$ rpki-client -vvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft File: 5hI_ServZkwi-UzV67rqztOHoW8.mft (raw, json) Hash identifier: Lmzm17An2umi4jbbm+OwB6NkrKI0aj5fb6tD01DRMpw= Subject key identifier: 09:96:CF:97:76:E5:E0:A2:38:82:F7:C6:D8:F1:C3:F4:C7:9A:B3:EC Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F Certificate issuer: /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F Certificate serial: 0652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft Manifest number: 064B Signing time: Tue 04 Nov 2025 22:44:16 +0000 Manifest this update: Tue 04 Nov 2025 22:44:16 +0000 Manifest next update: Tue 11 Nov 2025 22:44:16 +0000 Files and hashes: 1: 5hI_ServZkwi-UzV67rqztOHoW8.crl (hash: ttCzpsrIWFNwn5e1JolggCg0mgizuyOh3QPK3DIsjGM=) 2: 1D0BA0FC57EB11F096357F7CC4F9AE02.roa (hash: Njg0pVJ4I7URnxza7bv42AK9X5Mt3J26B9EOz9eASoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B861D, serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F Validity Not Before: Nov 4 22:44:16 2025 GMT Not After : Nov 11 22:44:16 2025 GMT Subject: CN=690a81c0-acd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a8:30:45:4b:c6:7b:92:8b:f7:56:b5:e5:d2: da:90:7a:e1:c1:b7:5f:6b:77:ed:47:f5:a4:23:23: a7:f5:a7:5d:1c:a3:a3:c6:47:16:69:48:e7:ea:d9: 5a:51:ef:db:b3:d8:e4:71:94:2b:82:36:16:e7:cf: 31:ae:d9:ac:59:24:7d:bb:e4:3c:1d:5a:ee:f3:63: 1b:fe:5a:e9:cf:f6:80:2f:fd:13:d6:f7:a4:22:92: b7:4b:7f:c8:6a:38:ce:4b:0b:94:90:16:92:1e:fb: 6d:a9:34:8f:f2:00:4e:be:c8:ed:82:2e:32:94:40: d4:03:87:c4:1a:b0:25:cc:c9:9a:19:4d:fa:e7:10: bf:7d:16:c5:e5:17:30:cb:9b:33:b5:7a:04:fc:b9: 80:d8:48:15:58:79:76:a5:c6:22:ef:ad:dc:ab:54: 3c:ec:88:3c:fd:14:60:3a:05:52:1d:d4:98:01:ae: 78:f9:73:45:a7:82:b7:3b:6b:82:94:c3:58:8e:72: 15:d5:5b:b6:fc:55:57:dd:48:1f:d8:b3:c3:d0:71: 1e:67:21:6e:81:75:a6:67:df:f5:f9:30:ac:06:f8: 8a:bd:3d:44:92:53:ee:ef:37:b0:62:5e:e7:2d:62: c5:19:26:00:4d:af:2d:5e:21:47:fb:4a:26:39:fb: f2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:96:CF:97:76:E5:E0:A2:38:82:F7:C6:D8:F1:C3:F4:C7:9A:B3:EC X509v3 Authority Key Identifier: keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:46:da:ee:54:ff:33:3a:f1:75:30:82:cd:bd:d5:66:e5:4b: 66:14:e2:d7:f7:bc:25:43:bc:b1:1b:66:db:6c:f9:78:f2:cd: c1:62:0b:f3:e7:c2:94:72:3e:18:9f:0d:29:f1:2d:fc:a4:b6: c6:73:a1:4e:e4:d5:49:44:1c:bd:43:82:4a:ac:f7:32:75:ee: 98:c9:98:44:52:3e:38:0f:04:8d:22:bb:d8:4f:93:32:9e:86: a8:d0:f6:23:19:84:bd:53:c3:c8:a0:db:80:49:1b:af:5c:9d: cb:83:90:db:09:3c:44:7f:a4:15:da:99:cf:f0:1d:04:6c:8f: 62:fd:f1:09:42:5c:eb:32:0c:03:89:dc:e2:36:87:24:84:79: 98:ef:0e:5d:35:6f:01:9d:bc:92:50:40:89:cd:e1:5f:61:67: 8f:76:c1:a3:81:f5:2a:98:9f:82:82:f6:59:e2:b9:11:71:3c: 7c:d8:7c:3d:70:d5:f0:77:6c:a5:fb:1f:cc:50:9d:e0:55:91: b8:5c:40:93:1f:2b:e4:a5:08:33:d7:4d:2b:32:8a:66:08:22: 7a:86:eb:db:db:6f:5a:e0:67:14:9c:58:2f:8a:b8:73:ea:41: 5e:e6:21:56:ef:b4:4d:7d:98:16:9a:b4:36:7d:54:f9:65:c7: 2f:d1:68:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg2MUQxMTAvBgNVBAUTKEU2MTIzRjQ5RUFFRjY2NEMyMkY5NENENUVCQkFFQUNF RDM4N0ExNkYwHhcNMjUxMTA0MjI0NDE2WhcNMjUxMTExMjI0NDE2WjAYMRYwFAYD VQQDEw02OTBhODFjMC1hY2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9agwRUvGe5KL91a15dLakHrhwbdfa3ftR/WkIyOn9addHKOjxkcWaUjn6tla Ue/bs9jkcZQrgjYW588xrtmsWSR9u+Q8HVru82Mb/lrpz/aAL/0T1vekIpK3S3/I ajjOSwuUkBaSHvttqTSP8gBOvsjtgi4ylEDUA4fEGrAlzMmaGU365xC/fRbF5Rcw y5sztXoE/LmA2EgVWHl2pcYi763cq1Q87Ig8/RRgOgVSHdSYAa54+XNFp4K3O2uC lMNYjnIV1Vu2/FVX3Ugf2LPD0HEeZyFugXWmZ9/1+TCsBviKvT1EklPu7zewYl7n LWLFGSYATa8tXiFH+0omOfvyqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmWz5d2 5eCiOIL3xtjxw/THmrPsMB8GA1UdIwQYMBaAFOYSP0nq72ZMIvlM1eu66s7Th6Fv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODYxRC9EMjk5N0Y2MEFC RTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlprd2ktVXpWNjdycXp0T0hv VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoSV9TZXJ2Wmt3aS1VelY2N3JxenRPSG9XOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODYxRC9EMjk5N0Y2MEFCRTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlpr d2ktVXpWNjdycXp0T0hvVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANRtruVP8zOvF1MILNvdVm5UtmFOLX97wlQ7yxG2bbbPl48s3BYgvz 58KUcj4Ynw0p8S38pLbGc6FO5NVJRBy9Q4JKrPcyde6YyZhEUj44DwSNIrvYT5My noao0PYjGYS9U8PIoNuASRuvXJ3Lg5DbCTxEf6QV2pnP8B0EbI9i/fEJQlzrMgwD idziNockhHmY7w5dNW8BnbySUECJzeFfYWePdsGjgfUqmJ+CgvZZ4rkRcTx82Hw9 cNXwd2yl+x/MUJ3gVZG4XECTHyvkpQgz100rMopmCCJ6huvb229a4GcUnFgvirhz 6kFe5iFW77RNfZgWmrQ2fVT5Zccv0WjB -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:25 2025 by rpki-client