a5:df:9a: 8b:42:7e:87:14:6d:7c:66:e5:55:9b:9d:22:9b:eb:10:8b:49: ee:08:24:ea:cc:d0:5f:0a:46:f7:2b:66:18:ff:4d:67:ee:e1: 56:89:d7:11:b2:03:1a:1d:58:53:5e:c5:79:ff:1e:e4:62:3d: 48:fb:a5:e6:f5:f5:f6:3b:c8:ca:08:57:5d:8a:e1:a4:5c:d1: ca:58:ab:32:41:bb:16:da:66:3c:5f:b0:fe:ec:53:a9:86:00: db:b1:46:e5:0c:d4:71:f6:b6:4f:ec:c5:74:2d:f8:f0:63:4c: 80:e1:f8:b5:12:71:19:88:d5:9d:8b:1b:54:2a:26:65:55:89: 00:4c:85:78:a4:01:89:59:cc:60:13:d6:18:9f:14:20:0d:47: 8b:0c:3e:ef:25:a7:75:a6:a9:33:83:69:78:74:6e:7f:24:1a: f6:6f:92:fc:1e:da:bc:3e:26:97:41:43:79:33:4d:9d:98:5d: 37:a9:e6:61:3a:7f:eb:ae:8f:c6:ec:09:20:a4:eb:73:ef:87: cf:9b:eb:0c:4b:71:07:c2:48:f2:53:9f:7b:03:7f:a0:d3:c2: a9:db:0d:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICN1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKEIzOTg2NkE5OUQxQ0Q5RjRFN0U4RjUzQzg4QUQxNERB ODlBMTg2MjUwHhcNMjUxMDIyMTQyNjAwWhcNMjUxMDI5MTQyNjAwWjAYMRYwFAYD VQQDEw02OGY4ZTk3OS1lZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Ld+MPOQVqEBjS2sGyAOT98Xywqlozbv+dvWexlz8wLmbzlmemQPr6FGYE5W /RmHsMxcThlcM0cyLvExvvwuKX479mTH3dvgyAXSC7E+t+alxgsJNW4qeNjrkfVn 9Bvbo57DyMziGaBgaVNczpMUfevxDZ7Imjarjivp3Azl/xfsnzVhEWpCdnlQi6E0 TUTn6r4q0jCfXTyqQbMpL/p1/9gCm+WieASWK4srKx6U17BwbUKRd+T5TzC/UFqV qTOTs1kZ1Nc4aeHBPY5izB5JYkDaBJ5gOjXndY8QFni6YQmk4PHrIIlgc+C3pkv8 fzMzOTlL78s4OiuaLenmNNabhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0urffm L/91BCnkvD//Yw7BCrAYMB8GA1UdIwQYMBaAFLOYZqmdHNn05+j1PIitFNqJoYYl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy9FNjU4NTExMjFE ODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJmVG42UFU4aUswVTJvbWho aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1aG1xWjBjMmZUbjZQVThpSzBVMm9taGhpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjRCMy9FNjU4NTExMjFEODQxMUUyQTFCQTMwREIwOEIwMkNEMi9zNWhtcVowYzJm VG42UFU4aUswVTJvbWhoaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8I5u/1+T+xYoS36n42akYEtN9xLsArJ6hlbcoxHFwlhGl35qLQn6H FG18ZuVVm50im+sQi0nuCCTqzNBfCkb3K2YY/01n7uFWidcRsgMaHVhTXsV5/x7k Yj1I+6Xm9fX2O8jKCFddiuGkXNHKWKsyQbsW2mY8X7D+7FOphgDbsUblDNRx9rZP 7MV0LfjwY0yA4fi1EnEZiNWdixtUKiZlVYkATIV4pAGJWcxgE9YYnxQgDUeLDD7v Jad1pqkzg2l4dG5/JBr2b5L8Htq8PiaXQUN5M02dmF03qeZhOn/rro/G7AkgpOtz 74fPm+sMS3EHwkjyU597A3+g08Kp2w3L -----END CERTIFICATE-----Generated at Wed Oct 22 18:23:42 2025 by rpki-client