$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft File: t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft (raw, json) Hash identifier: og8qJoiF95cPrxErlk+d9eaGcnEpAl8FgIS8EPeHia0= Subject key identifier: A7:56:F0:5A:14:63:39:E1:34:38:90:C8:5B:B2:DB:E8:AA:7B:43:8B Authority key identifier: B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5 Certificate issuer: /CN=A91B4E11/serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft Manifest number: 010E Signing time: Mon 03 Nov 2025 04:55:14 +0000 Manifest this update: Mon 03 Nov 2025 04:55:14 +0000 Manifest next update: Mon 10 Nov 2025 04:55:14 +0000 Files and hashes: 1: t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl (hash: rTfpJvY/gFMfeuRElWlADRpp7bRFbupevDLFZT+6VBE=) 2: A2939A381CB711EF8F98240CC4F9AE02.roa (hash: h1iGqKYaoNj3rvyh2GNyWQUuRTq6Az6gkGmiqF75xZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E11, serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5 Validity Not Before: Nov 3 04:55:14 2025 GMT Not After : Nov 10 04:55:14 2025 GMT Subject: CN=690835b2-38b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c4:3f:e4:97:4f:dc:7f:16:8b:71:b6:4c:1b: ce:7b:91:28:0b:c4:5c:aa:1c:ce:9c:dd:7b:ac:4c: f9:2f:23:40:2d:5f:64:a1:de:6c:6f:c7:60:9b:39: b2:e8:23:a0:ff:80:5d:d9:c3:5f:cc:6d:86:04:64: b5:ea:34:0c:b5:a4:eb:2a:e3:52:8f:fd:bb:7d:76: ae:bd:76:f9:6c:23:b7:97:e9:d4:9a:0e:7d:67:94: 81:3a:be:c0:81:a0:94:78:03:51:99:90:e5:6b:f7: 00:33:8e:1c:62:57:69:19:6f:20:e0:df:34:bc:82: cd:26:d4:54:2f:a1:f3:47:27:40:36:33:d3:15:00: e8:14:f2:aa:7f:5f:29:0a:7e:ab:8d:7e:e4:70:f3: b4:96:82:2d:69:e5:86:c2:49:ef:0a:55:af:a9:4a: ef:37:fd:8e:a2:ad:3a:7b:13:5f:18:64:ed:de:23: 3d:21:ca:42:68:70:2d:fe:57:84:9b:f3:28:1a:f7: 97:39:f6:a6:3b:d5:9b:81:96:89:75:12:f8:38:a6: 7d:e8:a7:21:5b:1c:c9:78:10:36:35:42:cf:9b:7c: f9:c7:20:cb:e1:e2:7c:dc:f9:e0:74:33:22:85:13: df:58:db:92:4f:c1:e4:25:2e:a5:48:2a:78:c2:a8: 72:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:56:F0:5A:14:63:39:E1:34:38:90:C8:5B:B2:DB:E8:AA:7B:43:8B X509v3 Authority Key Identifier: keyid:B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:03:e8:57:f3:dd:55:06:7a:2e:7f:b0:54:1d:fe:70:0e:c4: 71:76:e3:7c:f9:56:97:9e:93:26:90:77:08:43:5b:90:98:9d: a9:26:7e:a1:b3:4d:28:55:56:79:68:4f:2b:dd:d5:f2:d3:fd: 3b:6a:79:b1:dc:e0:6b:40:d3:f4:61:1c:21:b4:a3:0a:39:35: 2c:82:18:13:cd:ef:32:ba:b4:6a:3e:88:65:ba:f7:38:22:4b: 72:ac:2f:87:4f:1a:f4:59:6f:ef:90:83:88:e1:b6:1b:a6:8d: 2d:b1:61:c2:85:18:56:78:e6:4a:d6:8e:aa:69:f6:b4:ed:d8: 3b:90:dd:6a:11:95:64:3a:18:7a:78:da:72:6b:b9:d5:e5:6e: 7e:49:ae:45:cb:d7:dd:0a:79:7e:98:84:ad:8d:92:62:6d:95: 1c:64:c3:1c:94:5c:22:ad:a0:a7:c0:b0:2e:df:0f:b0:dd:51: 80:c8:9d:0b:6c:24:1b:cc:7b:f4:ab:d5:94:ab:c1:54:51:7f: 23:bd:e3:cc:de:2a:03:67:51:90:c3:05:7e:1f:a6:cc:2a:d3: 22:d8:44:61:a9:05:b8:f6:63:db:32:42:da:9c:19:57:3b:36: ce:e7:19:85:3f:3c:17:76:3b:cb:9d:39:4c:ca:50:41:dd:f2: ca:81:00:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRFMTExMTAvBgNVBAUTKEI3OTRGOTk3MzNFRUZDM0ZBMDAwM0Y2ODhGNjRDOUMz NTM5MjY2QjUwHhcNMjUxMTAzMDQ1NTE0WhcNMjUxMTEwMDQ1NTE0WjAYMRYwFAYD VQQDEw02OTA4MzViMi0zOGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8Q/5JdP3H8Wi3G2TBvOe5EoC8RcqhzOnN17rEz5LyNALV9kod5sb8dgmzmy 6COg/4Bd2cNfzG2GBGS16jQMtaTrKuNSj/27fXauvXb5bCO3l+nUmg59Z5SBOr7A gaCUeANRmZDla/cAM44cYldpGW8g4N80vILNJtRUL6HzRydANjPTFQDoFPKqf18p Cn6rjX7kcPO0loItaeWGwknvClWvqUrvN/2Ooq06exNfGGTt3iM9IcpCaHAt/leE m/MoGveXOfamO9WbgZaJdRL4OKZ96KchWxzJeBA2NULPm3z5xyDL4eJ83PngdDMi hRPfWNuST8HkJS6lSCp4wqhy+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdW8FoU YznhNDiQyFuy2+iqe0OLMB8GA1UdIwQYMBaAFLeU+Zcz7vw/oAA/aI9kycNTkma1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEUxMS83QkNGODEyODFD QTgxMUVGQTUwMzBCNERDNEY5QUUwMi90NVQ1bHpQdV9ELWdBRDlvajJUSncxT1Na clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q1VDVselB1X0QtZ0FEOW9qMlRKdzFPU1pyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEUxMS83QkNGODEyODFDQTgxMUVGQTUwMzBCNERDNEY5QUUwMi90NVQ1bHpQdV9E LWdBRDlvajJUSncxT1NaclUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmA+hX891VBnouf7BUHf5wDsRxduN8+VaXnpMmkHcIQ1uQmJ2pJn6h s00oVVZ5aE8r3dXy0/07anmx3OBrQNP0YRwhtKMKOTUsghgTze8yurRqPohluvc4 IktyrC+HTxr0WW/vkIOI4bYbpo0tsWHChRhWeOZK1o6qafa07dg7kN1qEZVkOhh6 eNpya7nV5W5+Sa5Fy9fdCnl+mIStjZJibZUcZMMclFwiraCnwLAu3w+w3VGAyJ0L bCQbzHv0q9WUq8FUUX8jvePM3ioDZ1GQwwV+H6bMKtMi2ERhqQW49mPbMkLanBlX OzbO5xmFPzwXdjvLnTlMylBB3fLKgQCN -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:10 2025 by rpki-client