$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft File: 5VpZVzhbbPjKDASB1i3f_asSwfQ.mft (raw, json) Hash identifier: iEK2RO2eO47ZDoN8F2sK2+fSsJwfaJXNuGaT/pvl9EQ= Subject key identifier: 14:CF:AD:47:A4:BE:D9:8C:68:E5:FC:E6:34:4D:C7:E7:16:BD:6C:3A Authority key identifier: E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4 Certificate issuer: /CN=A91BD090/serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4 Certificate serial: 0966 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft Manifest number: 095E Signing time: Tue 04 Nov 2025 20:13:41 +0000 Manifest this update: Tue 04 Nov 2025 20:13:40 +0000 Manifest next update: Tue 11 Nov 2025 20:13:40 +0000 Files and hashes: 1: 5VpZVzhbbPjKDASB1i3f_asSwfQ.crl (hash: Qccs5bWLAP4jVAvnTRaf+glk5ugvXlZGSoJAFtBA7yM=) 2: A1F46062A64611EAA24E1461C4F9AE02.roa (hash: WPQQ6V7efa7fb8nJuM/CRZGnnAAa2WyVzIIakNwqKYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2406 (0x966) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD090, serialNumber=E55A5957385B6CF8CA0C0481D62DDFFDAB12C1F4 Validity Not Before: Nov 4 20:13:40 2025 GMT Not After : Nov 11 20:13:40 2025 GMT Subject: CN=690a5e74-b23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0e:d4:bf:6c:a8:ab:0c:ec:82:b4:e1:e9:47: 6f:ac:22:13:83:46:eb:24:f8:46:31:7b:04:9d:58: 5d:d1:ac:bd:f7:48:3a:e9:03:b9:b8:1a:5d:d9:8d: 3d:7b:28:d5:b1:82:f2:32:27:ee:4c:fa:a9:ce:72: b3:b4:39:e9:64:e6:e4:f9:60:f8:54:73:ba:f7:c9: e7:58:a6:cb:51:5a:13:8a:f0:17:80:59:27:c4:6c: 0a:98:22:f5:8d:36:a9:e6:b4:02:bd:be:db:76:5d: ec:ba:a7:7c:4e:95:2f:e1:3b:47:17:23:ea:4e:7c: c6:85:f2:b5:6e:78:54:b7:32:47:50:2a:52:80:4c: 77:fc:2c:5f:72:f4:32:f2:3b:bf:8f:8f:54:9c:ad: 6a:5b:42:b1:47:1a:c6:29:1e:da:ca:f7:a7:c6:b5: 78:43:61:1b:2c:5e:33:b2:35:9b:72:94:ba:a1:f2: d2:8a:2a:8a:c3:80:3f:8c:50:6d:dc:19:d6:f8:9e: 19:0c:a5:34:34:1a:12:ab:e1:d5:5e:6e:f2:56:ec: 70:a3:02:44:df:14:03:53:96:28:51:9c:00:ac:2f: 20:ea:13:91:1c:bb:da:de:79:d2:35:c4:81:50:3b: 15:01:98:8e:fe:7d:a1:6f:23:16:51:61:80:2b:cb: 54:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CF:AD:47:A4:BE:D9:8C:68:E5:FC:E6:34:4D:C7:E7:16:BD:6C:3A X509v3 Authority Key Identifier: keyid:E5:5A:59:57:38:5B:6C:F8:CA:0C:04:81:D6:2D:DF:FD:AB:12:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5VpZVzhbbPjKDASB1i3f_asSwfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD090/2DCE048CA64511EA861AD35EC4F9AE02/5VpZVzhbbPjKDASB1i3f_asSwfQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b1:ff:c2:02:9d:a8:3e:bb:f6:25:76:1f:dd:44:dc:9c:9b: