$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft File: _U5c-75RNAFgOW1ZbhsySM_IHMQ.mft (raw, json) Hash identifier: sLq0n5O8CL5Wd/T0FC6Snec5PAkWYYWe5o+wxCSzHgc= Subject key identifier: 6E:17:50:FD:62:2F:6E:BE:47:53:39:22:57:36:6B:F4:C7:9F:BB:3D Authority key identifier: FD:4E:5C:FB:BE:51:34:01:60:39:6D:59:6E:1B:32:48:CF:C8:1C:C4 Certificate issuer: /CN=A91B5CEA/serialNumber=FD4E5CFBBE51340160396D596E1B3248CFC81CC4 Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft Manifest number: 0234 Signing time: Mon 03 Nov 2025 01:55:10 +0000 Manifest this update: Mon 03 Nov 2025 01:55:09 +0000 Manifest next update: Mon 10 Nov 2025 01:55:09 +0000 Files and hashes: 1: _U5c-75RNAFgOW1ZbhsySM_IHMQ.crl (hash: uVfvBPNrYh0C3lVpnSq9cg8RVbSGiLXDhQvglpDOdEI=) 2: B42198DC64F211ED9AEC046FC4F9AE02.roa (hash: 9taiAk5oqRem+++FlFWs0bgv4cUdlRkoPSLMugraGUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.crl rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEA, serialNumber=FD4E5CFBBE51340160396D596E1B3248CFC81CC4 Validity Not Before: Nov 3 01:55:09 2025 GMT Not After : Nov 10 01:55:09 2025 GMT Subject: CN=69080b7d-698e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a0:5c:94:66:6b:c7:8f:57:a5:98:1f:21:48: e7:40:4f:dd:03:b3:62:71:a8:02:4a:bd:97:dd:0a: 4b:6b:1a:0b:5d:05:e7:82:41:87:84:d2:aa:85:fa: ae:ca:4c:75:0f:cb:f4:ca:d5:ff:a9:c7:24:cd:42: 5a:74:1e:08:61:82:12:ef:0b:09:28:a2:93:e2:40: 81:52:28:2e:84:fd:2f:65:e0:8c:37:db:85:5a:73: 08:a8:a4:88:ff:4e:07:8e:7c:36:15:b0:30:c2:dd: 1d:b8:a5:e4:8e:9a:30:ee:1e:d6:d1:68:d5:a5:52: 63:c3:c8:3a:cf:ba:92:45:f4:d3:6f:97:be:2f:ea: 3e:22:b9:7b:88:bb:13:ee:bc:99:8d:60:1b:fc:56: 84:d8:35:4d:c4:21:a0:ce:a0:a4:3b:39:58:80:cd: 30:62:e2:4b:90:21:6f:ca:3c:dc:f3:e7:c1:b5:ec: 11:66:49:63:ca:95:01:84:5c:f8:e5:cd:cd:ae:00: 65:9b:83:88:23:17:1f:c1:82:3e:52:71:44:36:9d: e0:25:13:a3:bf:1a:82:36:48:bd:ae:b2:50:73:08: d3:04:bb:fa:85:7b:c4:e3:1c:1d:f5:da:9b:e8:50: f4:92:89:b9:b2:ad:ed:09:89:79:ae:76:24:0f:0f: 86:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:17:50:FD:62:2F:6E:BE:47:53:39:22:57:36:6B:F4:C7:9F:BB:3D X509v3 Authority Key Identifier: keyid:FD:4E:5C:FB:BE:51:34:01:60:39:6D:59:6E:1B:32:48:CF:C8:1C:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U5c-75RNAFgOW1ZbhsySM_IHMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/28A77B6864EE11EDA4A34513C4F9AE02/_U5c-75RNAFgOW1ZbhsySM_IHMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:8d:e7:af:1f:58:18:8b:17:20:05:c4:a1:c6:64:03:d0:4d: 