cb:1b:b0:75:da:b4:d8:09:36:5c:86:d7:c6:25:de:d5:30:2a: e2:74:99:b3:9a:19:5b:56:65:60:ae:f2:b1:d8:2c:13:ac:aa: a1:65:6a:d6:f1:d7:be:e2:ef:a8:8d:f9:77:1b:1c:70:ea:0e: 3d:b6:55:29:dd:5d:5c:8a:98:78:bd:03:1b:93:1f:c8:6a:1f: 26:00:75:e5:3b:ed:85:52:93:59:13:89:c1:ed:e4:26:f4:c9: 5a:15:44:77:dd:92:79:51:67:da:8e:02:68:62:37:b1:75:cb: bd:2d:96:4a:1b:67:e7:40:da:d4:95:07:47:d6:66:93:4c:3c: 4b:17:26:1c:14:24:fb:2e:b7:2f:6f:c1:c1:80:f4:d8:99:2b: 07:a2:54:db:e6:31:3c:c4:dc:49:f4:b4:fa:bc:e6:c6:75:cb: 31:04:1a:80:79:96:bf:eb:9e:3f:51:ab:ab:3a:6e:82:92:a1: d8:8e:ce:b6:91:e5:05:e5:ba:5f:69:c0:74:c8:a0:33:e3:1a: dd:bb:d4:5a:4c:e6:9a:92:ca:27:d9:a6:b2:ab:7e:c8:fe:cd: 4a:19:46:07:aa:ff:e1:d1:40:ef:34:de:32:ea:87:49:f2:64: 00:b0:06:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQwOTAxMTAvBgNVBAUTKEU1NUE1OTU3Mzg1QjZDRjhDQTBDMDQ4MUQ2MkRERkZE QUIxMkMxRjQwHhcNMjUxMTA0MjAxMzQwWhcNMjUxMTExMjAxMzQwWjAYMRYwFAYD VQQDEw02OTBhNWU3NC1iMjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuA7Uv2yoqwzsgrTh6UdvrCITg0brJPhGMXsEnVhd0ay990g66QO5uBpd2Y09 eyjVsYLyMifuTPqpznKztDnpZObk+WD4VHO698nnWKbLUVoTivAXgFknxGwKmCL1 jTap5rQCvb7bdl3suqd8TpUv4TtHFyPqTnzGhfK1bnhUtzJHUCpSgEx3/CxfcvQy 8ju/j49UnK1qW0KxRxrGKR7ayvenxrV4Q2EbLF4zsjWbcpS6ofLSiiqKw4A/jFBt 3BnW+J4ZDKU0NBoSq+HVXm7yVuxwowJE3xQDU5YoUZwArC8g6hORHLva3nnSNcSB UDsVAZiO/n2hbyMWUWGAK8tUsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTPrUek vtmMaOX85jRNx+cWvWw6MB8GA1UdIwQYMBaAFOVaWVc4W2z4ygwEgdYt3/2rEsH0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDA5MC8yRENFMDQ4Q0E2 NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQaktEQVNCMWkzZl9hc1N3 ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVWcFpWemhiYlBqS0RBU0IxaTNmX2FzU3dmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDA5MC8yRENFMDQ4Q0E2NDUxMUVBODYxQUQzNUVDNEY5QUUwMi81VnBaVnpoYmJQ aktEQVNCMWkzZl9hc1N3ZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtsf/CAp2oPrv2JXYf3UTcnJvLG7B12rTYCTZchtfGJd7VMCridJmz mhlbVmVgrvKx2CwTrKqhZWrW8de+4u+ojfl3Gxxw6g49tlUp3V1ciph4vQMbkx/I ah8mAHXlO+2FUpNZE4nB7eQm9MlaFUR33ZJ5UWfajgJoYjexdcu9LZZKG2fnQNrU lQdH1maTTDxLFyYcFCT7Lrcvb8HBgPTYmSsHolTb5jE8xNxJ9LT6vObGdcsxBBqA eZa/654/UaurOm6CkqHYjs62keUF5bpfacB0yKAz4xrdu9RaTOaakson2aayq37I /s1KGUYHqv/h0UDvNN4y6odJ8mQAsAar -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:38 2025 by rpki-client