1a:48:0d:29:17:20:cb:79:ae:05:ef:cc:de:64:1d:83:81:95: 98:04:16:46:e4:bb:99:23:7f:f9:f7:e9:59:b7:7e:f3:28:b4: 03:a9:af:0f:00:17:4f:50:d7:ca:8e:de:4d:92:d5:95:79:65: 14:ec:b2:7f:8c:5b:d8:01:b4:70:b8:51:36:12:f9:2c:b4:af: 20:8d:c5:f9:6e:5b:63:24:e1:eb:c5:3c:16:66:b3:df:6f:21: 8a:09:26:75:ee:36:0f:b4:72:12:7f:22:69:42:6a:83:b8:1e: 90:b3:ee:50:49:97:a1:69:21:31:c6:27:98:d5:10:9d:1a:92: 9e:0d:b9:fa:25:2c:ec:90:9c:9b:09:8b:67:05:30:40:e4:28: 0c:2f:21:86:44:8b:35:6b:45:77:cf:24:6a:05:c3:64:26:cd: 9e:a6:74:b5:e6:80:95:4d:e2:d5:58:2a:10:38:52:f1:3e:8c: 06:25:78:f2:21:b9:ca:f8:8c:75:14:c1:74:01:a2:d2:99:be: e5:ae:0f:9b:21:6b:53:80:f3:ef:19:71:41:20:8c:06:93:af: f9:9d:0a:79:48:82:23:63:89:72:9d:2b:9c:90:f6:34:70:95: b2:96:32:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUExMTAvBgNVBAUTKEZENEU1Q0ZCQkU1MTM0MDE2MDM5NkQ1OTZFMUIzMjQ4 Q0ZDODFDQzQwHhcNMjUxMTAzMDE1NTA5WhcNMjUxMTEwMDE1NTA5WjAYMRYwFAYD VQQDEw02OTA4MGI3ZC02OThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4KBclGZrx49XpZgfIUjnQE/dA7NicagCSr2X3QpLaxoLXQXngkGHhNKqhfqu ykx1D8v0ytX/qcckzUJadB4IYYIS7wsJKKKT4kCBUiguhP0vZeCMN9uFWnMIqKSI /04Hjnw2FbAwwt0duKXkjpow7h7W0WjVpVJjw8g6z7qSRfTTb5e+L+o+Irl7iLsT 7ryZjWAb/FaE2DVNxCGgzqCkOzlYgM0wYuJLkCFvyjzc8+fBtewRZkljypUBhFz4 5c3NrgBlm4OIIxcfwYI+UnFENp3gJROjvxqCNki9rrJQcwjTBLv6hXvE4xwd9dqb 6FD0kom5sq3tCYl5rnYkDw+GlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4XUP1i L26+R1M5Ilc2a/THn7s9MB8GA1UdIwQYMBaAFP1OXPu+UTQBYDltWW4bMkjPyBzE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFQS8yOEE3N0I2ODY0 RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9fVTVjLTc1Uk5BRmdPVzFaYmhzeVNNX0lI TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VNWMtNzVSTkFGZ09XMVpiaHN5U01fSUhNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFQS8yOEE3N0I2ODY0RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9fVTVjLTc1Uk5B RmdPVzFaYmhzeVNNX0lITVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAjeevH1gYixcgBcShxmQD0E0aSA0pFyDLea4F78zeZB2DgZWYBBZG 5LuZI3/59+lZt37zKLQDqa8PABdPUNfKjt5NktWVeWUU7LJ/jFvYAbRwuFE2Evks tK8gjcX5bltjJOHrxTwWZrPfbyGKCSZ17jYPtHISfyJpQmqDuB6Qs+5QSZehaSEx xieY1RCdGpKeDbn6JSzskJybCYtnBTBA5CgMLyGGRIs1a0V3zyRqBcNkJs2epnS1 5oCVTeLVWCoQOFLxPowGJXjyIbnK+Ix1FMF0AaLSmb7lrg+bIWtTgPPvGXFBIIwG k6/5nQp5SIIjY4lynSuckPY0cJWyljLD -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:38 2025 by rpki-client